last executing test programs: 13.740246425s ago: executing program 3 (id=5936): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32, @ANYBLOB="01000000000000002800128009000100766c616e000000001800", @ANYRES64], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x400007fc, 0xffffffffffffffff, 0x81, 0x4, 0x1, 0xa5b, 0x3, 0x12, 0x1, 0x4, 0x0, 0x7, 0x7, 0x4, 0x100000000001, 0x6], 0x1000, 0x47f00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.490729666s ago: executing program 3 (id=5948): io_submit(0x0, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8000002, 0x3a10, 0x3, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000580)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000380)=@IORING_OP_MSG_RING={0x28, 0x14, 0x0, r0, 0x0, 0x0, 0x8, 0x2, 0x1}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, &(0x7f0000000340)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 12.419657365s ago: executing program 3 (id=5952): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, 0x0, 0x0) 10.522123953s ago: executing program 1 (id=5957): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)={0x0, 0xe, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 9.282648451s ago: executing program 3 (id=5965): close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6d706f6c3d6c6f63616c3a33062c005b5126051b4c17c56d4ad053acc7a07d923a16edb44728176c697f9902b3db767d28631035be43e16705c78c741830949f803a3ab7a7fe0c3e9d18009420514e5e224d30f639eaa97b08c03e6b4ad2c2a0b6cff5b8"]) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b', @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) socket$kcm(0x29, 0x2, 0x0) socket$inet6(0xa, 0x6, 0x3) r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xf, 0x3, 0x7, 0x4, 0x2, 0x1, 0x202a9, 0x8a10, 0x71, 0x2, 0x8, 0xfffffff6, 0x0, 0x804, 0x8, 0x400c, 0x4, 0x9, 0x3, 0x8, 0xff, 0x5, 0x1}}) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_delrule={0x2c, 0x21, 0x105, 0x70bd26, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_SRC={0x8, 0x2, @local}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xfffffffe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200200d4}, 0x0) preadv(r6, &(0x7f0000000400)=[{&(0x7f0000000000)=""/194, 0xc2}], 0x1, 0x17f, 0x0) 8.403106797s ago: executing program 2 (id=5968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x80000000000003) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc/sys/vm/nr_overcommit_hugepages\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000040)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14) 7.447558013s ago: executing program 0 (id=5971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000340)=0x1, 0x4) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) utime(0x0, &(0x7f0000000480)={0x1, 0x4}) process_mrelease(0xffffffffffffffff, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0x6, 0x8000) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) setxattr(&(0x7f0000000500)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000000540)=@random={'trusted.', '\'*$\'$&{#]-+/({:.-}+]\'\x00'}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/prop1\x00', 0x1ff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0x64, 0x12) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe01}, &(0x7f0000000280)={0x77359400}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/rndis.usb0/os_desc/interface.rndis/prop1\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x40000) 7.082433179s ago: executing program 1 (id=5972): r0 = syz_open_dev$vivid(0x0, 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000001c0)={0x7, 0x3, 0x9d6, 0x7, 0xf, 0x3, 0x3}) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, 0x0, 0x190) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) read$FUSE(r5, &(0x7f0000001040)={0x2020}, 0xffffff16) 6.562320596s ago: executing program 0 (id=5973): unshare(0x22020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f00000002c0)={0x4, &(0x7f00000000c0)=[{0x12, '\x00', @st={0x4, [{0x1, @svalue=0x4}, {0x1, @svalue=0x400}, {0x3, @uvalue=0x40000}, {0x1, @uvalue=0x41}]}, 0xfff}, {0x39, '\x00', @buffer={"cd5a585529647c60c5ccc64aca130e0f968982e34913b76bd9482a68561e7b05", 0x20}, 0x5}, {0x46, '\x00', @data=0x2, 0x45}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001600d16f000000000000df251c7c00000c0001800800"], 0x20}, 0x1, 0x0, 0x0, 0x4048015}, 0x10) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}}) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) userfaultfd(0x801) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 6.100824492s ago: executing program 1 (id=5974): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x18}}, 0x0) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) landlock_restrict_self(r1, 0xe) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0xa00, 0x801) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2}) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2, 0x0) write(r7, &(0x7f0000000400)='0', 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000040)={'filter\x00', 0x0, [0x3f73e8dd, 0x2, 0xfffffff0, 0x1, 0x6]}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) 5.941955086s ago: executing program 2 (id=5975): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000300)="70f6746573742f6576656e7431202e2f66696c65303a30", 0x17) 5.772281481s ago: executing program 1 (id=5976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=@filename='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='virtiofs\x00', 0x8000, &(0x7f0000000400)=']\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) keyctl$setperm(0x5, 0x0, 0x200a0204) r4 = memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\x1c\xe4\xd8\xb58\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\x00\b\x00\x00X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31\xb0\x87O\xc3\xa3AW\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]~\xfc1\xe5w\"\xa3\x8d\xe7\xd4x\xb3\xfa(\xc9\xc2bb\xb1\xa8\xe1\xc2\xec\xca\x7f\xe1\x1e\xb9\xd4\x80-6L\x91\x9b\xad\x85`\xf2+\xfbN+\x0e\xa6\xc4M\xda\xfc\xa1gZ)STB\xd1\xd1\xf1', 0x1) ftruncate(r4, 0x80007) 5.472114975s ago: executing program 2 (id=5977): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(0x3) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) recvfrom$inet(r2, 0x0, 0x0, 0x46, &(0x7f0000000380)={0x2, 0x4e23, @broadcast}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb7ea000008000000b713000000000000850000001900000095"], &(0x7f0000000180)='GPL\x00', 0xc, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) 5.202110843s ago: executing program 3 (id=5978): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x22, &(0x7f0000000380)={&(0x7f0000003000)}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 4.397976147s ago: executing program 0 (id=5979): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000780)=@v3={0x3000000, [{0x8, 0x8}, {0x7ff, 0x10}], 0xee01}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = getpid() getpriority(0x2, r3) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r2, 0x0, 0x1}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x10f, 0x0, &(0x7f0000000640)=""/271}) 4.39753194s ago: executing program 2 (id=5980): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f00000004c0)={r5, 0x7, 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x64, 0x6, 0x798, 0x550, 0x1f0, 0x408, 0x550, 0x120, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x1d0, 0x218, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@recent0={{0xf8}, {0x9, 0x58, 0x4, 0x1, 'syz0\x00', 0x9}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x8]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x59455247, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000240)=0x1) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) setns(0xc9, 0x0) socket(0x1f, 0x5, 0x8) syz_usb_control_io(r8, &(0x7f0000000b40)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="20110c0000"], 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4001, 0x8) write(r9, &(0x7f0000000100), 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 1.636596975s ago: executing program 0 (id=5981): getpid() socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket(0x1d, 0x2, 0x6) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x7, &(0x7f0000000280)=0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0xfffe, r0, 0x0}, 0x0, 0x0]) 1.421790247s ago: executing program 1 (id=5982): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000180)={0x18, 0x0, {0x4001, @empty, 'gre0\x00'}}, 0x1e) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 1.373654579s ago: executing program 3 (id=5983): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0xfffe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0xe) listen(r1, 0xfff) tkill(0x0, 0x9) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000140)='./control\x00', 0x150) rmdir(0x0) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x6, 0xfffffffffffffffc, 0x1, 0xfffffffdfffffffe, 0x4, 0x4, 0x5, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0xffffffff, 0x20000000009, 0x1000000005, 0x8000000000000000, 0x1, 0x9}, 0x0, 0x0) close(r0) 1.15233199s ago: executing program 0 (id=5984): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000080)="308201103081bea003020102020101300a06082a85030701010302300e310c300a06035504030c0373797a3020170d3232303531383232333234315a180f32313232303432343232333234315a300e310c300a06035504030c0373797a3066301f06082a85030701010101301306072a85030202230106082a850307010102020343000440d5a777f9262f8cbdcce31f0194053d2fecb50034f5516d3b904b23286f1dc836616036ecbbb40b954e544f152105d8526644317e5dc5d126005f60d8f0c727fc300a06082a8503070101030203410041320973a4c138d6637d8bf7503fda9f6848c150e3423a9b2b28122aa7c2753165778c3c9e0d56b2f9dc04333eb09ef9744e59b383f2910000000033c0c18f41", 0x114, 0xfffffffffffffffe) 1.068755813s ago: executing program 2 (id=5985): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, 0x0, 0x0) 894.59483ms ago: executing program 2 (id=5986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/irq/irq_handler_entry/filter\x00', 0x2, 0x0) write(r3, 0x0, 0x0) setns(0xc9, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x30, 0xffffffffffffffff, 0x967e2000) read$FUSE(r3, &(0x7f00000010c0)={0x2020}, 0x2020) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x30, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000340)={@ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000380)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x8, 0xff, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x7800, 0xf, 0x4}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r3, 0x58, &(0x7f0000000480)}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x1, 0x1], [0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x11}]}]}]}}]}, 0xa4}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'gre0\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x40, 0x8040, 0x9, 0x5, {{0x2e, 0x4, 0x1, 0x4, 0xb8, 0x66, 0x0, 0x7, 0x4, 0x0, @remote, @multicast1, {[@timestamp_addr={0x44, 0x14, 0x40, 0x1, 0x2, [{@loopback, 0x10000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}, @timestamp_addr={0x44, 0x24, 0x40, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x20}, 0x1}, {@private=0xa010101, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa83}, {@remote, 0xff}]}, @rr={0x7, 0x23, 0x2a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1, @local, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x25}, @empty, @remote]}, @end, @timestamp_prespec={0x44, 0x14, 0x8d, 0x3, 0x1, [{@multicast1, 0xffffff60}, {@multicast1, 0x7fffffff}]}, @rr={0x7, 0x1b, 0xae, [@local, @multicast1, @local, @remote, @remote, @rand_addr=0x64010100]}, @generic={0x86, 0xc, "4435ca09c608ddec3c5c"}, @timestamp_addr={0x44, 0xc, 0xea, 0x1, 0x9, [{@multicast1, 0x3}]}]}}}}}) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000080)={0x0, 0x6, 0x8, &(0x7f0000000040)={0xc, "810556c7213f4084c89e5ebb3d020b00"}}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 212.38859ms ago: executing program 1 (id=5987): r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r0, 0x0, 0x0, 0x120, 0x0, 0x0) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001b40), 0x2, 0x2) socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)='27', 0x2) ioctl$NILFS_IOCTL_CHANGE_CPMODE(0xffffffffffffffff, 0x40106e80, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000005c0)={'rti800\x00', [0x0, 0xfff, 0x5, 0x101, 0x9, 0x2, 0x1, 0x10000, 0x8, 0xfffffffc, 0x8, 0x8001, 0x6, 0x2, 0x80000001, 0x7fffffff, 0x7fff, 0xfffffffd, 0x10001, 0xd3, 0x137d, 0x2, 0x400, 0xf94, 0x9, 0x3, 0x20, 0x3ff, 0x2, 0xec, 0x2d9478cb, 0x5]}) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x1c, r5, 0x401, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r7], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x9, 0x4, 0x40, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8000, 0x7800, 0xffff8001, 0x3}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r5, 0x5574255fa85d78bd, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x40) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010003704feffffff0000000000000000", @ANYRES32=r11, @ANYBLOB="c13c06001b14bf262000128008000100736974001400028008000100e00000020500050081"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) ioctl$XFS_IOC_ERROR_CLEARALL(r2, 0x40085875) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000010029bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8db2020021190300140003006e657464657673696d300000000000001c0016801800018014000a000fc9a1e5"], 0x50}, 0x1, 0x0, 0x0, 0x8041}, 0x44880) 0s ago: executing program 0 (id=5988): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="1f002dbdf000fddbdf250100000008000400", @ANYRES32, @ANYBLOB="4400028040000100240001006c625f686173685f"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x884) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r0, &(0x7f00000004c0)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xd4\bj@5\x1dN\xe3\rf\xe5W\xcers\x04\x84)\xecq\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\xab\xfa\x032-{\x96{\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19n\xc7\xf2\vIR=T\x05)jIeR}\xecNg\x9b\a \x84\x93\x82\x1d1i\xf0\xa1\xe2\xf6L\xe84\xb6\n\x16\xc7\xa1\xf6\x7f\nl\x969\x99>\xf0\xdd\xfe\x06\xdd\xa5\f\xd3E\xdd\xae-\xf1\xfd\xc4@\x85L\x1e\xd2\x18\xc5TN\x0f\xe6@\xa0\xfd\xdaf\x9d<\xdb\xf1<\xff\xf4]\xd1K\xe1xj\x16\xaaQ(:\xa6'}], 0xa, "c3c7b2e1312e0841e5544d48428c89e0"}, 0xee) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000040), 0x0, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x5b) read$watch_queue(r0, &(0x7f00000002c0)=""/1, 0x1) keyctl$revoke(0x3, r4) ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f0000000200)=0x1) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000000)='nfs4\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[]) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000d80)) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0x74, 0x0, 0x1, 0x2}}, 0x48) write(r0, &(0x7f0000000180)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=n', 0x31) socket(0x10, 0x803, 0x0) kernel console output (not intermixed with test programs): eneric_write_bulk_callback - nonzero urb status: -71 [ 928.286951][ T5613] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input113 [ 928.341160][ C2] usbtouchscreen 6-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 928.356769][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 928.356823][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 928.356942][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 928.358090][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 928.358174][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 928.358432][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 928.417539][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 928.424340][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 928.424531][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 928.424550][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 928.426632][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 928.426716][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 928.426819][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 928.463526][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 928.463570][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 928.463937][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 928.464001][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 928.464128][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 928.467470][ T5613] usb 6-1: USB disconnect, device number 53 [ 928.494729][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 928.495851][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 928.495906][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 928.496021][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 928.496051][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 928.496630][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 928.554695][T23016] hugetlbfs: Unknown parameter 'ns_inoles' [ 928.650791][ T2381] usb 7-1: USB disconnect, device number 21 [ 928.892716][ T2381] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 928.893003][ T2381] usbserial_generic 7-1:1.0: device disconnected [ 929.047493][T23037] overlay: Unknown parameter 'fscontext' [ 929.378532][ T5613] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 929.408928][ T2381] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 929.562407][ T2381] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 929.564915][ T2381] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.564933][ T2381] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 929.564945][ T2381] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 929.565003][ T2381] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.589335][ T2381] usb 8-1: config 0 descriptor?? [ 929.661284][ T5613] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 929.719052][ T5613] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 929.719072][ T5613] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 929.779571][ T5613] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.779588][ T5613] usb 6-1: Product: syz [ 929.779596][ T5613] usb 6-1: Manufacturer: syz [ 929.779607][ T5613] usb 6-1: SerialNumber: syz [ 929.783352][T23031] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 929.784270][T23031] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 929.788788][ T5613] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 929.788800][ T5613] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 929.788817][ T5613] usbserial_generic 6-1:1.0: generic converter detected [ 929.819169][ T5613] usb 6-1: generic converter now attached to ttyUSB0 [ 930.029106][T23040] syz_tun: entered allmulticast mode [ 930.075481][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.075527][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.075685][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.076945][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.076969][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.077102][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.077119][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.078177][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.078388][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.078576][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.079635][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.079674][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.082563][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.082932][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.084166][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.084912][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.084954][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.085086][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.088121][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.089514][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.091471][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.092883][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.095352][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.095901][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.097374][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.097415][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.097543][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.099617][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.103197][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.103931][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.109119][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.109158][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.109331][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.109655][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.117056][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.117239][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.117434][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.117450][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 930.298829][T23031] hugetlbfs: Unknown parameter 'ns_inoles' [ 930.302350][ T5813] usb 6-1: USB disconnect, device number 54 [ 930.304330][T23050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.304924][T23050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.307972][T23050] syz_tun: entered allmulticast mode [ 930.311037][ T5813] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 930.311310][ T5813] usbserial_generic 6-1:1.0: device disconnected [ 930.335950][T23050] FAULT_INJECTION: forcing a failure. [ 930.335950][T23050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 930.335984][T23050] CPU: 0 UID: 0 PID: 23050 Comm: syz.0.5779 Tainted: G L syzkaller #0 PREEMPT(full) [ 930.336010][T23050] Tainted: [L]=SOFTLOCKUP [ 930.336018][T23050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 930.336030][T23050] Call Trace: [ 930.336036][T23050] [ 930.336045][T23050] dump_stack_lvl+0x100/0x190 [ 930.336076][T23050] should_fail_ex.cold+0x5/0xa [ 930.336103][T23050] _copy_from_user+0x2e/0xd0 [ 930.336131][T23050] memdup_user_nul+0x6c/0x120 [ 930.336157][T23050] proc_simple_write+0xc1/0x1a0 [ 930.336179][T23050] ? __pfx_proc_simple_write+0x10/0x10 [ 930.336225][T23050] proc_reg_write+0x240/0x330 [ 930.336274][T23050] vfs_write+0x2aa/0x1050 [ 930.336300][T23050] ? __pfx_proc_reg_write+0x10/0x10 [ 930.336328][T23050] ? lock_acquire+0x1d1/0x380 [ 930.336352][T23050] ? __fget_files+0x34/0x3d0 [ 930.336368][T23050] ? __pfx_vfs_write+0x10/0x10 [ 930.336380][T23050] ? find_held_lock+0x2b/0x80 [ 930.336394][T23050] ? __fget_files+0x215/0x3d0 [ 930.336410][T23050] ? __fget_files+0x21f/0x3d0 [ 930.336428][T23050] ksys_write+0x12a/0x250 [ 930.336447][T23050] ? __pfx_ksys_write+0x10/0x10 [ 930.336466][T23050] __do_fast_syscall_32+0x13a/0x8b0 [ 930.336486][T23050] do_fast_syscall_32+0x32/0x70 [ 930.336502][T23050] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 930.336517][T23050] RIP: 0023:0xf7f16fec [ 930.336532][T23050] Code: Unable to access opcode bytes at 0xf7f16fc2. [ 930.336537][T23050] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 930.336548][T23050] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000070 [ 930.336556][T23050] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 930.336562][T23050] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 930.336569][T23050] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 930.336575][T23050] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 930.336589][T23050] [ 930.350628][T23040] FAULT_INJECTION: forcing a failure. [ 930.350628][T23040] name failslab, interval 1, probability 0, space 0, times 0 [ 930.350708][T23040] CPU: 2 UID: 0 PID: 23040 Comm: syz.3.5775 Tainted: G L syzkaller #0 PREEMPT(full) [ 930.350747][T23040] Tainted: [L]=SOFTLOCKUP [ 930.350752][T23040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 930.350759][T23040] Call Trace: [ 930.350763][T23040] [ 930.350768][T23040] dump_stack_lvl+0x100/0x190 [ 930.350787][T23040] should_fail_ex.cold+0x5/0xa [ 930.350802][T23040] should_failslab+0xc2/0x120 [ 930.350820][T23040] __kmalloc_noprof+0xfc/0x840 [ 930.350842][T23040] ? afs_lookup_cell+0x4c1/0x1940 [ 930.350857][T23040] afs_lookup_cell+0x4c1/0x1940 [ 930.350874][T23040] ? __pfx_afs_lookup_cell+0x10/0x10 [ 930.350894][T23040] afs_cell_init+0x17d/0x380 [ 930.350908][T23040] afs_proc_rootcell_write+0x1c9/0x280 [ 930.350927][T23040] proc_simple_write+0x10e/0x1a0 [ 930.350940][T23040] ? __pfx_proc_simple_write+0x10/0x10 [ 930.350952][T23040] proc_reg_write+0x240/0x330 [ 930.350970][T23040] vfs_write+0x2aa/0x1050 [ 930.350984][T23040] ? __pfx_proc_reg_write+0x10/0x10 [ 930.350999][T23040] ? lock_acquire+0x1d1/0x380 [ 930.351015][T23040] ? __fget_files+0x34/0x3d0 [ 930.351029][T23040] ? __pfx_vfs_write+0x10/0x10 [ 930.351042][T23040] ? find_held_lock+0x2b/0x80 [ 930.351055][T23040] ? __fget_files+0x215/0x3d0 [ 930.351072][T23040] ? __fget_files+0x21f/0x3d0 [ 930.351090][T23040] ksys_write+0x12a/0x250 [ 930.351106][T23040] ? __pfx_ksys_write+0x10/0x10 [ 930.351124][T23040] __do_fast_syscall_32+0x13a/0x8b0 [ 930.351139][T23040] ? lockdep_hardirqs_on+0x7d/0x110 [ 930.351154][T23040] do_fast_syscall_32+0x32/0x70 [ 930.351169][T23040] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 930.351183][T23040] RIP: 0023:0xf7fb8fec [ 930.351197][T23040] Code: Unable to access opcode bytes at 0xf7fb8fc2. [ 930.351203][T23040] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 930.351214][T23040] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000070 [ 930.351221][T23040] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 930.351227][T23040] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 930.351234][T23040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 930.351240][T23040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 930.351254][T23040] [ 930.482355][T23049] syz_tun: left allmulticast mode [ 930.672142][ T2381] plantronics 0003:047F:FFFF.004A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 930.990252][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.990303][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.245928][T23065] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 931.558502][ T25] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 931.721847][ T25] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 931.722652][ T25] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 931.722674][ T25] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 931.729837][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.729854][ T25] usb 6-1: Product: syz [ 931.729862][ T25] usb 6-1: Manufacturer: syz [ 931.729869][ T25] usb 6-1: SerialNumber: syz [ 931.732407][T23068] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 931.732460][T23068] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 931.734625][ T43] kauditd_printk_skb: 41 callbacks suppressed [ 931.734636][ T43] audit: type=1800 audit(1791276723.823:10679): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=268588 res=0 errno=0 [ 931.734661][ T25] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 931.734678][ T25] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 931.734703][ T43] audit: type=1800 audit(1791276723.823:10680): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=268620 res=0 errno=0 [ 931.734710][ T25] usbserial_generic 6-1:1.0: generic converter detected [ 931.735775][ T43] audit: type=1800 audit(1791276723.823:10681): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=268595 res=0 errno=0 [ 931.736447][ T43] audit: type=1800 audit(1791276723.823:10682): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=268596 res=0 errno=0 [ 931.738447][ T25] usb 6-1: generic converter now attached to ttyUSB0 [ 931.740496][T23074] overlay: Unknown parameter 'fscontext' [ 931.740719][ T43] audit: type=1800 audit(1791276723.833:10683): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=268617 res=0 errno=0 [ 931.741277][ T43] audit: type=1800 audit(1791276723.833:10684): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=268618 res=0 errno=0 [ 931.741663][ T43] audit: type=1800 audit(1791276723.833:10685): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=268597 res=0 errno=0 [ 931.742116][ T43] audit: type=1800 audit(1791276723.833:10686): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=268619 res=0 errno=0 [ 931.744859][ T43] audit: type=1800 audit(1791276723.833:10687): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=268640 res=0 errno=0 [ 931.746595][ T43] audit: type=1800 audit(1791276723.833:10688): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=268656 res=0 errno=0 [ 931.978543][ C3] plantronics 0003:047F:FFFF.004A: usb_submit_urb(ctrl) failed: -1 [ 931.988882][T23039] syz_tun: left allmulticast mode [ 932.058934][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 932.059029][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 932.059446][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 932.059522][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 932.061447][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 932.061501][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 932.062487][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 932.062541][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 932.063309][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 932.063363][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 932.064086][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 932.064162][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 932.064433][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 932.064492][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 932.064736][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 932.064778][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 932.064936][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 932.064978][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 932.065215][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 932.172847][T23081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.173204][T23081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.176640][T23081] syz_tun: entered allmulticast mode [ 932.180990][T23081] FAULT_INJECTION: forcing a failure. [ 932.180990][T23081] name fail_futex, interval 1, probability 0, space 0, times 0 [ 932.181021][T23081] CPU: 0 UID: 0 PID: 23081 Comm: syz.0.5788 Tainted: G L syzkaller #0 PREEMPT(full) [ 932.181045][T23081] Tainted: [L]=SOFTLOCKUP [ 932.181052][T23081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 932.181063][T23081] Call Trace: [ 932.181070][T23081] [ 932.181079][T23081] dump_stack_lvl+0x100/0x190 [ 932.181109][T23081] should_fail_ex.cold+0x5/0xa [ 932.181135][T23081] get_futex_key+0x1d0/0x14f0 [ 932.181158][T23081] ? __pfx_get_futex_key+0x10/0x10 [ 932.181208][T23081] futex_wait_setup+0x91/0x540 [ 932.181241][T23081] __futex_wait+0x19f/0x300 [ 932.181268][T23081] ? __pfx___futex_wait+0x10/0x10 [ 932.181290][T23081] ? futex_hash+0x311/0x400 [ 932.181310][T23081] ? __pfx_futex_wake_mark+0x10/0x10 [ 932.181336][T23081] ? __pfx_futex_hash+0x10/0x10 [ 932.181361][T23081] futex_wait+0xe6/0x370 [ 932.181383][T23081] ? __pfx_futex_wait+0x10/0x10 [ 932.181412][T23081] ? rcu_read_lock_any_held+0x6a/0x90 [ 932.181440][T23081] do_futex+0x265/0x440 [ 932.181461][T23081] ? __pfx_do_futex+0x10/0x10 [ 932.181486][T23081] __ia32_sys_futex_time32+0x2f4/0x470 [ 932.181510][T23081] ? fdget_pos+0x2c0/0x380 [ 932.181534][T23081] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 932.181556][T23081] ? ksys_write+0x1ac/0x250 [ 932.181577][T23081] ? __pfx_ksys_write+0x10/0x10 [ 932.181603][T23081] __do_fast_syscall_32+0x13a/0x8b0 [ 932.181630][T23081] do_fast_syscall_32+0x32/0x70 [ 932.181653][T23081] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 932.181675][T23081] RIP: 0023:0xf7f16fec [ 932.181694][T23081] Code: Unable to access opcode bytes at 0xf7f16fc2. [ 932.181703][T23081] RSP: 002b:00000000f53c65bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 932.181720][T23081] RAX: ffffffffffffffda RBX: 00000000f73d4f88 RCX: 0000000000000080 [ 932.181732][T23081] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73d4f8c [ 932.181742][T23081] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 932.181754][T23081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 932.181766][T23081] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 932.181789][T23081] [ 932.188839][T23068] hugetlbfs: Unknown parameter 'ns_inoles' [ 932.241471][T23080] syz_tun: left allmulticast mode [ 932.251514][ T35] usb 6-1: USB disconnect, device number 55 [ 932.283000][ T35] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 932.285500][ T35] usbserial_generic 6-1:1.0: device disconnected [ 933.028577][ T25] usb 8-1: reset high-speed USB device number 13 using dummy_hcd [ 933.068529][ T5828] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 933.229019][ T5828] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 933.230073][ T5828] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 933.230096][ T5828] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 933.234221][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.234239][ T5828] usb 6-1: Product: syz [ 933.234250][ T5828] usb 6-1: Manufacturer: syz [ 933.234261][ T5828] usb 6-1: SerialNumber: syz [ 933.243490][T23089] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 933.244649][T23089] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 933.249288][ T5828] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 933.249311][ T5828] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 933.249339][ T5828] usbserial_generic 6-1:1.0: generic converter detected [ 933.252824][ T5828] usb 6-1: generic converter now attached to ttyUSB0 [ 933.410167][T23083] syz_tun: entered allmulticast mode [ 933.416398][T23083] FAULT_INJECTION: forcing a failure. [ 933.416398][T23083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 933.416419][T23083] CPU: 1 UID: 0 PID: 23083 Comm: syz.3.5789 Tainted: G L syzkaller #0 PREEMPT(full) [ 933.416435][T23083] Tainted: [L]=SOFTLOCKUP [ 933.416439][T23083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 933.416446][T23083] Call Trace: [ 933.416450][T23083] [ 933.416454][T23083] dump_stack_lvl+0x100/0x190 [ 933.416473][T23083] should_fail_ex.cold+0x5/0xa [ 933.416489][T23083] _copy_from_user+0x2e/0xd0 [ 933.416506][T23083] memdup_user_nul+0x6c/0x120 [ 933.416520][T23083] proc_simple_write+0xc1/0x1a0 [ 933.416533][T23083] ? __pfx_proc_simple_write+0x10/0x10 [ 933.416547][T23083] proc_reg_write+0x240/0x330 [ 933.416564][T23083] vfs_write+0x2aa/0x1050 [ 933.416578][T23083] ? __pfx_proc_reg_write+0x10/0x10 [ 933.416594][T23083] ? lock_acquire+0x1d1/0x380 [ 933.416610][T23083] ? __fget_files+0x34/0x3d0 [ 933.416625][T23083] ? __pfx_vfs_write+0x10/0x10 [ 933.416638][T23083] ? find_held_lock+0x2b/0x80 [ 933.416652][T23083] ? __fget_files+0x215/0x3d0 [ 933.416669][T23083] ? __fget_files+0x21f/0x3d0 [ 933.416690][T23083] ksys_write+0x12a/0x250 [ 933.416704][T23083] ? __pfx_ksys_write+0x10/0x10 [ 933.416721][T23083] __do_fast_syscall_32+0x13a/0x8b0 [ 933.416736][T23083] ? lockdep_hardirqs_on+0x7d/0x110 [ 933.416751][T23083] do_fast_syscall_32+0x32/0x70 [ 933.416766][T23083] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 933.416781][T23083] RIP: 0023:0xf7fb8fec [ 933.416794][T23083] Code: Unable to access opcode bytes at 0xf7fb8fc2. [ 933.416800][T23083] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 933.416813][T23083] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000070 [ 933.416822][T23083] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 933.416829][T23083] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 933.416835][T23083] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 933.416842][T23083] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 933.416855][T23083] [ 933.455454][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 933.455501][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 933.455619][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 933.455641][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 933.455794][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 933.455817][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 933.455963][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 933.456001][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 933.456121][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 933.456154][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 933.456282][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 933.456304][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 933.456475][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 933.456498][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 933.456625][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 933.456647][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 933.456795][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 933.456818][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 933.456979][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 933.459305][T23089] hugetlbfs: Unknown parameter 'ns_inoles' [ 933.463241][ T58] usb 6-1: USB disconnect, device number 56 [ 933.468070][ T58] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 933.468464][ T58] usbserial_generic 6-1:1.0: device disconnected [ 933.690408][T23082] syz_tun: left allmulticast mode [ 933.692573][ T58] usb 8-1: USB disconnect, device number 13 [ 933.695763][ T25] plantronics 0003:047F:FFFF.004A: usb_submit_urb(ctrl) failed: -19 [ 933.906465][T23104] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 934.297698][T23112] overlay: Unknown parameter 'fscontext' [ 935.150724][T23122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.164934][T23122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 935.199428][T23122] syz_tun: entered allmulticast mode [ 935.239952][T23122] FAULT_INJECTION: forcing a failure. [ 935.239952][T23122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 935.239975][T23122] CPU: 3 UID: 0 PID: 23122 Comm: syz.0.5800 Tainted: G L syzkaller #0 PREEMPT(full) [ 935.239991][T23122] Tainted: [L]=SOFTLOCKUP [ 935.239996][T23122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 935.240003][T23122] Call Trace: [ 935.240007][T23122] [ 935.240012][T23122] dump_stack_lvl+0x100/0x190 [ 935.240031][T23122] should_fail_ex.cold+0x5/0xa [ 935.240046][T23122] _copy_from_iter+0x1f4/0x1690 [ 935.240081][T23122] ? __pfx__copy_from_iter+0x10/0x10 [ 935.240100][T23122] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 935.240121][T23122] ? lock_acquire+0x1d1/0x380 [ 935.240141][T23122] copy_page_from_iter+0x238/0x300 [ 935.240160][T23122] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 935.240206][T23122] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 935.240227][T23122] ? __lock_acquire+0x5c0/0x1f40 [ 935.240246][T23122] ? __pfx___schedule+0x10/0x10 [ 935.240265][T23122] ? aa_file_perm+0x197/0x14d0 [ 935.240281][T23122] ? find_held_lock+0x2b/0x80 [ 935.240297][T23122] tun_get_user+0x1674/0x3cc0 [ 935.240321][T23122] ? __lock_acquire+0x5c0/0x1f40 [ 935.240337][T23122] ? __pfx_tun_get_user+0x10/0x10 [ 935.240354][T23122] ? plist_check_list+0x1b8/0x280 [ 935.240365][T23122] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 935.240381][T23122] ? find_held_lock+0x2b/0x80 [ 935.240394][T23122] ? tun_get+0x191/0x370 [ 935.240409][T23122] ? tun_get+0x191/0x370 [ 935.240428][T23122] tun_chr_write_iter+0xdc/0x200 [ 935.240440][T23122] vfs_write+0x6af/0x1050 [ 935.240454][T23122] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 935.240466][T23122] ? __pfx_vfs_write+0x10/0x10 [ 935.240478][T23122] ? find_held_lock+0x2b/0x80 [ 935.240500][T23122] ksys_write+0x12a/0x250 [ 935.240513][T23122] ? __pfx_ksys_write+0x10/0x10 [ 935.240530][T23122] do_int80_emulation+0x166/0x650 [ 935.240547][T23122] asm_int80_emulation+0x1a/0x20 [ 935.240558][T23122] RIP: 0023:0xf71075eb [ 935.240568][T23122] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 935.240579][T23122] RSP: 002b:00000000f53c644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 935.240591][T23122] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000080 [ 935.240598][T23122] RDX: 000000000000002a RSI: 0000000000000000 RDI: 0000000000000000 [ 935.240605][T23122] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 935.240611][T23122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 935.240618][T23122] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 935.240632][T23122] [ 935.381736][T23121] syz_tun: left allmulticast mode [ 936.328059][ T5828] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 936.478744][ T5828] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 936.479529][ T5828] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 936.479545][ T5828] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 936.481041][ T5828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.481053][ T5828] usb 7-1: Product: syz [ 936.481060][ T5828] usb 7-1: Manufacturer: syz [ 936.481068][ T5828] usb 7-1: SerialNumber: syz [ 936.485537][T23136] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 936.485666][T23136] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 936.486995][ T5828] usbserial_generic 7-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 936.487006][ T5828] usbserial_generic 7-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 936.487023][ T5828] usbserial_generic 7-1:1.0: generic converter detected [ 936.490106][ T5828] usb 7-1: generic converter now attached to ttyUSB0 [ 936.584656][T23142] overlay: Unknown parameter 'fscontext' [ 936.697296][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 936.697388][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 936.697548][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 936.697595][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 936.697750][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 936.697806][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 936.697977][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 936.698010][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 936.706135][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 936.706182][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 936.706326][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 936.706381][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 936.706477][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 936.706501][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 936.706659][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 936.706698][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 936.706826][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 936.706851][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 936.706988][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 936.707005][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 936.711151][T23136] hugetlbfs: Unknown parameter 'ns_inoles' [ 936.714281][ T5828] usb 7-1: USB disconnect, device number 22 [ 936.716500][ T5828] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 936.716866][ T5828] usbserial_generic 7-1:1.0: device disconnected [ 936.756863][T23148] overlay: Unknown parameter 'fscontext' [ 936.815653][ T43] kauditd_printk_skb: 35 callbacks suppressed [ 936.815665][ T43] audit: type=1800 audit(1791276728.904:10724): pid=23150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5811" name="rotate" dev="sysfs" ino=1315 res=0 errno=0 [ 936.898084][ T5613] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 937.058702][ T5613] usb 8-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 937.059515][ T5613] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 937.059532][ T5613] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 937.061052][ T5613] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.061064][ T5613] usb 8-1: Product: syz [ 937.061072][ T5613] usb 8-1: Manufacturer: syz [ 937.061079][ T5613] usb 8-1: SerialNumber: syz [ 937.062866][T23146] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 937.062917][T23146] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 937.063778][ T43] audit: type=1800 audit(1791276729.154:10725): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=269106 res=0 errno=0 [ 937.064095][ T5613] usbserial_generic 8-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 937.064106][ T5613] usbserial_generic 8-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 937.064124][ T5613] usbserial_generic 8-1:1.0: generic converter detected [ 937.066040][ T43] audit: type=1800 audit(1791276729.154:10726): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=269138 res=0 errno=0 [ 937.066418][ T5613] usb 8-1: generic converter now attached to ttyUSB0 [ 937.067352][ T43] audit: type=1800 audit(1791276729.154:10727): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=269113 res=0 errno=0 [ 937.068420][ T43] audit: type=1800 audit(1791276729.164:10728): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=269114 res=0 errno=0 [ 937.069250][ T43] audit: type=1800 audit(1791276729.164:10729): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=269135 res=0 errno=0 [ 937.070048][ T43] audit: type=1800 audit(1791276729.164:10730): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=269136 res=0 errno=0 [ 937.070817][ T43] audit: type=1800 audit(1791276729.164:10731): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=269115 res=0 errno=0 [ 937.071649][ T43] audit: type=1800 audit(1791276729.164:10732): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=269137 res=0 errno=0 [ 937.075191][ T43] audit: type=1800 audit(1791276729.164:10733): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=269158 res=0 errno=0 [ 937.120150][ T2381] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 937.280599][ T2381] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 937.281537][ T2381] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.281554][ T2381] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 937.281565][ T2381] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 937.281585][ T2381] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.282757][ T2381] usb 6-1: config 0 descriptor?? [ 937.330338][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 937.330410][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 937.330537][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 937.330928][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 937.331002][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 937.331154][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 937.331184][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 937.331527][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 937.331606][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 937.331745][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 937.332111][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 937.332206][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 937.332363][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 937.332393][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 937.332738][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 937.332805][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 937.333110][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 937.333180][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 937.333332][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 937.333375][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 937.333504][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 937.333901][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 937.334254][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 937.334324][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 937.334476][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 937.334504][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 937.334857][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 937.335839][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 937.335914][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 937.336065][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 937.372127][ T25] usb 8-1: USB disconnect, device number 14 [ 937.382158][ T25] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 937.382550][ T25] usbserial_generic 8-1:1.0: device disconnected [ 937.505730][T23152] syz_tun: entered allmulticast mode [ 937.527361][T23152] FAULT_INJECTION: forcing a failure. [ 937.527361][T23152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 937.527386][T23152] CPU: 2 UID: 0 PID: 23152 Comm: syz.1.5812 Tainted: G L syzkaller #0 PREEMPT(full) [ 937.527402][T23152] Tainted: [L]=SOFTLOCKUP [ 937.527407][T23152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 937.527414][T23152] Call Trace: [ 937.527418][T23152] [ 937.527423][T23152] dump_stack_lvl+0x100/0x190 [ 937.527442][T23152] should_fail_ex.cold+0x5/0xa [ 937.527470][T23152] _copy_from_user+0x2e/0xd0 [ 937.527488][T23152] memdup_user_nul+0x6c/0x120 [ 937.527502][T23152] proc_simple_write+0xc1/0x1a0 [ 937.527515][T23152] ? __pfx_proc_simple_write+0x10/0x10 [ 937.527528][T23152] proc_reg_write+0x240/0x330 [ 937.527546][T23152] vfs_write+0x2aa/0x1050 [ 937.527560][T23152] ? __pfx_proc_reg_write+0x10/0x10 [ 937.527576][T23152] ? lock_acquire+0x1d1/0x380 [ 937.527592][T23152] ? __fget_files+0x34/0x3d0 [ 937.527606][T23152] ? __pfx_vfs_write+0x10/0x10 [ 937.527618][T23152] ? find_held_lock+0x2b/0x80 [ 937.527631][T23152] ? __fget_files+0x215/0x3d0 [ 937.527647][T23152] ? __fget_files+0x21f/0x3d0 [ 937.527665][T23152] ksys_write+0x12a/0x250 [ 937.527678][T23152] ? __pfx_ksys_write+0x10/0x10 [ 937.527696][T23152] __do_fast_syscall_32+0x13a/0x8b0 [ 937.527711][T23152] ? lockdep_hardirqs_on+0x7d/0x110 [ 937.527726][T23152] do_fast_syscall_32+0x32/0x70 [ 937.527741][T23152] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 937.527756][T23152] RIP: 0023:0xf7fb8fec [ 937.527770][T23152] Code: Unable to access opcode bytes at 0xf7fb8fc2. [ 937.527775][T23152] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 937.527788][T23152] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000070 [ 937.527795][T23152] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 937.527802][T23152] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 937.527808][T23152] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 937.527815][T23152] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 937.527829][T23152] [ 937.718072][T17397] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 937.765592][ T2381] plantronics 0003:047F:FFFF.004B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 937.868906][T17397] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 937.869729][T17397] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.869745][T17397] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 937.869756][T17397] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 937.869775][T17397] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.871001][T17397] usb 7-1: config 0 descriptor?? [ 938.080548][T23159] syz_tun: entered allmulticast mode [ 938.083455][T23159] FAULT_INJECTION: forcing a failure. [ 938.083455][T23159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 938.083476][T23159] CPU: 1 UID: 0 PID: 23159 Comm: syz.2.5814 Tainted: G L syzkaller #0 PREEMPT(full) [ 938.083492][T23159] Tainted: [L]=SOFTLOCKUP [ 938.083496][T23159] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 938.083502][T23159] Call Trace: [ 938.083507][T23159] [ 938.083511][T23159] dump_stack_lvl+0x100/0x190 [ 938.083531][T23159] should_fail_ex.cold+0x5/0xa [ 938.083548][T23159] _copy_from_user+0x2e/0xd0 [ 938.083566][T23159] memdup_user_nul+0x6c/0x120 [ 938.083580][T23159] proc_simple_write+0xc1/0x1a0 [ 938.083593][T23159] ? __pfx_proc_simple_write+0x10/0x10 [ 938.083606][T23159] proc_reg_write+0x240/0x330 [ 938.083625][T23159] vfs_write+0x2aa/0x1050 [ 938.083639][T23159] ? __pfx_proc_reg_write+0x10/0x10 [ 938.083655][T23159] ? lock_acquire+0x1d1/0x380 [ 938.083671][T23159] ? __fget_files+0x34/0x3d0 [ 938.083687][T23159] ? __pfx_vfs_write+0x10/0x10 [ 938.083701][T23159] ? find_held_lock+0x2b/0x80 [ 938.083714][T23159] ? __fget_files+0x215/0x3d0 [ 938.083731][T23159] ? __fget_files+0x21f/0x3d0 [ 938.083748][T23159] ksys_write+0x12a/0x250 [ 938.083762][T23159] ? __pfx_ksys_write+0x10/0x10 [ 938.083779][T23159] __do_fast_syscall_32+0x13a/0x8b0 [ 938.083794][T23159] ? lockdep_hardirqs_on+0x7d/0x110 [ 938.083817][T23159] do_fast_syscall_32+0x32/0x70 [ 938.083834][T23159] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 938.083849][T23159] RIP: 0023:0xf73fefec [ 938.083862][T23159] Code: Unable to access opcode bytes at 0xf73fefc2. [ 938.083869][T23159] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 938.083885][T23159] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000070 [ 938.083894][T23159] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 938.083901][T23159] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 938.083908][T23159] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 938.083916][T23159] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 938.083931][T23159] [ 938.153625][T23168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.154251][T23168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.163887][T23168] syz_tun: entered allmulticast mode [ 938.180122][T23168] FAULT_INJECTION: forcing a failure. [ 938.180122][T23168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 938.180175][T23168] CPU: 2 UID: 0 PID: 23168 Comm: syz.0.5816 Tainted: G L syzkaller #0 PREEMPT(full) [ 938.180216][T23168] Tainted: [L]=SOFTLOCKUP [ 938.180225][T23168] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 938.180238][T23168] Call Trace: [ 938.180246][T23168] [ 938.180254][T23168] dump_stack_lvl+0x100/0x190 [ 938.180285][T23168] should_fail_ex.cold+0x5/0xa [ 938.180309][T23168] _copy_from_user+0x2e/0xd0 [ 938.180339][T23168] memdup_user_nul+0x6c/0x120 [ 938.180364][T23168] proc_simple_write+0xc1/0x1a0 [ 938.180385][T23168] ? __pfx_proc_simple_write+0x10/0x10 [ 938.180405][T23168] proc_reg_write+0x240/0x330 [ 938.180438][T23168] vfs_write+0x2aa/0x1050 [ 938.180465][T23168] ? __pfx_proc_reg_write+0x10/0x10 [ 938.180493][T23168] ? lock_acquire+0x1d1/0x380 [ 938.180521][T23168] ? __fget_files+0x34/0x3d0 [ 938.180546][T23168] ? __pfx_vfs_write+0x10/0x10 [ 938.180566][T23168] ? find_held_lock+0x2b/0x80 [ 938.180589][T23168] ? __fget_files+0x215/0x3d0 [ 938.180618][T23168] ? __fget_files+0x21f/0x3d0 [ 938.180650][T23168] ksys_write+0x12a/0x250 [ 938.180675][T23168] ? __pfx_ksys_write+0x10/0x10 [ 938.180706][T23168] __do_fast_syscall_32+0x13a/0x8b0 [ 938.180733][T23168] do_fast_syscall_32+0x32/0x70 [ 938.180761][T23168] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 938.180793][T23168] RIP: 0023:0xf7f16fec [ 938.180815][T23168] Code: Unable to access opcode bytes at 0xf7f16fc2. [ 938.180826][T23168] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 938.180846][T23168] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000070 [ 938.180864][T23168] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 938.180876][T23168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 938.180886][T23168] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 938.180897][T23168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 938.180922][T23168] [ 938.185298][T23168] syz_tun: left allmulticast mode [ 938.304865][T17397] plantronics 0003:047F:FFFF.004C: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 938.735811][T23172] overlay: Unknown parameter 'fscontext' [ 938.913998][T23179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.914489][T23179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.917605][T23179] syz_tun: entered allmulticast mode [ 938.927915][T23179] FAULT_INJECTION: forcing a failure. [ 938.927915][T23179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 938.927947][T23179] CPU: 3 UID: 0 PID: 23179 Comm: syz.0.5820 Tainted: G L syzkaller #0 PREEMPT(full) [ 938.927972][T23179] Tainted: [L]=SOFTLOCKUP [ 938.927979][T23179] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 938.927989][T23179] Call Trace: [ 938.927997][T23179] [ 938.928005][T23179] dump_stack_lvl+0x100/0x190 [ 938.928034][T23179] should_fail_ex.cold+0x5/0xa [ 938.928059][T23179] _copy_from_user+0x2e/0xd0 [ 938.928085][T23179] memdup_user_nul+0x6c/0x120 [ 938.928108][T23179] proc_simple_write+0xc1/0x1a0 [ 938.928129][T23179] ? __pfx_proc_simple_write+0x10/0x10 [ 938.928147][T23179] proc_reg_write+0x240/0x330 [ 938.928202][T23179] vfs_write+0x2aa/0x1050 [ 938.928225][T23179] ? __pfx_proc_reg_write+0x10/0x10 [ 938.928251][T23179] ? lock_acquire+0x1d1/0x380 [ 938.928277][T23179] ? __fget_files+0x34/0x3d0 [ 938.928300][T23179] ? __pfx_vfs_write+0x10/0x10 [ 938.928319][T23179] ? find_held_lock+0x2b/0x80 [ 938.928347][T23179] ? __fget_files+0x215/0x3d0 [ 938.928377][T23179] ? __fget_files+0x21f/0x3d0 [ 938.928408][T23179] ksys_write+0x12a/0x250 [ 938.928431][T23179] ? __pfx_ksys_write+0x10/0x10 [ 938.928464][T23179] __do_fast_syscall_32+0x13a/0x8b0 [ 938.928492][T23179] do_fast_syscall_32+0x32/0x70 [ 938.928516][T23179] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 938.928540][T23179] RIP: 0023:0xf7f16fec [ 938.928560][T23179] Code: Unable to access opcode bytes at 0xf7f16fc2. [ 938.928569][T23179] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 938.928587][T23179] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000070 [ 938.928600][T23179] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 938.928610][T23179] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 938.928621][T23179] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 938.928634][T23179] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 938.928660][T23179] [ 939.058157][ C2] plantronics 0003:047F:FFFF.004B: usb_submit_urb(ctrl) failed: -1 [ 939.072266][T23151] syz_tun: left allmulticast mode [ 939.147213][T23158] syz_tun: left allmulticast mode [ 939.149355][T23178] syz_tun: left allmulticast mode [ 939.155234][ T35] usb 7-1: USB disconnect, device number 23 [ 940.445548][ T5597] usb 6-1: USB disconnect, device number 57 [ 941.332026][T23193] ima: policy update completed [ 941.370733][T23210] overlay: Unknown parameter 'fscontext' [ 941.404705][T23212] fuse: Bad value for 'user_id' [ 941.404725][T23212] fuse: Bad value for 'user_id' [ 941.481235][T21894] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10 [ 941.481258][T21894] Bluetooth: unknown link type 96 [ 941.481271][T21894] Bluetooth: hci4: connection err: -111 [ 941.537774][ T35] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 941.698235][ T35] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 941.699153][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.699169][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.699180][ T35] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 941.699200][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.700426][ T35] usb 6-1: config 0 descriptor?? [ 942.166273][T23207] FAULT_INJECTION: forcing a failure. [ 942.166273][T23207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 942.166296][T23207] CPU: 3 UID: 0 PID: 23207 Comm: syz.1.5829 Tainted: G L syzkaller #0 PREEMPT(full) [ 942.166312][T23207] Tainted: [L]=SOFTLOCKUP [ 942.166316][T23207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 942.166334][T23207] Call Trace: [ 942.166340][T23207] [ 942.166344][T23207] dump_stack_lvl+0x100/0x190 [ 942.166364][T23207] should_fail_ex.cold+0x5/0xa [ 942.166393][T23207] _copy_from_user+0x2e/0xd0 [ 942.166412][T23207] memdup_user_nul+0x6c/0x120 [ 942.166427][T23207] proc_simple_write+0xc1/0x1a0 [ 942.166440][T23207] ? __pfx_proc_simple_write+0x10/0x10 [ 942.166453][T23207] proc_reg_write+0x240/0x330 [ 942.166472][T23207] vfs_write+0x2aa/0x1050 [ 942.166487][T23207] ? __pfx_proc_reg_write+0x10/0x10 [ 942.166504][T23207] ? lock_acquire+0x1d1/0x380 [ 942.166520][T23207] ? __fget_files+0x34/0x3d0 [ 942.166535][T23207] ? __pfx_vfs_write+0x10/0x10 [ 942.166547][T23207] ? find_held_lock+0x2b/0x80 [ 942.166560][T23207] ? __fget_files+0x215/0x3d0 [ 942.166576][T23207] ? __fget_files+0x21f/0x3d0 [ 942.166594][T23207] ksys_write+0x12a/0x250 [ 942.166607][T23207] ? __pfx_ksys_write+0x10/0x10 [ 942.166625][T23207] __do_fast_syscall_32+0x13a/0x8b0 [ 942.166640][T23207] ? lockdep_hardirqs_on+0x7d/0x110 [ 942.166655][T23207] do_fast_syscall_32+0x32/0x70 [ 942.166670][T23207] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 942.166684][T23207] RIP: 0023:0xf7fb8fec [ 942.166698][T23207] Code: Unable to access opcode bytes at 0xf7fb8fc2. [ 942.166704][T23207] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 942.166715][T23207] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000070 [ 942.166723][T23207] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 942.166730][T23207] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 942.166736][T23207] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 942.166743][T23207] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 942.166757][T23207] [ 942.323251][ T35] usbhid 6-1:0.0: can't add hid device: -71 [ 942.323705][ T35] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 942.335210][ T35] usb 6-1: USB disconnect, device number 58 [ 943.417735][ T5613] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 943.588622][ T5613] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 943.589432][ T5613] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.589447][ T5613] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 943.589459][ T5613] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 943.589478][ T5613] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.591192][ T5613] usb 6-1: config 0 descriptor?? [ 943.593802][ T43] kauditd_printk_skb: 37 callbacks suppressed [ 943.593814][ T43] audit: type=1800 audit(1791276735.684:10771): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=269717 res=0 errno=0 [ 943.618058][ T43] audit: type=1800 audit(1791276735.714:10772): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=269746 res=0 errno=0 [ 943.618807][ T43] audit: type=1800 audit(1791276735.714:10773): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=269724 res=0 errno=0 [ 943.619752][ T43] audit: type=1800 audit(1791276735.714:10774): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=269725 res=0 errno=0 [ 943.620773][ T43] audit: type=1800 audit(1791276735.714:10775): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=269726 res=0 errno=0 [ 943.623941][ T43] audit: type=1800 audit(1791276735.714:10776): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=269766 res=0 errno=0 [ 943.757706][T12817] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 943.820670][T23228] syz_tun: entered allmulticast mode [ 943.855796][T23228] FAULT_INJECTION: forcing a failure. [ 943.855796][T23228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 943.855820][T23228] CPU: 2 UID: 0 PID: 23228 Comm: syz.1.5835 Tainted: G L syzkaller #0 PREEMPT(full) [ 943.855836][T23228] Tainted: [L]=SOFTLOCKUP [ 943.855845][T23228] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 943.855863][T23228] Call Trace: [ 943.855868][T23228] [ 943.855874][T23228] dump_stack_lvl+0x100/0x190 [ 943.855894][T23228] should_fail_ex.cold+0x5/0xa [ 943.855909][T23228] _copy_from_user+0x2e/0xd0 [ 943.855927][T23228] memdup_user_nul+0x6c/0x120 [ 943.855941][T23228] proc_simple_write+0xc1/0x1a0 [ 943.855954][T23228] ? __pfx_proc_simple_write+0x10/0x10 [ 943.855967][T23228] proc_reg_write+0x240/0x330 [ 943.855985][T23228] vfs_write+0x2aa/0x1050 [ 943.855999][T23228] ? __pfx_proc_reg_write+0x10/0x10 [ 943.856016][T23228] ? lock_acquire+0x1d1/0x380 [ 943.856033][T23228] ? __fget_files+0x34/0x3d0 [ 943.856048][T23228] ? __pfx_vfs_write+0x10/0x10 [ 943.856061][T23228] ? find_held_lock+0x2b/0x80 [ 943.856076][T23228] ? __fget_files+0x215/0x3d0 [ 943.856093][T23228] ? __fget_files+0x21f/0x3d0 [ 943.856124][T23228] ksys_write+0x12a/0x250 [ 943.856156][T23228] ? __pfx_ksys_write+0x10/0x10 [ 943.856175][T23228] __do_fast_syscall_32+0x13a/0x8b0 [ 943.856194][T23228] do_fast_syscall_32+0x32/0x70 [ 943.856210][T23228] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 943.856225][T23228] RIP: 0023:0xf7fb8fec [ 943.856239][T23228] Code: Unable to access opcode bytes at 0xf7fb8fc2. [ 943.856245][T23228] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 943.856258][T23228] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000070 [ 943.856265][T23228] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 943.856272][T23228] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 943.856278][T23228] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 943.856285][T23228] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 943.856299][T23228] [ 943.927217][T12817] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 943.931196][T12817] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.931214][T12817] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 943.931226][T12817] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 943.931246][T12817] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.937646][ T43] audit: type=1800 audit(1791276736.024:10777): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=269784 res=0 errno=0 [ 943.938284][ T43] audit: type=1800 audit(1791276736.034:10778): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=269813 res=0 errno=0 [ 943.939090][ T43] audit: type=1800 audit(1791276736.034:10779): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=269791 res=0 errno=0 [ 943.939986][ T43] audit: type=1800 audit(1791276736.034:10780): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=269792 res=0 errno=0 [ 943.950300][T12817] usb 8-1: config 0 descriptor?? [ 944.095403][ T5613] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 944.184330][T23234] syz_tun: entered allmulticast mode [ 944.221193][T23234] FAULT_INJECTION: forcing a failure. [ 944.221193][T23234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 944.221229][T23234] CPU: 1 UID: 0 PID: 23234 Comm: syz.3.5837 Tainted: G L syzkaller #0 PREEMPT(full) [ 944.221254][T23234] Tainted: [L]=SOFTLOCKUP [ 944.221261][T23234] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 944.221271][T23234] Call Trace: [ 944.221277][T23234] [ 944.221285][T23234] dump_stack_lvl+0x100/0x190 [ 944.221318][T23234] should_fail_ex.cold+0x5/0xa [ 944.221345][T23234] _copy_from_user+0x2e/0xd0 [ 944.221371][T23234] memdup_user_nul+0x6c/0x120 [ 944.221392][T23234] proc_simple_write+0xc1/0x1a0 [ 944.221410][T23234] ? __pfx_proc_simple_write+0x10/0x10 [ 944.221428][T23234] proc_reg_write+0x240/0x330 [ 944.221459][T23234] vfs_write+0x2aa/0x1050 [ 944.221486][T23234] ? __pfx_proc_reg_write+0x10/0x10 [ 944.221510][T23234] ? lock_acquire+0x1d1/0x380 [ 944.221535][T23234] ? __fget_files+0x34/0x3d0 [ 944.221557][T23234] ? __pfx_vfs_write+0x10/0x10 [ 944.221576][T23234] ? find_held_lock+0x2b/0x80 [ 944.221596][T23234] ? __fget_files+0x215/0x3d0 [ 944.221626][T23234] ? __fget_files+0x21f/0x3d0 [ 944.221657][T23234] ksys_write+0x12a/0x250 [ 944.221677][T23234] ? __pfx_ksys_write+0x10/0x10 [ 944.221705][T23234] __do_fast_syscall_32+0x13a/0x8b0 [ 944.221728][T23234] ? lockdep_hardirqs_on+0x7d/0x110 [ 944.221751][T23234] do_fast_syscall_32+0x32/0x70 [ 944.221786][T23234] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 944.221810][T23234] RIP: 0023:0xf7fb8fec [ 944.221831][T23234] Code: Unable to access opcode bytes at 0xf7fb8fc2. [ 944.221841][T23234] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 944.221859][T23234] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000070 [ 944.221872][T23234] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 944.221884][T23234] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 944.221895][T23234] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 944.221907][T23234] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 944.221933][T23234] [ 944.451984][T12817] plantronics 0003:047F:FFFF.004E: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 945.397886][ C2] plantronics 0003:047F:FFFF.004D: usb_submit_urb(ctrl) failed: -1 [ 945.399228][T23227] syz_tun: left allmulticast mode [ 945.399772][T23233] syz_tun: left allmulticast mode [ 945.402130][ T25] usb 8-1: USB disconnect, device number 15 [ 945.405081][T23255] gadgetfs: bound to dummy_udc driver [ 945.747697][ T2381] usb 6-1: reset high-speed USB device number 59 using dummy_hcd [ 945.747916][ C2] gadgetfs: connected [ 945.747988][ T2381] gadgetfs: disconnected [ 945.914948][ C2] gadgetfs: connected [ 945.917531][ T2381] usb 6-1: device firmware changed [ 945.917565][ T2381] gadgetfs: suspended from state 3 [ 945.919441][ T5613] usb 6-1: USB disconnect, device number 59 [ 945.968787][ T5613] gadgetfs: disconnected [ 946.086351][T23253] gadgetfs: suspended from state 2 [ 946.098469][ T5613] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 946.335578][T23276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.335795][T23276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.352684][T23276] syz_tun: entered allmulticast mode [ 946.359998][T23276] FAULT_INJECTION: forcing a failure. [ 946.359998][T23276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 946.360021][T23276] CPU: 0 UID: 0 PID: 23276 Comm: syz.0.5850 Tainted: G L syzkaller #0 PREEMPT(full) [ 946.360036][T23276] Tainted: [L]=SOFTLOCKUP [ 946.360040][T23276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 946.360046][T23276] Call Trace: [ 946.360050][T23276] [ 946.360055][T23276] dump_stack_lvl+0x100/0x190 [ 946.360074][T23276] should_fail_ex.cold+0x5/0xa [ 946.360090][T23276] _copy_from_user+0x2e/0xd0 [ 946.360109][T23276] memdup_user_nul+0x6c/0x120 [ 946.360161][T23276] proc_simple_write+0xc1/0x1a0 [ 946.360176][T23276] ? __pfx_proc_simple_write+0x10/0x10 [ 946.360188][T23276] proc_reg_write+0x240/0x330 [ 946.360207][T23276] vfs_write+0x2aa/0x1050 [ 946.360223][T23276] ? __pfx_proc_reg_write+0x10/0x10 [ 946.360240][T23276] ? lock_acquire+0x1d1/0x380 [ 946.360258][T23276] ? __fget_files+0x34/0x3d0 [ 946.360274][T23276] ? __pfx_vfs_write+0x10/0x10 [ 946.360286][T23276] ? find_held_lock+0x2b/0x80 [ 946.360300][T23276] ? __fget_files+0x215/0x3d0 [ 946.360323][T23276] ? __fget_files+0x21f/0x3d0 [ 946.360344][T23276] ksys_write+0x12a/0x250 [ 946.360359][T23276] ? __pfx_ksys_write+0x10/0x10 [ 946.360379][T23276] __do_fast_syscall_32+0x13a/0x8b0 [ 946.360398][T23276] do_fast_syscall_32+0x32/0x70 [ 946.360414][T23276] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 946.360429][T23276] RIP: 0023:0xf7f16fec [ 946.360445][T23276] Code: Unable to access opcode bytes at 0xf7f16fc2. [ 946.360451][T23276] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 946.360463][T23276] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000070 [ 946.360471][T23276] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 946.360478][T23276] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 946.360485][T23276] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 946.360492][T23276] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 946.360507][T23276] [ 946.365607][T23275] syz_tun: left allmulticast mode [ 947.012816][T23287] syz_tun: entered allmulticast mode [ 947.020589][T23287] FAULT_INJECTION: forcing a failure. [ 947.020589][T23287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 947.020611][T23287] CPU: 0 UID: 0 PID: 23287 Comm: syz.2.5855 Tainted: G L syzkaller #0 PREEMPT(full) [ 947.020626][T23287] Tainted: [L]=SOFTLOCKUP [ 947.020631][T23287] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 947.020637][T23287] Call Trace: [ 947.020641][T23287] [ 947.020646][T23287] dump_stack_lvl+0x100/0x190 [ 947.020666][T23287] should_fail_ex.cold+0x5/0xa [ 947.020681][T23287] _copy_from_user+0x2e/0xd0 [ 947.020700][T23287] memdup_user_nul+0x6c/0x120 [ 947.020714][T23287] proc_simple_write+0xc1/0x1a0 [ 947.020726][T23287] ? __pfx_proc_simple_write+0x10/0x10 [ 947.020738][T23287] proc_reg_write+0x240/0x330 [ 947.020757][T23287] vfs_write+0x2aa/0x1050 [ 947.020772][T23287] ? __pfx_proc_reg_write+0x10/0x10 [ 947.020787][T23287] ? lock_acquire+0x1d1/0x380 [ 947.020803][T23287] ? __fget_files+0x34/0x3d0 [ 947.020817][T23287] ? __pfx_vfs_write+0x10/0x10 [ 947.020835][T23287] ? find_held_lock+0x2b/0x80 [ 947.020852][T23287] ? __fget_files+0x215/0x3d0 [ 947.020870][T23287] ? __fget_files+0x21f/0x3d0 [ 947.020889][T23287] ksys_write+0x12a/0x250 [ 947.020904][T23287] ? __pfx_ksys_write+0x10/0x10 [ 947.020923][T23287] __do_fast_syscall_32+0x13a/0x8b0 [ 947.020941][T23287] do_fast_syscall_32+0x32/0x70 [ 947.020957][T23287] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 947.020971][T23287] RIP: 0023:0xf73fefec [ 947.020985][T23287] Code: Unable to access opcode bytes at 0xf73fefc2. [ 947.020991][T23287] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 947.021003][T23287] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000070 [ 947.021011][T23287] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 947.021017][T23287] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 947.021024][T23287] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 947.021030][T23287] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 947.021044][T23287] [ 947.031050][T23286] syz_tun: left allmulticast mode [ 948.430818][ T5735] Bluetooth: hci4: command 0x0406 tx timeout [ 948.836127][ T2381] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 949.064936][ T2381] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 949.096933][ T2381] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 949.096963][ T2381] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 949.171134][ T2381] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.171161][ T2381] usb 7-1: Product: syz [ 949.171173][ T2381] usb 7-1: Manufacturer: syz [ 949.171232][ T2381] usb 7-1: SerialNumber: syz [ 949.298291][T23303] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 949.298630][T23303] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 949.305761][ T43] kauditd_printk_skb: 21 callbacks suppressed [ 949.305898][ T43] audit: type=1800 audit(1791276741.394:10802): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=270208 res=0 errno=0 [ 949.325982][ T43] audit: type=1800 audit(1791276741.404:10803): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=270240 res=0 errno=0 [ 949.332564][ T43] audit: type=1800 audit(1791276741.424:10804): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=270215 res=0 errno=0 [ 949.335605][ T43] audit: type=1800 audit(1791276741.424:10805): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=270216 res=0 errno=0 [ 949.369717][ T2381] usbserial_generic 7-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 949.369800][ T2381] usbserial_generic 7-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 949.369834][ T2381] usbserial_generic 7-1:1.0: generic converter detected [ 949.485111][ T2381] usb 7-1: generic converter now attached to ttyUSB0 [ 949.501091][ T43] audit: type=1800 audit(1791276741.594:10806): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=270237 res=0 errno=0 [ 949.516895][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 949.516982][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 949.517154][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 949.517177][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 949.517328][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 949.517357][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 949.520412][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 949.520437][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 949.523744][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 949.523769][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 949.526811][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 949.552255][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 949.552299][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 949.552448][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 949.552488][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 949.552611][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 949.552644][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 949.552771][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 949.552797][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 949.569505][ T2381] usb 7-1: USB disconnect, device number 24 [ 949.584502][ T43] audit: type=1800 audit(1791276741.654:10807): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=270238 res=0 errno=0 [ 949.594229][ T2381] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 949.594525][ T2381] usbserial_generic 7-1:1.0: device disconnected [ 949.637638][ T43] audit: type=1800 audit(1791276741.724:10808): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=270217 res=0 errno=0 [ 949.703649][ T43] audit: type=1807 audit(1791276741.794:10809): action=measure res=1 [ 949.876484][T23322] gadgetfs: bound to dummy_udc driver [ 950.117421][ T5613] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 950.117652][ C0] gadgetfs: connected [ 950.117855][ T5613] gadgetfs: disconnected [ 950.280951][T23334] overlay: Unknown parameter 'fscontext' [ 950.623202][T23338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.626770][T23338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.081044][T23340] fuse: Bad value for 'fd' [ 951.295887][T21894] Bluetooth: hci2: unexpected event 0x04 length: 11 > 10 [ 951.295937][T21894] Bluetooth: unknown link type 96 [ 951.296001][T21894] Bluetooth: hci2: connection err: -111 [ 952.380227][T23323] ima: policy update completed [ 952.380315][ T43] audit: type=1802 audit(1791276744.475:10810): pid=23323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.3.5866" res=1 errno=0 [ 953.115229][ T43] audit: type=1800 audit(1791276745.205:10811): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=270442 res=0 errno=0 [ 953.323333][T23365] overlay: Unknown parameter 'fscontext' [ 953.898076][ T5594] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 953.967108][ T5828] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 954.050803][ T5594] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 954.051730][ T5594] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.051756][ T5594] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.051780][ T5594] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 954.051814][ T5594] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.053940][ T5594] usb 7-1: config 0 descriptor?? [ 954.117987][ T5828] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 954.119421][ T5828] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.119449][ T5828] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.119468][ T5828] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 954.119563][ T5828] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.125068][ T5828] usb 8-1: config 0 descriptor?? [ 954.403606][T23374] syz_tun: entered allmulticast mode [ 954.406544][T23372] FAULT_INJECTION: forcing a failure. [ 954.406544][T23372] name failslab, interval 1, probability 0, space 0, times 0 [ 954.406629][T23372] CPU: 1 UID: 0 PID: 23372 Comm: syz.2.5881 Tainted: G L syzkaller #0 PREEMPT(full) [ 954.406646][T23372] Tainted: [L]=SOFTLOCKUP [ 954.406650][T23372] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 954.406668][T23372] Call Trace: [ 954.406674][T23372] [ 954.406679][T23372] dump_stack_lvl+0x100/0x190 [ 954.406699][T23372] should_fail_ex.cold+0x5/0xa [ 954.406715][T23372] should_failslab+0xc2/0x120 [ 954.406746][T23372] __kmalloc_cache_noprof+0x91/0x6d0 [ 954.406761][T23372] ? afs_lookup_cell+0x49f/0x1940 [ 954.406777][T23372] afs_lookup_cell+0x49f/0x1940 [ 954.406791][T23372] ? afs_proc_rootcell_write+0x187/0x280 [ 954.406809][T23372] ? __pfx_afs_lookup_cell+0x10/0x10 [ 954.406820][T23372] ? __pfx___might_resched+0x10/0x10 [ 954.406835][T23372] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 954.406858][T23372] afs_cell_init+0x17d/0x380 [ 954.406871][T23372] afs_proc_rootcell_write+0x1c9/0x280 [ 954.406889][T23372] proc_simple_write+0x10e/0x1a0 [ 954.406901][T23372] ? __pfx_proc_simple_write+0x10/0x10 [ 954.406913][T23372] proc_reg_write+0x240/0x330 [ 954.406931][T23372] vfs_write+0x2aa/0x1050 [ 954.406945][T23372] ? __pfx_proc_reg_write+0x10/0x10 [ 954.406961][T23372] ? lock_acquire+0x1d1/0x380 [ 954.406976][T23372] ? __fget_files+0x34/0x3d0 [ 954.406990][T23372] ? __pfx_vfs_write+0x10/0x10 [ 954.407003][T23372] ? find_held_lock+0x2b/0x80 [ 954.407016][T23372] ? __fget_files+0x215/0x3d0 [ 954.407032][T23372] ? __fget_files+0x21f/0x3d0 [ 954.407051][T23372] ksys_write+0x12a/0x250 [ 954.407064][T23372] ? __pfx_ksys_write+0x10/0x10 [ 954.407082][T23372] __do_fast_syscall_32+0x13a/0x8b0 [ 954.407099][T23372] do_fast_syscall_32+0x32/0x70 [ 954.407114][T23372] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 954.407128][T23372] RIP: 0023:0xf73fefec [ 954.407141][T23372] Code: Unable to access opcode bytes at 0xf73fefc2. [ 954.407147][T23372] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 954.407159][T23372] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000070 [ 954.407167][T23372] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 954.407181][T23372] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 954.407189][T23372] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 954.407197][T23372] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 954.407212][T23372] [ 954.558382][ T5594] usbhid 7-1:0.0: can't add hid device: -71 [ 954.558986][ T5594] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 954.651148][ T5594] usb 7-1: USB disconnect, device number 25 [ 954.724660][T23374] FAULT_INJECTION: forcing a failure. [ 954.724660][T23374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 954.724808][T23374] CPU: 1 UID: 0 PID: 23374 Comm: syz.3.5882 Tainted: G L syzkaller #0 PREEMPT(full) [ 954.724837][T23374] Tainted: [L]=SOFTLOCKUP [ 954.724844][T23374] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 954.724855][T23374] Call Trace: [ 954.724862][T23374] [ 954.724869][T23374] dump_stack_lvl+0x100/0x190 [ 954.724913][T23374] should_fail_ex.cold+0x5/0xa [ 954.724937][T23374] _copy_from_user+0x2e/0xd0 [ 954.724964][T23374] memdup_user_nul+0x6c/0x120 [ 954.724987][T23374] proc_simple_write+0xc1/0x1a0 [ 954.725007][T23374] ? __pfx_proc_simple_write+0x10/0x10 [ 954.725025][T23374] proc_reg_write+0x240/0x330 [ 954.725053][T23374] vfs_write+0x2aa/0x1050 [ 954.725075][T23374] ? __pfx_proc_reg_write+0x10/0x10 [ 954.725100][T23374] ? lock_acquire+0x1d1/0x380 [ 954.725124][T23374] ? __fget_files+0x34/0x3d0 [ 954.725147][T23374] ? __pfx_vfs_write+0x10/0x10 [ 954.725166][T23374] ? find_held_lock+0x2b/0x80 [ 954.725188][T23374] ? __fget_files+0x215/0x3d0 [ 954.725213][T23374] ? __fget_files+0x21f/0x3d0 [ 954.725242][T23374] ksys_write+0x12a/0x250 [ 954.725263][T23374] ? __pfx_ksys_write+0x10/0x10 [ 954.725290][T23374] __do_fast_syscall_32+0x13a/0x8b0 [ 954.725327][T23374] do_fast_syscall_32+0x32/0x70 [ 954.725351][T23374] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 954.725373][T23374] RIP: 0023:0xf7fb8fec [ 954.725393][T23374] Code: Unable to access opcode bytes at 0xf7fb8fc2. [ 954.725401][T23374] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 954.725420][T23374] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000070 [ 954.725433][T23374] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 954.725445][T23374] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 954.725456][T23374] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 954.725466][T23374] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 954.725490][T23374] [ 955.133755][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 955.133767][ T43] audit: type=1800 audit(1791276747.225:10826): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=270656 res=0 errno=0 [ 955.206178][ T43] audit: type=1800 audit(1791276747.295:10827): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=270678 res=0 errno=0 [ 955.249689][ T5828] plantronics 0003:047F:FFFF.004F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 955.274616][ T43] audit: type=1800 audit(1791276747.365:10828): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=270692 res=0 errno=0 [ 955.535703][T23400] overlay: Unknown parameter 'fscontext' [ 955.711002][ T43] audit: type=1800 audit(1791276747.805:10829): pid=23395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="fido_id" name="report_descriptor" dev="sysfs" ino=270658 res=0 errno=0 [ 955.962930][ T43] audit: type=1800 audit(1791276748.055:10830): pid=23409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5891" name="rotate" dev="sysfs" ino=1315 res=0 errno=0 [ 956.132781][T23401] gadgetfs: bound to dummy_udc driver [ 956.316939][ T3263] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 956.337029][ C2] plantronics 0003:047F:FFFF.004F: usb_submit_urb(ctrl) failed: -1 [ 956.344443][T23373] syz_tun: left allmulticast mode [ 956.351052][T23398] gadgetfs: suspended from state 2 [ 956.377050][ T5613] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 956.468046][ T3263] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 956.469224][ T3263] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.469255][ T3263] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.469275][ T3263] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 956.469308][ T3263] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.471346][ T3263] usb 6-1: config 0 descriptor?? [ 956.474171][ T43] audit: type=1800 audit(1791276748.565:10831): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=270830 res=0 errno=0 [ 956.479631][ T43] audit: type=1800 audit(1791276748.575:10832): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=270859 res=0 errno=0 [ 956.481021][ T43] audit: type=1800 audit(1791276748.575:10833): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=270837 res=0 errno=0 [ 956.482090][ T43] audit: type=1800 audit(1791276748.575:10834): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=270838 res=0 errno=0 [ 956.483881][ T43] audit: type=1800 audit(1791276748.575:10835): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=270839 res=0 errno=0 [ 956.679560][T23411] syz_tun: entered allmulticast mode [ 956.713017][T23411] FAULT_INJECTION: forcing a failure. [ 956.713017][T23411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 956.713041][T23411] CPU: 1 UID: 0 PID: 23411 Comm: syz.1.5892 Tainted: G L syzkaller #0 PREEMPT(full) [ 956.713056][T23411] Tainted: [L]=SOFTLOCKUP [ 956.713060][T23411] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 956.713067][T23411] Call Trace: [ 956.713071][T23411] [ 956.713075][T23411] dump_stack_lvl+0x100/0x190 [ 956.713096][T23411] should_fail_ex.cold+0x5/0xa [ 956.713112][T23411] _copy_from_user+0x2e/0xd0 [ 956.713133][T23411] memdup_user_nul+0x6c/0x120 [ 956.713148][T23411] proc_simple_write+0xc1/0x1a0 [ 956.713162][T23411] ? __pfx_proc_simple_write+0x10/0x10 [ 956.713175][T23411] proc_reg_write+0x240/0x330 [ 956.713195][T23411] vfs_write+0x2aa/0x1050 [ 956.713209][T23411] ? __pfx_proc_reg_write+0x10/0x10 [ 956.713225][T23411] ? lock_acquire+0x1d1/0x380 [ 956.713241][T23411] ? __fget_files+0x34/0x3d0 [ 956.713257][T23411] ? __pfx_vfs_write+0x10/0x10 [ 956.713270][T23411] ? find_held_lock+0x2b/0x80 [ 956.713284][T23411] ? __fget_files+0x215/0x3d0 [ 956.713300][T23411] ? __fget_files+0x21f/0x3d0 [ 956.713318][T23411] ksys_write+0x12a/0x250 [ 956.713331][T23411] ? __pfx_ksys_write+0x10/0x10 [ 956.713349][T23411] __do_fast_syscall_32+0x13a/0x8b0 [ 956.713366][T23411] do_fast_syscall_32+0x32/0x70 [ 956.713381][T23411] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 956.713396][T23411] RIP: 0023:0xf7fb8fec [ 956.713410][T23411] Code: Unable to access opcode bytes at 0xf7fb8fc2. [ 956.713415][T23411] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 956.713427][T23411] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000070 [ 956.713434][T23411] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 956.713441][T23411] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 956.713447][T23411] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 956.713454][T23411] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 956.713468][T23411] [ 956.942415][ T3263] plantronics 0003:047F:FFFF.0050: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 957.013261][T23429] overlay: Unknown parameter 'fscontext' [ 957.179471][ T35] usb 8-1: USB disconnect, device number 16 [ 957.219719][T23410] syz_tun: left allmulticast mode [ 957.224317][ T5828] usb 6-1: USB disconnect, device number 62 [ 958.852857][T23439] ima: policy update completed [ 959.188974][T23473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.200212][T23473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.592393][T23502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.592595][T23502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 962.265139][T23486] Set syz1 is full, maxelem 65536 reached [ 962.595662][T23515] misc userio: Invalid payload size [ 962.856687][ T5613] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 963.017723][ T5613] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 963.018834][ T5613] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 963.018856][ T5613] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 963.018868][ T5613] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 963.018879][ T5613] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 963.018898][ T5613] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.021593][ T43] kauditd_printk_skb: 11 callbacks suppressed [ 963.021606][ T43] audit: type=1800 audit(1791276755.115:10847): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=271109 res=0 errno=0 [ 963.025928][ T43] audit: type=1800 audit(1791276755.115:10848): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=271138 res=0 errno=0 [ 963.027062][ T43] audit: type=1800 audit(1791276755.125:10849): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=271116 res=0 errno=0 [ 963.028584][ T43] audit: type=1800 audit(1791276755.125:10850): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=271117 res=0 errno=0 [ 963.047264][ T43] audit: type=1800 audit(1791276755.145:10851): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=271118 res=0 errno=0 [ 963.245544][ T43] audit: type=1800 audit(1791276755.335:10852): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=271158 res=0 errno=0 [ 963.453576][ T5613] gud 6-1:1.0: No supported pixel formats found [ 963.453597][ T5613] gud 6-1:1.0: probe with driver gud failed with error -22 [ 963.644022][ T5813] usb 6-1: USB disconnect, device number 63 [ 963.651080][T23530] [U] [ 963.651101][T23530] [U] [ 963.651116][T23530] [U] [ 963.651132][T23530] [U] [ 963.651150][T23530] [U] [ 963.651165][T23530] [U] [ 963.651182][T23530] [U] [ 963.651199][T23530] [U] [ 963.651217][T23530] [U] [ 963.651232][T23530] [U] [ 963.651247][T23530] [U] [ 963.651262][T23530] [U] [ 963.651287][T23530] [U] [ 963.651302][T23530] [U] [ 963.651317][T23530] [U] [ 963.651334][T23530] [U] [ 963.651351][T23530] [U] [ 963.651368][T23530] [U] [ 963.651385][T23530] [U] [ 963.651401][T23530] [U] [ 963.651423][T23530] [U] [ 963.651440][T23530] [U] [ 963.651457][T23530] [U] [ 963.651472][T23530] [U] [ 963.651490][T23530] [U] [ 963.651507][T23530] [U] [ 963.651523][T23530] [U] [ 963.651538][T23530] [U] [ 963.651558][T23530] [U] [ 963.651574][T23530] [U] [ 963.651589][T23530] [U] [ 963.651603][T23530] [U] [ 963.651619][T23530] [U] [ 963.651641][T23530] [U] [ 963.651657][T23530] [U] [ 963.651674][T23530] [U] [ 963.651697][T23530] [U] [ 963.651714][T23530] [U] [ 963.651730][T23530] [U] [ 963.651747][T23530] [U] [ 963.651766][T23530] [U] [ 963.651782][T23530] [U] [ 963.651799][T23530] [U] [ 963.651816][T23530] [U] [ 963.651838][T23530] [U] [ 963.651855][T23530] [U] [ 963.651872][T23530] [U] [ 963.651888][T23530] [U] [ 963.651903][T23530] [U] [ 963.651918][T23530] [U] [ 963.651933][T23530] [U] [ 963.651948][T23530] [U] [ 963.651968][T23530] [U] [ 963.651983][T23530] [U] [ 963.651998][T23530] [U] [ 963.652013][T23530] [U] [ 963.652029][T23530] [U] [ 963.652071][T23530] [U] [ 963.652089][T23530] [U] [ 963.652105][T23530] [U] [ 963.652130][T23530] [U] [ 963.652147][T23530] [U] [ 963.652163][T23530] [U] [ 963.652201][T23530] [U] [ 963.654642][T23530] [U] [ 963.654673][T23530] [U] [ 963.654696][T23530] [U] [ 963.654719][T23530] [U] [ 963.661903][T23530] [U] [ 963.661923][T23530] [U] [ 963.661939][T23530] [U] [ 963.661956][T23530] [U] [ 963.661975][T23530] [U] [ 963.661991][T23530] [U] [ 963.662008][T23530] [U] [ 963.662025][T23530] [U] [ 963.662047][T23530] [U] [ 963.662064][T23530] [U] [ 963.662080][T23530] [U] [ 963.662095][T23530] [U] [ 963.662110][T23530] [U] [ 963.662124][T23530] [U] [ 963.662141][T23530] [U] [ 963.662156][T23530] [U] [ 963.662176][T23530] [U] [ 963.662191][T23530] [U] [ 963.662206][T23530] [U] [ 963.662220][T23530] [U] [ 963.662236][T23530] [U] [ 963.662250][T23530] [U] [ 963.662265][T23530] [U] [ 963.662279][T23530] [U] [ 963.662299][T23530] [U] [ 963.662314][T23530] [U] [ 963.662328][T23530] [U] [ 963.662343][T23530] [U] [ 963.662359][T23530] [U] [ 963.662374][T23530] [U] [ 963.662388][T23530] [U] [ 963.662403][T23530] [U] [ 963.662423][T23530] [U] [ 963.662438][T23530] [U] [ 963.662453][T23530] [U] [ 963.662467][T23530] [U] [ 963.662497][T23530] [U] [ 963.662514][T23530] [U] [ 963.662530][T23530] [U] [ 963.662547][T23530] [U] [ 963.756536][T23530] [U] [ 963.756574][T23530] [U] [ 963.756605][T23530] [U] [ 963.756635][T23530] [U] [ 963.756669][T23530] [U] [ 963.756700][T23530] [U] [ 963.756730][T23530] [U] [ 963.756758][T23530] [U] [ 963.756805][T23530] [U] [ 963.756836][T23530] [U] [ 963.756867][T23530] [U] [ 963.756897][T23530] [U] [ 963.756930][T23530] [U] [ 963.756961][T23530] [U] [ 963.756991][T23530] [U] [ 963.757022][T23530] [U] [ 963.759408][T23530] [U] [ 963.759429][T23530] [U] [ 963.759446][T23530] [U] [ 963.853281][T23529] [U] [ 963.951736][T23532] tipc: Started in network mode [ 963.951754][T23532] tipc: Node identity ac1414aa, cluster identity 4711 [ 963.952390][T23532] tipc: New replicast peer: 172.20.20.187 [ 963.959809][T23532] tipc: Enabled bearer , priority 10 [ 964.321385][T23542] syz_tun: entered allmulticast mode [ 964.337199][T23541] syz_tun: left allmulticast mode [ 964.476570][T17397] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 964.630052][T17397] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 964.633321][T17397] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 964.633346][T17397] usb 7-1: config 0 interface 0 has no altsetting 0 [ 964.639508][T17397] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 964.639534][T17397] usb 7-1: Product: syz [ 964.639547][T17397] usb 7-1: Manufacturer: syz [ 964.639560][T17397] usb 7-1: SerialNumber: syz [ 964.641798][T17397] usb 7-1: config 0 descriptor?? [ 964.643375][ T43] audit: type=1800 audit(1791276756.735:10853): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=271218 res=0 errno=0 [ 964.660549][T17397] usb 7-1: selecting invalid altsetting 0 [ 964.662256][ T43] audit: type=1800 audit(1791276756.755:10854): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=271250 res=0 errno=0 [ 964.663202][ T43] audit: type=1800 audit(1791276756.755:10855): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=271225 res=0 errno=0 [ 964.682217][ T43] audit: type=1800 audit(1791276756.775:10856): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=271226 res=0 errno=0 [ 964.858701][T17397] usb 7-1: USB disconnect, device number 27 [ 965.070480][ T2381] tipc: Node number set to 2886997162 [ 965.436115][T23557] [U] [ 965.436164][T23557] [U] [ 965.436194][T23557] [U] [ 965.436223][T23557] [U] [ 965.438735][T23557] [U] [ 965.438762][T23557] [U] [ 965.438791][T23557] [U] [ 965.438815][T23557] [U] [ 965.438843][T23557] [U] [ 965.438866][T23557] [U] [ 965.438893][T23557] [U] [ 965.438919][T23557] [U] [ 965.438962][T23557] [U] [ 965.438993][T23557] [U] [ 965.439022][T23557] [U] [ 965.439047][T23557] [U] [ 965.439072][T23557] [U] [ 965.439095][T23557] [U] [ 965.439118][T23557] [U] [ 965.439141][T23557] [U] [ 965.439176][T23557] [U] [ 965.439200][T23557] [U] [ 965.439227][T23557] [U] [ 965.439259][T23557] [U] [ 965.439290][T23557] [U] [ 965.439319][T23557] [U] [ 965.439350][T23557] [U] [ 965.439378][T23557] [U] [ 965.439415][T23557] [U] [ 965.439443][T23557] [U] [ 965.439470][T23557] [U] [ 965.439497][T23557] [U] [ 965.439526][T23557] [U] [ 965.439552][T23557] [U] [ 965.439579][T23557] [U] [ 965.439607][T23557] [U] [ 965.439644][T23557] [U] [ 965.439671][T23557] [U] [ 965.439698][T23557] [U] [ 965.439726][T23557] [U] [ 965.439754][T23557] [U] [ 965.439779][T23557] [U] [ 965.439806][T23557] [U] [ 965.439833][T23557] [U] [ 965.439871][T23557] [U] [ 965.439899][T23557] [U] [ 965.439927][T23557] [U] [ 965.439954][T23557] [U] [ 965.439981][T23557] [U] [ 965.440005][T23557] [U] [ 965.440027][T23557] [U] [ 965.440078][T23557] [U] [ 965.440113][T23557] [U] [ 965.440138][T23557] [U] [ 965.440165][T23557] [U] [ 965.440190][T23557] [U] [ 965.440215][T23557] [U] [ 965.440246][T23557] [U] [ 965.440269][T23557] [U] [ 965.440295][T23557] [U] [ 965.440334][T23557] [U] [ 965.440361][T23557] [U] [ 965.440388][T23557] [U] [ 965.440415][T23557] [U] [ 965.441011][T23557] [U] [ 965.441058][T23557] [U] [ 965.441087][T23557] [U] [ 965.441118][T23557] [U] [ 965.441369][T23557] [U] [ 965.441412][T23557] [U] [ 965.441440][T23557] [U] [ 965.441466][T23557] [U] [ 965.441638][T23557] [U] [ 965.441678][T23557] [U] [ 965.441705][T23557] [U] [ 965.441731][T23557] [U] [ 965.441818][T23557] [U] [ 965.441848][T23557] [U] [ 965.441874][T23557] [U] [ 965.441899][T23557] [U] [ 965.441926][T23557] [U] [ 965.441952][T23557] [U] [ 965.441979][T23557] [U] [ 965.442005][T23557] [U] [ 965.442040][T23557] [U] [ 965.442066][T23557] [U] [ 965.442090][T23557] [U] [ 965.442117][T23557] [U] [ 965.442145][T23557] [U] [ 965.442169][T23557] [U] [ 965.442192][T23557] [U] [ 965.442217][T23557] [U] [ 965.442262][T23557] [U] [ 965.442290][T23557] [U] [ 965.442320][T23557] [U] [ 965.442349][T23557] [U] [ 965.442376][T23557] [U] [ 965.442397][T23557] [U] [ 965.442420][T23557] [U] [ 965.442443][T23557] [U] [ 965.442474][T23557] [U] [ 965.442497][T23557] [U] [ 965.442519][T23557] [U] [ 965.442540][T23557] [U] [ 965.442565][T23557] [U] [ 965.442588][T23557] [U] [ 965.442611][T23557] [U] [ 965.442637][T23557] [U] [ 965.442671][T23557] [U] [ 965.442691][T23557] [U] [ 965.442718][T23557] [U] [ 965.442739][T23557] [U] [ 965.442763][T23557] [U] [ 965.442786][T23557] [U] [ 965.442807][T23557] [U] [ 965.442829][T23557] [U] [ 965.442865][T23557] [U] [ 965.442893][T23557] [U] [ 965.442920][T23557] [U] [ 965.442943][T23557] [U] [ 965.442967][T23557] [U] [ 965.443010][T23557] [U] [ 965.443032][T23557] [U] [ 965.443054][T23557] [U] [ 965.443108][T23557] [U] [ 965.443136][T23557] [U] [ 965.443164][T23557] [U] [ 965.479427][T23556] [U] [ 965.803667][T23564] serio: Serial port ptm0 [ 966.146849][T23575] syz_tun: entered allmulticast mode [ 966.150221][T23574] syz_tun: left allmulticast mode [ 967.036199][T23585] [U] [ 967.036253][T23585] [U] [ 967.036283][T23585] [U] [ 967.036312][T23585] [U] [ 967.042915][T23585] [U] [ 967.042949][T23585] [U] [ 967.042979][T23585] [U] [ 967.043005][T23585] [U] [ 967.043035][T23585] [U] [ 967.043063][T23585] [U] [ 967.043090][T23585] [U] [ 967.043115][T23585] [U] [ 967.043160][T23585] [U] [ 967.043191][T23585] [U] [ 967.043221][T23585] [U] [ 967.043248][T23585] [U] [ 967.043277][T23585] [U] [ 967.043303][T23585] [U] [ 967.043330][T23585] [U] [ 967.043355][T23585] [U] [ 967.043394][T23585] [U] [ 967.043421][T23585] [U] [ 967.043448][T23585] [U] [ 967.043475][T23585] [U] [ 967.043505][T23585] [U] [ 967.043531][T23585] [U] [ 967.043557][T23585] [U] [ 967.043584][T23585] [U] [ 967.043628][T23585] [U] [ 967.043659][T23585] [U] [ 967.043687][T23585] [U] [ 967.043719][T23585] [U] [ 967.043750][T23585] [U] [ 967.043781][T23585] [U] [ 967.043811][T23585] [U] [ 967.043841][T23585] [U] [ 967.043877][T23585] [U] [ 967.043905][T23585] [U] [ 967.043932][T23585] [U] [ 967.043959][T23585] [U] [ 967.043988][T23585] [U] [ 967.044015][T23585] [U] [ 967.044071][T23585] [U] [ 967.044101][T23585] [U] [ 967.044140][T23585] [U] [ 967.044168][T23585] [U] [ 967.044199][T23585] [U] [ 967.044229][T23585] [U] [ 967.044260][T23585] [U] [ 967.044288][T23585] [U] [ 967.044314][T23585] [U] [ 967.044341][T23585] [U] [ 967.044378][T23585] [U] [ 967.044406][T23585] [U] [ 967.044433][T23585] [U] [ 967.044461][T23585] [U] [ 967.044490][T23585] [U] [ 967.044517][T23585] [U] [ 967.044544][T23585] [U] [ 967.044571][T23585] [U] [ 967.044605][T23585] [U] [ 967.044640][T23585] [U] [ 967.044665][T23585] [U] [ 967.044688][T23585] [U] [ 967.044716][T23585] [U] [ 967.044742][T23585] [U] [ 967.044769][T23585] [U] [ 967.044793][T23585] [U] [ 967.044831][T23585] [U] [ 967.044859][T23585] [U] [ 967.044888][T23585] [U] [ 967.044916][T23585] [U] [ 967.044945][T23585] [U] [ 967.044972][T23585] [U] [ 967.044998][T23585] [U] [ 967.045026][T23585] [U] [ 967.045064][T23585] [U] [ 967.045090][T23585] [U] [ 967.045113][T23585] [U] [ 967.045137][T23585] [U] [ 967.045165][T23585] [U] [ 967.045209][T23585] [U] [ 967.045240][T23585] [U] [ 967.045269][T23585] [U] [ 967.045352][T23585] [U] [ 967.045383][T23585] [U] [ 967.045413][T23585] [U] [ 967.045441][T23585] [U] [ 967.045470][T23585] [U] [ 967.045498][T23585] [U] [ 967.045523][T23585] [U] [ 967.045550][T23585] [U] [ 967.045587][T23585] [U] [ 967.045619][T23585] [U] [ 967.045648][T23585] [U] [ 967.045678][T23585] [U] [ 967.045710][T23585] [U] [ 967.045742][T23585] [U] [ 967.045769][T23585] [U] [ 967.045795][T23585] [U] [ 967.045833][T23585] [U] [ 967.045860][T23585] [U] [ 967.045887][T23585] [U] [ 967.045914][T23585] [U] [ 967.045943][T23585] [U] [ 967.045970][T23585] [U] [ 967.045997][T23585] [U] [ 967.046024][T23585] [U] [ 967.046061][T23585] [U] [ 967.046088][T23585] [U] [ 967.046114][T23585] [U] [ 967.046141][T23585] [U] [ 967.046170][T23585] [U] [ 967.046197][T23585] [U] [ 967.046241][T23585] [U] [ 967.046273][T23585] [U] [ 967.182468][T23585] [U] [ 967.182504][T23585] [U] [ 967.182535][T23585] [U] [ 967.182565][T23585] [U] [ 967.182598][T23585] [U] [ 967.182635][T23585] [U] [ 967.182665][T23585] [U] [ 967.182694][T23585] [U] [ 967.182724][T23585] [U] [ 967.182751][T23585] [U] [ 967.182778][T23585] [U] [ 967.204990][T23584] [U] [ 967.508751][T23598] syz.1.5949 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 967.899643][T23601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5951'. [ 968.250013][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 968.250026][ T43] audit: type=1800 audit(1791276760.345:10874): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=271450 res=0 errno=0 [ 968.680749][T23518] syz.0.5917 (23518) used greatest stack depth: 18680 bytes left [ 968.719875][T23608] FAULT_INJECTION: forcing a failure. [ 968.719875][T23608] name failslab, interval 1, probability 0, space 0, times 0 [ 968.719907][T23608] CPU: 3 UID: 0 PID: 23608 Comm: syz.2.5954 Tainted: G L syzkaller #0 PREEMPT(full) [ 968.719933][T23608] Tainted: [L]=SOFTLOCKUP [ 968.719940][T23608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 968.719952][T23608] Call Trace: [ 968.719960][T23608] [ 968.719967][T23608] dump_stack_lvl+0x100/0x190 [ 968.719997][T23608] should_fail_ex.cold+0x5/0xa [ 968.720052][T23608] should_failslab+0xc2/0x120 [ 968.720082][T23608] __kmalloc_cache_noprof+0x91/0x6d0 [ 968.720105][T23608] ? snd_card_file_add+0x52/0x320 [ 968.720131][T23608] snd_card_file_add+0x52/0x320 [ 968.720155][T23608] snd_mixer_oss_open+0xaf/0x2f0 [ 968.720179][T23608] ? __pfx_snd_mixer_oss_open+0x10/0x10 [ 968.720200][T23608] soundcore_open+0x2e3/0x5a0 [ 968.720222][T23608] ? __pfx_soundcore_open+0x10/0x10 [ 968.720242][T23608] chrdev_open+0x234/0x6a0 [ 968.720269][T23608] ? __pfx_chrdev_open+0x10/0x10 [ 968.720294][T23608] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 968.720342][T23608] do_dentry_open+0x6ab/0x14d0 [ 968.720367][T23608] ? __pfx_chrdev_open+0x10/0x10 [ 968.720398][T23608] vfs_open+0x82/0x3f0 [ 968.720428][T23608] path_openat+0x19fa/0x2440 [ 968.720457][T23608] ? __pfx_path_openat+0x10/0x10 [ 968.720487][T23608] do_file_open+0x20e/0x430 [ 968.720512][T23608] ? __pfx_do_file_open+0x10/0x10 [ 968.720552][T23608] ? _raw_spin_unlock+0x28/0x50 [ 968.720571][T23608] ? alloc_fd+0x471/0x7a0 [ 968.720600][T23608] do_sys_openat2+0x10f/0x1e0 [ 968.720628][T23608] ? __pfx_do_sys_openat2+0x10/0x10 [ 968.720657][T23608] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 968.720685][T23608] __ia32_compat_sys_openat+0x12d/0x210 [ 968.720704][T23608] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 968.720732][T23608] __do_fast_syscall_32+0x13a/0x8b0 [ 968.720759][T23608] do_fast_syscall_32+0x32/0x70 [ 968.720783][T23608] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 968.720806][T23608] RIP: 0023:0xf73fefec [ 968.720826][T23608] Code: Unable to access opcode bytes at 0xf73fefc2. [ 968.720835][T23608] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 968.720854][T23608] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080 [ 968.720866][T23608] RDX: 0000000000000400 RSI: 0000000000000000 RDI: 0000000000000000 [ 968.720878][T23608] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 968.720889][T23608] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 968.720901][T23608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 968.720926][T23608] [ 968.742448][T23607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5955'. [ 968.851282][T23614] [U] [ 968.851305][T23614] [U] [ 968.851321][T23614] [U] [ 968.851337][T23614] [U] [ 968.851408][T23614] [U] [ 968.851423][T23614] [U] [ 968.851439][T23614] [U] [ 968.851456][T23614] [U] [ 968.851530][T23614] [U] [ 968.851548][T23614] [U] [ 968.851563][T23614] [U] [ 968.851578][T23614] [U] [ 968.851652][T23614] [U] [ 968.851667][T23614] [U] [ 968.851682][T23614] [U] [ 968.851697][T23614] [U] [ 968.851764][T23614] [U] [ 968.851779][T23614] [U] [ 968.851794][T23614] [U] [ 968.851811][T23614] [U] [ 968.851885][T23614] [U] [ 968.851900][T23614] [U] [ 968.851915][T23614] [U] [ 968.851930][T23614] [U] [ 968.852057][T23614] [U] [ 968.852076][T23614] [U] [ 968.852093][T23614] [U] [ 968.852110][T23614] [U] [ 968.852193][T23614] [U] [ 968.852212][T23614] [U] [ 968.852227][T23614] [U] [ 968.852242][T23614] [U] [ 968.852318][T23614] [U] [ 968.852333][T23614] [U] [ 968.852348][T23614] [U] [ 968.852362][T23614] [U] [ 968.852433][T23614] [U] [ 968.852460][T23614] [U] [ 968.852477][T23614] [U] [ 968.852492][T23614] [U] [ 968.857172][T23614] [U] [ 968.857196][T23614] [U] [ 968.857213][T23614] [U] [ 968.857228][T23614] [U] [ 968.857319][T23614] [U] [ 968.857336][T23614] [U] [ 968.857353][T23614] [U] [ 968.857371][T23614] [U] [ 968.857448][T23614] [U] [ 968.857465][T23614] [U] [ 968.857481][T23614] [U] [ 968.857499][T23614] [U] [ 968.857571][T23614] [U] [ 968.857587][T23614] [U] [ 968.857601][T23614] [U] [ 968.857616][T23614] [U] [ 968.857683][T23614] [U] [ 968.857698][T23614] [U] [ 968.857713][T23614] [U] [ 968.857728][T23614] [U] [ 968.857803][T23614] [U] [ 968.857818][T23614] [U] [ 968.857833][T23614] [U] [ 968.857848][T23614] [U] [ 968.857916][T23614] [U] [ 968.857931][T23614] [U] [ 968.857946][T23614] [U] [ 968.857961][T23614] [U] [ 968.858032][T23614] [U] [ 968.858048][T23614] [U] [ 968.858063][T23614] [U] [ 968.858078][T23614] [U] [ 968.858228][T23614] [U] [ 968.858246][T23614] [U] [ 968.858267][T23614] [U] [ 968.858283][T23614] [U] [ 968.858364][T23614] [U] [ 968.858382][T23614] [U] [ 968.858398][T23614] [U] [ 968.858416][T23614] [U] [ 968.858485][T23614] [U] [ 968.858501][T23614] [U] [ 968.858516][T23614] [U] [ 968.858542][T23614] [U] [ 968.858703][T23614] [U] [ 968.858722][T23614] [U] [ 968.858739][T23614] [U] [ 968.858756][T23614] [U] [ 968.858825][T23614] [U] [ 968.858840][T23614] [U] [ 968.858855][T23614] [U] [ 968.858869][T23614] [U] [ 968.858941][T23614] [U] [ 968.858957][T23614] [U] [ 968.858972][T23614] [U] [ 968.858987][T23614] [U] [ 968.859053][T23614] [U] [ 968.859068][T23614] [U] [ 968.859082][T23614] [U] [ 968.859097][T23614] [U] [ 968.859170][T23614] [U] [ 968.859186][T23614] [U] [ 968.859200][T23614] [U] [ 968.859215][T23614] [U] [ 968.859367][T23614] [U] [ 968.859386][T23614] [U] [ 968.859403][T23614] [U] [ 968.859420][T23614] [U] [ 968.859502][T23614] [U] [ 968.859518][T23614] [U] [ 968.859535][T23614] [U] [ 968.859549][T23614] [U] [ 968.859616][T23614] [U] [ 968.859631][T23614] [U] [ 968.859648][T23614] [U] [ 968.859663][T23614] [U] [ 968.859734][T23614] [U] [ 968.859749][T23614] [U] [ 968.859764][T23614] [U] [ 968.859778][T23614] [U] [ 968.859846][T23614] [U] [ 968.859861][T23614] [U] [ 968.859876][T23614] [U] [ 968.859891][T23614] [U] [ 968.859946][T23614] [U] [ 968.859961][T23614] [U] [ 968.859975][T23614] [U] [ 968.875391][T23613] [U] [ 969.047213][T23620] netlink: 'syz.2.5961': attribute type 1 has an invalid length. [ 969.056282][ T5613] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 969.206455][ T5613] usb 6-1: Using ep0 maxpacket: 32 [ 969.210412][ T5613] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 969.211605][ T5613] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.213834][ T5613] usb 6-1: config 0 descriptor?? [ 969.218515][ T43] audit: type=1800 audit(1791276761.316:10875): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=271858 res=0 errno=0 [ 969.220465][ T5613] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 969.224436][ T43] audit: type=1800 audit(1791276761.316:10876): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=271887 res=0 errno=0 [ 969.225535][ T43] audit: type=1800 audit(1791276761.316:10877): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=271865 res=0 errno=0 [ 969.233712][ T43] audit: type=1800 audit(1791276761.326:10878): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=271866 res=0 errno=0 [ 969.241540][ T43] audit: type=1800 audit(1791276761.326:10879): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=271867 res=0 errno=0 [ 969.268055][ T43] audit: type=1800 audit(1791276761.366:10880): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=271907 res=0 errno=0 [ 969.298669][T23620] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5961'. [ 970.631331][T23640] [U] [ 970.631354][T23640] [U] [ 970.631369][T23640] [U] [ 970.631385][T23640] [U] [ 970.631453][T23640] [U] [ 970.631469][T23640] [U] [ 970.631485][T23640] [U] [ 970.631502][T23640] [U] [ 970.631578][T23640] [U] [ 970.631595][T23640] [U] [ 970.631610][T23640] [U] [ 970.631625][T23640] [U] [ 970.631709][T23640] [U] [ 970.631727][T23640] [U] [ 970.631744][T23640] [U] [ 970.631761][T23640] [U] [ 970.631857][T23640] [U] [ 970.631883][T23640] [U] [ 970.631906][T23640] [U] [ 970.631932][T23640] [U] [ 970.632100][T23640] [U] [ 970.632130][T23640] [U] [ 970.632154][T23640] [U] [ 970.632179][T23640] [U] [ 970.632299][T23640] [U] [ 970.632323][T23640] [U] [ 970.632347][T23640] [U] [ 970.632370][T23640] [U] [ 970.632507][T23640] [U] [ 970.632536][T23640] [U] [ 970.632563][T23640] [U] [ 970.632591][T23640] [U] [ 970.632733][T23640] [U] [ 970.632764][T23640] [U] [ 970.632795][T23640] [U] [ 970.632824][T23640] [U] [ 970.632961][T23640] [U] [ 970.632989][T23640] [U] [ 970.633014][T23640] [U] [ 970.633040][T23640] [U] [ 970.633167][T23640] [U] [ 970.633194][T23640] [U] [ 970.633220][T23640] [U] [ 970.633247][T23640] [U] [ 970.633386][T23640] [U] [ 970.633415][T23640] [U] [ 970.633442][T23640] [U] [ 970.633469][T23640] [U] [ 970.633598][T23640] [U] [ 970.633625][T23640] [U] [ 970.633652][T23640] [U] [ 970.633679][T23640] [U] [ 970.633827][T23640] [U] [ 970.633855][T23640] [U] [ 970.633882][T23640] [U] [ 970.633910][T23640] [U] [ 970.634039][T23640] [U] [ 970.634067][T23640] [U] [ 970.634093][T23640] [U] [ 970.634120][T23640] [U] [ 970.634255][T23640] [U] [ 970.634283][T23640] [U] [ 970.634309][T23640] [U] [ 970.634336][T23640] [U] [ 970.634458][T23640] [U] [ 970.634483][T23640] [U] [ 970.634510][T23640] [U] [ 970.634536][T23640] [U] [ 970.634674][T23640] [U] [ 970.634707][T23640] [U] [ 970.634736][T23640] [U] [ 970.634767][T23640] [U] [ 970.634926][T23640] [U] [ 970.634959][T23640] [U] [ 970.634988][T23640] [U] [ 970.635019][T23640] [U] [ 970.635218][T23640] [U] [ 970.635248][T23640] [U] [ 970.635275][T23640] [U] [ 970.635302][T23640] [U] [ 970.635431][T23640] [U] [ 970.635459][T23640] [U] [ 970.635486][T23640] [U] [ 970.635514][T23640] [U] [ 970.635664][T23640] [U] [ 970.635696][T23640] [U] [ 970.635727][T23640] [U] [ 970.635757][T23640] [U] [ 970.635896][T23640] [U] [ 970.635923][T23640] [U] [ 970.635951][T23640] [U] [ 970.635978][T23640] [U] [ 970.636364][T23640] [U] [ 970.636391][T23640] [U] [ 970.636419][T23640] [U] [ 970.636447][T23640] [U] [ 970.636568][T23640] [U] [ 970.636594][T23640] [U] [ 970.636622][T23640] [U] [ 970.636646][T23640] [U] [ 970.636791][T23640] [U] [ 970.636823][T23640] [U] [ 970.636852][T23640] [U] [ 970.636880][T23640] [U] [ 970.637003][T23640] [U] [ 970.637030][T23640] [U] [ 970.637056][T23640] [U] [ 970.637081][T23640] [U] [ 970.637215][T23640] [U] [ 970.637241][T23640] [U] [ 970.637269][T23640] [U] [ 970.637314][T23640] [U] [ 970.637478][T23640] [U] [ 970.637506][T23640] [U] [ 970.637533][T23640] [U] [ 970.637558][T23640] [U] [ 970.637695][T23640] [U] [ 970.637729][T23640] [U] [ 970.637760][T23640] [U] [ 970.637787][T23640] [U] [ 970.637910][T23640] [U] [ 970.637936][T23640] [U] [ 970.637962][T23640] [U] [ 970.637989][T23640] [U] [ 970.638092][T23640] [U] [ 970.638118][T23640] [U] [ 970.638144][T23640] [U] [ 970.763892][T23639] [U] [ 971.665559][ T5613] gspca_vc032x: reg_r err -71 [ 971.665579][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 971.665588][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 971.665595][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 971.665603][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 971.665611][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 971.665618][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 971.665626][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 971.665633][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 971.665641][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 971.665648][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 971.665656][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 971.665663][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 971.665671][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 971.665679][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 971.665687][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 971.665694][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 971.665701][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 971.665709][ T5613] gspca_vc032x: Unknown sensor... [ 971.665770][ T5613] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 971.719435][ T5613] usb 6-1: USB disconnect, device number 64 [ 971.836095][T23652] tmpfs: Bad value for 'mpol' [ 971.836608][T23652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5965'. [ 972.837692][T23667] loop9: detected capacity change from 0 to 2640 [ 972.838269][T23667] buffer_io_error: 10 callbacks suppressed [ 972.838283][T23667] Buffer I/O error on dev loop9, logical block 0, async page read [ 972.838314][T23667] Buffer I/O error on dev loop9, logical block 0, async page read [ 972.838340][T23667] Buffer I/O error on dev loop9, logical block 0, async page read [ 972.838365][T23667] Buffer I/O error on dev loop9, logical block 0, async page read [ 972.838391][T23667] Buffer I/O error on dev loop9, logical block 0, async page read [ 972.838430][T23667] Buffer I/O error on dev loop9, logical block 0, async page read [ 972.838465][T23667] Buffer I/O error on dev loop9, logical block 0, async page read [ 972.838490][T23667] Buffer I/O error on dev loop9, logical block 0, async page read [ 972.838503][T23667] ldm_validate_partition_table(): Disk read failed. [ 972.838526][T23667] Buffer I/O error on dev loop9, logical block 0, async page read [ 972.838551][T23667] Buffer I/O error on dev loop9, logical block 0, async page read [ 972.838589][T23667] Dev loop9: unable to read RDB block 0 [ 972.838741][T23667] loop9: unable to read partition table [ 972.846187][T23667] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 972.851089][ T43] audit: type=1800 audit(1791276764.946:10881): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16568 res=0 errno=0 [ 973.643311][ T43] audit: type=1800 audit(1791276765.736:10882): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16568 res=0 errno=0 [ 976.135972][ T2381] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 976.287096][ T2381] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 976.288530][ T2381] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 976.288555][ T2381] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.290874][ T2381] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 976.290895][ T2381] usb 7-1: Product: syz [ 976.290907][ T2381] usb 7-1: Manufacturer: syz [ 976.297093][ T43] audit: type=1800 audit(1791276768.396:10883): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=272106 res=0 errno=0 [ 976.301393][ T2381] hub 7-1:4.0: USB hub found [ 976.308970][ T43] audit: type=1800 audit(1791276768.406:10884): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=272137 res=0 errno=0 [ 976.310158][ T43] audit: type=1800 audit(1791276768.406:10885): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=272113 res=0 errno=0 [ 976.316933][ T43] audit: type=1800 audit(1791276768.416:10886): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=272114 res=0 errno=0 [ 977.865956][T23700] serio: Serial port ptm0 [ 977.871427][ T43] audit: type=1800 audit(1791276769.966:10887): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=272181 res=0 errno=0 [ 978.040361][ T2381] hub 7-1:4.0: config failed, can't read hub descriptor (err -22) [ 978.045863][ T43] audit: type=1800 audit(1791276770.146:10888): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=272135 res=0 errno=0 [ 978.046329][ T43] audit: type=1800 audit(1791276770.146:10889): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=272136 res=0 errno=0 [ 978.047266][ T43] audit: type=1800 audit(1791276770.146:10890): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=272115 res=0 errno=0 [ 978.068595][ T2381] usb 7-1: USB disconnect, device number 28 [ 978.635717][ T5597] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 978.785621][ T5597] usb 7-1: Using ep0 maxpacket: 32 [ 978.786216][ T5597] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 978.788977][ T5597] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.793218][ T43] audit: type=1800 audit(1791276770.886:10891): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=272247 res=0 errno=0 [ 978.795120][ T5597] usb 7-1: config 0 descriptor?? [ 978.800291][ T43] audit: type=1800 audit(1791276770.896:10892): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=272276 res=0 errno=0 [ 978.804716][ T43] audit: type=1800 audit(1791276770.896:10893): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=272254 res=0 errno=0 [ 978.806362][ T43] audit: type=1800 audit(1791276770.906:10894): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=272255 res=0 errno=0 [ 978.807278][ T43] audit: type=1800 audit(1791276770.906:10895): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=272256 res=0 errno=0 [ 978.827762][ T43] audit: type=1800 audit(1791276770.926:10896): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=272296 res=0 errno=0 [ 979.010085][ T5597] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 979.045121][ T43] audit: type=1800 audit(1791276771.136:10897): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=272323 res=0 errno=0 [ 979.046030][ T5597] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 979.047388][ T5597] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 979.047421][ T5597] usb 7-1: media controller created [ 979.049681][ T43] audit: type=1800 audit(1791276771.146:10898): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=272327 res=0 errno=0 [ 979.060829][ T43] audit: type=1800 audit(1791276771.156:10899): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=272314 res=0 errno=0 [ 979.062051][ T43] audit: type=1800 audit(1791276771.156:10900): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=272315 res=0 errno=0 [ 979.119674][ T5597] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 979.205705][T23717] netlink: 'syz.1.5987': attribute type 1 has an invalid length. [ 979.366427][T23725] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 979.480916][T23725] nvme nvme0: failed to connect socket: -111 [ 979.481389][T23725] [ 979.484984][T23725] ====================================================== [ 979.487740][T23725] WARNING: possible circular locking dependency detected [ 979.490243][T23725] syzkaller #0 Tainted: G L [ 979.492165][T23725] ------------------------------------------------------ [ 979.494315][T23725] syz.0.5988/23725 is trying to acquire lock: [ 979.496544][T23725] ffff88801ec1c740 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 979.500680][T23725] [ 979.500680][T23725] but task is already holding lock: [ 979.503519][T23725] ffffffff8ff53d80 (nvmf_dev_mutex){+.+.}-{4:4}, at: nvmf_dev_write+0xa6/0xb60 [ 979.506844][T23725] [ 979.506844][T23725] which lock already depends on the new lock. [ 979.506844][T23725] [ 979.510295][T23725] [ 979.510295][T23725] the existing dependency chain (in reverse order) is: [ 979.513068][T23725] [ 979.513068][T23725] -> #4 (nvmf_dev_mutex){+.+.}-{4:4}: [ 979.515429][T23725] lock_acquire+0x1d1/0x380 [ 979.517090][T23725] __mutex_lock+0x1a4/0x1bd0 [ 979.518700][T23725] nvmf_dev_show+0x26/0x210 [ 979.520289][T23725] seq_read_iter+0x32f/0x1270 [ 979.521924][T23725] seq_read+0x344/0x4d0 [ 979.523400][T23725] vfs_read+0x1e4/0xb40 [ 979.525190][T23725] ksys_read+0x12a/0x250 [ 979.527023][T23725] __do_fast_syscall_32+0x13a/0x8b0 [ 979.528961][T23725] do_fast_syscall_32+0x32/0x70 [ 979.530646][T23725] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 979.532775][T23725] [ 979.532775][T23725] -> #3 (&p->lock){+.+.}-{4:4}: [ 979.535130][T23725] lock_acquire+0x1d1/0x380 [ 979.537326][T23725] __mutex_lock+0x1a4/0x1bd0 [ 979.539509][T23725] seq_read_iter+0xe1/0x1270 [ 979.541680][T23725] kernfs_fop_read_iter+0x46c/0x610 [ 979.544068][T23725] __kernel_read+0x397/0xad0 [ 979.546204][T23725] integrity_kernel_read+0x7e/0xb0 [ 979.548563][T23725] ima_calc_file_hash_tfm+0x25e/0x350 [ 979.551034][T23725] ima_calc_file_hash+0x1e3/0x380 [ 979.553338][T23725] ima_collect_measurement+0x94f/0xb30 [ 979.555852][T23725] process_measurement+0xdfe/0x2350 [ 979.558075][T23725] ima_file_check+0xcc/0x120 [ 979.559722][T23725] security_file_post_open+0xc4/0x210 [ 979.561657][T23725] path_openat+0x5cd/0x2440 [ 979.563703][T23725] do_file_open+0x20e/0x430 [ 979.565894][T23725] do_sys_openat2+0x10f/0x1e0 [ 979.568120][T23725] __x64_sys_openat+0x12d/0x210 [ 979.570493][T23725] do_syscall_64+0x121/0x770 [ 979.572920][T23725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.575564][T23725] [ 979.575564][T23725] -> #2 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 979.579407][T23725] lock_acquire+0x1d1/0x380 [ 979.581700][T23725] __mutex_lock+0x1a4/0x1bd0 [ 979.583851][T23725] process_measurement+0x5ab/0x2350 [ 979.586328][T23725] ima_file_check+0xcc/0x120 [ 979.588503][T23725] security_file_post_open+0xc4/0x210 [ 979.590996][T23725] path_openat+0x5cd/0x2440 [ 979.593112][T23725] do_file_open+0x20e/0x430 [ 979.594698][T23725] file_open_name+0x1c3/0x3e0 [ 979.596429][T23725] filp_open+0x2e/0x50 [ 979.597885][T23725] kernel_read_file_from_path_initns+0xec/0x240 [ 979.599980][T23725] _request_firmware+0x733/0x13c0 [ 979.601706][T23725] request_firmware+0x35/0x50 [ 979.603341][T23725] reg_reload_regdb+0x85/0x460 [ 979.604991][T23725] genl_family_rcv_msg_doit+0x214/0x300 [ 979.606911][T23725] genl_rcv_msg+0x560/0x800 [ 979.608492][T23725] netlink_rcv_skb+0x159/0x420 [ 979.610144][T23725] genl_rcv+0x28/0x40 [ 979.611573][T23725] netlink_unicast+0x585/0x850 [ 979.613206][T23725] netlink_sendmsg+0x8b0/0xda0 [ 979.614854][T23725] ____sys_sendmsg+0xa4d/0xbe0 [ 979.616512][T23725] ___sys_sendmsg+0x190/0x1e0 [ 979.618132][T23725] __sys_sendmsg+0x160/0x210 [ 979.619741][T23725] __do_fast_syscall_32+0x13a/0x8b0 [ 979.621552][T23725] do_fast_syscall_32+0x32/0x70 [ 979.623228][T23725] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 979.625361][T23725] [ 979.625361][T23725] -> #1 (cb_lock){++++}-{4:4}: [ 979.627546][T23725] lock_acquire+0x1d1/0x380 [ 979.629133][T23725] down_read+0x99/0x4c0 [ 979.630612][T23725] genl_release+0x7e/0x1d0 [ 979.632194][T23725] netlink_release+0x105e/0x2000 [ 979.633902][T23725] __sock_release+0xb3/0x260 [ 979.635518][T23725] sock_close+0x1c/0x30 [ 979.637034][T23725] __fput+0x3ff/0xb50 [ 979.638470][T23725] fput_close_sync+0x118/0x250 [ 979.640135][T23725] __x64_sys_close+0x8b/0x120 [ 979.641765][T23725] do_syscall_64+0x121/0x770 [ 979.643364][T23725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.645355][T23725] [ 979.645355][T23725] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}: [ 979.648080][T23725] check_prev_add+0xeb/0xe60 [ 979.649685][T23725] __lock_acquire+0x1528/0x1f40 [ 979.651368][T23725] lock_acquire+0x1d1/0x380 [ 979.652952][T23725] down_write+0x8b/0x1f0 [ 979.654456][T23725] __sock_release+0x86/0x260 [ 979.656101][T23725] sock_close+0x1c/0x30 [ 979.657581][T23725] __fput+0x3ff/0xb50 [ 979.659009][T23725] __fput_sync+0xd7/0x100 [ 979.660552][T23725] nvme_tcp_alloc_queue.isra.0+0xd89/0x1630 [ 979.662539][T23725] nvme_tcp_configure_admin_queue+0x26/0x530 [ 979.664561][T23725] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 979.666313][T23725] nvme_tcp_create_ctrl+0x970/0xd90 [ 979.668094][T23725] nvmf_dev_write+0x4ee/0xb60 [ 979.669711][T23725] vfs_write+0x2aa/0x1050 [ 979.671228][T23725] ksys_write+0x12a/0x250 [ 979.672755][T23725] __do_fast_syscall_32+0x13a/0x8b0 [ 979.674523][T23725] do_fast_syscall_32+0x32/0x70 [ 979.676233][T23725] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 979.678330][T23725] [ 979.678330][T23725] other info that might help us debug this: [ 979.678330][T23725] [ 979.681468][T23725] Chain exists of: [ 979.681468][T23725] &sb->s_type->i_mutex_key#13 --> &p->lock --> nvmf_dev_mutex [ 979.681468][T23725] [ 979.685534][T23725] Possible unsafe locking scenario: [ 979.685534][T23725] [ 979.687842][T23725] CPU0 CPU1 [ 979.689528][T23725] ---- ---- [ 979.691190][T23725] lock(nvmf_dev_mutex); [ 979.692552][T23725] lock(&p->lock); [ 979.694503][T23725] lock(nvmf_dev_mutex); [ 979.696638][T23725] lock(&sb->s_type->i_mutex_key#13); [ 979.698345][T23725] [ 979.698345][T23725] *** DEADLOCK *** [ 979.698345][T23725] [ 979.700836][T23725] locks held by syz.0.5988/23725: 1, last CPU#2: [ 979.702813][T23725] #0: ffffffff8ff53d80 (nvmf_dev_mutex){+.+.}-{4:4}, at: nvmf_dev_write+0xa6/0xb60 [ 979.705713][T23725] [ 979.705713][T23725] stack backtrace: [ 979.707541][T23725] CPU: 2 UID: 0 PID: 23725 Comm: syz.0.5988 Tainted: G L syzkaller #0 PREEMPT(full) [ 979.710861][T23725] Tainted: [L]=SOFTLOCKUP [ 979.712210][T23725] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 979.715297][T23725] Call Trace: [ 979.716400][T23725] [ 979.717337][T23725] dump_stack_lvl+0x100/0x190 [ 979.718820][T23725] print_circular_bug.cold+0x178/0x1be [ 979.720537][T23725] check_noncircular+0x146/0x160 [ 979.722094][T23725] check_prev_add+0xeb/0xe60 [ 979.723556][T23725] __lock_acquire+0x1528/0x1f40 [ 979.725097][T23725] ? do_fast_syscall_32+0x32/0x70 [ 979.726700][T23725] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 979.728723][T23725] lock_acquire+0x1d1/0x380 [ 979.730146][T23725] ? __sock_release+0x86/0x260 [ 979.731651][T23725] ? __pfx___might_resched+0x10/0x10 [ 979.733322][T23725] down_write+0x8b/0x1f0 [ 979.734665][T23725] ? __sock_release+0x86/0x260 [ 979.736205][T23725] ? __pfx_down_write+0x10/0x10 [ 979.737740][T23725] ? __pfx_locks_remove_file+0x10/0x10 [ 979.739446][T23725] __sock_release+0x86/0x260 [ 979.740905][T23725] ? __pfx_sock_close+0x10/0x10 [ 979.742422][T23725] sock_close+0x1c/0x30 [ 979.743726][T23725] __fput+0x3ff/0xb50 [ 979.744998][T23725] ? kfree+0x22b/0x6d0 [ 979.746295][T23725] __fput_sync+0xd7/0x100 [ 979.747659][T23725] nvme_tcp_alloc_queue.isra.0+0xd89/0x1630 [ 979.749500][T23725] ? nvme_tcp_configure_admin_queue+0x26/0x530 [ 979.751406][T23725] nvme_tcp_configure_admin_queue+0x26/0x530 [ 979.753280][T23725] ? __wake_up+0x3f/0x60 [ 979.754617][T23725] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 979.756225][T23725] ? mark_held_locks+0x40/0x70 [ 979.757730][T23725] ? __pfx_nvme_tcp_setup_ctrl+0x10/0x10 [ 979.759471][T23725] ? lockdep_hardirqs_on+0x7d/0x110 [ 979.761114][T23725] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 979.762940][T23725] ? nvme_change_ctrl_state+0xc0/0x440 [ 979.764661][T23725] nvme_tcp_create_ctrl+0x970/0xd90 [ 979.766295][T23725] nvmf_dev_write+0x4ee/0xb60 [ 979.767778][T23725] vfs_write+0x2aa/0x1050 [ 979.769152][T23725] ? __pfx_nvmf_dev_write+0x10/0x10 [ 979.770776][T23725] ? lock_acquire+0x1d1/0x380 [ 979.772262][T23725] ? __fget_files+0x34/0x3d0 [ 979.773721][T23725] ? __pfx_vfs_write+0x10/0x10 [ 979.775229][T23725] ? find_held_lock+0x2b/0x80 [ 979.776758][T23725] ? __fget_files+0x215/0x3d0 [ 979.778246][T23725] ? __fget_files+0x215/0x3d0 [ 979.779730][T23725] ? __fget_files+0x21f/0x3d0 [ 979.781232][T23725] ksys_write+0x12a/0x250 [ 979.782601][T23725] ? __pfx_ksys_write+0x10/0x10 [ 979.784128][T23725] __do_fast_syscall_32+0x13a/0x8b0 [ 979.785575][T23725] do_fast_syscall_32+0x32/0x70 [ 979.786994][T23725] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 979.788982][T23725] RIP: 0023:0xf7f16fec [ 979.790275][T23725] Code: Unable to access opcode bytes at 0xf7f16fc2. [ 979.792341][T23725] RSP: 002b:00000000f53a550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 979.794927][T23725] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 979.797433][T23725] RDX: 0000000000000031 RSI: 0000000000000000 RDI: 0000000000000000 [ 979.799895][T23725] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 979.802360][T23725] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 979.804830][T23725] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 979.807312][T23725] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 979.842441][ T5597] az6027: usb out operation failed. (-71) [ 979.842685][ T5597] az6027: usb out operation failed. (-71) [ 979.842693][ T5597] stb0899_attach: Driver disabled by Kconfig [ 979.842699][ T5597] az6027: no front-end attached [ 979.842699][ T5597] [ 979.842891][ T5597] az6027: usb out operation failed. (-71) [ 979.842898][ T5597] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 979.856093][ T5597] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input114 [ 979.858963][ T5597] dvb-usb: schedule remote query interval to 400 msecs. [ 979.858975][ T5597] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 979.861361][T23726] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5987'. [ 979.882850][ T5597] usb 7-1: USB disconnect, device number 29 [ 979.914535][ T5597] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 980.359095][ T5784] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.364564][T23644] syz.2.5968 (23644) used greatest stack depth: 17304 bytes left [ 980.491853][ T5784] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.533789][ T5784] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.596714][ T5784] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.706605][ T5784] bridge_slave_1: left allmulticast mode [ 980.706702][ T5784] bridge_slave_1: left promiscuous mode [ 980.707028][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.712004][ T5784] bridge_slave_0: left allmulticast mode [ 980.712027][ T5784] bridge_slave_0: left promiscuous mode [ 980.712302][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.769034][ T5784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 980.772863][ T5784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 980.775252][ T5784] bond0 (unregistering): Released all slaves [ 980.830676][ T5784] tipc: Disabling bearer [ 980.830791][ T5784] tipc: Left network mode [ 980.914150][ T5446] 8021q: adding VLAN 0 to HW filter on device eth2 [ 981.003312][ T5784] hsr_slave_0: left promiscuous mode [ 981.007609][ T5784] hsr_slave_1: left promiscuous mode [ 981.008753][ T5784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.008849][ T5784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.009406][ T5784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.009421][ T5784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.013507][ T5784] veth1_macvtap: left promiscuous mode [ 981.013603][ T5784] veth0_macvtap: left promiscuous mode [ 981.013833][ T5784] veth1_vlan: left promiscuous mode [ 981.013994][ T5784] veth0_vlan: left promiscuous mode [ 981.078114][ T5784] team0 (unregistering): Port device team_slave_1 removed [ 981.080054][ T5784] team0 (unregistering): Port device team_slave_0 removed [ 981.131349][ T5446] 8021q: adding VLAN 0 to HW filter on device eth3 [ 981.270464][ T5446] 8021q: adding VLAN 0 to HW filter on device eth5 [ 981.401449][ T5446] 8021q: adding VLAN 0 to HW filter on device eth6 [ 981.409429][ T5784] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.473676][ T5784] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.522224][ T5784] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.574767][ T5784] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.654518][ T5784] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.709936][ T5784] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.775579][ T5784] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.821868][ T5446] 8021q: adding VLAN 0 to HW filter on device eth8 [ 981.924170][ T5784] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.990777][ T5784] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.994061][ T5446] 8021q: adding VLAN 0 to HW filter on device eth7 [ 982.049492][ T5784] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.095747][ T5784] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.139776][ T5446] 8021q: adding VLAN 0 to HW filter on device eth9 [ 982.178178][ T5784] bridge_slave_1: left allmulticast mode [ 982.178247][ T5784] bridge_slave_1: left promiscuous mode [ 982.178700][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.181591][ T5784] bridge_slave_0: left allmulticast mode [ 982.181657][ T5784] bridge_slave_0: left promiscuous mode [ 982.181918][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.192206][ T5784] bridge_slave_1: left allmulticast mode [ 982.192306][ T5784] bridge_slave_1: left promiscuous mode [ 982.192667][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.198039][ T5784] bridge_slave_0: left allmulticast mode [ 982.198062][ T5784] bridge_slave_0: left promiscuous mode [ 982.198172][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.215687][ T5784] bridge_slave_1: left allmulticast mode [ 982.215711][ T5784] bridge_slave_1: left promiscuous mode [ 982.215849][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.217343][ T5784] bridge_slave_0: left allmulticast mode [ 982.217360][ T5784] bridge_slave_0: left promiscuous mode [ 982.217480][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.330762][ T5784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 982.346713][ T5784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 982.347619][ T5784] bond0 (unregistering): Released all slaves [ 982.372338][ T5784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 982.373895][ T5784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 982.375311][ T5784] bond0 (unregistering): Released all slaves [ 982.410935][ T5784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 982.416542][ T5784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 982.423420][ T5784] bond0 (unregistering): Released all slaves [ 982.430212][ T5446] 8021q: adding VLAN 0 to HW filter on device eth10 [ 982.586692][ T5446] 8021q: adding VLAN 0 to HW filter on device eth12 [ 982.738730][ T5446] 8021q: adding VLAN 0 to HW filter on device eth13 [ 982.885622][ T5446] 8021q: adding VLAN 0 to HW filter on device eth14 [ 982.966730][ T5784] hsr_slave_0: left promiscuous mode [ 982.967784][ T5784] hsr_slave_1: left promiscuous mode [ 982.968176][ T5784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 982.968190][ T5784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.968768][ T5784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 982.968780][ T5784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 982.971696][ T5784] hsr_slave_0: left promiscuous mode [ 982.972137][ T5784] hsr_slave_1: left promiscuous mode [ 982.972499][ T5784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 982.972513][ T5784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.972986][ T5784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 982.972998][ T5784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 982.982958][ T5784] hsr_slave_0: left promiscuous mode [ 982.985586][ T5784] hsr_slave_1: left promiscuous mode [ 982.985809][ T5784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 982.985820][ T5784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.989429][ T5784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 982.989444][ T5784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 983.001130][ T5784] veth1_macvtap: left promiscuous mode [ 983.001155][ T5784] veth0_macvtap: left promiscuous mode [ 983.001193][ T5784] veth1_vlan: left promiscuous mode [ 983.001218][ T5784] veth0_vlan: left promiscuous mode [ 983.012312][ T5784] veth1_macvtap: left promiscuous mode [ 983.012338][ T5784] veth0_macvtap: left promiscuous mode [ 983.012399][ T5784] veth1_vlan: left promiscuous mode [ 983.012436][ T5784] veth0_vlan: left promiscuous mode [ 983.024580][ T5784] veth1_macvtap: left promiscuous mode [ 983.024626][ T5784] veth0_macvtap: left promiscuous mode [ 983.024709][ T5784] veth1_vlan: left promiscuous mode [ 983.024746][ T5784] veth0_vlan: left promiscuous mode [ 983.173865][ T5784] team0 (unregistering): Port device team_slave_1 removed [ 983.179067][ T5784] team0 (unregistering): Port device team_slave_0 removed [ 983.284959][ T5784] team0 (unregistering): Port device team_slave_1 removed [ 983.291906][ T5784] team0 (unregistering): Port device team_slave_0 removed [ 983.399027][ T5784] team0 (unregistering): Port device team_slave_1 removed [ 983.400924][ T5784] team0 (unregistering): Port device team_slave_0 removed [ 983.440827][ T5446] 8021q: adding VLAN 0 to HW filter on device eth11 [ 983.586872][ T5446] 8021q: adding VLAN 0 to HW filter on device eth16 [ 983.713014][ T5446] 8021q: adding VLAN 0 to HW filter on device eth15 [ 983.840218][ T5446] 8021q: adding VLAN 0 to HW filter on device eth18 [ 983.965520][ T5446] 8021q: adding VLAN 0 to HW filter on device eth17