last executing test programs: 46.284778383s ago: executing program 1 (id=1506): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000180), 0x8) 46.20824794s ago: executing program 1 (id=1507): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000140)={0x53, 0x0, 0x47, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="5538b9edff00000008ffffff01a26ccc143bc638b65f69d33b5ab57cf52671dc2d7b21178e751ed07500d83b77ea4beb9c4d4c362f69d05192fac58367ffe9779c6752fbdfc72b", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e04d11120"], 0x7) io_setup(0x9, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x90) 46.207880458s ago: executing program 1 (id=1508): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x0, 0x2, 0x2, 0x1}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401}) 45.989357976s ago: executing program 1 (id=1511): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x261) 45.982163042s ago: executing program 1 (id=1512): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x8880, 0x85) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) 44.894682805s ago: executing program 1 (id=1522): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x7f, 0xa7]}, 0x8, 0x80800) ioctl$VIDIOC_G_EDID(r1, 0xc0245628, &(0x7f0000000280)={0x0, 0xb, 0x7, '\x00', &(0x7f0000000240)}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0xfee74a6b755f8a96}, 0x40004) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0xffffffffffffffff, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x8000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r6 = getpid() sched_setaffinity(0x0, 0x14, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$pokeuser(0x6, r9, 0x118, 0x50000089) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r10, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0xeffe, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x0, 0x0, @mcast2, 0x5}, 0x0, {[0x3, 0x1, 0x4, 0xfffdfffe, 0x0, 0x0, 0x0, 0xfffffffd]}}, 0x5c) socket$vsock_stream(0x28, 0x1, 0x0) 44.556387208s ago: executing program 32 (id=1522): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x7f, 0xa7]}, 0x8, 0x80800) ioctl$VIDIOC_G_EDID(r1, 0xc0245628, &(0x7f0000000280)={0x0, 0xb, 0x7, '\x00', &(0x7f0000000240)}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0xfee74a6b755f8a96}, 0x40004) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0xffffffffffffffff, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x8000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r6 = getpid() sched_setaffinity(0x0, 0x14, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$pokeuser(0x6, r9, 0x118, 0x50000089) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r10, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0xeffe, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x0, 0x0, @mcast2, 0x5}, 0x0, {[0x3, 0x1, 0x4, 0xfffdfffe, 0x0, 0x0, 0x0, 0xfffffffd]}}, 0x5c) socket$vsock_stream(0x28, 0x1, 0x0) 11.583928218s ago: executing program 4 (id=1843): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 11.523866275s ago: executing program 4 (id=1844): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000006c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.35550852s ago: executing program 4 (id=1847): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "ffffffdd00", "67b8825e3412c094fcd45c560968bcf3", "4807a1e6", "ee979d05f7ea4b9b"}, 0x28) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x10, 0x11a, 0x1, 0x4}}], 0x10}, 0xc000) 11.325452893s ago: executing program 4 (id=1848): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="3a2f080000030300010000000000450a00280068000005069078ac1e0301ffffffff4e", @ANYRES32=0x41424344], 0xfce) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 6.55825429s ago: executing program 4 (id=1856): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) syz_usb_control_io(r0, &(0x7f0000000040)={0x18, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 6.310896325s ago: executing program 0 (id=1861): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8c01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000080)={0x40000000000000c0}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 6.174245765s ago: executing program 0 (id=1863): chdir(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r4, 0x0, 0x1}, 0x18) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f00000190c0)='net/ipv6_route\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r6, 0x289e0cb5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @printk={@u}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 5.344209746s ago: executing program 0 (id=1869): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) 1.496074651s ago: executing program 4 (id=1870): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000012c0)={0x0, 0x22, 0x5, {0x5, 0xc, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000000)={&(0x7f0000000100)=[{0x9, 0x0, 0x0, 0x0}, {0x6, 0x4010, 0x0, 0x0}, {0x8b9, 0x200, 0x0, 0x0}], 0x3}) 1.492924885s ago: executing program 3 (id=1871): sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r2, 0x0, 0x0, 0xfffffe04, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7, 0x2) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r5, 0xc0106407, &(0x7f0000000100)={0xffffffff, 0x2, 0x5}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x32315241, 0x0, [0x0, 0x80], [0x0, 0x80]}}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x85c68e8ab9c77084, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0xe, 0x0, 0x0, 0x0, 0x80000]}}, 0x5c) 1.21372502s ago: executing program 0 (id=1872): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$kcm(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000000)={r2, r3, 0x1, 0x0, 0x3}) close_range(r0, 0xffffffffffffffff, 0x0) 1.212184088s ago: executing program 2 (id=1873): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4) rmdir(&(0x7f0000000000)='./file0\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) 1.166991352s ago: executing program 0 (id=1874): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.15488649s ago: executing program 2 (id=1875): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="b0ff02c66b0d698cb89e2fe086dd1f74ffff06000000fe80000000000000ac14140746647b7954c4c06b580febc28eb143d0f6c0bad63a67a04402ba4125c7024f63fdb0b6c8ee826b4dfe6042a2f057c66cad677d850ea9928bcfcb47e585e427746ed3b27c40060cbd030a6d675c9926af53cd3085b24f9b7a486775c4f284f8c5a572ca115bce90c0ee9d4e7a07f5f1518092cb1f156694036f6618a59196631e6303fd5307d1112601d3641c9492f7dc3503416836b14590c53b1fc1ac149b70cc1142d6bc57fc3a76839fa2f96878b520fedfb9f64d81584a2e85ab4f6ec718b02d78f2ebf04e6b3b94610a21616181629a03c3dc0bf05e0a71f887833b81db7a10bc53259cb80716f6804934a411d424c1db98d454be1adb2776fdbb92b299d3b80af6987a871b4549fdb4c8297ee31ad925c8b0fb1a9d2589b08ed52602cbc26b56df71201bc4ea8621c56f33d251c1d4589af2dcd78fbb4e34bde02cb3920a30cee9489ee72c3e19304c16c2110e1839712d484b80abe77786a7e2ba834874a4e16b93dd07297554a06c2ad2c906f8ebb1db8730df096709184728d48f0a806696bd0d4b12d0064b933d9675353dae77fe8419451f85da63be78b70ca2a84a77f572d9f289d4313e6f6039fe756ac13a5d08838315dff44cda433cc7bc6b77449f8c", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 1.050305871s ago: executing program 0 (id=1876): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB=' mO'], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 984.306979ms ago: executing program 2 (id=1877): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@deltaction={0x30, 0x31, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x75, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x30}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r3}, @CGW_DST_IF={0x8, 0xa, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 914.565641ms ago: executing program 2 (id=1878): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000240)={0x11, 0xc, 0x0, 0x1, 0xc, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 793.903982ms ago: executing program 2 (id=1879): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 662.860212ms ago: executing program 2 (id=1880): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'ip_vti0\x00', 0x400}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0x36) 557.363617ms ago: executing program 3 (id=1881): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x9}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x3, 0x8, 0x81, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x101, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x6, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x3, 0x808, 0x2, 0x9, 0x1, 0x4, 0x2, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0xffffffff, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x29a, 0x5, 0x0, 0xfffffffa, 0x4, 0x2, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000000, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0x8001, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x10001, 0x379, 0x9, 0xe, 0x5, 0x7, 0x4, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x2003], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x8001, 0x2, 0x7, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x1, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x9b77, 0x9, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x2, 0x4, 0x1000, 0x7f, 0x5, 0x3fa8, 0x0, 0x0, 0x9, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x7, 0x800, 0xa80a, 0x65f413f9, 0x2, 0x8, 0x8a8, 0x2, 0x40, 0x3, 0x2, 0x84, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x0, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0x1, 0x7, 0xe, 0x2, 0xe, 0xf, 0x173, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_DEV_DESTROY(r2, 0x5502) 489.349415ms ago: executing program 3 (id=1882): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 387.983174ms ago: executing program 3 (id=1883): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc0000082, 0x0, 0xff0000000003fffe}]}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) sendfile(r0, r1, 0x0, 0x8000002b) 74.07814ms ago: executing program 3 (id=1884): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x320, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local}, {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xfffe, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x9, 0x1, 0x8, 0x2, 0x1}]}}}}}}}, 0x0) 0s ago: executing program 3 (id=1885): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40010) kernel console output (not intermixed with test programs): 781] vhci_hcd: connection reset by peer [ 306.495125][ T1140] vhci_hcd vhci_hcd.1: stop threads [ 306.497618][ T1140] vhci_hcd vhci_hcd.1: release socket [ 306.499965][ T1140] vhci_hcd vhci_hcd.1: disconnect device [ 306.526411][ T64] Bluetooth: hci3: command 0x0406 tx timeout [ 306.657730][ T3246] usb usb42-port1: unable to enumerate USB device [ 306.837323][ T24] usb usb38-port1: attempt power cycle [ 307.007368][T10800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1393'. [ 307.396462][T10814] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 307.399250][T10814] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 307.416852][ T24] usb usb38-port1: unable to enumerate USB device [ 307.426045][T10814] vhci_hcd vhci_hcd.0: Device attached [ 307.987004][T10815] vhci_hcd: connection closed [ 307.987383][ T6247] vhci_hcd vhci_hcd.1: stop threads [ 307.990622][ T6247] vhci_hcd vhci_hcd.1: release socket [ 307.992428][ T6247] vhci_hcd vhci_hcd.1: disconnect device [ 308.927796][ T6337] usb 44-1: device descriptor read/8, error -110 [ 309.053204][T10848] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 309.055365][T10848] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 309.072957][T10848] vhci_hcd vhci_hcd.0: Device attached [ 309.091089][T10853] syz_tun: entered allmulticast mode [ 309.094019][T10852] syz_tun: left allmulticast mode [ 309.327160][ T6337] usb usb44-port1: attempt power cycle [ 309.382627][T10862] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 309.384800][T10862] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 309.410806][T10862] vhci_hcd vhci_hcd.0: Device attached [ 309.707210][ T24] usb 38-1: SetAddress Request (86) to port 0 [ 309.709206][ T24] usb 38-1: new SuperSpeed USB device number 86 using vhci_hcd [ 309.803830][T10866] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 309.805980][T10866] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 309.831820][T10866] vhci_hcd vhci_hcd.0: Device attached [ 309.907286][ T6337] usb usb44-port1: unable to enumerate USB device [ 310.117969][ T6337] usb 42-1: SetAddress Request (66) to port 0 [ 310.121432][ T6337] usb 42-1: new SuperSpeed USB device number 66 using vhci_hcd [ 310.175423][T10850] vhci_hcd: connection closed [ 310.176177][ T6247] vhci_hcd vhci_hcd.1: stop threads [ 310.186426][ T6247] vhci_hcd vhci_hcd.1: release socket [ 310.195755][ T6247] vhci_hcd vhci_hcd.1: disconnect device [ 310.376108][T10863] vhci_hcd: connection reset by peer [ 310.378156][ T6247] vhci_hcd vhci_hcd.0: stop threads [ 310.380358][ T6247] vhci_hcd vhci_hcd.0: release socket [ 310.388524][ T6247] vhci_hcd vhci_hcd.0: disconnect device [ 310.425279][T10869] vhci_hcd: connection reset by peer [ 310.436693][ T6124] vhci_hcd vhci_hcd.2: stop threads [ 310.438980][ T6124] vhci_hcd vhci_hcd.2: release socket [ 310.441349][ T6124] vhci_hcd vhci_hcd.2: disconnect device [ 310.852105][T10875] pim6reg: entered allmulticast mode [ 311.126774][T10872] pim6reg: left allmulticast mode [ 311.157334][ T53] usb 40-1: device descriptor read/8, error -110 [ 311.163238][T10899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1427'. [ 311.316698][ T3246] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 311.468254][ T3246] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 311.471783][ T3246] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 311.483745][ T3246] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 311.492255][ T3246] usb 5-1: config 0 interface 0 has no altsetting 0 [ 311.496013][ T3246] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 311.502273][ T3246] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 311.504885][ T3246] usb 5-1: Product: syz [ 311.629885][ T53] usb usb40-port1: attempt power cycle [ 311.631135][ T3246] usb 5-1: Manufacturer: syz [ 311.639022][ T3246] usb 5-1: SerialNumber: syz [ 311.643301][ T3246] usb 5-1: config 0 descriptor?? [ 311.645539][T10890] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 311.655042][ T3246] usb 5-1: selecting invalid altsetting 0 [ 311.663153][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 311.663168][ T40] audit: type=1326 audit(1768614702.049:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10907 comm="syz.3.1431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 311.676501][ T40] audit: type=1326 audit(1768614702.049:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10907 comm="syz.3.1431" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 311.689882][ T40] audit: type=1326 audit(1768614702.049:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10907 comm="syz.3.1431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 311.690314][T10901] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 311.701381][T10901] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 311.704129][T10901] vhci_hcd vhci_hcd.0: Device attached [ 311.713282][ T40] audit: type=1326 audit(1768614702.049:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10907 comm="syz.3.1431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 311.729316][T10911] pim6reg: entered allmulticast mode [ 311.731004][T10915] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 311.733848][T10915] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 311.738077][ T40] audit: type=1326 audit(1768614702.049:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10907 comm="syz.3.1431" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 311.744922][ T40] audit: type=1326 audit(1768614702.049:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10907 comm="syz.3.1431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 311.757554][ T40] audit: type=1326 audit(1768614702.059:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10907 comm="syz.3.1431" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 311.764336][ T40] audit: type=1326 audit(1768614702.079:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10907 comm="syz.3.1431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 311.772335][T10915] vhci_hcd vhci_hcd.0: Device attached [ 311.792848][ T40] audit: type=1326 audit(1768614702.089:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10907 comm="syz.3.1431" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 311.800891][ T40] audit: type=1326 audit(1768614702.089:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10907 comm="syz.3.1431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 311.888040][ T53] usb 40-1: SetAddress Request (68) to port 0 [ 311.890383][ T53] usb 40-1: new SuperSpeed USB device number 68 using vhci_hcd [ 311.891306][T10890] usb 5-1: BOGUS urb xfer, pipe 0 != type 1 [ 312.062348][T10913] vhci_hcd: connection reset by peer [ 312.064550][ T6238] vhci_hcd vhci_hcd.1: stop threads [ 312.070030][ T6238] vhci_hcd vhci_hcd.1: release socket [ 312.077738][ T6238] vhci_hcd vhci_hcd.1: disconnect device [ 312.161827][T10916] vhci_hcd: connection closed [ 312.162168][ T6124] vhci_hcd vhci_hcd.2: stop threads [ 312.165686][ T6124] vhci_hcd vhci_hcd.2: release socket [ 312.167707][ T6124] vhci_hcd vhci_hcd.2: disconnect device [ 312.271049][T10907] pim6reg: left allmulticast mode [ 312.820515][T10922] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 312.822600][T10922] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 312.825315][T10922] vhci_hcd vhci_hcd.0: Device attached [ 313.096487][ T3246] usb 44-1: SetAddress Request (70) to port 0 [ 313.099250][ T3246] usb 44-1: new SuperSpeed USB device number 70 using vhci_hcd [ 313.318139][ T6068] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 313.345989][T10923] vhci_hcd: connection reset by peer [ 313.349692][ T4600] vhci_hcd vhci_hcd.3: stop threads [ 313.351276][ T4600] vhci_hcd vhci_hcd.3: release socket [ 313.353092][ T4600] vhci_hcd vhci_hcd.3: disconnect device [ 313.454092][T10937] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 313.456444][T10937] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 313.459654][T10937] vhci_hcd vhci_hcd.0: Device attached [ 313.466484][ T6068] usb 6-1: Using ep0 maxpacket: 8 [ 313.470413][ T6068] usb 6-1: config 0 interface 0 has no altsetting 0 [ 313.472539][ T6068] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 313.475814][ T6068] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.486561][ T6068] usb 6-1: config 0 descriptor?? [ 313.717310][ T6049] usb 5-1: USB disconnect, device number 26 [ 313.913007][ T6068] mcp2221 0003:04D8:00DD.000C: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 314.072500][T10938] vhci_hcd: connection closed [ 314.090515][ T1140] vhci_hcd vhci_hcd.2: stop threads [ 314.094717][ T1140] vhci_hcd vhci_hcd.2: release socket [ 314.097252][ T1140] vhci_hcd vhci_hcd.2: disconnect device [ 314.115753][T10943] pim6reg: entered allmulticast mode [ 314.116521][ T6007] usb 6-1: USB disconnect, device number 31 [ 314.313712][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1439'. [ 314.756787][ T24] usb 38-1: device descriptor read/8, error -110 [ 314.828542][T10940] pim6reg: left allmulticast mode [ 314.852761][T10956] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 314.854825][T10956] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 314.864665][T10956] vhci_hcd vhci_hcd.0: Device attached [ 314.916771][T10960] ntfs3(nullb0): Primary boot signature is not NTFS. [ 314.920225][T10960] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 315.006392][ T837] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 315.036422][ T24] usb 38-1: SetAddress Request (87) to port 0 [ 315.039150][ T24] usb 38-1: new SuperSpeed USB device number 87 using vhci_hcd [ 315.168285][ T837] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 315.172725][ T837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.177963][ T837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.181867][ T837] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 315.190385][ T837] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 315.193233][ T837] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 315.195775][ T837] usb 6-1: Manufacturer: syz [ 315.201059][ T837] usb 6-1: config 0 descriptor?? [ 315.236712][ T6337] usb 42-1: device descriptor read/8, error -110 [ 315.256862][T10957] vhci_hcd: connection reset by peer [ 315.258769][ T1140] vhci_hcd vhci_hcd.0: stop threads [ 315.260456][ T1140] vhci_hcd vhci_hcd.0: release socket [ 315.262279][ T1140] vhci_hcd vhci_hcd.0: disconnect device [ 315.506531][ T6026] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 315.636674][ T837] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 315.637191][ T6337] usb usb42-port1: attempt power cycle [ 315.641478][ T837] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 315.666439][ T6026] usb 7-1: Using ep0 maxpacket: 8 [ 315.669652][ T6026] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 315.672705][ T6026] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 315.676655][ T6026] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 315.680083][ T6026] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.684287][ T6026] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 315.687739][ T6026] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.900854][ T6026] usb 7-1: GET_CAPABILITIES returned 0 [ 315.902544][ T6068] usb 6-1: USB disconnect, device number 32 [ 315.902896][ T6026] usbtmc 7-1:16.0: can't read capabilities [ 316.199191][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 316.202991][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 316.206727][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 316.210507][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 316.213902][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 316.216745][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 316.219523][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 316.222242][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 316.226985][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 316.229905][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 316.232710][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 316.235542][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 316.238469][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 316.241259][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 316.244100][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 316.246882][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 316.250895][ T6337] usb usb42-port1: unable to enumerate USB device [ 316.251168][ T6035] usb 7-1: USB disconnect, device number 24 [ 316.308068][T10979] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 316.310729][T10979] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 316.313816][T10979] vhci_hcd vhci_hcd.0: Device attached [ 316.696474][ T6337] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 316.847693][ T6337] usb 6-1: Using ep0 maxpacket: 8 [ 316.851398][ T6337] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 316.855399][ T6337] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 316.860222][ T6337] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 316.864307][ T6337] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 316.869792][ T6337] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 316.874129][ T6337] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.890924][T10980] vhci_hcd: connection closed [ 316.891415][ T46] vhci_hcd vhci_hcd.0: stop threads [ 316.895503][ T46] vhci_hcd vhci_hcd.0: release socket [ 316.899124][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 316.996645][ T53] usb 40-1: device descriptor read/8, error -110 [ 317.097038][ T6337] usb 6-1: GET_CAPABILITIES returned 0 [ 317.098907][ T6337] usbtmc 6-1:16.0: can't read capabilities [ 317.388003][ T53] usb usb40-port1: unable to enumerate USB device [ 317.495040][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 317.498700][ T6035] usb 6-1: USB disconnect, device number 33 [ 318.026439][ T6035] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 318.179105][ T6035] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.182789][ T6035] usb 5-1: config 0 has no interfaces? [ 318.184653][ T6035] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 318.188084][ T6035] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.195800][ T6035] usb 5-1: config 0 descriptor?? [ 318.197932][ T3246] usb 44-1: device descriptor read/8, error -110 [ 318.412845][ T6026] usb 5-1: USB disconnect, device number 27 [ 318.495283][T11020] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 318.498470][T11020] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 318.502814][T11020] vhci_hcd vhci_hcd.0: Device attached [ 318.587956][ T3246] usb usb44-port1: attempt power cycle [ 318.766528][ T53] usb 40-1: SetAddress Request (70) to port 0 [ 318.769189][ T53] usb 40-1: new SuperSpeed USB device number 70 using vhci_hcd [ 319.178642][ T3246] usb usb44-port1: unable to enumerate USB device [ 319.186866][T11021] vhci_hcd: connection reset by peer [ 319.191802][ T1138] vhci_hcd vhci_hcd.1: stop threads [ 319.193508][ T1138] vhci_hcd vhci_hcd.1: release socket [ 319.196152][ T1138] vhci_hcd vhci_hcd.1: disconnect device [ 319.564270][T11035] pim6reg: entered allmulticast mode [ 319.776595][T11030] pim6reg: left allmulticast mode [ 320.070233][T11062] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 320.072995][T11062] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 320.078051][T11062] vhci_hcd vhci_hcd.0: Device attached [ 320.118924][ T24] usb 38-1: device descriptor read/8, error -110 [ 320.226521][ T24] usb usb38-port1: attempt power cycle [ 320.281399][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 320.281411][ T40] audit: type=1326 audit(1768614710.669:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11058 comm="syz.1.1479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 320.290775][ T40] audit: type=1326 audit(1768614710.679:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11058 comm="syz.1.1479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 320.305917][ T40] audit: type=1326 audit(1768614710.679:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11058 comm="syz.1.1479" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 320.323677][T11061] pim6reg: entered allmulticast mode [ 320.329988][ T40] audit: type=1326 audit(1768614710.679:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11058 comm="syz.1.1479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 320.344670][ T40] audit: type=1326 audit(1768614710.679:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11058 comm="syz.1.1479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 320.358274][ T891] usb 44-1: SetAddress Request (74) to port 0 [ 320.359190][ T40] audit: type=1326 audit(1768614710.689:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11058 comm="syz.1.1479" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 320.360318][ T891] usb 44-1: new SuperSpeed USB device number 74 using vhci_hcd [ 320.386579][ T40] audit: type=1326 audit(1768614710.689:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11058 comm="syz.1.1479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 320.398509][ T40] audit: type=1326 audit(1768614710.689:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11058 comm="syz.1.1479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 320.417504][ T40] audit: type=1326 audit(1768614710.689:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11058 comm="syz.1.1479" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 320.427118][T11069] wg2 speed is unknown, defaulting to 1000 [ 320.427145][ T40] audit: type=1326 audit(1768614710.689:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11058 comm="syz.1.1479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 320.755267][T11069] lo speed is unknown, defaulting to 1000 [ 320.817197][T11058] pim6reg: left allmulticast mode [ 320.857846][ T24] usb usb38-port1: unable to enumerate USB device [ 321.067528][T11077] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 321.070222][T11077] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 321.074279][T11077] vhci_hcd vhci_hcd.0: Device attached [ 321.354056][T11063] vhci_hcd: connection reset by peer [ 321.357688][ T4600] vhci_hcd vhci_hcd.3: stop threads [ 321.360578][ T4600] vhci_hcd vhci_hcd.3: release socket [ 321.366639][ T6337] usb 38-1: SetAddress Request (90) to port 0 [ 321.368764][ T4600] vhci_hcd vhci_hcd.3: disconnect device [ 321.369406][ T6337] usb 38-1: new SuperSpeed USB device number 90 using vhci_hcd [ 321.485758][T11087] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 321.487979][T11087] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 321.496771][T11087] vhci_hcd vhci_hcd.0: Device attached [ 321.546971][T11078] vhci_hcd: connection reset by peer [ 321.549133][ T6238] vhci_hcd vhci_hcd.0: stop threads [ 321.550963][ T6238] vhci_hcd vhci_hcd.0: release socket [ 321.553009][ T6238] vhci_hcd vhci_hcd.0: disconnect device [ 321.721960][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.134874][T11093] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 322.137273][T11093] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 322.140210][T11093] vhci_hcd vhci_hcd.0: Device attached [ 322.466565][ T6068] usb 42-1: SetAddress Request (70) to port 0 [ 322.468851][ T6068] usb 42-1: new SuperSpeed USB device number 70 using vhci_hcd [ 322.686516][T11094] vhci_hcd: connection reset by peer [ 322.698483][T11111] pim6reg: entered allmulticast mode [ 322.769424][ T6196] vhci_hcd vhci_hcd.2: stop threads [ 322.771380][ T6196] vhci_hcd vhci_hcd.2: release socket [ 322.774197][ T6196] vhci_hcd vhci_hcd.2: disconnect device [ 322.843711][T11110] pim6reg: entered allmulticast mode [ 322.918960][T11088] vhci_hcd: connection closed [ 322.919626][ T6124] vhci_hcd vhci_hcd.1: stop threads [ 322.923591][ T6124] vhci_hcd vhci_hcd.1: release socket [ 322.925485][ T6124] vhci_hcd vhci_hcd.1: disconnect device [ 323.337106][T11103] pim6reg: left allmulticast mode [ 323.348825][T11106] pim6reg: left allmulticast mode [ 323.546708][T11117] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1493'. [ 323.698586][T11122] kvm: user requested TSC rate below hardware speed [ 323.707172][T11123] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1493'. [ 323.710460][T11123] nbd: nbd64 already in use [ 323.876419][ T53] usb 40-1: device descriptor read/8, error -110 [ 323.888958][T11141] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 323.891081][T11141] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 323.893947][T11141] vhci_hcd vhci_hcd.0: Device attached [ 323.904620][ T9457] udevd[9457]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 324.139365][T11150] pim6reg: entered allmulticast mode [ 324.383833][ T53] usb usb40-port1: attempt power cycle [ 324.835643][T11144] pim6reg: left allmulticast mode [ 324.866252][T11142] vhci_hcd: connection closed [ 324.868050][T11154] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 324.871668][T11154] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 324.874532][ T6238] vhci_hcd vhci_hcd.2: stop threads [ 324.876771][ T6238] vhci_hcd vhci_hcd.2: release socket [ 324.879055][ T6238] vhci_hcd vhci_hcd.2: disconnect device [ 324.881481][T11154] vhci_hcd vhci_hcd.0: Device attached [ 324.954063][ T53] usb usb40-port1: unable to enumerate USB device [ 325.100938][ T5952] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 325.104671][T11156] vhci_hcd: connection closed [ 325.105649][ T4600] vhci_hcd vhci_hcd.3: stop threads [ 325.109460][ T4600] vhci_hcd vhci_hcd.3: release socket [ 325.111278][ T4600] vhci_hcd vhci_hcd.3: disconnect device [ 325.486156][ T891] usb 44-1: device descriptor read/8, error -110 [ 325.946967][T11179] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 325.949063][T11179] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 325.951812][T11179] vhci_hcd vhci_hcd.0: Device attached [ 326.097227][ T891] usb usb44-port1: attempt power cycle [ 326.137442][T11186] kvm: user requested TSC rate below hardware speed [ 326.161993][ T4600] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.270608][T11194] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 326.299917][ T4600] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.351637][T11196] kvm: apic: phys broadcast and lowest prio [ 326.407564][ T4600] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.436599][ T6337] usb 38-1: device descriptor read/8, error -110 [ 326.550970][ T4600] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.697510][ T891] usb usb44-port1: unable to enumerate USB device [ 326.762815][T11180] vhci_hcd: connection closed [ 326.763150][ T46] vhci_hcd vhci_hcd.2: stop threads [ 326.766684][ T46] vhci_hcd vhci_hcd.2: release socket [ 326.768776][ T46] vhci_hcd vhci_hcd.2: disconnect device [ 326.829268][ T6337] usb usb38-port1: attempt power cycle [ 326.911387][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 326.917365][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 326.924684][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 326.936068][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 326.945400][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 327.229475][ T4600] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 327.239644][ T4600] bond0 (unregistering): Released all slaves [ 327.289141][T11205] wg2 speed is unknown, defaulting to 1000 [ 327.397404][ T6337] usb usb38-port1: unable to enumerate USB device [ 327.412869][T11205] lo speed is unknown, defaulting to 1000 [ 327.519971][T11205] chnl_net:caif_netlink_parms(): no params data found [ 327.561063][ T6068] usb 42-1: device descriptor read/8, error -110 [ 327.611132][T11205] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.614044][T11205] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.619268][T11205] bridge_slave_0: entered allmulticast mode [ 327.623123][T11205] bridge_slave_0: entered promiscuous mode [ 327.626675][T11205] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.631165][T11205] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.633944][T11205] bridge_slave_1: entered allmulticast mode [ 327.637947][T11205] bridge_slave_1: entered promiscuous mode [ 327.697689][T11205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.706565][T11205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.745048][T11205] team0: Port device team_slave_0 added [ 327.757698][T11205] team0: Port device team_slave_1 added [ 327.812731][ T40] kauditd_printk_skb: 55 callbacks suppressed [ 327.812744][ T40] audit: type=1326 audit(1768614718.199:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11240 comm="syz.2.1536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 327.826414][ T40] audit: type=1326 audit(1768614718.199:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11240 comm="syz.2.1536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 327.828044][T11205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.836492][ T40] audit: type=1326 audit(1768614718.199:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11240 comm="syz.2.1536" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 327.836517][ T40] audit: type=1326 audit(1768614718.199:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11240 comm="syz.2.1536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 327.865995][ T40] audit: type=1326 audit(1768614718.199:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11240 comm="syz.2.1536" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 327.872781][ T40] audit: type=1326 audit(1768614718.199:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11240 comm="syz.2.1536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 327.882366][T11205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.896375][T11205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.896965][ T40] audit: type=1326 audit(1768614718.209:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11240 comm="syz.2.1536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 327.909049][ T40] audit: type=1326 audit(1768614718.209:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11240 comm="syz.2.1536" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 327.909468][T11205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.915852][ T40] audit: type=1326 audit(1768614718.209:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11240 comm="syz.2.1536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 327.919936][T11205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.935103][ T40] audit: type=1326 audit(1768614718.209:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11240 comm="syz.2.1536" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 327.938456][T11205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.947045][ T6068] usb usb42-port1: attempt power cycle [ 327.955853][T11262] pim6reg: entered allmulticast mode [ 327.968644][ T4600] hsr_slave_0: left promiscuous mode [ 327.972127][ T4600] hsr_slave_1: left promiscuous mode [ 327.992150][ T4600] veth1_macvtap: left promiscuous mode [ 327.994608][ T4600] veth0_macvtap: left promiscuous mode [ 327.996911][ T4600] veth1_vlan: left promiscuous mode [ 328.001535][ T4600] veth0_vlan: left promiscuous mode [ 328.507188][ T6068] usb usb42-port1: unable to enumerate USB device [ 328.561022][T11284] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 328.563607][T11284] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 328.570901][T11284] vhci_hcd vhci_hcd.0: Device attached [ 328.838129][ T3246] usb 38-1: SetAddress Request (94) to port 0 [ 328.840934][ T3246] usb 38-1: new SuperSpeed USB device number 94 using vhci_hcd [ 328.890036][ T6026] lo speed is unknown, defaulting to 1000 [ 328.892590][ T6026] infiniband s{z2: ib_query_port failed (-19) [ 328.897017][T11269] pim6reg: left allmulticast mode [ 328.936499][T11205] hsr_slave_0: entered promiscuous mode [ 328.939362][T11205] hsr_slave_1: entered promiscuous mode [ 328.941551][T11205] debugfs: 'hsr0' already exists in 'hsr' [ 328.943418][T11205] Cannot create hsr debugfs directory [ 328.997203][ T64] Bluetooth: hci3: command tx timeout [ 329.359424][T11205] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 329.370557][T11205] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 329.375504][T11285] vhci_hcd: connection reset by peer [ 329.384230][T11205] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 329.388250][ T6124] vhci_hcd vhci_hcd.0: stop threads [ 329.390676][ T6124] vhci_hcd vhci_hcd.0: release socket [ 329.393057][ T6124] vhci_hcd vhci_hcd.0: disconnect device [ 329.409958][T11205] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 329.449506][T11295] pim6reg: entered allmulticast mode [ 329.474420][T11205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.490216][T11205] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.498178][ T6124] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.500518][ T6124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.507285][ T6124] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.509529][ T6124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.526998][ T6026] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 329.671069][T11205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.690287][ T6026] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 329.693381][ T6026] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 329.707538][ T6026] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 329.710292][ T6026] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.827023][T11205] veth0_vlan: entered promiscuous mode [ 329.833067][T11205] veth1_vlan: entered promiscuous mode [ 329.848379][T11205] veth0_macvtap: entered promiscuous mode [ 329.852284][T11205] veth1_macvtap: entered promiscuous mode [ 329.862083][T11205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.869335][T11205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.876000][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.883908][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.889799][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.906780][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.924823][T11289] pim6reg: left allmulticast mode [ 329.938976][ T6026] usb 7-1: usb_control_msg returned -32 [ 329.946491][ T6026] usbtmc 7-1:16.0: can't read capabilities [ 329.981608][ T6124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.984175][ T6124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.010785][ T4600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.013395][ T4600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.112599][T11338] binder: 11337:11338 ioctl c0306201 80000600 returned -22 [ 330.189944][T11344] input: syz0 as /devices/virtual/input/input15 [ 330.294586][T11349] usbtmc 7-1:16.0: usbtmc_ioctl_request failed -32 [ 330.297799][ T6007] usb 7-1: USB disconnect, device number 25 [ 330.436507][ T891] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 330.529795][T11354] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 330.531888][T11354] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 330.534640][T11354] vhci_hcd vhci_hcd.0: Device attached [ 330.618249][ T891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.621721][ T891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.624704][ T891] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 330.632261][ T891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.643193][ T891] usb 5-1: config 0 descriptor?? [ 330.796485][ T6068] usb 46-1: SetAddress Request (2) to port 0 [ 330.798556][ T6068] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 331.066673][ T891] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 331.069219][ T891] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 331.076892][ T64] Bluetooth: hci3: command tx timeout [ 331.077027][ T891] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0D8C:0022.000E/input/input16 [ 331.091029][T11355] vhci_hcd: connection reset by peer [ 331.094138][ T46] vhci_hcd vhci_hcd.4: stop threads [ 331.096585][ T46] vhci_hcd vhci_hcd.4: release socket [ 331.098978][ T46] vhci_hcd vhci_hcd.4: disconnect device [ 331.104946][ T891] cm6533_jd 0003:0D8C:0022.000E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 331.232079][T11366] input: syz1 as /devices/virtual/input/input17 [ 331.267831][ T6337] usb 5-1: USB disconnect, device number 28 [ 331.867253][T11381] netlink: 'syz.4.1565': attribute type 1 has an invalid length. [ 332.732280][T11398] pim6reg: entered allmulticast mode [ 332.987625][T11403] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 332.989515][T11403] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 332.992179][T11403] vhci_hcd vhci_hcd.0: Device attached [ 333.156911][ T64] Bluetooth: hci3: command tx timeout [ 333.382202][T11395] pim6reg: left allmulticast mode [ 333.624973][T11404] vhci_hcd: connection closed [ 333.626625][ T6247] vhci_hcd vhci_hcd.4: stop threads [ 333.631028][ T6247] vhci_hcd vhci_hcd.4: release socket [ 333.634179][ T6247] vhci_hcd vhci_hcd.4: disconnect device [ 333.886484][ T3246] usb 38-1: device descriptor read/8, error -110 [ 333.906455][ T6337] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 334.056507][ T6337] usb 5-1: Using ep0 maxpacket: 8 [ 334.060348][ T6337] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 334.064330][ T6337] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 334.068333][ T6337] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 334.072401][ T6337] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 334.076603][ T6337] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.081053][ T6337] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 334.083916][ T6337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.287230][ T3246] usb usb38-port1: attempt power cycle [ 334.297723][ T6337] usb 5-1: GET_CAPABILITIES returned 0 [ 334.299500][ T6337] usbtmc 5-1:16.0: can't read capabilities [ 334.610191][ T6337] usb 5-1: USB disconnect, device number 29 [ 334.613192][T11425] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 334.629520][T11448] overlayfs: failed to verify upper (408/file0, ino=2154, err=-116) [ 334.634056][T11448] overlayfs: failed to verify index dir 'upper' xattr [ 334.637601][T11448] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 334.856938][ T3246] usb usb38-port1: unable to enumerate USB device [ 335.236726][ T64] Bluetooth: hci3: command tx timeout [ 335.606532][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 335.744114][ T40] kauditd_printk_skb: 85 callbacks suppressed [ 335.744128][ T40] audit: type=1326 audit(1768614726.129:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11485 comm="syz.2.1604" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 335.754670][ T40] audit: type=1326 audit(1768614726.139:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11485 comm="syz.2.1604" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 335.765369][ T40] audit: type=1326 audit(1768614726.139:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11485 comm="syz.2.1604" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 335.766097][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 335.773668][ T40] audit: type=1326 audit(1768614726.139:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11485 comm="syz.2.1604" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 335.777034][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 335.777078][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 335.777099][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.790695][T11482] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 335.797447][ T40] audit: type=1326 audit(1768614726.149:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11485 comm="syz.2.1604" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 335.806114][ T40] audit: type=1326 audit(1768614726.149:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11485 comm="syz.2.1604" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 335.812707][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 335.815370][ T40] audit: type=1326 audit(1768614726.149:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11485 comm="syz.2.1604" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 335.825050][ T40] audit: type=1326 audit(1768614726.149:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11485 comm="syz.2.1604" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 335.831903][ T40] audit: type=1326 audit(1768614726.149:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11485 comm="syz.2.1604" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 335.839049][ T40] audit: type=1326 audit(1768614726.149:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11485 comm="syz.2.1604" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 335.861336][T11488] pim6reg: entered allmulticast mode [ 335.886662][ T6068] usb 46-1: device descriptor read/8, error -110 [ 335.903790][T11491] syzkaller1: entered promiscuous mode [ 335.905680][T11491] syzkaller1: entered allmulticast mode [ 336.029156][ T24] usb 5-1: USB disconnect, device number 30 [ 336.287249][ T6068] usb usb46-port1: attempt power cycle [ 336.447383][T11485] pim6reg: left allmulticast mode [ 336.454066][T11507] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 336.456889][T11507] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 336.476454][T11507] vhci_hcd vhci_hcd.0: Device attached [ 336.624267][T11513] Bluetooth: MGMT ver 1.23 [ 336.756587][ T24] usb 44-1: SetAddress Request (78) to port 0 [ 336.759148][ T24] usb 44-1: new SuperSpeed USB device number 78 using vhci_hcd [ 336.847095][ T6068] usb usb46-port1: unable to enumerate USB device [ 336.947069][T11525] Set syz1 is full, maxelem 65536 reached [ 337.066871][T11508] vhci_hcd: connection reset by peer [ 337.070553][ T6124] vhci_hcd vhci_hcd.3: stop threads [ 337.072351][ T6124] vhci_hcd vhci_hcd.3: release socket [ 337.074520][ T6124] vhci_hcd vhci_hcd.3: disconnect device [ 337.882043][T11548] pim6reg: entered allmulticast mode [ 337.976726][ T837] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 338.128767][ T837] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 338.133228][ T837] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 338.137290][ T837] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 338.140892][ T837] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 338.146014][ T837] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 338.150007][ T6131] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 338.153216][ T837] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.159474][ T837] usb 9-1: config 0 descriptor?? [ 338.196530][ T64] Bluetooth: hci3: command tx timeout [ 338.301030][T11556] kvm: Disabled LAPIC found during irq injection [ 338.326366][ T6131] usb 5-1: Using ep0 maxpacket: 8 [ 338.329781][ T6131] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 338.333404][ T6131] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 338.337231][ T6131] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 338.340749][ T6131] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.345587][ T6131] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 338.349385][ T6131] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.583038][ T837] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 338.586195][ T837] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 338.589538][ T837] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 338.591477][T11559] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 338.591578][T11545] pim6reg: left allmulticast mode [ 338.592724][ T6131] usb 5-1: usb_control_msg returned -32 [ 338.595272][T11559] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 338.603074][ T837] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 338.605921][ T837] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 338.609319][ T6131] usbtmc 5-1:16.0: can't read capabilities [ 338.612238][ T837] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 338.617029][T11559] vhci_hcd vhci_hcd.0: Device attached [ 338.620839][ T837] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 338.625827][ T837] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 338.629657][ T837] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 338.632728][ T837] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 338.645563][ T837] plantronics 0003:047F:FFFF.000F: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 338.775421][ T3246] usb 9-1: USB disconnect, device number 2 [ 338.886798][ T6337] usb 42-1: SetAddress Request (74) to port 0 [ 338.889730][ T6337] usb 42-1: new SuperSpeed USB device number 74 using vhci_hcd [ 339.238930][T11577] pim6reg: entered allmulticast mode [ 339.244512][T11560] vhci_hcd: connection reset by peer [ 339.246960][ T13] vhci_hcd vhci_hcd.2: stop threads [ 339.248795][ T13] vhci_hcd vhci_hcd.2: release socket [ 339.250712][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 339.359001][T11581] loop3: detected capacity change from 0 to 1 [ 339.364201][ T9457] Dev loop3: unable to read RDB block 1 [ 339.366057][ T9457] loop3: unable to read partition table [ 339.369313][ T9457] loop3: partition table beyond EOD, truncated [ 339.374084][T11581] Dev loop3: unable to read RDB block 1 [ 339.376438][T11581] loop3: unable to read partition table [ 339.378731][T11581] loop3: partition table beyond EOD, truncated [ 339.380970][T11581] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 339.587117][T11585] pim6reg: entered allmulticast mode [ 339.916041][T11574] pim6reg: left allmulticast mode [ 340.273792][T11582] pim6reg: left allmulticast mode [ 340.355569][T11607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1647'. [ 340.686911][T11631] pim6reg: entered allmulticast mode [ 340.924428][ T6068] usb 5-1: USB disconnect, device number 31 [ 341.282915][T11618] pim6reg: left allmulticast mode [ 341.796549][ T24] usb 44-1: device descriptor read/8, error -110 [ 342.186862][ T24] usb usb44-port1: attempt power cycle [ 342.449763][T11695] wg2 speed is unknown, defaulting to 1000 [ 342.736387][ T891] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 342.767254][ T24] usb usb44-port1: unable to enumerate USB device [ 342.898056][ T891] usb 7-1: config 0 has no interfaces? [ 342.904252][ T891] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 342.908485][ T891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.911838][ T891] usb 7-1: Product: syz [ 342.913527][ T891] usb 7-1: Manufacturer: syz [ 342.915723][ T891] usb 7-1: SerialNumber: syz [ 342.919938][ T891] usb 7-1: config 0 descriptor?? [ 343.172226][T11695] veth1_macvtap: left promiscuous mode [ 343.228719][T11695] veth1_macvtap: entered promiscuous mode [ 343.244918][ T6049] usb 7-1: USB disconnect, device number 26 [ 343.903087][ T46] veth1_macvtap: left promiscuous mode [ 343.956537][ T6337] usb 42-1: device descriptor read/8, error -110 [ 344.137965][T11720] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 344.140279][T11720] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 344.143667][T11720] vhci_hcd vhci_hcd.0: Device attached [ 344.416647][ T6337] usb 42-1: SetAddress Request (75) to port 0 [ 344.419261][ T6337] usb 42-1: new SuperSpeed USB device number 75 using vhci_hcd [ 344.516760][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 344.516824][ T5952] Bluetooth: hci4: command 0x1003 tx timeout [ 344.819385][T11721] vhci_hcd: connection reset by peer [ 344.824338][ T46] vhci_hcd vhci_hcd.2: stop threads [ 344.826805][ T46] vhci_hcd vhci_hcd.2: release socket [ 344.830041][ T46] vhci_hcd vhci_hcd.2: disconnect device [ 344.852190][ T40] kauditd_printk_skb: 139 callbacks suppressed [ 344.852207][ T40] audit: type=1326 audit(1768614735.239:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11725 comm="syz.4.1688" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 344.863843][ T40] audit: type=1326 audit(1768614735.239:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11725 comm="syz.4.1688" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 344.864440][T11728] pim6reg: entered allmulticast mode [ 344.872694][ T40] audit: type=1326 audit(1768614735.239:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11725 comm="syz.4.1688" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 344.884177][ T40] audit: type=1326 audit(1768614735.239:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11725 comm="syz.4.1688" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 344.893072][ T40] audit: type=1326 audit(1768614735.239:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11725 comm="syz.4.1688" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 344.901704][ T40] audit: type=1326 audit(1768614735.239:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11725 comm="syz.4.1688" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 344.910422][ T40] audit: type=1326 audit(1768614735.239:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11725 comm="syz.4.1688" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 344.919384][ T40] audit: type=1326 audit(1768614735.239:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11725 comm="syz.4.1688" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 344.928394][ T40] audit: type=1326 audit(1768614735.239:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11725 comm="syz.4.1688" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 344.936109][ T40] audit: type=1326 audit(1768614735.239:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11725 comm="syz.4.1688" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 345.190032][T11733] pim6reg: entered allmulticast mode [ 345.493877][T11725] pim6reg: left allmulticast mode [ 345.918099][T11730] pim6reg: left allmulticast mode [ 346.351779][ T24] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 346.496031][T11776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1708'. [ 346.500738][ T24] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 346.503235][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 346.506656][ T24] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 346.510359][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 346.518010][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 346.527595][ T24] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 346.533994][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 346.538210][ T24] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 346.541897][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 346.549658][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 346.556128][ T24] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 346.558927][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 346.562607][ T24] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 346.566267][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 346.569674][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 346.575183][ T24] usb 9-1: string descriptor 0 read error: -22 [ 346.577693][ T24] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 346.580729][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.587723][ T24] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 346.796084][ T24] usb 9-1: USB disconnect, device number 3 [ 347.014623][T11787] pim6reg: entered allmulticast mode [ 347.382085][T11792] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 347.388877][T11792] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 347.394510][T11792] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 347.447605][T11794] input: syz0 as /devices/virtual/input/input18 [ 347.599200][ T64] block nbd4: Receive control failed (result -32) [ 347.607016][T11798] block nbd4: shutting down sockets [ 347.675717][T11784] pim6reg: left allmulticast mode [ 347.968219][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1727'. [ 348.032760][T11824] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 348.035645][T11824] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 348.040139][T11824] vhci_hcd vhci_hcd.0: Device attached [ 348.329304][ T24] usb 46-1: SetAddress Request (6) to port 0 [ 348.334167][ T24] usb 46-1: new SuperSpeed USB device number 6 using vhci_hcd [ 348.598676][T11839] pim6reg: entered allmulticast mode [ 348.660684][T11825] vhci_hcd: connection reset by peer [ 348.670993][ T13] vhci_hcd vhci_hcd.4: stop threads [ 348.672749][ T13] vhci_hcd vhci_hcd.4: release socket [ 348.674894][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 349.189907][T11836] pim6reg: left allmulticast mode [ 349.476503][ T6337] usb 42-1: device descriptor read/8, error -110 [ 349.597318][ T6337] usb usb42-port1: attempt power cycle [ 349.762457][T11868] input: syz1 as /devices/virtual/input/input19 [ 350.167046][ T6337] usb usb42-port1: unable to enumerate USB device [ 350.670775][T11908] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 350.672903][T11908] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 350.675814][T11908] vhci_hcd vhci_hcd.0: Device attached [ 350.786395][ T3246] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 350.946534][ T6007] usb 42-1: SetAddress Request (78) to port 0 [ 350.949112][ T6007] usb 42-1: new SuperSpeed USB device number 78 using vhci_hcd [ 350.951892][ T3246] usb 5-1: Using ep0 maxpacket: 8 [ 350.954882][ T3246] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 350.958155][ T3246] usb 5-1: config 179 has no interface number 0 [ 350.960107][ T3246] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 350.963485][ T3246] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 350.967316][ T3246] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 350.970722][ T3246] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 350.974375][ T3246] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 350.980304][ T3246] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 350.984088][ T3246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.991355][T11906] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 351.094114][T11915] syzkaller1: entered promiscuous mode [ 351.096109][T11915] syzkaller1: entered allmulticast mode [ 351.312176][T11909] vhci_hcd: connection reset by peer [ 351.316828][ T12] vhci_hcd vhci_hcd.2: stop threads [ 351.318457][ T12] vhci_hcd vhci_hcd.2: release socket [ 351.320309][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 351.476507][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.479834][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.482561][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.485370][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.488065][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.490659][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.493276][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.495970][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.498685][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.501292][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.616295][ T837] usb 5-1: USB disconnect, device number 32 [ 351.616849][ C2] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 351.621633][ C2] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 352.126510][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 352.126521][ T5952] Bluetooth: hci4: command 0x1003 tx timeout [ 352.242195][T11969] netlink: 'syz.0.1768': attribute type 12 has an invalid length. [ 352.245578][T11969] netlink: 'syz.0.1768': attribute type 29 has an invalid length. [ 352.249082][T11969] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1768'. [ 352.251957][T11969] netlink: 'syz.0.1768': attribute type 2 has an invalid length. [ 352.254390][T11969] netlink: 'syz.0.1768': attribute type 3 has an invalid length. [ 352.258873][T11969] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1768'. [ 352.432217][T11986] netlink: 'syz.4.1775': attribute type 4 has an invalid length. [ 352.440873][T11986] netlink: 'syz.4.1775': attribute type 4 has an invalid length. [ 352.443261][T11988] loop9: detected capacity change from 0 to 7 [ 352.450141][T11988] Dev loop9: unable to read RDB block 7 [ 352.452507][T11988] loop9: unable to read partition table [ 352.454966][T11988] loop9: partition table beyond EOD, truncated [ 352.457696][T11988] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 352.786518][ T6131] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 352.831001][T11997] syzkaller1: entered promiscuous mode [ 352.833175][T11997] syzkaller1: entered allmulticast mode [ 352.948266][ T6131] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 352.952834][ T6131] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.957576][ T6131] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.961599][ T6131] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 352.968037][ T6131] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 352.971813][ T6131] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 352.974822][ T6131] usb 5-1: Manufacturer: syz [ 352.984066][ T6131] usb 5-1: config 0 descriptor?? [ 353.251400][T12003] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 353.253535][T12003] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 353.257366][T12003] vhci_hcd vhci_hcd.0: Device attached [ 353.276122][T12005] vhci_hcd: connection closed [ 353.276431][ T6124] vhci_hcd vhci_hcd.2: stop threads [ 353.280362][ T6124] vhci_hcd vhci_hcd.2: release socket [ 353.282124][ T6124] vhci_hcd vhci_hcd.2: disconnect device [ 353.406522][ T24] usb 46-1: device descriptor read/8, error -110 [ 353.450736][ T6131] hid_parser_main: 5 callbacks suppressed [ 353.450750][ T6131] appleir 0003:05AC:8243.0010: unknown main item tag 0x0 [ 353.461747][ T6131] appleir 0003:05AC:8243.0010: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 353.818216][ T24] usb usb46-port1: attempt power cycle [ 353.828027][T12013] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 353.830771][T12013] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 353.834316][T12013] vhci_hcd vhci_hcd.0: Device attached [ 353.966492][ T24] usb 46-1: SetAddress Request (8) to port 0 [ 353.968455][ T24] usb 46-1: new SuperSpeed USB device number 8 using vhci_hcd [ 354.028428][ T3246] usb 5-1: USB disconnect, device number 33 [ 354.091769][T12020] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input20 [ 354.376492][ T6031] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 354.426360][T12014] vhci_hcd: connection reset by peer [ 354.428422][ T4600] vhci_hcd vhci_hcd.4: stop threads [ 354.430277][ T4600] vhci_hcd vhci_hcd.4: release socket [ 354.432287][ T4600] vhci_hcd vhci_hcd.4: disconnect device [ 354.536397][ T6031] usb 7-1: Using ep0 maxpacket: 32 [ 354.539697][ T6031] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.543126][ T6031] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.546388][ T6031] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 354.549366][ T6031] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.553067][ T6031] usb 7-1: config 0 descriptor?? [ 354.987476][ T6031] savu 0003:1E7D:2D5A.0011: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 355.048702][T12034] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 355.050902][T12034] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 355.053758][T12034] vhci_hcd vhci_hcd.0: Device attached [ 355.221053][ T3246] usb 7-1: USB disconnect, device number 27 [ 355.283502][T12043] syzkaller1: entered promiscuous mode [ 355.285314][T12043] syzkaller1: entered allmulticast mode [ 355.336511][ T6131] usb 38-1: SetAddress Request (98) to port 0 [ 355.338495][ T6131] usb 38-1: new SuperSpeed USB device number 98 using vhci_hcd [ 355.686973][T12036] vhci_hcd: connection reset by peer [ 355.689619][ T1140] vhci_hcd vhci_hcd.0: stop threads [ 355.691863][ T1140] vhci_hcd vhci_hcd.0: release socket [ 355.694306][ T1140] vhci_hcd vhci_hcd.0: disconnect device [ 355.719343][T12056] input: syz1 as /devices/virtual/input/input21 [ 355.922715][T12067] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 356.016162][T12069] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 356.018340][T12069] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 356.021461][T12069] vhci_hcd vhci_hcd.0: Device attached [ 356.453849][T12086] netlink: 'syz.4.1811': attribute type 4 has an invalid length. [ 356.624533][T12070] vhci_hcd: connection reset by peer [ 356.627109][ T6247] vhci_hcd vhci_hcd.2: stop threads [ 356.629061][ T6247] vhci_hcd vhci_hcd.2: release socket [ 356.631584][ T6007] usb 42-1: device descriptor read/8, error -110 [ 356.634356][ T6247] vhci_hcd vhci_hcd.2: disconnect device [ 356.706520][T12091] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 356.708672][T12091] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 356.711318][T12091] vhci_hcd vhci_hcd.0: Device attached [ 356.730779][T12097] vhci_hcd: connection closed [ 356.731014][ T4600] vhci_hcd vhci_hcd.0: stop threads [ 356.734432][ T4600] vhci_hcd vhci_hcd.0: release socket [ 356.736688][ T4600] vhci_hcd vhci_hcd.0: disconnect device [ 357.047650][ T6007] usb usb42-port1: attempt power cycle [ 357.365932][ T40] kauditd_printk_skb: 123 callbacks suppressed [ 357.365944][ T40] audit: type=1326 audit(1768614747.749:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12109 comm="syz.4.1820" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 357.377105][ T40] audit: type=1326 audit(1768614747.759:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12109 comm="syz.4.1820" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 357.378852][T12113] pim6reg: entered allmulticast mode [ 357.383943][ T40] audit: type=1326 audit(1768614747.759:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12109 comm="syz.4.1820" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 357.394220][ T40] audit: type=1326 audit(1768614747.759:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12109 comm="syz.4.1820" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 357.403981][ T40] audit: type=1326 audit(1768614747.759:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12109 comm="syz.4.1820" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 357.413553][ T40] audit: type=1326 audit(1768614747.759:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12109 comm="syz.4.1820" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 357.422417][ T40] audit: type=1326 audit(1768614747.759:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12109 comm="syz.4.1820" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 357.431348][ T40] audit: type=1326 audit(1768614747.759:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12109 comm="syz.4.1820" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 357.440426][ T40] audit: type=1326 audit(1768614747.759:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12109 comm="syz.4.1820" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 357.449516][ T40] audit: type=1326 audit(1768614747.759:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12109 comm="syz.4.1820" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 357.576059][T12115] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 357.578167][T12115] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 357.580841][T12115] vhci_hcd vhci_hcd.0: Device attached [ 357.620299][T12118] vhci_hcd: connection closed [ 357.620489][ T4600] vhci_hcd vhci_hcd.2: stop threads [ 357.623889][ T4600] vhci_hcd vhci_hcd.2: release socket [ 357.625717][ T4600] vhci_hcd vhci_hcd.2: disconnect device [ 357.666477][ T6007] usb 42-1: enqueue for inactive port 0 [ 357.936501][ T6337] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 357.941078][T12109] pim6reg: left allmulticast mode [ 358.086448][ T6337] usb 5-1: Using ep0 maxpacket: 16 [ 358.091126][ T6337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.099345][ T6337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.103574][ T6337] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 358.112771][ T6337] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 358.115730][ T6337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.120344][ T6337] usb 5-1: config 0 descriptor?? [ 358.439691][T12139] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 358.441788][T12139] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 358.444306][T12139] vhci_hcd vhci_hcd.0: Device attached [ 358.462903][T12148] vhci_hcd: connection closed [ 358.463422][ T6247] vhci_hcd vhci_hcd.2: stop threads [ 358.520210][T12147] pim6reg: entered allmulticast mode [ 358.542235][ T6337] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 358.544521][ T6337] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 358.556765][ T6337] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 358.559027][ T6337] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 358.561215][ T6337] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 358.565224][ T6337] input: HID 0955:7214 Haptics as /devices/virtual/input/input22 [ 358.571934][ T6247] vhci_hcd vhci_hcd.2: release socket [ 358.576466][ T6247] vhci_hcd vhci_hcd.2: disconnect device [ 358.603730][ T6337] shield 0003:0955:7214.0012: Registered Thunderstrike controller [ 358.609290][ T6337] shield 0003:0955:7214.0012: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 358.741507][ T6049] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 358.746212][ T6068] usb 5-1: USB disconnect, device number 34 [ 358.748483][ T6049] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 358.752038][ T6049] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 358.756622][ T6049] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 359.077978][ T24] usb 46-1: device descriptor read/8, error -110 [ 359.396536][ C3] net_ratelimit: 90 callbacks suppressed [ 359.396554][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.479463][ T24] usb usb46-port1: unable to enumerate USB device [ 359.548794][T12168] binder: 12167:12168 ioctl c06c4124 0 returned -22 [ 359.840539][T12178] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2799626000 (89588032000 ns) > initial count (68918506848 ns). Using initial count to start timer. [ 359.938955][T12183] netlink: 'syz.2.1846': attribute type 1 has an invalid length. [ 359.961683][T12183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.256452][ T891] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 360.408120][ T891] usb 9-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x41, changing to 0x1 [ 360.411719][ T891] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x1 has invalid wMaxPacketSize 0 [ 360.414675][ T891] usb 9-1: config 0 interface 0 has no altsetting 0 [ 360.418974][ T891] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 360.422001][ T891] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 360.424739][ T891] usb 9-1: Product: syz [ 360.426129][ T891] usb 9-1: Manufacturer: syz [ 360.428008][ T891] usb 9-1: SerialNumber: syz [ 360.430698][ T891] usb 9-1: config 0 descriptor?? [ 360.437824][ T891] usb 9-1: selecting invalid altsetting 0 [ 360.446518][ T6131] usb 38-1: device descriptor read/8, error -110 [ 360.641463][ T891] usb 9-1: USB disconnect, device number 4 [ 360.857249][ T6131] usb usb38-port1: attempt power cycle [ 361.457014][ T6131] usb usb38-port1: unable to enumerate USB device [ 361.886130][T12188] syz.4.1848 invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=1000 [ 361.902081][T12188] CPU: 1 UID: 0 PID: 12188 Comm: syz.4.1848 Tainted: G L syzkaller #0 PREEMPT(full) [ 361.902102][T12188] Tainted: [L]=SOFTLOCKUP [ 361.902105][T12188] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 361.902111][T12188] Call Trace: [ 361.902115][T12188] [ 361.902119][T12188] dump_stack_lvl+0x16c/0x1f0 [ 361.902140][T12188] dump_header+0x101/0x960 [ 361.902154][T12188] oom_kill_process+0x176/0x910 [ 361.902165][T12188] ? oom_cpuset_eligible.isra.0+0x199/0x2d0 [ 361.902177][T12188] out_of_memory+0x1407/0x1700 [ 361.902191][T12188] ? __pfx_out_of_memory+0x10/0x10 [ 361.902206][T12188] __alloc_frozen_pages_noprof+0x1dbc/0x2430 [ 361.902225][T12188] ? __blk_flush_plug+0x2f3/0x4b0 [ 361.902238][T12188] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 361.902252][T12188] ? __pfx___blk_flush_plug+0x10/0x10 [ 361.902270][T12188] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 361.902287][T12188] ? policy_nodemask+0xea/0x4e0 [ 361.902304][T12188] alloc_pages_mpol+0x1fb/0x550 [ 361.902320][T12188] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 361.902336][T12188] ? filemap_get_entry+0x1a7/0x3b0 [ 361.902350][T12188] folio_alloc_noprof+0x20/0x2d0 [ 361.902360][T12188] filemap_alloc_folio_noprof.part.0+0x39d/0x470 [ 361.902377][T12188] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 361.902397][T12188] __filemap_get_folio_mpol+0x610/0xc60 [ 361.902412][T12188] filemap_fault+0x684/0x29d0 [ 361.902431][T12188] ? __pfx_filemap_fault+0x10/0x10 [ 361.902449][T12188] ? __pfx_filemap_map_pages+0x10/0x10 [ 361.902459][T12188] __do_fault+0x10d/0x490 [ 361.902473][T12188] ? __pfx_filemap_map_pages+0x10/0x10 [ 361.902484][T12188] do_fault+0xae4/0x1ad0 [ 361.902498][T12188] ? __pfx_filemap_map_pages+0x10/0x10 [ 361.902511][T12188] __handle_mm_fault+0x1919/0x2bb0 [ 361.902524][T12188] ? reacquire_held_locks+0xcd/0x1f0 [ 361.902535][T12188] ? __pfx___handle_mm_fault+0x10/0x10 [ 361.902547][T12188] ? lock_vma_under_rcu+0x176/0x580 [ 361.902561][T12188] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 361.902579][T12188] handle_mm_fault+0x3fe/0xad0 [ 361.902592][T12188] do_user_addr_fault+0x60c/0x1370 [ 361.902606][T12188] ? rcu_is_watching+0x12/0xc0 [ 361.902622][T12188] exc_page_fault+0x64/0xc0 [ 361.902638][T12188] asm_exc_page_fault+0x26/0x30 [ 361.902648][T12188] RIP: 0023:0xf725a9a7 [ 361.902661][T12188] Code: Unable to access opcode bytes at 0xf725a97d. [ 361.902665][T12188] RSP: 002b:00000000ffa86894 EFLAGS: 00010292 [ 361.902677][T12188] RAX: 0000000000000000 RBX: 00000000f7466ff4 RCX: 0000000000000000 [ 361.902683][T12188] RDX: 00000000ffa868d4 RSI: 0000000000000000 RDI: 00000000f725a9a7 [ 361.902689][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 361.902695][T12188] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 361.902701][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 361.902713][T12188] [ 361.902717][T12188] Mem-Info: [ 362.070054][T12188] active_anon:25828 inactive_anon:18852 isolated_anon:0 [ 362.070054][T12188] active_file:29 inactive_file:61 isolated_file:0 [ 362.070054][T12188] unevictable:1768 dirty:0 writeback:0 [ 362.070054][T12188] slab_reclaimable:7598 slab_unreclaimable:62759 [ 362.070054][T12188] mapped:20482 shmem:43242 pagetables:2780 [ 362.070054][T12188] sec_pagetables:348 bounce:0 [ 362.070054][T12188] kernel_misc_reclaimable:0 [ 362.070054][T12188] free:15280 free_pcp:239 free_cma:0 [ 362.107244][T12188] Node 0 active_anon:2660kB inactive_anon:788kB active_file:76kB inactive_file:68kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:6524kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10080kB pagetables:1848kB sec_pagetables:1184kB all_unreclaimable? yes Balloon:0kB [ 362.134104][T12188] Node 1 active_anon:103308kB inactive_anon:71964kB active_file:28kB inactive_file:188kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:81900kB dirty:0kB writeback:0kB shmem:166444kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5440kB pagetables:9272kB sec_pagetables:208kB all_unreclaimable? yes Balloon:0kB [ 362.170226][T12188] Node 0 DMA free:1900kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:76kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 362.226427][T12188] lowmem_reserve[]: 0 289 289 289 289 [ 362.228411][T12188] Node 0 DMA32 free:11532kB boost:0kB min:13332kB low:16664kB high:19996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2372kB inactive_anon:1076kB active_file:44kB inactive_file:100kB unevictable:3536kB writepending:0kB zspages:1404kB present:1032196kB managed:296784kB mlocked:0kB bounce:0kB free_pcp:112kB local_pcp:32kB free_cma:0kB [ 362.278699][T12188] lowmem_reserve[]: 0 0 0 0 0 [ 362.280261][T12188] Node 1 DMA32 free:46936kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:100648kB inactive_anon:74624kB active_file:120kB inactive_file:96kB unevictable:3536kB writepending:0kB zspages:6272kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:1284kB local_pcp:924kB free_cma:0kB [ 362.304978][T12188] lowmem_reserve[]: 0 0 0 0 0 [ 362.319831][T12188] Node 0 DMA: 45*4kB (UM) 9*8kB (UM) 5*16kB (M) 15*32kB (UM) 3*64kB (M) 1*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 1900kB [ 362.324809][T12188] Node 0 DMA32: 111*4kB (UME) 43*8kB (ME) 37*16kB (UME) 82*32kB (UME) 54*64kB (UME) 31*128kB (UME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 11428kB [ 362.363577][T12188] Node 1 DMA32: 868*4kB (UME) 364*8kB (UME) 1569*16kB (UME) 440*32kB (UME) 17*64kB (UME) 2*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 46912kB [ 362.389178][T12188] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 362.392279][T12188] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 362.395204][T12188] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 362.431243][T12188] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 362.434228][T12188] 44130 total pagecache pages [ 362.435818][T12188] 802 pages in swap cache [ 362.456380][T12188] Free swap = 124kB [ 362.457734][T12188] Total swap = 124996kB [ 362.459120][T12188] 524155 pages RAM [ 362.460357][T12188] 0 pages HighMem/MovableOnly [ 362.461910][T12188] 209066 pages reserved [ 362.463291][T12188] 0 pages cma reserved [ 362.464683][T12188] Unreclaimable slab info: [ 362.502881][T12188] Name Used Total [ 362.505119][T12188] pid_3 7KB 7KB [ 362.516468][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.519519][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.520235][T12188] pid_2 113KB 157KB [ 362.524433][T12188] bio-472 15KB 15KB [ 362.549300][T12188] bio-536 15KB 15KB [ 362.551307][T12188] bio-552 15KB 15KB [ 362.553199][T12188] bio-584 15KB 15KB [ 362.555144][T12188] afs_inode_cache 61KB 61KB [ 362.596395][T12188] zspage-zswap1 187KB 204KB [ 362.598780][T12188] zs_handle-zswap1 194KB 220KB [ 362.600775][T12188] zswap_entry 541KB 624KB [ 362.602752][T12188] AF_VSOCK 122KB 122KB [ 362.604762][T12188] sw_flow_stats 12KB 12KB [ 362.626373][T12188] sw_flow 45KB 45KB [ 362.628416][T12188] batadv_tt_change_cache 16KB 16KB [ 362.630509][T12188] batadv_tl_cache 16KB 16KB [ 362.632463][T12188] ceph_osd_request 63KB 63KB [ 362.634406][T12188] ceph_msg 15KB 15KB [ 362.654464][T12188] IEEE-802.15.4-MAC 93KB 93KB [ 362.670421][T12188] IEEE-802.15.4-RAW 63KB 63KB [ 362.672444][T12188] p9_req_t 39KB 39KB [ 362.674373][T12188] INET_SMC 125KB 125KB [ 362.695062][T12188] SMC6 62KB 62KB [ 362.704200][T12188] SMC 62KB 62KB [ 362.706242][T12188] TIPC 123KB 123KB [ 362.719596][T12188] rds_tcp_connection 31KB 31KB [ 362.721614][T12188] RDS 123KB 123KB [ 362.723592][T12188] rds_connection 23KB 23KB [ 362.725547][T12188] SCTPv6 120KB 120KB [ 362.753226][T12188] SCTP 122KB 122KB [ 362.755117][T12188] sctp_chunk 109KB 109KB [ 362.772223][T12188] sctp_bind_bucket 16KB 16KB [ 362.774169][T12188] L2TP/IPv6 63KB 63KB [ 362.776139][T12188] RXRPC 128KB 128KB [ 362.795148][T12188] rxrpc_call_jar 343KB 510KB [ 362.798000][T12188] can_receiver 15KB 15KB [ 362.799942][T12188] net_bridge_fdb_entry 185KB 185KB [ 362.801938][T12188] MPTCPv6 125KB 125KB [ 362.803875][T12188] ip6-frags 15KB 15KB [ 362.805786][T12188] fib6_node 132KB 132KB [ 362.839739][T12188] ip6_dst_cache 218KB 421KB [ 362.841707][T12188] mfc6_cache 16KB 16KB [ 362.843657][T12188] PINGv6 30KB 30KB [ 362.845584][T12188] RAWv6 247KB 247KB [ 362.861811][T12188] UDPLITEv6 30KB 30KB [ 362.863823][T12188] UDPv6 245KB 245KB [ 362.865801][T12188] tw_sock_TCPv6 7KB 7KB [ 362.888866][T12188] request_sock_TCPv6 23KB 23KB [ 362.890805][T12188] TCPv6 427KB 447KB [ 362.892667][T12188] nf_conntrack 15KB 15KB [ 362.894527][T12188] wg_peer 118KB 118KB [ 362.921980][T12188] allowedips_node 11KB 11KB [ 362.924009][T12188] ubi_wl_entry_slab 3KB 3KB [ 362.925986][T12188] t10_alua_lu_gp_cache 7KB 7KB [ 362.944315][T12188] scsi_sense_cache 48KB 48KB [ 362.946368][T12188] virtio_scsi_cmd 16KB 16KB [ 362.948311][T12188] bio-136 106KB 132KB [ 362.950242][T12188] io_kiocb 109KB 187KB [ 362.952204][T12188] bio-264 15KB 15KB [ 362.954133][T12188] mqueue_inode_cache 121KB 121KB [ 362.956134][T12188] f2fs_bio_post_read_ctx 23KB 23KB [ 362.978036][T12188] jfs_mp 7KB 7KB [ 362.980025][T12188] fuse_request 31KB 31KB [ 362.981950][T12188] cifs_small_rq 16KB 16KB [ 362.983918][T12188] cifs_request 67KB 67KB [ 363.014276][T12188] cifs_mpx_ids 7KB 7KB [ 363.016290][T12188] cifs_io_subrequest 39KB 39KB [ 363.036429][T12188] cifs_io_request 95KB 95KB [ 363.038416][T12188] nfs_commit_data 15KB 15KB [ 363.040365][T12188] nfs_write_data 63KB 63KB [ 363.042310][T12188] jbd2_inode 15KB 15KB [ 363.044257][T12188] ext4_system_zone 3KB 3KB [ 363.046253][T12188] ext4_io_end_vec 15KB 15KB [ 363.072490][T12188] kioctx 127KB 127KB [ 363.074452][T12188] aio_kiocb 31KB 31KB [ 363.092377][T12188] userfaultfd_ctx_cache 63KB 63KB [ 363.094530][T12188] fasync_cache 7KB 7KB [ 363.112559][T12188] pid_namespace 61KB 61KB [ 363.114568][T12188] kvm_gmem_inode_cache 95KB 95KB [ 363.127828][T12188] kvm_async_pf 3KB 3KB [ 363.129822][T12188] kvm_vcpu 154KB 154KB [ 363.131806][T12188] kvm_mmu_page_header 62KB 62KB [ 363.133817][T12188] pte_list_desc 43KB 43KB [ 363.135828][T12188] x86_emulator 126KB 126KB [ 363.153477][T12188] rpc_buffers 31KB 31KB [ 363.155538][T12188] rpc_tasks 7KB 7KB [ 363.174947][T12188] UNIX-STREAM 214KB 214KB [ 363.189423][T12188] UNIX 608KB 826KB [ 363.191529][T12188] ip4-frags 15KB 15KB [ 363.193459][T12188] UDP-Lite 92KB 92KB [ 363.195351][T12188] MPTCP 120KB 120KB [ 363.217450][T12188] tcp_bind2_bucket 16KB 16KB [ 363.219370][T12188] tcp_bind_bucket 20KB 20KB [ 363.221346][T12188] inet_peer 8KB 8KB [ 363.223320][T12188] xfrm_state 63KB 63KB [ 363.225269][T12188] ip_fib_trie 28KB 28KB [ 363.257659][T12188] ip_fib_alias 75KB 75KB [ 363.259678][T12188] rtable 66KB 92KB [ 363.261632][T12188] PING 63KB 63KB [ 363.263622][T12188] RAW 159KB 159KB [ 363.265590][T12188] UDP 123KB 123KB [ 363.294471][T12188] tw_sock_TCP 7KB 7KB [ 363.298051][T12188] request_sock_TCP 30KB 30KB [ 363.299972][T12188] TCP 462KB 637KB [ 363.301835][T12188] hugetlbfs_inode_cache 62KB 62KB [ 363.303831][T12188] netfs_subrequest 31KB 31KB [ 363.305847][T12188] netfs_request 95KB 95KB [ 363.346561][T12188] bio-280 15KB 15KB [ 363.349178][T12188] ep_head 16KB 16KB [ 363.351725][T12188] eventpoll_pwq 23KB 23KB [ 363.354294][T12188] eventpoll_epi 59KB 59KB [ 363.379821][T12188] inotify_inode_mark 27KB 27KB [ 363.382195][T12188] sgpool-128 29KB 29KB [ 363.384513][T12188] sgpool-64 31KB 31KB [ 363.408645][T12188] sgpool-32 315KB 535KB [ 363.410646][T12188] sgpool-16 204KB 312KB [ 363.412639][T12188] sgpool-8 117KB 179KB [ 363.414598][T12188] bio_crypt_ctx 7KB 7KB [ 363.445061][T12188] bio_integrity_data 4KB 4KB [ 363.453571][T12188] request_queue 247KB 247KB [ 363.455625][T12188] blkdev_ioc 15KB 15KB [ 363.470980][T12188] bio-200 280KB 288KB [ 363.473010][T12188] biovec-max 748KB 922KB [ 363.474972][T12188] biovec-64 346KB 535KB [ 363.484134][T12188] biovec-16 117KB 171KB [ 363.492042][T12188] mm_slot 11KB 11KB [ 363.494074][T12188] ksm_mm_slot 4KB 4KB [ 363.496188][T12188] ksm_rmap_item 3KB 3KB [ 363.516180][T12188] uid_cache 31KB 31KB [ 363.526138][T12188] iommu_iova_magazine 1053KB 1102KB [ 363.542857][T12188] iommu_iova 276KB 276KB [ 363.544887][T12188] dmaengine-unmap-256 30KB 30KB [ 363.551858][T12188] dmaengine-unmap-128 30KB 30KB [ 363.553904][T12188] dmaengine-unmap-16 4KB 4KB [ 363.555920][T12188] dmaengine-unmap-2 4KB 4KB [ 363.575261][T12188] QIPCRTR 62KB 62KB [ 363.584722][T12188] audit_buffer 101KB 101KB [ 363.593638][T12188] skbuff_ext_cache 48KB 76KB [ 363.595529][T12188] skbuff_small_head 512KB 694KB [ 363.610003][T12188] skbuff_fclone_cache 219KB 296KB [ 363.612100][T12188] skbuff_head_cache 1217KB 1218KB [ 363.614052][T12188] configfs_dir_cache 16KB 16KB [ 363.616093][T12188] file_lease_cache 23KB 23KB [ 363.639092][T12188] file_lock_cache 39KB 39KB [ 363.641115][T12188] file_lock_ctx 15KB 15KB [ 363.643096][T12188] fsnotify_mark_connector 15KB 15KB [ 363.645261][T12188] posix_timers_cache 32KB 32KB [ 363.660809][T12188] taskstats 61KB 61KB [ 363.662798][T12188] mem_cgroup_per_node 109KB 123KB [ 363.664835][T12188] mem_cgroup 89KB 89KB [ 363.698096][T12188] proc_dir_entry 656KB 703KB [ 363.699977][T12188] pde_opener 15KB 15KB [ 363.701930][T12188] seq_file 93KB 132KB [ 363.703887][T12188] sigqueue 27KB 27KB [ 363.705812][T12188] shmem_inode_cache 7909KB 8203KB [ 363.764314][T12188] kernfs_iattrs_cache 15KB 15KB [ 363.770648][T12188] kernfs_node_cache 29652KB 29715KB [ 363.772608][T12188] mnt_cache 149KB 165KB [ 363.774537][T12188] bfilp 15KB 15KB [ 363.798211][T12188] filp 735KB 826KB [ 363.800231][T12188] names_cache 5066KB 6545KB [ 363.802211][T12188] net_namespace 198KB 198KB [ 363.804288][T12188] ima_iint_cache 55KB 55KB [ 363.851733][T12188] lsm_inode_cache 1784KB 1874KB [ 363.853657][T12188] lsm_file_cache 233KB 256KB [ 363.855614][T12188] key_jar 31KB 31KB [ 363.867698][T12188] uts_namespace 62KB 62KB [ 363.869587][T12188] nsproxy 15KB 15KB [ 363.871559][T12188] vm_area_struct 2145KB 2195KB [ 363.873495][T12188] fs_cache 70KB 88KB [ 363.875471][T12188] files_cache 249KB 318KB [ 363.918555][T12188] signal_cache 1016KB 1941KB [ 363.920556][T12188] sighand_cache 1362KB 2194KB [ 363.922477][T12188] task_struct 4942KB 5209KB [ 363.924417][T12188] cred 207KB 368KB [ 363.951111][T12188] anon_vma_chain 557KB 567KB [ 363.953036][T12188] anon_vma 727KB 788KB [ 363.954920][T12188] pid 235KB 417KB [ 363.983887][T12188] Acpi-Operand 262KB 360KB [ 363.985867][T12188] Acpi-ParseExt 94KB 118KB [ 364.000679][T12188] Acpi-Parse 78KB 114KB [ 364.002698][T12188] Acpi-State 47KB 82KB [ 364.004754][T12188] Acpi-Namespace 56KB 56KB [ 364.036660][T12188] numa_policy 7KB 7KB [ 364.038610][T12188] perf_event 337KB 408KB [ 364.040571][T12188] trace_event_file 532KB 532KB [ 364.042505][T12188] ftrace_event_field 1004KB 1004KB [ 364.044492][T12188] pool_workqueue 1908KB 1936KB [ 364.092392][T12188] task_group 61KB 61KB [ 364.094355][T12188] maple_node 2060KB 2216KB [ 364.096292][T12188] mm_struct 765KB 796KB [ 364.116385][T12188] vmap_area 1059KB 1093KB [ 364.118330][T12188] debug_objects_cache 1969KB 2175KB [ 364.120291][T12188] page->ptl 236KB 275KB [ 364.122313][T12188] kmalloc-cg-8k 3152KB 3200KB [ 364.124306][T12188] kmalloc-cg-4k 12088KB 13024KB [ 364.126258][T12188] kmalloc-cg-2k 8228KB 8864KB [ 364.177940][T12188] kmalloc-cg-1k 2272KB 2624KB [ 364.179943][T12188] kmalloc-cg-512 1912KB 2160KB [ 364.181901][T12188] kmalloc-cg-256 378KB 440KB [ 364.183873][T12188] kmalloc-cg-128 222KB 252KB [ 364.185882][T12188] kmalloc-cg-64 362KB 364KB [ 364.219625][T12188] kmalloc-cg-32 288KB 324KB [ 364.221608][T12188] kmalloc-cg-16 16KB 20KB [ 364.223572][T12188] kmalloc-cg-8 29KB 32KB [ 364.225521][T12188] kmalloc-cg-192 87KB 108KB [ 364.263963][T12188] kmalloc-cg-96 96KB 120KB [ 364.265983][T12188] kmalloc-8k 6288KB 6560KB [ 364.281488][T12188] kmalloc-4k 29104KB 29192KB [ 364.283483][T12188] kmalloc-2k 15452KB 16768KB [ 364.285460][T12188] kmalloc-1k 7262KB 7552KB [ 364.310002][T12188] kmalloc-512 8536KB 8928KB [ 364.311922][T12188] kmalloc-256 4721KB 4724KB [ 364.314009][T12188] kmalloc-128 6051KB 9252KB [ 364.316175][T12188] kmalloc-64 5175KB 6680KB [ 364.346442][T12188] kmalloc-32 1725KB 1960KB [ 364.348492][T12188] kmalloc-16 428KB 448KB [ 364.350475][T12188] kmalloc-8 889KB 976KB [ 364.352591][T12188] kmalloc-192 2001KB 2872KB [ 364.354729][T12188] kmalloc-96 2579KB 3112KB [ 364.397315][T12188] kmem_cache_node 224KB 228KB [ 364.399240][T12188] kmem_cache 195KB 195KB [ 364.401139][T12188] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz4,task=syz.4.1848,pid=12188,uid=0 [ 364.407119][T12188] Out of memory (oom_kill_allocating_task): Killed process 12188 (syz.4.1848) total-vm:103880kB, anon-rss:1152kB, file-rss:20744kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 364.825993][ T40] kauditd_printk_skb: 51 callbacks suppressed [ 364.826004][ T40] audit: type=1326 audit(1768614755.209:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12247 comm="syz.3.1858" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f97579 code=0x0 [ 365.016445][ T24] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 365.167860][ T24] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 365.171371][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.174883][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.178640][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 365.183705][ T24] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 365.186883][ T24] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 365.189508][ T24] usb 9-1: Manufacturer: syz [ 365.226872][ T24] usb 9-1: config 0 descriptor?? [ 365.256440][ T6049] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 365.342014][T12261] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 365.344125][T12261] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 365.346824][T12261] vhci_hcd vhci_hcd.0: Device attached [ 365.370940][T12263] vhci_hcd: connection closed [ 365.371275][ T46] vhci_hcd vhci_hcd.0: stop threads [ 365.375537][ T46] vhci_hcd vhci_hcd.0: release socket [ 365.377944][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 365.409601][ T6049] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.412941][ T6049] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.415976][ T6049] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 365.420933][ T6049] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 365.423773][ T6049] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.427890][ T6049] usb 7-1: config 0 descriptor?? [ 365.640589][ T24] appleir 0003:05AC:8243.0013: unknown main item tag 0x0 [ 365.645768][ T24] appleir 0003:05AC:8243.0013: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 365.841216][ T6049] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 365.844004][ T6049] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 365.848878][ T6049] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 365.851841][ T6049] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 365.854274][ T6049] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 365.857000][ T6049] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 365.859507][ T6049] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 365.861916][ T6049] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 365.864358][ T6049] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 365.900052][ T6049] plantronics 0003:047F:FFFF.0014: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 366.356504][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.359121][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.656502][ T6131] usb 9-1: USB disconnect, device number 5 [ 367.821165][T12258] syz.2.1862 invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=1000 [ 367.824920][T12258] CPU: 0 UID: 0 PID: 12258 Comm: syz.2.1862 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.824937][T12258] Tainted: [L]=SOFTLOCKUP [ 367.824940][T12258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 367.824946][T12258] Call Trace: [ 367.824950][T12258] [ 367.824955][T12258] dump_stack_lvl+0x16c/0x1f0 [ 367.824975][T12258] dump_header+0x101/0x960 [ 367.824989][T12258] oom_kill_process+0x176/0x910 [ 367.825000][T12258] ? oom_cpuset_eligible.isra.0+0x199/0x2d0 [ 367.825012][T12258] out_of_memory+0x1407/0x1700 [ 367.825026][T12258] ? __pfx_out_of_memory+0x10/0x10 [ 367.825041][T12258] __alloc_frozen_pages_noprof+0x1dbc/0x2430 [ 367.825061][T12258] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 367.825082][T12258] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 367.825098][T12258] ? policy_nodemask+0xea/0x4e0 [ 367.825115][T12258] alloc_pages_mpol+0x1fb/0x550 [ 367.825131][T12258] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 367.825147][T12258] ? filemap_get_entry+0x1a7/0x3b0 [ 367.825160][T12258] folio_alloc_noprof+0x20/0x2d0 [ 367.825171][T12258] filemap_alloc_folio_noprof.part.0+0x39d/0x470 [ 367.825188][T12258] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 367.825207][T12258] __filemap_get_folio_mpol+0x610/0xc60 [ 367.825222][T12258] filemap_fault+0x684/0x29d0 [ 367.825237][T12258] ? __pfx_filemap_fault+0x10/0x10 [ 367.825255][T12258] ? __pfx_filemap_map_pages+0x10/0x10 [ 367.825265][T12258] __do_fault+0x10d/0x490 [ 367.825278][T12258] ? __pfx_filemap_map_pages+0x10/0x10 [ 367.825288][T12258] do_fault+0xae4/0x1ad0 [ 367.825302][T12258] ? __pfx_filemap_map_pages+0x10/0x10 [ 367.825316][T12258] __handle_mm_fault+0x1919/0x2bb0 [ 367.825329][T12258] ? reacquire_held_locks+0xcd/0x1f0 [ 367.825340][T12258] ? __pfx___handle_mm_fault+0x10/0x10 [ 367.825352][T12258] ? lock_vma_under_rcu+0x176/0x580 [ 367.825366][T12258] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 367.825384][T12258] handle_mm_fault+0x3fe/0xad0 [ 367.825397][T12258] do_user_addr_fault+0x60c/0x1370 [ 367.825411][T12258] ? rcu_is_watching+0x12/0xc0 [ 367.825426][T12258] exc_page_fault+0x64/0xc0 [ 367.825443][T12258] asm_exc_page_fault+0x26/0x30 [ 367.825453][T12258] RIP: 0023:0xf70d303b [ 367.825466][T12258] Code: Unable to access opcode bytes at 0xf70d3011. [ 367.825470][T12258] RSP: 002b:00000000ffa1b380 EFLAGS: 00010287 [ 367.825479][T12258] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 367.825484][T12258] RDX: 000000002ee2014d RSI: 00000000f7476280 RDI: 000000002ee2014d [ 367.825490][T12258] RBP: 000000002f220000 R08: 0000000000000000 R09: 0000000000000000 [ 367.825496][T12258] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 367.825501][T12258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 367.825514][T12258] [ 367.825518][T12258] Mem-Info: [ 368.015457][T12258] active_anon:15286 inactive_anon:29092 isolated_anon:0 [ 368.015457][T12258] active_file:0 inactive_file:133 isolated_file:0 [ 368.015457][T12258] unevictable:1768 dirty:0 writeback:0 [ 368.015457][T12258] slab_reclaimable:7577 slab_unreclaimable:62868 [ 368.015457][T12258] mapped:20485 shmem:43171 pagetables:2727 [ 368.015457][T12258] sec_pagetables:349 bounce:0 [ 368.015457][T12258] kernel_misc_reclaimable:0 [ 368.015457][T12258] free:15069 free_pcp:122 free_cma:0 [ 368.102748][T12258] Node 0 active_anon:732kB inactive_anon:2696kB active_file:0kB inactive_file:252kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:6524kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10112kB pagetables:1848kB sec_pagetables:1188kB all_unreclaimable? yes Balloon:0kB [ 368.162672][T12258] Node 1 active_anon:25668kB inactive_anon:148416kB active_file:0kB inactive_file:240kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:81924kB dirty:0kB writeback:0kB shmem:166160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5376kB pagetables:9060kB sec_pagetables:208kB all_unreclaimable? yes Balloon:0kB [ 368.240997][T12258] Node 0 DMA free:1908kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:76kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 368.296354][T12258] lowmem_reserve[]: 0 289 289 289 289 [ 368.298093][T12258] Node 0 DMA32 free:10488kB boost:0kB min:13332kB low:16664kB high:19996kB reserved_highatomic:2048KB free_highatomic:0KB active_anon:728kB inactive_anon:2700kB active_file:8kB inactive_file:140kB unevictable:3536kB writepending:0kB zspages:1404kB present:1032196kB managed:296784kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:0kB free_cma:0kB [ 368.386899][T12258] lowmem_reserve[]: 0 0 0 0 0 [ 368.393647][T12258] Node 1 DMA32 free:47028kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:72584kB inactive_anon:101500kB active_file:128kB inactive_file:584kB unevictable:3536kB writepending:0kB zspages:6204kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:960kB local_pcp:8kB free_cma:0kB [ 368.465266][T12258] lowmem_reserve[]: 0 0 0 0 0 [ 368.466923][T12258] Node 0 DMA: 3*4kB (U) 7*8kB (U) 5*16kB (U) 11*32kB (U) 4*64kB (U) 1*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 1908kB [ 368.471398][T12258] Node 0 DMA32: 170*4kB (UME) 78*8kB (UME) 32*16kB (UME) 60*32kB (ME) 28*64kB (UME) 10*128kB (UME) 11*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9624kB [ 368.523630][T12258] Node 1 DMA32: 724*4kB (ME) 414*8kB (ME) 1137*16kB (UME) 658*32kB (UME) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 46544kB [ 368.552441][T12258] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 368.555559][T12258] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 368.600691][T12258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 368.604498][T12258] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 368.656381][T12258] 44131 total pagecache pages [ 368.658425][T12258] 768 pages in swap cache [ 368.660305][T12258] Free swap = 188kB [ 368.661980][T12258] Total swap = 124996kB [ 368.663812][T12258] 524155 pages RAM [ 368.665137][T12258] 0 pages HighMem/MovableOnly [ 368.689719][T12258] 209066 pages reserved [ 368.691513][T12258] 0 pages cma reserved [ 368.693203][T12258] Unreclaimable slab info: [ 368.695046][T12258] Name Used Total [ 368.736436][T12258] pid_3 7KB 7KB [ 368.739167][T12258] pid_2 113KB 157KB [ 368.741608][T12258] bio-472 15KB 15KB [ 368.744049][T12258] bio-536 15KB 15KB [ 368.769098][T12258] bio-552 15KB 15KB [ 368.771070][T12258] bio-584 15KB 15KB [ 368.773014][T12258] afs_inode_cache 61KB 61KB [ 368.775042][T12258] zspage-zswap1 186KB 204KB [ 368.793087][T12258] zs_handle-zswap1 192KB 220KB [ 368.829087][T12258] zswap_entry 550KB 624KB [ 368.831069][T12258] AF_VSOCK 122KB 122KB [ 368.833006][T12258] sw_flow_stats 12KB 12KB [ 368.834871][T12258] sw_flow 45KB 45KB [ 368.886401][T12258] batadv_tt_change_cache 16KB 16KB [ 368.888539][T12258] batadv_tl_cache 16KB 16KB [ 368.890512][T12258] ceph_osd_request 63KB 63KB [ 368.892413][T12258] ceph_msg 15KB 15KB [ 368.894384][T12258] IEEE-802.15.4-MAC 93KB 93KB [ 368.917175][T12258] IEEE-802.15.4-RAW 63KB 63KB [ 368.919132][T12258] p9_req_t 39KB 39KB [ 368.921153][T12258] INET_SMC 125KB 125KB [ 368.967399][T12258] SMC6 62KB 62KB [ 368.969356][T12258] SMC 62KB 62KB [ 368.971289][T12258] TIPC 123KB 123KB [ 368.973432][T12258] rds_tcp_connection 31KB 31KB [ 368.975585][T12258] RDS 123KB 123KB [ 369.014601][T12258] rds_connection 23KB 23KB [ 369.033136][T12258] SCTPv6 120KB 120KB [ 369.035842][T12258] SCTP 122KB 122KB [ 369.085373][T12258] sctp_chunk 109KB 109KB [ 369.096387][T12258] sctp_bind_bucket 16KB 16KB [ 369.098418][T12258] L2TP/IPv6 63KB 63KB [ 369.100436][T12258] RXRPC 128KB 128KB [ 369.102376][T12258] rxrpc_call_jar 343KB 510KB [ 369.104612][T12258] can_receiver 15KB 15KB [ 369.149389][T12258] net_bridge_fdb_entry 185KB 185KB [ 369.151380][T12258] MPTCPv6 125KB 125KB [ 369.153328][T12258] ip6-frags 15KB 15KB [ 369.155319][T12258] fib6_node 132KB 132KB [ 369.196386][T12258] ip6_dst_cache 218KB 421KB [ 369.198381][T12258] mfc6_cache 16KB 16KB [ 369.200366][T12258] PINGv6 30KB 30KB [ 369.202378][T12258] RAWv6 247KB 247KB [ 369.204361][T12258] UDPLITEv6 30KB 30KB [ 369.235829][T12258] UDPv6 245KB 245KB [ 369.244074][T12258] tw_sock_TCPv6 7KB 7KB [ 369.246105][T12258] request_sock_TCPv6 23KB 23KB [ 369.264133][T12258] TCPv6 427KB 447KB [ 369.266159][T12258] nf_conntrack 15KB 15KB [ 369.286397][T12258] wg_peer 118KB 118KB [ 369.288644][T12258] allowedips_node 11KB 11KB [ 369.290625][T12258] ubi_wl_entry_slab 3KB 3KB [ 369.292729][T12258] t10_alua_lu_gp_cache 7KB 7KB [ 369.294793][T12258] scsi_sense_cache 48KB 48KB [ 369.332335][T12258] virtio_scsi_cmd 16KB 16KB [ 369.335855][T12258] bio-136 120KB 128KB [ 369.347037][T12258] io_kiocb 109KB 187KB [ 369.349117][T12258] bio-264 15KB 15KB [ 369.350981][T12258] mqueue_inode_cache 121KB 121KB [ 369.353136][T12258] f2fs_bio_post_read_ctx 23KB 23KB [ 369.355282][T12258] jfs_mp 7KB 7KB [ 369.389910][T12258] fuse_request 31KB 31KB [ 369.396529][T12258] cifs_small_rq 16KB 16KB [ 369.399161][T12258] cifs_request 67KB 67KB [ 369.401574][T12258] cifs_mpx_ids 7KB 7KB [ 369.404252][T12258] cifs_io_subrequest 39KB 39KB [ 369.418133][T12258] cifs_io_request 95KB 95KB [ 369.420646][T12258] nfs_commit_data 15KB 15KB [ 369.423214][T12258] nfs_write_data 63KB 63KB [ 369.425748][T12258] jbd2_inode 15KB 15KB [ 369.454238][T12258] ext4_system_zone 3KB 3KB [ 369.469757][T12258] ext4_io_end_vec 15KB 15KB [ 369.472389][T12258] kioctx 127KB 127KB [ 369.474739][T12258] aio_kiocb 31KB 31KB [ 369.507301][T12258] userfaultfd_ctx_cache 63KB 63KB [ 369.509361][T12258] fasync_cache 7KB 7KB [ 369.511477][T12258] pid_namespace 61KB 61KB [ 369.513403][T12258] kvm_gmem_inode_cache 95KB 95KB [ 369.515534][T12258] kvm_async_pf 3KB 3KB [ 369.554555][T12258] kvm_vcpu 154KB 154KB [ 369.564771][T12258] kvm_mmu_page_header 62KB 62KB [ 369.578549][T12258] pte_list_desc 43KB 43KB [ 369.581048][T12258] x86_emulator 126KB 126KB [ 369.582910][T12258] rpc_buffers 31KB 31KB [ 369.584925][T12258] rpc_tasks 7KB 7KB [ 369.598040][T12258] UNIX-STREAM 214KB 214KB [ 369.602757][T12258] UNIX 608KB 826KB [ 369.604766][T12258] ip4-frags 15KB 15KB [ 369.622568][T12258] UDP-Lite 92KB 92KB [ 369.624761][T12258] MPTCP 120KB 120KB [ 369.629634][T12258] tcp_bind2_bucket 16KB 16KB [ 369.638768][T12258] tcp_bind_bucket 20KB 20KB [ 369.640828][T12258] inet_peer 8KB 8KB [ 369.642752][T12258] xfrm_state 63KB 63KB [ 369.644703][T12258] ip_fib_trie 28KB 28KB [ 369.646484][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.649846][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.652778][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.655443][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.659531][T12258] ip_fib_alias 75KB 75KB [ 369.663136][T12258] rtable 66KB 92KB [ 369.665635][T12258] PING 63KB 63KB [ 369.680523][T12258] RAW 159KB 159KB [ 369.682813][T12258] UDP 123KB 123KB [ 369.690143][T12258] tw_sock_TCP 7KB 7KB [ 369.692165][T12258] request_sock_TCP 30KB 30KB [ 369.694436][T12258] TCP 462KB 637KB [ 369.697124][T12258] hugetlbfs_inode_cache 62KB 62KB [ 369.708935][T12258] netfs_subrequest 31KB 31KB [ 369.714648][T12258] netfs_request 95KB 95KB [ 369.720287][T12258] bio-280 15KB 15KB [ 369.727802][T12258] ep_head 16KB 16KB [ 369.730655][T12258] eventpoll_pwq 23KB 23KB [ 369.733598][T12258] eventpoll_epi 59KB 59KB [ 369.744552][T12258] inotify_inode_mark 27KB 27KB [ 369.749372][T12258] sgpool-128 29KB 29KB [ 369.752510][T12258] sgpool-64 31KB 31KB [ 369.757515][T12258] sgpool-32 787KB 913KB [ 369.762066][T12258] sgpool-16 235KB 312KB [ 369.764852][T12258] sgpool-8 172KB 187KB [ 369.769716][T12258] bio_crypt_ctx 7KB 7KB [ 369.774095][T12258] bio_integrity_data 4KB 4KB [ 369.777640][T12258] request_queue 247KB 247KB [ 369.783638][T12258] blkdev_ioc 15KB 15KB [ 369.806773][T12258] bio-200 482KB 511KB [ 369.809944][T12258] biovec-max 756KB 862KB [ 369.817060][T12258] biovec-64 775KB 850KB [ 369.819886][T12258] biovec-16 117KB 148KB [ 369.823774][T12258] mm_slot 11KB 11KB [ 369.826557][T12258] ksm_mm_slot 4KB 4KB [ 369.828832][T12258] ksm_rmap_item 3KB 3KB [ 369.830809][T12258] uid_cache 31KB 31KB [ 369.832895][T12258] iommu_iova_magazine 1084KB 1134KB [ 369.843499][T12258] iommu_iova 276KB 276KB [ 369.846475][T12258] dmaengine-unmap-256 30KB 30KB [ 369.849937][T12258] dmaengine-unmap-128 30KB 30KB [ 369.852006][T12258] dmaengine-unmap-16 4KB 4KB [ 369.853965][T12258] dmaengine-unmap-2 4KB 4KB [ 369.855916][T12258] QIPCRTR 62KB 62KB [ 369.859243][T12258] audit_buffer 101KB 101KB [ 369.861121][T12258] skbuff_ext_cache 48KB 76KB [ 369.862938][T12258] skbuff_small_head 536KB 694KB [ 369.864800][T12258] skbuff_fclone_cache 219KB 296KB [ 369.866813][T12258] skbuff_head_cache 1427KB 1460KB [ 369.868644][T12258] configfs_dir_cache 16KB 16KB [ 369.870483][T12258] file_lease_cache 23KB 23KB [ 369.872300][T12258] file_lock_cache 39KB 39KB [ 369.874148][T12258] file_lock_ctx 15KB 15KB [ 369.876040][T12258] fsnotify_mark_connector 15KB 15KB [ 369.878146][T12258] posix_timers_cache 32KB 32KB [ 369.880034][T12258] taskstats 61KB 61KB [ 369.881952][T12258] mem_cgroup_per_node 109KB 123KB [ 369.884044][T12258] mem_cgroup 89KB 89KB [ 369.886026][T12258] proc_dir_entry 656KB 703KB [ 369.888062][T12258] pde_opener 15KB 15KB [ 369.889978][T12258] seq_file 93KB 132KB [ 369.891903][T12258] sigqueue 27KB 27KB [ 369.893818][T12258] shmem_inode_cache 7851KB 8203KB [ 369.895818][T12258] kernfs_iattrs_cache 15KB 15KB [ 369.898005][T12258] kernfs_node_cache 29680KB 29707KB [ 369.899951][T12258] mnt_cache 149KB 165KB [ 369.901851][T12258] bfilp 15KB 15KB [ 369.903792][T12258] filp 517KB 795KB [ 369.905755][T12258] names_cache 1581KB 1763KB [ 369.907711][T12258] net_namespace 198KB 198KB [ 369.909587][T12258] ima_iint_cache 55KB 55KB [ 369.911464][T12258] lsm_inode_cache 1784KB 1874KB [ 369.913386][T12258] lsm_file_cache 153KB 256KB [ 369.915336][T12258] key_jar 31KB 31KB [ 369.917367][T12258] uts_namespace 62KB 62KB [ 369.919273][T12258] nsproxy 15KB 15KB [ 369.921203][T12258] vm_area_struct 1329KB 1882KB [ 369.923105][T12258] fs_cache 70KB 88KB [ 369.925020][T12258] files_cache 246KB 318KB [ 369.927041][T12258] signal_cache 993KB 1941KB [ 369.928968][T12258] sighand_cache 1288KB 2194KB [ 369.930904][T12258] task_struct 4648KB 5126KB [ 369.932792][T12258] cred 190KB 368KB [ 369.934702][T12258] anon_vma_chain 455KB 555KB [ 369.936653][T12258] anon_vma 591KB 780KB [ 369.938568][T12258] pid 235KB 417KB [ 369.940485][T12258] Acpi-Operand 262KB 360KB [ 369.942389][T12258] Acpi-ParseExt 94KB 118KB [ 369.944317][T12258] Acpi-Parse 78KB 114KB [ 369.946625][T12258] Acpi-State 47KB 82KB [ 369.948689][T12258] Acpi-Namespace 56KB 56KB [ 369.950627][T12258] numa_policy 7KB 7KB [ 369.952558][T12258] perf_event 337KB 408KB [ 369.954478][T12258] trace_event_file 532KB 532KB [ 369.956573][T12258] ftrace_event_field 1004KB 1004KB [ 369.958478][T12258] pool_workqueue 1908KB 1936KB [ 369.960404][T12258] task_group 61KB 61KB [ 369.962315][T12258] maple_node 812KB 1704KB [ 369.964246][T12258] mm_struct 692KB 796KB [ 369.966626][T12258] vmap_area 913KB 1089KB [ 369.969102][T12258] debug_objects_cache 1969KB 2175KB [ 369.971637][T12258] page->ptl 208KB 267KB [ 369.975419][T12258] kmalloc-cg-8k 3184KB 3232KB [ 369.977457][T12258] kmalloc-cg-4k 12056KB 12832KB [ 369.979413][T12258] kmalloc-cg-2k 8216KB 8864KB [ 369.981336][T12258] kmalloc-cg-1k 2254KB 2624KB [ 369.983271][T12258] kmalloc-cg-512 2249KB 2272KB [ 369.985244][T12258] kmalloc-cg-256 378KB 440KB [ 369.996430][T12258] kmalloc-cg-128 222KB 252KB [ 369.998362][T12258] kmalloc-cg-64 353KB 364KB [ 370.000281][T12258] kmalloc-cg-32 289KB 324KB [ 370.002620][T12258] kmalloc-cg-16 16KB 20KB [ 370.005056][T12258] kmalloc-cg-8 29KB 32KB [ 370.007684][T12258] kmalloc-cg-192 87KB 108KB [ 370.010116][T12258] kmalloc-cg-96 96KB 120KB [ 370.012296][T12258] kmalloc-8k 6288KB 6560KB [ 370.014558][T12258] kmalloc-4k 28160KB 29088KB [ 370.016875][T12258] kmalloc-2k 15572KB 16768KB [ 370.019314][T12258] kmalloc-1k 7194KB 7552KB [ 370.021667][T12258] kmalloc-512 8492KB 8928KB [ 370.024124][T12258] kmalloc-256 7373KB 7384KB [ 370.026837][T12258] kmalloc-128 6046KB 9252KB [ 370.028958][T12258] kmalloc-64 5114KB 6680KB [ 370.030906][T12258] kmalloc-32 1653KB 1956KB [ 370.032858][T12258] kmalloc-16 426KB 448KB [ 370.034797][T12258] kmalloc-8 887KB 976KB [ 370.046053][T12258] kmalloc-192 2065KB 2872KB [ 370.048128][T12258] kmalloc-96 2550KB 3112KB [ 370.050245][T12258] kmem_cache_node 224KB 228KB [ 370.052176][T12258] kmem_cache 195KB 195KB [ 370.054106][T12258] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz2,task=syz.2.1862,pid=12258,uid=0 [ 370.067606][T12258] Out of memory (oom_kill_allocating_task): Killed process 12258 (syz.2.1862) total-vm:104012kB, anon-rss:128kB, file-rss:20700kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 370.084131][ T891] usb 7-1: USB disconnect, device number 28 [ 370.086460][ T6131] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 370.122663][T12289] pim6reg: entered allmulticast mode [ 370.128468][ T40] audit: type=1326 audit(1768614760.499:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.3.1871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 370.135430][ T40] audit: type=1326 audit(1768614760.499:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.3.1871" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 370.143082][ T40] audit: type=1326 audit(1768614760.499:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.3.1871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 370.153463][ T40] audit: type=1326 audit(1768614760.499:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.3.1871" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 370.176679][ T40] audit: type=1326 audit(1768614760.499:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.3.1871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 370.191379][ T40] audit: type=1326 audit(1768614760.499:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.3.1871" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 370.201972][ T40] audit: type=1326 audit(1768614760.499:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.3.1871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 370.209338][ T40] audit: type=1326 audit(1768614760.499:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.3.1871" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 370.217587][ T40] audit: type=1326 audit(1768614760.499:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.3.1871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 370.225520][ T40] audit: type=1326 audit(1768614760.499:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.3.1871" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 370.246486][ T6131] usb 9-1: Using ep0 maxpacket: 8 [ 370.250405][ T6131] usb 9-1: config 0 interface 0 has no altsetting 0 [ 370.253420][ T6131] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 370.257442][ T6131] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.267784][ T6131] usb 9-1: config 0 descriptor?? [ 370.352006][T12301] random: crng reseeded on system resumption [ 370.355066][T12303] netlink: 'syz.2.1877': attribute type 9 has an invalid length. [ 370.358800][T12303] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.1877'. [ 370.403977][T12305] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 370.596399][ T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 370.678464][ T6131] mcp2221 0003:04D8:00DD.0015: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 370.746383][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 370.750171][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.753700][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.763030][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 370.767613][ T24] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 370.770672][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.773965][T12312] input: syz0 as /devices/virtual/input/input23 [ 370.789044][ T24] usb 5-1: config 0 descriptor?? [ 370.879550][T12287] netlink: 'syz.4.1870': attribute type 11 has an invalid length. [ 370.882576][T12287] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1870'. [ 370.886203][T12287] i2c i2c-2: unsupported multi-msg i2c transaction [ 370.894416][ T6007] usb 9-1: USB disconnect, device number 6 [ 371.198066][ T24] hid_parser_main: 6 callbacks suppressed [ 371.198081][ T24] shield 0003:0955:7214.0016: unknown main item tag 0x0 [ 371.203193][ T24] shield 0003:0955:7214.0016: unknown main item tag 0x0 [ 371.205456][ T24] shield 0003:0955:7214.0016: unknown main item tag 0x0 [ 371.207789][ T24] shield 0003:0955:7214.0016: unknown main item tag 0x0 [ 371.209953][ T24] shield 0003:0955:7214.0016: unknown main item tag 0x0 [ 371.214056][ T24] input: HID 0955:7214 Haptics as /devices/virtual/input/input24 [ 371.247244][ T24] shield 0003:0955:7214.0016: Registered Thunderstrike controller [ 371.252399][ T24] shield 0003:0955:7214.0016: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 371.397275][ T6007] usb 5-1: USB disconnect, device number 35 [ 371.399821][ T3246] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 371.405546][ T3246] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 371.409429][ T3246] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 371.413362][ T3246] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 371.434382][ T6007] ------------[ cut here ]------------ [ 371.436329][ T6007] workqueue: work disable count underflowed [ 371.438425][ T6007] WARNING: kernel/workqueue.c:4359 at enable_work+0x2ca/0x310, CPU#2: kworker/2:4/6007 [ 371.441572][ T6007] Modules linked in: [ 371.443396][ T6007] CPU: 2 UID: 0 PID: 6007 Comm: kworker/2:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 371.447298][ T6007] Tainted: [L]=SOFTLOCKUP [ 371.448872][ T6007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 371.452465][ T6007] Workqueue: usb_hub_wq hub_event [ 371.454379][ T6007] RIP: 0010:enable_work+0x2ca/0x310 [ 371.456249][ T6007] Code: ff e8 0a f3 39 00 90 0f 0b 90 e9 b4 fe ff ff e8 fc f2 39 00 e8 37 66 f1 09 e9 49 ff ff ff e8 ed f2 39 00 48 8d 3d 56 88 07 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 64 d7 a2 00 e9 f7 fd ff [ 371.462731][ T6007] RSP: 0000:ffffc900065c7348 EFLAGS: 00010087 [ 371.464780][ T6007] RAX: 000000000000ab21 RBX: 0000000000000000 RCX: ffffc9002fa30000 [ 371.467430][ T6007] RDX: 0000000000100000 RSI: ffffffff81846b93 RDI: ffffffff908bf3f0 [ 371.469959][ T6007] RBP: ffff888025aed738 R08: 0000000000000005 R09: 0000000000000000 [ 371.472593][ T6007] R10: 0000000000000000 R11: ffff888022142ff0 R12: 1ffff92000cb8e6a [ 371.475188][ T6007] R13: ffffffff8fc5269f R14: ffff888025aed698 R15: ffff888025aed730 [ 371.477797][ T6007] FS: 0000000000000000(0000) GS:ffff8880978f9000(0000) knlGS:0000000000000000 [ 371.480705][ T6007] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 371.482864][ T6007] CR2: 00000000f5465da4 CR3: 000000004fa8f000 CR4: 0000000000352ef0 [ 371.485524][ T6007] Call Trace: [ 371.486655][ T6007] [ 371.487694][ T6007] ? __pfx_enable_work+0x10/0x10 [ 371.489292][ T6007] cancel_delayed_work_sync+0x96/0xf0 [ 371.490984][ T6007] thermal_zone_device_unregister+0x28e/0x4d0 [ 371.492887][ T6007] ? __pfx_shield_remove+0x10/0x10 [ 371.494520][ T6007] power_supply_unregister+0x10a/0x150 [ 371.496273][ T6007] shield_remove+0x75/0x130 [ 371.497913][ T6007] ? __pfx_shield_remove+0x10/0x10 [ 371.499515][ T6007] hid_device_remove+0xd1/0x260 [ 371.501168][ T6007] ? __pfx_hid_device_remove+0x10/0x10 [ 371.502987][ T6007] device_remove+0xcb/0x170 [ 371.504453][ T6007] device_release_driver_internal+0x44b/0x620 [ 371.506362][ T6007] bus_remove_device+0x22f/0x450 [ 371.507932][ T6007] device_del+0x396/0x9f0 [ 371.509301][ T6007] ? __pfx_device_del+0x10/0x10 [ 371.510835][ T6007] ? do_raw_spin_lock+0x12c/0x2b0 [ 371.512499][ T6007] hid_destroy_device+0x19c/0x240 [ 371.514105][ T6007] usbhid_disconnect+0xa0/0xe0 [ 371.515710][ T6007] usb_unbind_interface+0x1dd/0x9e0 [ 371.517341][ T6007] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 371.519208][ T6007] ? __pfx_usb_unbind_interface+0x10/0x10 [ 371.521061][ T6007] device_remove+0x125/0x170 [ 371.522555][ T6007] device_release_driver_internal+0x44b/0x620 [ 371.524593][ T6007] bus_remove_device+0x22f/0x450 [ 371.526203][ T6007] device_del+0x396/0x9f0 [ 371.527633][ T6007] ? __pfx_device_del+0x10/0x10 [ 371.529177][ T6007] ? kobject_put+0x218/0x6f0 [ 371.530654][ T6007] usb_disable_device+0x355/0x820 [ 371.532263][ T6007] usb_disconnect+0x2e1/0x9e0 [ 371.533787][ T6007] hub_event+0x1d84/0x52f0 [ 371.535329][ T6007] ? __lock_acquire+0x436/0x2890 [ 371.536923][ T6007] ? lock_acquire+0x179/0x330 [ 371.538418][ T6007] ? __pfx_hub_event+0x10/0x10 [ 371.539965][ T6007] ? finish_task_switch.isra.0+0x202/0xbd0 [ 371.541811][ T6007] ? rcu_is_watching+0x12/0xc0 [ 371.543399][ T6007] process_one_work+0x9ba/0x1b20 [ 371.545015][ T6007] ? __pfx_process_one_work+0x10/0x10 [ 371.546758][ T6007] ? assign_work+0x1a0/0x250 [ 371.548224][ T6007] worker_thread+0x6c8/0xf10 [ 371.549698][ T6007] ? __pfx_worker_thread+0x10/0x10 [ 371.551209][ T6007] kthread+0x3c5/0x780 [ 371.552484][ T6007] ? __pfx_kthread+0x10/0x10 [ 371.553979][ T6007] ? rcu_is_watching+0x12/0xc0 [ 371.555570][ T6007] ? __pfx_kthread+0x10/0x10 [ 371.557043][ T6007] ret_from_fork+0x983/0xb10 [ 371.558514][ T6007] ? __pfx_ret_from_fork+0x10/0x10 [ 371.560144][ T6007] ? __switch_to+0x7af/0x10d0 [ 371.561646][ T6007] ? __pfx_kthread+0x10/0x10 [ 371.563098][ T6007] ret_from_fork_asm+0x1a/0x30 [ 371.564669][ T6007] [ 371.565713][ T6007] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 371.568001][ T6007] CPU: 2 UID: 0 PID: 6007 Comm: kworker/2:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 371.571523][ T6007] Tainted: [L]=SOFTLOCKUP [ 371.572895][ T6007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 371.576422][ T6007] Workqueue: usb_hub_wq hub_event [ 371.577880][ T6007] Call Trace: [ 371.578946][ T6007] [ 371.579912][ T6007] dump_stack_lvl+0x3d/0x1f0 [ 371.581389][ T6007] vpanic+0x640/0x6f0 [ 371.582672][ T6007] ? enable_work+0x2ca/0x310 [ 371.584179][ T6007] panic+0xca/0xd0 [ 371.585413][ T6007] ? __pfx_panic+0x10/0x10 [ 371.586839][ T6007] check_panic_on_warn+0xab/0xb0 [ 371.588459][ T6007] __warn+0x108/0x3c0 [ 371.589816][ T6007] __report_bug+0x2a0/0x520 [ 371.591284][ T6007] ? enable_work+0x2ca/0x310 [ 371.592780][ T6007] ? __pfx___report_bug+0x10/0x10 [ 371.594470][ T6007] ? __wait_for_common+0x1e0/0x4e0 [ 371.596447][ T6007] ? __pfx_schedule_timeout+0x10/0x10 [ 371.598247][ T6007] ? enable_work+0x2c3/0x310 [ 371.599792][ T6007] ? find_held_lock+0x2b/0x80 [ 371.601378][ T6007] report_bug_entry+0xe1/0x290 [ 371.602931][ T6007] ? enable_work+0x2ca/0x310 [ 371.604480][ T6007] handle_bug+0x18a/0x260 [ 371.605879][ T6007] exc_invalid_op+0x17/0x50 [ 371.607347][ T6007] asm_exc_invalid_op+0x1a/0x20 [ 371.608997][ T6007] RIP: 0010:enable_work+0x2ca/0x310 [ 371.610648][ T6007] Code: ff e8 0a f3 39 00 90 0f 0b 90 e9 b4 fe ff ff e8 fc f2 39 00 e8 37 66 f1 09 e9 49 ff ff ff e8 ed f2 39 00 48 8d 3d 56 88 07 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 64 d7 a2 00 e9 f7 fd ff [ 371.616567][ T6007] RSP: 0000:ffffc900065c7348 EFLAGS: 00010087 [ 371.618436][ T6007] RAX: 000000000000ab21 RBX: 0000000000000000 RCX: ffffc9002fa30000 [ 371.620985][ T6007] RDX: 0000000000100000 RSI: ffffffff81846b93 RDI: ffffffff908bf3f0 [ 371.623446][ T6007] RBP: ffff888025aed738 R08: 0000000000000005 R09: 0000000000000000 [ 371.625841][ T6007] R10: 0000000000000000 R11: ffff888022142ff0 R12: 1ffff92000cb8e6a [ 371.628377][ T6007] R13: ffffffff8fc5269f R14: ffff888025aed698 R15: ffff888025aed730 [ 371.630800][ T6007] ? enable_work+0x2c3/0x310 [ 371.632249][ T6007] ? enable_work+0x2c3/0x310 [ 371.633718][ T6007] ? __pfx_enable_work+0x10/0x10 [ 371.635366][ T6007] cancel_delayed_work_sync+0x96/0xf0 [ 371.637016][ T6007] thermal_zone_device_unregister+0x28e/0x4d0 [ 371.638905][ T6007] ? __pfx_shield_remove+0x10/0x10 [ 371.640555][ T6007] power_supply_unregister+0x10a/0x150 [ 371.642279][ T6007] shield_remove+0x75/0x130 [ 371.643771][ T6007] ? __pfx_shield_remove+0x10/0x10 [ 371.645397][ T6007] hid_device_remove+0xd1/0x260 [ 371.646938][ T6007] ? __pfx_hid_device_remove+0x10/0x10 [ 371.648679][ T6007] device_remove+0xcb/0x170 [ 371.650076][ T6007] device_release_driver_internal+0x44b/0x620 [ 371.651884][ T6007] bus_remove_device+0x22f/0x450 [ 371.653434][ T6007] device_del+0x396/0x9f0 [ 371.654857][ T6007] ? __pfx_device_del+0x10/0x10 [ 371.656432][ T6007] ? do_raw_spin_lock+0x12c/0x2b0 [ 371.658021][ T6007] hid_destroy_device+0x19c/0x240 [ 371.659630][ T6007] usbhid_disconnect+0xa0/0xe0 [ 371.661169][ T6007] usb_unbind_interface+0x1dd/0x9e0 [ 371.662842][ T6007] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 371.664683][ T6007] ? __pfx_usb_unbind_interface+0x10/0x10 [ 371.666495][ T6007] device_remove+0x125/0x170 [ 371.667972][ T6007] device_release_driver_internal+0x44b/0x620 [ 371.669830][ T6007] bus_remove_device+0x22f/0x450 [ 371.671414][ T6007] device_del+0x396/0x9f0 [ 371.672795][ T6007] ? __pfx_device_del+0x10/0x10 [ 371.674442][ T6007] ? kobject_put+0x218/0x6f0 [ 371.676016][ T6007] usb_disable_device+0x355/0x820 [ 371.677621][ T6007] usb_disconnect+0x2e1/0x9e0 [ 371.679073][ T6007] hub_event+0x1d84/0x52f0 [ 371.680526][ T6007] ? __lock_acquire+0x436/0x2890 [ 371.682096][ T6007] ? lock_acquire+0x179/0x330 [ 371.683618][ T6007] ? __pfx_hub_event+0x10/0x10 [ 371.685110][ T6007] ? finish_task_switch.isra.0+0x202/0xbd0 [ 371.686864][ T6007] ? rcu_is_watching+0x12/0xc0 [ 371.688384][ T6007] process_one_work+0x9ba/0x1b20 [ 371.689962][ T6007] ? __pfx_process_one_work+0x10/0x10 [ 371.691674][ T6007] ? assign_work+0x1a0/0x250 [ 371.693156][ T6007] worker_thread+0x6c8/0xf10 [ 371.694668][ T6007] ? __pfx_worker_thread+0x10/0x10 [ 371.696276][ T6007] kthread+0x3c5/0x780 [ 371.697556][ T6007] ? __pfx_kthread+0x10/0x10 [ 371.698992][ T6007] ? rcu_is_watching+0x12/0xc0 [ 371.700484][ T6007] ? __pfx_kthread+0x10/0x10 [ 371.701939][ T6007] ret_from_fork+0x983/0xb10 [ 371.703386][ T6007] ? __pfx_ret_from_fork+0x10/0x10 [ 371.704965][ T6007] ? __switch_to+0x7af/0x10d0 [ 371.706616][ T6007] ? __pfx_kthread+0x10/0x10 [ 371.708144][ T6007] ret_from_fork_asm+0x1a/0x30 [ 371.709707][ T6007] [ 371.711374][ T6007] Kernel Offset: disabled [ 371.712748][ T6007] Rebooting in 86400 seconds..