last executing test programs: 3.846132121s ago: executing program 2 (id=464): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="291004006d61637365633000000000000000000008000a000000000000000000", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x1a}, 0x4000010) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff00000006000200000000000600"], 0xc8}}, 0x0) getsockname$netlink(r5, &(0x7f0000000180), &(0x7f00000001c0)=0xc) close(r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000040095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r6, 0x2e, 0x0, r6, @void, @value=0x0}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000040)={r7}, 0x8) close(r8) r9 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r10, 0xa) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) 3.618485984s ago: executing program 2 (id=466): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x2f, 0x9, 0x70bd2b, 0x25dfdbfe, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2014}, 0x0) 3.475068307s ago: executing program 2 (id=468): r0 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6f, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x5b03, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.801841626s ago: executing program 1 (id=477): write(0xffffffffffffffff, &(0x7f0000000200), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getparam(r0, &(0x7f0000002b80)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) keyctl$restrict_keyring(0x10, 0xfffffffffffffff8, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r2 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) mknod$loop(&(0x7f0000000040)='./pipefs/gssd/clntXX/gssd\x00', 0x100, 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 2.660865415s ago: executing program 1 (id=478): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r3, 0x1, 0x28, 0x0, 0x0) syz_emit_ethernet(0x1e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x844}, 0x884) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000006d0200000300160022bf000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x2401, r4, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r4}, 0x38) 1.810660266s ago: executing program 3 (id=484): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r0]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd4(r0, &(0x7f0000000080)={[0x2000000]}, 0x8, 0x0) 1.726660343s ago: executing program 3 (id=485): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="291004006d61637365633000000000000000000008000a000000000000000000", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x1a}, 0x4000010) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff00000006000200000000000600"], 0xc8}}, 0x0) getsockname$netlink(r5, &(0x7f0000000180), &(0x7f00000001c0)=0xc) close(r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000040095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r6, 0x2e, 0x0, r6, @void, @value=0x0}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000040)={r7}, 0x8) close(r8) r9 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xa) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) 1.651317336s ago: executing program 1 (id=486): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f00000003c0)=0x8, 0x4) syz_emit_ethernet(0x1e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x844}, 0x884) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000006d0200000300160022bf000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x2401, r4, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r4}, 0x38) 1.277032852s ago: executing program 1 (id=488): write(0xffffffffffffffff, &(0x7f0000000200), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getparam(r0, &(0x7f0000002b80)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) keyctl$restrict_keyring(0x10, 0xfffffffffffffff8, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r2 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) mknod$loop(&(0x7f0000000040)='./pipefs/gssd/clntXX/gssd\x00', 0x100, 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 1.041985456s ago: executing program 0 (id=490): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1234\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x5678\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/f1\x00') vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x401, 0xfffffffe, 0x200, {0x0, 0x0, 0x0, 0x0, 0x10227}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) write(r2, &(0x7f0000000380)='dummy_udc.0\n\x00', 0xc) nanosleep(&(0x7f00000003c0)={0x0, 0x5f5e100}, 0x0) write(r2, &(0x7f0000000400)='\n', 0x1) ioctl$XFS_IOC_FSBULKSTAT(r2, 0xc0105865, &(0x7f00000007c0)={&(0x7f0000000440)=0x7fffffffffffffff, 0x6, &(0x7f0000000480)=[{}, {}, {}, {}], &(0x7f0000000780)}) 1.03204418s ago: executing program 1 (id=491): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys_sec\x00', &(0x7f0000000200)='securityfs\x00', 0x22c3c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, 0x0, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x2, 0xfffffffffffffff8}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') chdir(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x1, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd=r1, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/uprobe_events\x00', 0x201, 0x0) 916.436516ms ago: executing program 1 (id=492): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x202520) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffd, 0x6, 0x81, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000700)="1265b11488a6", 0x0, 0x7fffffff, 0x10022, 0x3, 0x0}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r3 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r4, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x2, 0x20000000, 0x9, 0x6, 0x0, {0x0, 0x10041, 0xd8, 0xc, 0x2, 0x80000000002, 0x9, 0x0, 0x5, 0xa000, 0xfffffffc, r5, r6, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000000300)=0x7) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="d264c56aabd8a59c17d5a2dc51187526a832603789137b024bfdea515a2b4621a9ef131eae95271f2c1e966559c1eef3068af7d413d8253898d727e605c60e02069be7be5e1049cb95c8165327607536e80f03acdfd78caca212659b4ccc8b43f4ed9a76a11c0b38d112716532de61e790a159c3631d928df3387b9b48ca6c5c94fd77b79f30c79c46689bcabdbaa5d45949e77c1ab36c1c5b8a9492b9b498692480990e8c0a93913b91f04abee4620dd60b310eddf7c91163cf1898f042445f6840a5f5527f7277112bc5096a712d8068112c8f95d5559a86c8c49a4bac", @ANYRESHEX=r7, @ANYRES16=r7]) read$FUSE(r9, &(0x7f0000006380)={0x2020}, 0x2020) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000840)={'syztnl2\x00', &(0x7f0000000780)={'gre0\x00', 0x0, 0x7800, 0x10, 0x5, 0x4, {{0x22, 0x4, 0x3, 0x2b, 0x88, 0x64, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100, {[@lsrr={0x83, 0x1f, 0x55, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote, @empty, @private=0xa010102, @private=0xa010100]}, @timestamp_prespec={0x44, 0x44, 0xcc, 0x3, 0x1, [{@private=0xa010101, 0x400}, {@rand_addr=0x64010102, 0x9}, {@broadcast, 0x3}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x8}, {@broadcast, 0x1ddc}, {@rand_addr=0x64010102, 0x4}, {@multicast2, 0x1000}, {@multicast2, 0xff}]}, @timestamp_prespec={0x44, 0xc, 0x18, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x44}, 0xe}]}, @noop, @noop]}}}}}) sendmmsg$sock(r3, &(0x7f000000ecc0)=[{{&(0x7f0000000440)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000500)="4f70b5a8948bf5abeefc32", 0xb}, {&(0x7f0000001840)="ca24b0fac632f4d0921a5e8448fa0723c5f963d3a72580784ac2622b8784e8e8c923dd9eea5ac874c8e09b9e9a9ac642a5df12e666acad229d76ff80", 0x3c}, {&(0x7f0000001880)="14dc35aba9aa792244ea6653f946158f4018b8cabc0b4fb0edcca7ecb6f1f12fe5d2991c9d80348511babe180f96557d9375ae8d33d6fe7126ef8ddd4fb2078f02f2a254c12900d87abe2cfac5fbd60e62", 0x51}, {&(0x7f0000001900)="4dda390ad8e981636a35e399a22f375e", 0x10}, {&(0x7f0000000580)="e7bd05e8e81fdc96f2f1398a3793d5404c0077aff5607b658ae2e145a25deb461fb83833785b2ea0e6bdb0ccf3125d6bb99f425c6c60dfc34e444bc9f25dce1944214c6989397d74b901019452eacbfb1717ce4c504b6c87f9c92497000000000000000000", 0x62}], 0x5, &(0x7f0000001a00)=[@timestamping={{0x10, 0x1, 0x25, 0x2}}, @txtime={{0x14, 0x1, 0x3d, 0x101}}, @mark={{0x10, 0x1, 0x24, 0xa6b9}}, @mark={{0x10, 0x1, 0x24, 0x9b}}, @mark={{0x10, 0x1, 0x24, 0x6}}, @timestamping={{0x10, 0x1, 0x25, 0x2}}], 0x64}}, {{&(0x7f0000001d80)=@xdp={0x2c, 0x1e, 0x0, 0x36}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001e00)="57225ae2cc51fa51ecbf960a4d8a6a8d817921700867a0f927723b624d34936ab650", 0x22}, {&(0x7f0000001e40)="e0391b38b0731e2ad1021b3cb99afc5a7828f90b70dd53d938d55ecf30aef1894dc372594bb6c729ab95e6873f7490ab8fed0bd127bfe109fe851c718f49172e869b73f564354373b9e2cb0838a103d2012b4d11a027f9ab1fea3f48286a0c01f3115c4120f5951cd58811f9b568fed555e77fb1e63ec43505b146414543c071f3be1e61", 0x84}, {&(0x7f0000001f00)="88b1df2a07dba7bdbb23f8e505ca29615f270f385dab967e99bc046893f87234f7f535b8bd2756f548eca328087b2598675aca2e04b3ab0f25b32082b9b8c496543f971776748220b333483c70348db9b3a0a22cff4330aa0ce8a426af576efb2d0425c303f3c0f57c9393a031ffa5fdb6faac070481fa389c5a7b7d2ed31be5dc70787ed10a4a635a132052d3036d7f6edbbfcec228708bed8a5efa", 0x9c}, {&(0x7f0000001fc0)="5e885f4a8f1de73f454706e139", 0xd}, {&(0x7f0000002000)="8dc59ad18574648f26983a91dfae26e8e9e1e27944496c5445ee3de940b505b10f7c7d92cc4c6ca2d7e76ca45b856f27e05c93ddef28304746a2f4e44be678b4cbd569d5ffc0ee154bdf1af7446bf806f6fc687e0d75e22c01703de6d17ccd3d6c05fb567c205445615cfd806546e58d78a5abf001962bc4da9fe5258da1", 0x7e}], 0x5}}, {{&(0x7f0000004ec0)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, &(0x7f0000005140)=[{&(0x7f0000004f40)="9af3026df6bb063cf1876cf3af5394c92738602a9c2e728c616c7339ff59b24fe88c", 0x22}, {&(0x7f0000004f80)="d3938bbaf36bf5d1982f54fae386f08c90bf5614bd6b3bef5371b7e01bc61c54ee8346fef566ac61cb8d7ca8c37787d28af10ce5918da85018a1d3e4b06f484a15d8caa3fb49108482a2b277ca0c964257cdf8b8f2cc17302753fe96d5978e3934b852e988361d744d2f9566b1d925285821f12924dbe17f98ce85e768fd4f1065afcb63c3011931f1ad20d722d09466673e969d40dd766b505c3f357fc1da", 0x9f}, {&(0x7f0000005040)="6b2bd910f58285ef9cbff95b870cb1db35b111b126e8c75fb4c2581862874b92066dde399890ea392a0037c6ceb14166ae97968900bd0a833d0b86f8c3f496eadab239372513d233e6655b64f52b151c2ce88e101ed2d95a6f70e5f3842381343cb6c3cc9b4938b65ee567251dfd07678bfdefeb612b8a5557abf02b7393b5983a7bac25c5051d582562ef41793dd6a83c0a9549a643794101fec976aad00efa26999f452d4a7d18e4038fbd57ed71c52f389e294d35478596736d479f29e388cc9eb5a8c6c3382cd4", 0xc9}], 0x3, &(0x7f00000003c0)=[@txtime={{0x68, 0x1, 0x3d, 0x10}}], 0x14}}, {{&(0x7f00000051c0)=@x25, 0x80, &(0x7f000000e8c0)=[{&(0x7f000000d580)="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", 0x1000}, {&(0x7f000000e580)="9a9573bea5df0c1e32e63e2b46d58a9cb7bdc4dbcedd093cd370178cd097ba52c5f628d8f65b416f6011a4008dd931de08b70218cb6b2d0f2167bfc9ba9aa10bbd37f2898690d752e54fcfdcd450ba3146391a14", 0x54}, {&(0x7f000000e600)="7ba3c589b3b0fa7fd08d28098d3ef5ee3d1156cf62484af43938fe6a9be01a48132af7cd1656549fbfb23b7c8d8e90456aa61d55a4", 0x35}, {&(0x7f000000e640)="16f567a1dce8cc25c67679f03ece4a61028fe91e8df88d4ce49a192784481521940032d35a5c0d9d35357a4a162667a572ddb54d5a49eec128f78acf2867112b73b43a734393e7662950666fcc5a4791756ebb415393faf269b613b01bfc17339ee9f7637abbcd1597f3118ce7aec8d7ce009f41f28bb03dcdcf7896d5d4b3eab354877dbdd2fe71f83fac9f83ba4085ef7ab0dfc609bfafb479fb08294ad290", 0xa0}, {&(0x7f000000e700)="65843c90bf7500866d1654e5bc70cc55a1f25cd7c2cf1ae853dc187224fe3b89f9b5ddfc6998706900e283a9e64650b27b6769c4d34911b0f6f24b926c92f97b8f1f21e1654eb350ce6143a68e9c3cfe644155d7eae090de404d2dad1ffd1c8211c0b28c457443b5094dd0fbc378b236a2e3655ca79e3650b2fdcaab66332f0a183e275eff65f5e4dea8b6217a9e09904cd3f524dd2dfe565c0085d2bb48254c963f6be6c658b2d6bd817aece94c46984d8ea6e069379e", 0xb7}, {&(0x7f000000e7c0)="a61f669c89d85f7e54c3c27f306ef1edd07137572556dc1a729a1534594fc39ada5b85af703ff688d86e3dfc6d699a1f53f210", 0x33}, {&(0x7f000000e800)="df4f2c9341972bb286f23437c271f544448358d8f7bb86924065341b1d7902d524bcef241bdcbb75f189d2d64de019c839b76761e21a49ada0b800ebc7bf93ae489e94e91b9b7eaf9546b80e459d04158d49447200a7ba283cc78905e431892153857a6351c55f57505c3a758496533f162fad83e70b484fa7fae7ceb9dd340e0c985189de2bc41292dd9e8b2d0ab2cc4b999c9ad84b63bf0462f74a7cf35c38975633159c10bcc54627f2ab5bb39c742c2dee3d370824cb", 0xb8}], 0x7, &(0x7f00000002c0), 0x14}}, {{&(0x7f000000e940)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @multicast2}, 0x1, 0x3, 0x1, 0x2}}, 0x80, &(0x7f000000eb00)=[{&(0x7f0000000880)="a466e9027fcd6364bd9a4076999637c40328e7ee0e8aad1f8935863c9102317f66c43045fb733792bd92fe9b7fe03ac5ad302d3697d77e4b41aece37ae3d7c68ba0771664fe08a04bb0eed475c9f52aaa54d805abac468a42eb192e082756bea9f1b47106c1b9d06e25b481e334f873dfdc04de3db9609f4277aa3c251879918573ee9efa690163ad8524ccd6ea541f7e550ecf5317207705201f49c2bc06d0ccdf4662ec3e994ba224e94c4f4168684", 0xae}, {&(0x7f000000ea80)="b24ff464dd756eeb57b93899644f608a268acd804797b101b68205d81ec7e7651999607423aef096628cb1152693237f554b5f4193b61656cada92036bdc31628b1cfbe33b52ff9ee68db70b069c417700aa5b7d900fc9d7cca7", 0x5a}], 0x2, &(0x7f000000eb40)=[@mark={{0x10, 0x1, 0x24, 0x2}}, @mark={{0x10, 0x1, 0x24, 0x6}}, @mark={{0x10, 0x1, 0x24, 0x6}}, @mark={{0x10, 0x1, 0x24, 0xd}}, @mark={{0x10, 0x1, 0x24, 0x7}}, @txtime={{0x14, 0x1, 0x3d, 0x5}}, @txtime={{0x14, 0x1, 0x3d, 0xfb}}], 0x78}}, {{&(0x7f000000ebc0)=@ll={0x11, 0xf6, r10, 0x1, 0x8, 0x6, @broadcast}, 0x80, &(0x7f000000ec40), 0x0, &(0x7f000000ec80)=[@timestamping={{0x10, 0x1, 0x25, 0xd}}, @timestamping={{0x10, 0x1, 0x25, 0x3951}}], 0x20}}], 0x6, 0x40044) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000540)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r11 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r11, 0x0) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r12 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r12, 0x2285, &(0x7f0000000740)={0x0, 0xfffffffffffffffe, 0x7, 0x0, @buffer={0x0, 0xc9, &(0x7f00000001c0)=""/201}, &(0x7f0000000100)="a1f8c8b8990dc7", 0x0, 0xffff140f, 0x0, 0xffffffff, 0x0}) ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, 0x0) 825.482706ms ago: executing program 3 (id=493): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000540)='connect aa:aa:aa:aa:aa:11 1', 0x1b) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x4, 0x80800) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000080)={0xffffffffffffffff, 0x58000, 0x2, r5, 0xc}) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000040)=0x80000000, 0x4) fcntl$notify(r0, 0x402, 0x4) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x30) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000a80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r8, 0x1, 0x123, 0x234, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}]}, 0x2c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r11, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi1\x00', 0x200, 0x0) sendmsg$802154_dgram(r10, &(0x7f00000003c0)={&(0x7f0000000000)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000380)={0x0}}, 0x0) 825.083456ms ago: executing program 0 (id=494): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4f9309", 0x14, 0x6, 0x1, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4c840) sendmsg$nl_route_sched(r0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 739.296795ms ago: executing program 0 (id=495): mkdirat(0xffffffffffffff9c, 0x0, 0x1cc) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getparam(r0, &(0x7f0000002b80)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) keyctl$restrict_keyring(0x10, 0xfffffffffffffff8, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r2 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) mknod$loop(&(0x7f0000000040)='./pipefs/gssd/clntXX/gssd\x00', 0x100, 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 719.383555ms ago: executing program 3 (id=496): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4f9309", 0x14, 0x6, 0x1, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4c840) sendmsg$nl_route_sched(r0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 538.615407ms ago: executing program 0 (id=497): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r0]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd4(r0, &(0x7f0000000080)={[0x2000000]}, 0x8, 0x0) 481.837228ms ago: executing program 0 (id=498): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='rd_pages=64\n', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='naa.6001405', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000480)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0/virtual_scsi_port\x00') openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) 464.623019ms ago: executing program 3 (id=499): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8001, 0x5, @empty, 0x8}, 0x1c) listen(0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="000000000000aaf73dcfc97c937c940000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x1af1f000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x4000, 0x5}]}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd489}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x80080) 376.247698ms ago: executing program 2 (id=500): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys_sec\x00', &(0x7f0000000200)='securityfs\x00', 0x22c3c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, 0x0, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x2, 0xfffffffffffffff8}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') chdir(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x1, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd=r1, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/uprobe_events\x00', 0x201, 0x0) 375.824421ms ago: executing program 0 (id=501): syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000062a10b40450c101003000102030109021b00010000000009043200019740a40009058203ff"], 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 375.323646ms ago: executing program 3 (id=502): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = gettid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) close(0x3) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) pselect6(0x40, &(0x7f00000003c0)={0x0, 0x1, 0x20000004, 0x1, 0x4, 0x8c4, 0x2000000000000}, 0x0, &(0x7f0000000080)={0x1f, 0x3, 0x9117, 0x0, 0x4, 0x8, 0x0, 0x2}, 0x0, 0x0) timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 306.201377ms ago: executing program 2 (id=503): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4f9309", 0x14, 0x6, 0x1, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4c840) sendmsg$nl_route_sched(r0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 0s ago: executing program 2 (id=504): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4f9309", 0x14, 0x6, 0x1, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4c840) sendmsg$nl_route_sched(r0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:35211' (ED25519) to the list of known hosts. syzkaller login: [ 82.065416][ T5696] cgroup: Unknown subsys name 'net' [ 82.212395][ T5696] cgroup: Unknown subsys name 'cpuset' [ 82.228688][ T5696] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.373644][ T5696] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.349950][ T840] cfg80211: failed to load regulatory.db [ 96.532933][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.534566][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.534997][ T67] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.535765][ T67] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.536241][ T67] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.601596][ T5100] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.606252][ T5100] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.607435][ T5100] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.608231][ T5100] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.609082][ T5100] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.713360][ T67] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.714168][ T67] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.715049][ T67] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.715952][ T67] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.717457][ T67] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.736281][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.738016][ T5758] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.738589][ T5758] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.739979][ T5758] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.740820][ T5758] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.097493][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.098444][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.098586][ T5762] bridge_slave_0: entered allmulticast mode [ 98.100209][ T5762] bridge_slave_0: entered promiscuous mode [ 98.208300][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.208378][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.208512][ T5762] bridge_slave_1: entered allmulticast mode [ 98.209935][ T5762] bridge_slave_1: entered promiscuous mode [ 98.312168][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.315850][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.441266][ T5762] team0: Port device team_slave_0 added [ 98.452338][ T5762] team0: Port device team_slave_1 added [ 98.590119][ T5100] Bluetooth: hci0: command tx timeout [ 98.599031][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.599046][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.599066][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.631671][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.631687][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.631704][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.709840][ T5100] Bluetooth: hci1: command tx timeout [ 98.878126][ T5100] Bluetooth: hci2: command tx timeout [ 98.887425][ T5100] Bluetooth: hci3: command tx timeout [ 98.949818][ T5762] hsr_slave_0: entered promiscuous mode [ 98.951025][ T5762] hsr_slave_1: entered promiscuous mode [ 98.964089][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.964454][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.964550][ T5768] bridge_slave_0: entered allmulticast mode [ 98.966208][ T5768] bridge_slave_0: entered promiscuous mode [ 98.969506][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.969587][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.970502][ T5768] bridge_slave_1: entered allmulticast mode [ 98.972012][ T5768] bridge_slave_1: entered promiscuous mode [ 99.083879][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.099684][ T5757] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.100397][ T5757] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.100514][ T5757] bridge_slave_0: entered allmulticast mode [ 99.102132][ T5757] bridge_slave_0: entered promiscuous mode [ 99.108430][ T5757] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.108513][ T5757] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.108641][ T5757] bridge_slave_1: entered allmulticast mode [ 99.110222][ T5757] bridge_slave_1: entered promiscuous mode [ 99.184676][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.378634][ T5768] team0: Port device team_slave_0 added [ 99.381509][ T5768] team0: Port device team_slave_1 added [ 99.449544][ T5757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.465490][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.465622][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.465720][ T5766] bridge_slave_0: entered allmulticast mode [ 99.467083][ T5766] bridge_slave_0: entered promiscuous mode [ 99.469744][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.469803][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.469882][ T5766] bridge_slave_1: entered allmulticast mode [ 99.470946][ T5766] bridge_slave_1: entered promiscuous mode [ 99.503824][ T5757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.554197][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.554216][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.554241][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.556134][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.556151][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.556174][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.672582][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.675266][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.727590][ T5757] team0: Port device team_slave_0 added [ 99.777992][ T5768] hsr_slave_0: entered promiscuous mode [ 99.778679][ T5768] hsr_slave_1: entered promiscuous mode [ 99.779302][ T5768] debugfs: 'hsr0' already exists in 'hsr' [ 99.779365][ T5768] Cannot create hsr debugfs directory [ 99.786621][ T5757] team0: Port device team_slave_1 added [ 99.845850][ T5766] team0: Port device team_slave_0 added [ 99.937482][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.937522][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.937545][ T5757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.939560][ T5766] team0: Port device team_slave_1 added [ 100.089307][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.089326][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.089350][ T5757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.229434][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.229450][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.229469][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.277162][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.277181][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.277205][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.307623][ T5757] hsr_slave_0: entered promiscuous mode [ 100.311508][ T5757] hsr_slave_1: entered promiscuous mode [ 100.313698][ T5757] debugfs: 'hsr0' already exists in 'hsr' [ 100.313725][ T5757] Cannot create hsr debugfs directory [ 100.475779][ T5766] hsr_slave_0: entered promiscuous mode [ 100.479565][ T5766] hsr_slave_1: entered promiscuous mode [ 100.480298][ T5766] debugfs: 'hsr0' already exists in 'hsr' [ 100.480316][ T5766] Cannot create hsr debugfs directory [ 100.632866][ T5762] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.636609][ T5100] Bluetooth: hci0: command tx timeout [ 100.650586][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.675269][ T5762] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.684214][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.753049][ T5762] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.758648][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.759403][ T5762] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.765403][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.786744][ T5100] Bluetooth: hci1: command tx timeout [ 100.950129][ T5100] Bluetooth: hci2: command tx timeout [ 100.950782][ T5100] Bluetooth: hci3: command tx timeout [ 100.979720][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.028231][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.037146][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.042401][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.043151][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.046392][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.080554][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.103464][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.262178][ T5757] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.293906][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.294727][ T5757] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.314385][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.315138][ T5757] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.337420][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.370383][ T5757] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.387901][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.532036][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.673159][ T5766] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.740697][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.762944][ T5766] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.779031][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.812740][ T5766] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.818450][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.821427][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.824176][ T5766] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.846639][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.870701][ T1070] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.870839][ T1070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.000589][ T1070] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.000675][ T1070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.097415][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.148548][ T5757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.235964][ T5757] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.258092][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.265247][ T100] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.265427][ T100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.268289][ T100] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.268376][ T100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.290811][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.290896][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.342681][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.347281][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.434108][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.516785][ T5768] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 102.516810][ T5768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.632493][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.670495][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.670585][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.673527][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.673666][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.757940][ T5100] Bluetooth: hci0: command tx timeout [ 102.880140][ T5100] Bluetooth: hci1: command tx timeout [ 103.027011][ T5100] Bluetooth: hci2: command tx timeout [ 103.029072][ T5100] Bluetooth: hci3: command tx timeout [ 103.343299][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.345275][ T5757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.610915][ T5757] veth0_vlan: entered promiscuous mode [ 103.663895][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.705962][ T5757] veth1_vlan: entered promiscuous mode [ 103.763002][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.773965][ T5762] veth0_vlan: entered promiscuous mode [ 103.782694][ T5762] veth1_vlan: entered promiscuous mode [ 103.898745][ T5762] veth0_macvtap: entered promiscuous mode [ 103.941523][ T5757] veth0_macvtap: entered promiscuous mode [ 103.947969][ T5762] veth1_macvtap: entered promiscuous mode [ 103.961259][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.967315][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.971065][ T5768] veth0_vlan: entered promiscuous mode [ 103.979323][ T5766] veth0_vlan: entered promiscuous mode [ 103.983819][ T5757] veth1_macvtap: entered promiscuous mode [ 104.006330][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.044258][ T5766] veth1_vlan: entered promiscuous mode [ 104.047596][ T5768] veth1_vlan: entered promiscuous mode [ 104.050782][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.168803][ T5823] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.169147][ T5823] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.169196][ T5823] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.169227][ T5823] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.247151][ T5616] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.247358][ T5616] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.247460][ T5616] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.247491][ T5616] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.317479][ T5768] veth0_macvtap: entered promiscuous mode [ 104.377229][ T5766] veth0_macvtap: entered promiscuous mode [ 104.378151][ T5768] veth1_macvtap: entered promiscuous mode [ 104.380236][ T5766] veth1_macvtap: entered promiscuous mode [ 104.399038][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.399060][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.536753][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.562378][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.574101][ T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.574170][ T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.630558][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.666066][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.673381][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.673478][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.674364][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.674403][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.745544][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.745564][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.806850][ T5100] Bluetooth: hci0: command tx timeout [ 105.002538][ T5100] Bluetooth: hci1: command tx timeout [ 105.024454][ T5762] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 105.127033][ T5100] Bluetooth: hci2: command tx timeout [ 105.127071][ T5100] Bluetooth: hci3: command tx timeout [ 105.174216][ T5823] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.174271][ T5823] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.174381][ T5823] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.174417][ T5823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.204000][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.204025][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.459853][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.459873][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.460087][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.460100][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.464974][ T5762] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 105.495469][ T5762] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 105.496393][ T5762] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 105.522063][ T169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.522083][ T169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.602536][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.602559][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.610345][ T5757] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 106.200230][ T5910] FAULT_INJECTION: forcing a failure. [ 106.200230][ T5910] name failslab, interval 1, probability 0, space 0, times 1 [ 106.200260][ T5910] CPU: 1 UID: 0 PID: 5910 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 106.200283][ T5910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.200293][ T5910] Call Trace: [ 106.200301][ T5910] [ 106.200309][ T5910] dump_stack_lvl+0x100/0x190 [ 106.200337][ T5910] should_fail_ex.cold+0x5/0xa [ 106.200364][ T5910] should_failslab+0xc2/0x120 [ 106.200391][ T5910] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 106.200413][ T5910] ? __alloc_skb+0x5b7/0x710 [ 106.200438][ T5910] ? __alloc_skb+0x140/0x710 [ 106.200467][ T5910] __alloc_skb+0x140/0x710 [ 106.200489][ T5910] ? __alloc_skb+0x5b7/0x710 [ 106.200514][ T5910] ? __pfx___alloc_skb+0x10/0x10 [ 106.200545][ T5910] netlink_ack+0x117/0xb80 [ 106.200576][ T5910] netlink_rcv_skb+0x333/0x420 [ 106.200600][ T5910] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 106.200620][ T5910] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 106.200651][ T5910] ? netlink_deliver_tap+0x1ae/0xcc0 [ 106.200679][ T5910] netlink_unicast+0x585/0x850 [ 106.200707][ T5910] ? __pfx_netlink_unicast+0x10/0x10 [ 106.200737][ T5910] netlink_sendmsg+0x8b0/0xda0 [ 106.200765][ T5910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.200791][ T5910] ? apparmor_socket_sendmsg+0x165/0x280 [ 106.200850][ T5910] ____sys_sendmsg+0xa4d/0xbe0 [ 106.200870][ T5910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.200896][ T5910] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.200933][ T5910] ___sys_sendmsg+0x190/0x1e0 [ 106.200957][ T5910] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.200998][ T5910] ? futex_wait+0x11e/0x370 [ 106.201030][ T5910] ? find_held_lock+0x2b/0x80 [ 106.201066][ T5910] __sys_sendmsg+0x160/0x210 [ 106.201094][ T5910] ? __pfx___sys_sendmsg+0x10/0x10 [ 106.201132][ T5910] __do_fast_syscall_32+0x13a/0x8b0 [ 106.201158][ T5910] do_fast_syscall_32+0x32/0x70 [ 106.201178][ T5910] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.201204][ T5910] RIP: 0023:0xf7f95fec [ 106.201227][ T5910] Code: Unable to access opcode bytes at 0xf7f95fc2. [ 106.201234][ T5910] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 106.201253][ T5910] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 106.201267][ T5910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.201278][ T5910] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.201290][ T5910] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 106.201301][ T5910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.201324][ T5910] [ 106.411914][ T5892] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 106.589794][ T5892] usb 8-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 106.592536][ T5892] usb 8-1: config 255 has an invalid interface number: 97 but max is 0 [ 106.592564][ T5892] usb 8-1: config 255 has no interface number 0 [ 106.592591][ T5892] usb 8-1: config 255 interface 97 has no altsetting 0 [ 106.595186][ T5892] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.595207][ T5892] usb 8-1: Product: syz [ 106.595218][ T5892] usb 8-1: Manufacturer: syz [ 106.595229][ T5892] usb 8-1: SerialNumber: syz [ 106.999088][ T5892] rndis_host 8-1:255.97: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 107.127042][ T5892] usb 8-1: USB disconnect, device number 2 [ 107.309316][ T932] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.462577][ T932] usb 5-1: Using ep0 maxpacket: 8 [ 107.464939][ T932] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 107.467140][ T932] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 107.467177][ T932] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 107.467213][ T932] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 107.467241][ T932] usb 5-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 107.467263][ T932] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 107.467292][ T932] usb 5-1: config 168 interface 0 has no altsetting 0 [ 107.476107][ T932] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 107.476141][ T932] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 107.476170][ T932] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 107.476191][ T932] usb 5-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 107.476206][ T932] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 107.476226][ T932] usb 5-1: config 168 interface 0 has no altsetting 0 [ 107.482012][ T932] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 107.482050][ T932] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 107.482077][ T932] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 107.482097][ T932] usb 5-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 107.482113][ T932] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 107.482132][ T932] usb 5-1: config 168 interface 0 has no altsetting 0 [ 107.494365][ T932] usb 5-1: string descriptor 0 read error: -22 [ 107.494500][ T932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.632559][ T932] adutux 5-1:168.0: interrupt endpoints not found [ 107.868282][ T5895] usb 5-1: USB disconnect, device number 2 [ 107.997736][ T5173] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 108.005503][ T5772] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 108.005528][ T5772] CPU: 3 UID: 0 PID: 5772 Comm: kworker/u34:3 Not tainted syzkaller #0 PREEMPT(full) [ 108.005555][ T5772] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.005569][ T5772] Workqueue: hci0 hci_rx_work [ 108.005600][ T5772] Call Trace: [ 108.005607][ T5772] [ 108.005615][ T5772] dump_stack_lvl+0x100/0x190 [ 108.005644][ T5772] sysfs_warn_dup.cold+0x1c/0x28 [ 108.005677][ T5772] sysfs_create_dir_ns+0x24b/0x2b0 [ 108.005705][ T5772] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 108.005727][ T5772] ? find_held_lock+0x2b/0x80 [ 108.005751][ T5772] ? kobject_add_internal+0x25f/0x930 [ 108.005778][ T5772] ? kobject_add_internal+0x25f/0x930 [ 108.005807][ T5772] ? do_raw_spin_unlock+0x145/0x1e0 [ 108.005829][ T5772] kobject_add_internal+0x2c8/0x930 [ 108.005857][ T5772] kobject_add+0x16a/0x1e0 [ 108.005883][ T5772] ? __pfx_kobject_add+0x10/0x10 [ 108.005907][ T5772] ? class_to_subsys+0x10f/0x150 [ 108.005934][ T5772] ? kobject_put+0xb9/0x640 [ 108.005956][ T5772] ? _raw_spin_unlock+0x28/0x50 [ 108.005990][ T5772] device_add+0x294/0x1970 [ 108.006008][ T5772] ? __pfx_dev_set_name+0x10/0x10 [ 108.006033][ T5772] ? __pfx_device_add+0x10/0x10 [ 108.006052][ T5772] ? mgmt_send_event_skb+0x2fb/0x460 [ 108.006116][ T5772] hci_conn_add_sysfs+0x1a3/0x260 [ 108.006137][ T5772] le_conn_complete_evt+0x122f/0x2130 [ 108.006167][ T5772] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 108.006192][ T5772] ? hci_event_packet+0x186/0xcd0 [ 108.006221][ T5772] hci_le_conn_complete_evt+0x23c/0x3a0 [ 108.006248][ T5772] ? skb_pull_data+0x15f/0x1e0 [ 108.006271][ T5772] hci_le_meta_evt+0x34a/0x5f0 [ 108.006296][ T5772] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 108.006322][ T5772] hci_event_packet+0x51c/0xcd0 [ 108.006345][ T5772] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 108.006371][ T5772] ? __pfx_hci_event_packet+0x10/0x10 [ 108.006415][ T5772] ? lockdep_hardirqs_on+0x7d/0x110 [ 108.006439][ T5772] hci_rx_work+0x451/0xfc0 [ 108.006469][ T5772] process_one_work+0xac7/0x1b10 [ 108.006499][ T5772] ? __pfx_process_one_work+0x10/0x10 [ 108.006520][ T5772] ? lock_acquire+0x1d1/0x380 [ 108.006549][ T5772] ? __pfx_hci_rx_work+0x10/0x10 [ 108.006573][ T5772] worker_thread+0x5ef/0xe50 [ 108.006599][ T5772] ? __pfx_worker_thread+0x10/0x10 [ 108.006620][ T5772] ? kthread+0x13a/0x450 [ 108.006636][ T5772] ? __pfx_worker_thread+0x10/0x10 [ 108.006654][ T5772] kthread+0x373/0x450 [ 108.006671][ T5772] ? __pfx_kthread+0x10/0x10 [ 108.006690][ T5772] ret_from_fork+0x730/0xd60 [ 108.006706][ T5772] ? __pfx_ret_from_fork+0x10/0x10 [ 108.006721][ T5772] ? native_load_gs_index+0x1e/0xc0 [ 108.006741][ T5772] ? __switch_to+0x800/0x10f0 [ 108.006761][ T5772] ? __pfx_kthread+0x10/0x10 [ 108.006780][ T5772] ret_from_fork_asm+0x1a/0x30 [ 108.006806][ T5772] [ 108.007550][ T5772] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 108.007590][ T5772] Bluetooth: hci0: failed to register connection device [ 108.207854][ T5173] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 108.242364][ T5173] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.242407][ T5173] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 108.242424][ T5173] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 108.242439][ T5173] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 108.242455][ T5173] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 108.242486][ T5173] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.253504][ T5927] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 108.280929][ T5173] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 108.283684][ T5173] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 108.283738][ T5173] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 108.287854][ T5173] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 108.374652][ T5173] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 108.374718][ T5173] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 108.376602][ T5173] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 108.795081][ T5932] FAULT_INJECTION: forcing a failure. [ 108.795081][ T5932] name failslab, interval 1, probability 0, space 0, times 0 [ 108.795113][ T5932] CPU: 1 UID: 0 PID: 5932 Comm: syz.1.13 Not tainted syzkaller #0 PREEMPT(full) [ 108.795137][ T5932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.795148][ T5932] Call Trace: [ 108.795156][ T5932] [ 108.795164][ T5932] dump_stack_lvl+0x100/0x190 [ 108.795199][ T5932] should_fail_ex.cold+0x5/0xa [ 108.795227][ T5932] should_failslab+0xc2/0x120 [ 108.795255][ T5932] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 108.795278][ T5932] ? __alloc_skb+0x5b7/0x710 [ 108.795307][ T5932] ? __alloc_skb+0x140/0x710 [ 108.795338][ T5932] __alloc_skb+0x140/0x710 [ 108.795364][ T5932] ? __alloc_skb+0x5b7/0x710 [ 108.795391][ T5932] ? __pfx___alloc_skb+0x10/0x10 [ 108.795423][ T5932] netlink_ack+0x117/0xb80 [ 108.795457][ T5932] netlink_rcv_skb+0x333/0x420 [ 108.795484][ T5932] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 108.795513][ T5932] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 108.795548][ T5932] ? netlink_deliver_tap+0x1ae/0xcc0 [ 108.795580][ T5932] netlink_unicast+0x585/0x850 [ 108.795612][ T5932] ? __pfx_netlink_unicast+0x10/0x10 [ 108.795646][ T5932] netlink_sendmsg+0x8b0/0xda0 [ 108.795678][ T5932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.795705][ T5932] ? apparmor_socket_sendmsg+0x165/0x280 [ 108.795735][ T5932] ____sys_sendmsg+0xa4d/0xbe0 [ 108.795754][ T5932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.795782][ T5932] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.795815][ T5932] ___sys_sendmsg+0x190/0x1e0 [ 108.795841][ T5932] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.795862][ T5932] ? futex_wait+0x11e/0x370 [ 108.795893][ T5932] ? find_held_lock+0x2b/0x80 [ 108.795929][ T5932] __sys_sendmsg+0x160/0x210 [ 108.795959][ T5932] ? __pfx___sys_sendmsg+0x10/0x10 [ 108.796000][ T5932] __do_fast_syscall_32+0x13a/0x8b0 [ 108.796026][ T5932] do_fast_syscall_32+0x32/0x70 [ 108.796048][ T5932] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 108.796072][ T5932] RIP: 0023:0xf7f95fec [ 108.796095][ T5932] Code: Unable to access opcode bytes at 0xf7f95fc2. [ 108.796103][ T5932] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 108.796123][ T5932] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 108.796136][ T5932] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.796148][ T5932] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 108.796161][ T5932] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 108.796174][ T5932] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 108.796198][ T5932] [ 108.923669][ T5173] usb 7-1: USB disconnect, device number 2 [ 108.930174][ T5173] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 108.933177][ T5173] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 108.934803][ T5173] keyspan 7-1:1.0: device disconnected [ 109.018057][ T5934] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14'. [ 109.358320][ T5946] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 109.676647][ T5892] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 109.847250][ T5892] usb 6-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 109.848262][ T5892] usb 6-1: config 255 has an invalid interface number: 97 but max is 0 [ 109.848284][ T5892] usb 6-1: config 255 has no interface number 0 [ 109.848308][ T5892] usb 6-1: config 255 interface 97 has no altsetting 0 [ 109.851188][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.851213][ T5892] usb 6-1: Product: syz [ 109.851225][ T5892] usb 6-1: Manufacturer: syz [ 109.851239][ T5892] usb 6-1: SerialNumber: syz [ 110.001495][ T3400] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 110.165163][ T3400] usb 7-1: Using ep0 maxpacket: 8 [ 110.165897][ T3400] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 110.169703][ T3400] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 110.169734][ T3400] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 110.169767][ T3400] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 110.169788][ T3400] usb 7-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 110.169805][ T3400] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 110.169826][ T3400] usb 7-1: config 168 interface 0 has no altsetting 0 [ 110.171082][ T3400] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 110.171108][ T3400] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 110.171137][ T3400] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 110.171157][ T3400] usb 7-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 110.171172][ T3400] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 110.171191][ T3400] usb 7-1: config 168 interface 0 has no altsetting 0 [ 110.172119][ T3400] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 110.172145][ T3400] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 110.172173][ T3400] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 110.172193][ T3400] usb 7-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 110.172209][ T3400] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 110.172229][ T3400] usb 7-1: config 168 interface 0 has no altsetting 0 [ 110.174954][ T3400] usb 7-1: string descriptor 0 read error: -22 [ 110.175054][ T3400] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.180378][ T3400] adutux 7-1:168.0: interrupt endpoints not found [ 110.445652][ T3400] usb 7-1: USB disconnect, device number 3 [ 110.804253][ T5892] rndis_host 6-1:255.97: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 110.819924][ T5964] netlink: 60 bytes leftover after parsing attributes in process `syz.3.26'. [ 110.830481][ T5892] usb 6-1: USB disconnect, device number 2 [ 111.427052][ T5892] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 111.586726][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 111.678467][ T5892] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 111.681972][ T5892] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 111.681998][ T5892] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.682012][ T5892] usb 5-1: config 0 has no interface number 0 [ 111.682044][ T5892] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 255, changing to 11 [ 111.682065][ T5892] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 59391, setting to 1024 [ 111.682084][ T5892] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.682105][ T5892] usb 5-1: config 0 interface 52 has no altsetting 0 [ 111.729639][ T5892] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 111.729663][ T5892] usb 5-1: Manufacturer: syz [ 111.732180][ T5892] usb 5-1: config 0 descriptor?? [ 111.752008][ T5892] hub 5-1:0.52: bad descriptor, ignoring hub [ 111.752031][ T5892] hub 5-1:0.52: probe with driver hub failed with error -5 [ 112.075643][ T5892] input: syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.52/input/input5 [ 112.392149][ T58] usb 5-1: USB disconnect, device number 3 [ 113.284815][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 113.376560][ T5744] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 113.459815][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 113.460542][ T25] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 113.461545][ T25] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 113.461575][ T25] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 113.461604][ T25] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 113.461625][ T25] usb 6-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 113.461642][ T25] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 113.461663][ T25] usb 6-1: config 168 interface 0 has no altsetting 0 [ 113.462771][ T25] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 113.462799][ T25] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 113.462825][ T25] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 113.462844][ T25] usb 6-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 113.462860][ T25] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 113.462881][ T25] usb 6-1: config 168 interface 0 has no altsetting 0 [ 113.464229][ T25] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 113.464257][ T25] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 113.464285][ T25] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 113.464326][ T25] usb 6-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 113.464342][ T25] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 113.464361][ T25] usb 6-1: config 168 interface 0 has no altsetting 0 [ 113.470520][ T25] usb 6-1: string descriptor 0 read error: -22 [ 113.470617][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.495077][ T25] adutux 6-1:168.0: interrupt endpoints not found [ 113.592000][ T5744] usb 8-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 113.621740][ T5744] usb 8-1: config 255 has an invalid interface number: 97 but max is 0 [ 113.621764][ T5744] usb 8-1: config 255 has no interface number 0 [ 113.621789][ T5744] usb 8-1: config 255 interface 97 has no altsetting 0 [ 113.666462][ T5744] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.666485][ T5744] usb 8-1: Product: syz [ 113.666496][ T5744] usb 8-1: Manufacturer: syz [ 113.666506][ T5744] usb 8-1: SerialNumber: syz [ 113.700510][ T25] usb 6-1: USB disconnect, device number 3 [ 114.140761][ T5744] rndis_host 8-1:255.97: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 114.187373][ T5744] usb 8-1: USB disconnect, device number 3 [ 114.887733][ T6020] FAULT_INJECTION: forcing a failure. [ 114.887733][ T6020] name failslab, interval 1, probability 0, space 0, times 0 [ 114.887756][ T6020] CPU: 1 UID: 0 PID: 6020 Comm: syz.2.48 Not tainted syzkaller #0 PREEMPT(full) [ 114.887772][ T6020] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.887781][ T6020] Call Trace: [ 114.887787][ T6020] [ 114.887793][ T6020] dump_stack_lvl+0x100/0x190 [ 114.887816][ T6020] should_fail_ex.cold+0x5/0xa [ 114.887836][ T6020] should_failslab+0xc2/0x120 [ 114.887857][ T6020] __kmalloc_noprof+0xfc/0x840 [ 114.887873][ T6020] ? handler_new_ref+0x1ab/0xc60 [ 114.887891][ T6020] handler_new_ref+0x1ab/0xc60 [ 114.887910][ T6020] v4l2_ctrl_new+0xe67/0x23a0 [ 114.887931][ T6020] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 114.887958][ T6020] v4l2_ctrl_new_std+0x1bb/0x290 [ 114.887978][ T6020] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 114.887993][ T6020] ? rcu_is_watching+0x13/0xc0 [ 114.888009][ T6020] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 114.888030][ T6020] ? media_request_object_init+0x105/0x180 [ 114.888047][ T6020] vim2m_open+0x140/0x830 [ 114.888063][ T6020] v4l2_open+0x1d2/0x490 [ 114.888079][ T6020] ? __pfx_v4l2_open+0x10/0x10 [ 114.888093][ T6020] chrdev_open+0x234/0x6a0 [ 114.888110][ T6020] ? __pfx_apparmor_file_open+0x10/0x10 [ 114.888125][ T6020] ? __pfx_chrdev_open+0x10/0x10 [ 114.888142][ T6020] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 114.888165][ T6020] do_dentry_open+0x6ab/0x14d0 [ 114.888180][ T6020] ? __pfx_chrdev_open+0x10/0x10 [ 114.888200][ T6020] vfs_open+0x82/0x3f0 [ 114.888221][ T6020] path_openat+0x19fa/0x2440 [ 114.888239][ T6020] ? __pfx_path_openat+0x10/0x10 [ 114.888261][ T6020] do_file_open+0x20e/0x430 [ 114.888279][ T6020] ? __pfx_do_file_open+0x10/0x10 [ 114.888308][ T6020] ? _raw_spin_unlock+0x28/0x50 [ 114.888328][ T6020] ? alloc_fd+0x471/0x7a0 [ 114.888348][ T6020] do_sys_openat2+0x10f/0x1e0 [ 114.888368][ T6020] ? __pfx_do_sys_openat2+0x10/0x10 [ 114.888388][ T6020] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 114.888408][ T6020] __ia32_compat_sys_openat+0x12d/0x210 [ 114.888430][ T6020] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 114.888459][ T6020] __do_fast_syscall_32+0x13a/0x8b0 [ 114.888474][ T6020] ? lockdep_hardirqs_on+0x7d/0x110 [ 114.888489][ T6020] do_fast_syscall_32+0x32/0x70 [ 114.888503][ T6020] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.888520][ T6020] RIP: 0023:0xf7f12fec [ 114.888538][ T6020] Code: Unable to access opcode bytes at 0xf7f12fc2. [ 114.888544][ T6020] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 114.888557][ T6020] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 114.888566][ T6020] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.888596][ T6020] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.888604][ T6020] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 114.888612][ T6020] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.888632][ T6020] [ 116.402247][ T6018] Zero length message leads to an empty skb [ 117.419087][ T840] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 117.500194][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.56'. [ 117.653943][ T840] usb 6-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 117.661234][ T840] usb 6-1: config 255 has an invalid interface number: 97 but max is 0 [ 117.661260][ T840] usb 6-1: config 255 has no interface number 0 [ 117.661282][ T840] usb 6-1: config 255 interface 97 has no altsetting 0 [ 117.765299][ T840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.765324][ T840] usb 6-1: Product: syz [ 117.765336][ T840] usb 6-1: Manufacturer: syz [ 117.765347][ T840] usb 6-1: SerialNumber: syz [ 118.131691][ T840] rndis_host 6-1:255.97: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 118.189421][ T840] usb 6-1: USB disconnect, device number 4 [ 118.782993][ T6059] comedi comedi0: Minor 3 could not be opened [ 119.168037][ T6061] kAFS: unable to lookup cell 'Þ({^ú@' [ 121.296875][ T840] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 121.457733][ T840] usb 6-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 121.463055][ T840] usb 6-1: config 255 has an invalid interface number: 97 but max is 0 [ 121.463079][ T840] usb 6-1: config 255 has no interface number 0 [ 121.463102][ T840] usb 6-1: config 255 interface 97 has no altsetting 0 [ 121.465777][ T840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.465803][ T840] usb 6-1: Product: syz [ 121.465817][ T840] usb 6-1: Manufacturer: syz [ 121.465831][ T840] usb 6-1: SerialNumber: syz [ 121.919302][ T840] rndis_host 6-1:255.97: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 122.022957][ T840] usb 6-1: USB disconnect, device number 5 [ 122.253286][ T6099] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 123.007744][ T6079] mmap: syz.0.65 (6079) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 124.078656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 127.055253][ T6164] 9p: Bad value for 'rfdno' [ 128.108432][ T840] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 128.257698][ T840] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 128.259291][ T840] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.259314][ T840] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 128.261928][ T840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.261946][ T840] usb 7-1: Product: syz [ 128.261955][ T840] usb 7-1: Manufacturer: syz [ 128.261965][ T840] usb 7-1: SerialNumber: syz [ 128.714792][ T840] usb 7-1: USB disconnect, device number 4 [ 129.986093][ T6234] ======================================================= [ 129.986093][ T6234] WARNING: The mand mount option has been deprecated and [ 129.986093][ T6234] and is ignored by this kernel. Remove the mand [ 129.986093][ T6234] option from the mount to silence this warning. [ 129.986093][ T6234] ======================================================= [ 129.988186][ T6234] jffs2: notice: (6234) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 129.989886][ T6239] 9p: Bad value for 'rfdno' [ 130.000293][ T6234] jffs2: warning: (6234) jffs2_sum_write_data: Summary too big (12 data, -14 pad) in eraseblock at 0001d000 [ 130.706592][ T5758] Bluetooth: hci3: command 0x2016 tx timeout [ 130.868542][ T5758] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 131.116544][ T5744] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 131.276505][ T5744] usb 6-1: Using ep0 maxpacket: 8 [ 131.277241][ T5744] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 131.278178][ T5744] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 131.278213][ T5744] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.278229][ T5744] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.278244][ T5744] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 131.278258][ T5744] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 131.278277][ T5744] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.278304][ T5744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.281985][ T5744] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22 [ 132.790799][ T5100] Bluetooth: hci3: command 0x2016 tx timeout [ 133.967961][ T6323] ip6gretap1: entered allmulticast mode [ 133.970410][ T6323] batman_adv: batadv0: Adding interface: ip6gretap1 [ 133.970421][ T6323] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.970437][ T6323] batman_adv: batadv0: Interface activated: ip6gretap1 [ 133.975690][ T6323] UDC core: g1: couldn't find an available UDC or it's busy [ 134.006306][ T5744] usb 6-1: USB disconnect, device number 6 [ 134.419667][ T1131] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 134.422998][ T1131] ata1.00: configured for UDMA/100 [ 134.473486][ T6338] ip6gretap1: entered allmulticast mode [ 134.647109][ T5548] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 134.797598][ T5548] usb 8-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 134.799826][ T5548] usb 8-1: config 255 has an invalid interface number: 97 but max is 0 [ 134.799841][ T5548] usb 8-1: config 255 has no interface number 0 [ 134.799854][ T5548] usb 8-1: config 255 interface 97 has no altsetting 0 [ 134.801648][ T5548] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.801666][ T5548] usb 8-1: Product: syz [ 134.801724][ T5548] usb 8-1: Manufacturer: syz [ 134.801738][ T5548] usb 8-1: SerialNumber: syz [ 134.867432][ T5772] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 134.868162][ T5772] Bluetooth: hci2: Injecting HCI hardware error event [ 134.868820][ T5100] Bluetooth: hci2: hardware error 0x00 [ 135.024104][ T5548] rndis_host 8-1:255.97: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 135.036893][ T5548] usb 8-1: USB disconnect, device number 4 [ 135.266618][ T50] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 135.426534][ T50] usb 7-1: Using ep0 maxpacket: 8 [ 135.427263][ T50] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 135.429119][ T50] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 135.429213][ T50] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.429232][ T50] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.429251][ T50] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 135.429268][ T50] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 135.429286][ T50] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.429318][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.435152][ T50] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 135.571381][ T1131] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 135.574401][ T1131] ata1.00: configured for UDMA/100 [ 136.947014][ T5100] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 138.013177][ T5895] usb 7-1: USB disconnect, device number 5 [ 138.438929][ T6475] FAULT_INJECTION: forcing a failure. [ 138.438929][ T6475] name failslab, interval 1, probability 0, space 0, times 0 [ 138.438960][ T6475] CPU: 2 UID: 0 PID: 6475 Comm: syz.0.175 Not tainted syzkaller #0 PREEMPT(full) [ 138.438981][ T6475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.438992][ T6475] Call Trace: [ 138.438999][ T6475] [ 138.439007][ T6475] dump_stack_lvl+0x100/0x190 [ 138.439037][ T6475] should_fail_ex.cold+0x5/0xa [ 138.439064][ T6475] should_failslab+0xc2/0x120 [ 138.439093][ T6475] __kmalloc_cache_noprof+0x91/0x6d0 [ 138.439112][ T6475] ? find_held_lock+0x2b/0x80 [ 138.439134][ T6475] ? alloc_pipe_info+0x10e/0x590 [ 138.439163][ T6475] alloc_pipe_info+0x10e/0x590 [ 138.439189][ T6475] splice_direct_to_actor+0x78f/0xa30 [ 138.439235][ T6475] ? __lock_acquire+0x5c0/0x1f40 [ 138.439265][ T6475] ? __pfx_direct_splice_actor+0x10/0x10 [ 138.439290][ T6475] ? __pfx_aa_file_perm+0x10/0x10 [ 138.439312][ T6475] ? find_held_lock+0x2b/0x80 [ 138.439332][ T6475] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 138.439360][ T6475] ? lock_acquire+0x1d1/0x380 [ 138.439389][ T6475] do_splice_direct+0x174/0x240 [ 138.439415][ T6475] ? __pfx_do_splice_direct+0x10/0x10 [ 138.439441][ T6475] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 138.439468][ T6475] ? rw_verify_area+0xce/0x6d0 [ 138.439489][ T6475] do_sendfile+0xadc/0xe20 [ 138.439514][ T6475] ? __pfx_do_sendfile+0x10/0x10 [ 138.439534][ T6475] ? __might_fault+0xc5/0x140 [ 138.439558][ T6475] __ia32_compat_sys_sendfile+0x162/0x220 [ 138.439583][ T6475] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 138.439616][ T6475] __do_fast_syscall_32+0x13a/0x8b0 [ 138.439643][ T6475] do_fast_syscall_32+0x32/0x70 [ 138.439666][ T6475] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 138.439691][ T6475] RIP: 0023:0xf701efec [ 138.439711][ T6475] Code: Unable to access opcode bytes at 0xf701efc2. [ 138.439720][ T6475] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 138.439740][ T6475] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000003 [ 138.439752][ T6475] RDX: 0000000080000100 RSI: 0000000000008112 RDI: 0000000000000000 [ 138.439764][ T6475] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 138.439776][ T6475] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 138.439788][ T6475] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 138.439812][ T6475] [ 139.427593][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.427631][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.690866][ T6538] tipc: Started in network mode [ 139.690880][ T6538] tipc: Node identity 4, cluster identity 4711 [ 139.690887][ T6538] tipc: Node number set to 4 [ 139.876817][ T5895] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 139.945998][ T6557] device-mapper: ioctl: Unable to rename non-existent device, to uuid .2\´£«.j—DH [ 140.037438][ T5895] usb 8-1: Using ep0 maxpacket: 32 [ 140.038175][ T5895] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 140.039102][ T5895] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.039134][ T5895] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.039168][ T5895] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.043635][ T5895] usb 8-1: config 0 descriptor?? [ 140.047322][ T5895] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 140.252065][ T5895] usb 8-1: USB disconnect, device number 5 [ 140.596540][ T840] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 140.746706][ T840] usb 7-1: Using ep0 maxpacket: 32 [ 140.747793][ T840] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 140.748572][ T840] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.748593][ T840] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.748611][ T840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.751141][ T840] usb 7-1: config 0 descriptor?? [ 140.757287][ T840] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 140.936544][ T932] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 140.962871][ T3400] usb 7-1: USB disconnect, device number 6 [ 141.087051][ T932] usb 5-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 141.087890][ T932] usb 5-1: config 255 has an invalid interface number: 97 but max is 0 [ 141.087903][ T932] usb 5-1: config 255 has no interface number 0 [ 141.087916][ T932] usb 5-1: config 255 interface 97 has no altsetting 0 [ 141.090664][ T932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.090677][ T932] usb 5-1: Product: syz [ 141.090684][ T932] usb 5-1: Manufacturer: syz [ 141.090691][ T932] usb 5-1: SerialNumber: syz [ 141.302173][ T932] rndis_host 5-1:255.97: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 141.310808][ T932] usb 5-1: USB disconnect, device number 4 [ 141.645863][ T6586] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 143.199242][ T6631] tipc: Started in network mode [ 143.199256][ T6631] tipc: Node identity 4, cluster identity 4711 [ 143.199262][ T6631] tipc: Node number set to 4 [ 143.676484][ T840] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 143.846464][ T840] usb 8-1: Using ep0 maxpacket: 8 [ 143.846895][ T840] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 143.847711][ T840] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 143.847734][ T840] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 143.847744][ T840] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 143.847756][ T840] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 143.847767][ T840] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.847785][ T840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.055071][ T840] usb 8-1: usb_control_msg returned -32 [ 144.055110][ T840] usbtmc 8-1:16.0: can't read capabilities [ 144.663108][ T6672] 9p: Bad value for 'rfdno' [ 144.759356][ T6677] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 145.186517][ T840] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 145.358574][ T840] usb 6-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 145.359591][ T840] usb 6-1: config 255 has an invalid interface number: 97 but max is 0 [ 145.359611][ T840] usb 6-1: config 255 has no interface number 0 [ 145.359632][ T840] usb 6-1: config 255 interface 97 has no altsetting 0 [ 145.361976][ T840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.361995][ T840] usb 6-1: Product: syz [ 145.362006][ T840] usb 6-1: Manufacturer: syz [ 145.362017][ T840] usb 6-1: SerialNumber: syz [ 145.574652][ T840] rndis_host 6-1:255.97: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 145.584218][ T840] usb 6-1: USB disconnect, device number 7 [ 145.846617][ T5744] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 145.997028][ T5744] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.997946][ T5744] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 145.997965][ T5744] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 145.997977][ T5744] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 145.997988][ T5744] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 145.998007][ T5744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.002929][ T5744] usb 5-1: config 0 descriptor?? [ 146.336576][ T3272] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 146.410806][ T5744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 146.410833][ T5744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 146.410845][ T5744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 146.410857][ T5744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 146.410868][ T5744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 146.410879][ T5744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 146.410891][ T5744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 146.410902][ T5744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 146.410914][ T5744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 146.410925][ T5744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 146.428485][ T5855] usb 8-1: USB disconnect, device number 6 [ 146.436995][ T5744] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 146.510226][ T3272] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 146.511042][ T3272] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid maxpacket 44431, setting to 1024 [ 146.511058][ T3272] usb 6-1: config 1 interface 1 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 146.511077][ T3272] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.613072][ T5855] usb 5-1: USB disconnect, device number 5 [ 146.690553][ T6722] ip6gretap1: entered allmulticast mode [ 146.691489][ T6722] batman_adv: batadv0: Adding interface: ip6gretap1 [ 146.691497][ T6722] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.691513][ T6722] batman_adv: batadv0: Interface activated: ip6gretap1 [ 146.731519][ T3272] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 147.166710][ T3272] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 147.326931][ T3272] usb 7-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 147.331982][ T3272] usb 7-1: config 255 has an invalid interface number: 97 but max is 0 [ 147.331999][ T3272] usb 7-1: config 255 has no interface number 0 [ 147.332013][ T3272] usb 7-1: config 255 interface 97 has no altsetting 0 [ 147.334767][ T3272] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.334781][ T3272] usb 7-1: Product: syz [ 147.334788][ T3272] usb 7-1: Manufacturer: syz [ 147.334795][ T3272] usb 7-1: SerialNumber: syz [ 147.590769][ T3272] rndis_host 7-1:255.97: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 147.595717][ T3272] usb 7-1: USB disconnect, device number 7 [ 148.173632][ T6746] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 148.345674][ T6753] tipc: Started in network mode [ 148.345688][ T6753] tipc: Node identity 4, cluster identity 4711 [ 148.345695][ T6753] tipc: Node number set to 4 [ 148.526732][ T5892] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 148.676479][ T5892] usb 7-1: Using ep0 maxpacket: 8 [ 148.677161][ T5892] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 148.677953][ T5892] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 148.677965][ T5892] usb 7-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 148.678786][ T5892] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 148.678797][ T5892] usb 7-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 148.679559][ T5892] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 148.679570][ T5892] usb 7-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 148.681875][ T5892] usb 7-1: string descriptor 0 read error: -22 [ 148.681932][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.684467][ T5892] usb 7-1: rejected 3 configurations due to insufficient available bus power [ 148.684479][ T5892] usb 7-1: no configuration chosen from 3 choices [ 148.776658][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 148.779402][ T6761] UDC core: g1: couldn't find an available UDC or it's busy [ 148.927883][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.928905][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.928927][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 148.928945][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 148.928961][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.928991][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.932655][ T10] usb 5-1: config 0 descriptor?? [ 149.350993][ T10] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 149.542292][ T5892] usb 5-1: USB disconnect, device number 6 [ 150.077203][ T6776] syz.3.284 uses obsolete (PF_INET,SOCK_PACKET) [ 151.344859][ T5855] usb 7-1: USB disconnect, device number 8 [ 151.484977][ T6797] tipc: Started in network mode [ 151.484990][ T6797] tipc: Node identity 4, cluster identity 4711 [ 151.484998][ T6797] tipc: Node number set to 4 [ 151.976574][ T3272] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 152.126966][ T3272] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.130543][ T3272] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 152.130561][ T3272] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 152.130573][ T3272] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 152.130584][ T3272] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.130603][ T3272] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.131974][ T3272] usb 8-1: config 0 descriptor?? [ 152.234822][ T3400] usb 6-1: USB disconnect, device number 8 [ 152.540784][ T3272] usbhid 8-1:0.0: can't add hid device: -71 [ 152.540867][ T3272] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 152.550845][ T3272] usb 8-1: USB disconnect, device number 7 [ 153.016523][ T840] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 153.145394][ T6826] ieee802154 phy0 wpan0: encryption failed: -126 [ 153.178643][ T840] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 7.03 [ 153.179121][ T840] usb 5-1: Dual-Role OTG device on HNP port [ 153.179331][ T840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.196851][ T5855] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 153.348364][ T5855] usb 7-1: Using ep0 maxpacket: 8 [ 153.348939][ T5855] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 153.351906][ T5855] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 153.351926][ T5855] usb 7-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 153.353484][ T5855] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 153.353501][ T5855] usb 7-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 153.359221][ T5855] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 153.359238][ T5855] usb 7-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 153.373192][ T5855] usb 7-1: string descriptor 0 read error: -22 [ 153.373285][ T5855] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.384762][ T5855] usb 7-1: rejected 3 configurations due to insufficient available bus power [ 153.384784][ T5855] usb 7-1: no configuration chosen from 3 choices [ 153.888478][ T6839] block nbd0: shutting down sockets [ 154.105877][ T6848] ip6gretap1: entered allmulticast mode [ 154.107198][ T6848] batman_adv: batadv0: Adding interface: ip6gretap1 [ 154.107207][ T6848] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.107223][ T6848] batman_adv: batadv0: Interface activated: ip6gretap1 [ 154.532315][ T6858] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 154.862796][ T6865] FAULT_INJECTION: forcing a failure. [ 154.862796][ T6865] name fail_futex, interval 1, probability 0, space 0, times 1 [ 154.862817][ T6865] CPU: 3 UID: 0 PID: 6865 Comm: syz.3.314 Not tainted syzkaller #0 PREEMPT(full) [ 154.862830][ T6865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.862837][ T6865] Call Trace: [ 154.862841][ T6865] [ 154.862846][ T6865] dump_stack_lvl+0x100/0x190 [ 154.862865][ T6865] should_fail_ex.cold+0x5/0xa [ 154.862905][ T6865] get_futex_key+0x1d0/0x14f0 [ 154.862925][ T6865] ? __pfx_get_futex_key+0x10/0x10 [ 154.862942][ T6865] ? trace_ipi_send_cpu.constprop.0+0x73/0x220 [ 154.862959][ T6865] ? __smp_call_single_queue+0x17e/0x450 [ 154.862977][ T6865] ? __pfx___smp_call_single_queue+0x10/0x10 [ 154.862996][ T6865] futex_wait_setup+0x91/0x540 [ 154.863014][ T6865] __futex_wait+0x19f/0x300 [ 154.863029][ T6865] ? __pfx___futex_wait+0x10/0x10 [ 154.863043][ T6865] ? __pfx_try_to_wake_up+0x10/0x10 [ 154.863060][ T6865] ? futex_hash+0x311/0x400 [ 154.863079][ T6865] ? __pfx_futex_wake_mark+0x10/0x10 [ 154.863098][ T6865] ? find_held_lock+0x2b/0x80 [ 154.863111][ T6865] ? futex_wake+0x4ea/0x5e0 [ 154.863127][ T6865] futex_wait+0xe6/0x370 [ 154.863141][ T6865] ? __pfx_futex_wait+0x10/0x10 [ 154.863162][ T6865] do_futex+0x265/0x440 [ 154.863174][ T6865] ? __pfx_do_futex+0x10/0x10 [ 154.863185][ T6865] ? __might_fault+0xc5/0x140 [ 154.863196][ T6865] ? find_held_lock+0x2b/0x80 [ 154.863209][ T6865] ? __might_fault+0xc5/0x140 [ 154.863221][ T6865] __ia32_sys_futex_time32+0x2f4/0x470 [ 154.863237][ T6865] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 154.863251][ T6865] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 154.863281][ T6865] __do_fast_syscall_32+0x13a/0x8b0 [ 154.863297][ T6865] do_fast_syscall_32+0x32/0x70 [ 154.863310][ T6865] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 154.863326][ T6865] RIP: 0023:0xf7fb2fec [ 154.863341][ T6865] Code: Unable to access opcode bytes at 0xf7fb2fc2. [ 154.863346][ T6865] RSP: 002b:00000000f54765bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 154.863358][ T6865] RAX: ffffffffffffffda RBX: 00000000f7474f88 RCX: 0000000000000080 [ 154.863365][ T6865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7474f8c [ 154.863371][ T6865] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 154.863378][ T6865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.863384][ T6865] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 154.863397][ T6865] [ 155.984784][ T5892] usb 7-1: USB disconnect, device number 9 [ 156.795909][ T6889] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 156.987665][ T3272] usb 5-1: USB disconnect, device number 7 [ 157.206543][ T840] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 157.302792][ T6903] FAULT_INJECTION: forcing a failure. [ 157.302792][ T6903] name fail_futex, interval 1, probability 0, space 0, times 0 [ 157.302824][ T6903] CPU: 2 UID: 0 PID: 6903 Comm: syz.3.327 Not tainted syzkaller #0 PREEMPT(full) [ 157.302846][ T6903] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.302857][ T6903] Call Trace: [ 157.302864][ T6903] [ 157.302872][ T6903] dump_stack_lvl+0x100/0x190 [ 157.302903][ T6903] should_fail_ex.cold+0x5/0xa [ 157.302931][ T6903] get_futex_key+0x1d0/0x14f0 [ 157.302965][ T6903] ? __pfx_get_futex_key+0x10/0x10 [ 157.302996][ T6903] ? find_held_lock+0x2b/0x80 [ 157.303020][ T6903] ? futex_wake+0x4ea/0x5e0 [ 157.303050][ T6903] futex_wake+0xf4/0x5e0 [ 157.303071][ T6903] ? find_held_lock+0x2b/0x80 [ 157.303094][ T6903] ? __fget_files+0x215/0x3d0 [ 157.303118][ T6903] ? __pfx_futex_wake+0x10/0x10 [ 157.303152][ T6903] do_futex+0x2b2/0x440 [ 157.303172][ T6903] ? __pfx_do_futex+0x10/0x10 [ 157.303190][ T6903] ? __might_fault+0xc5/0x140 [ 157.303209][ T6903] ? find_held_lock+0x2b/0x80 [ 157.303228][ T6903] ? __might_fault+0xc5/0x140 [ 157.303248][ T6903] __ia32_sys_futex_time32+0x2f4/0x470 [ 157.303273][ T6903] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 157.303297][ T6903] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 157.303330][ T6903] __do_fast_syscall_32+0x13a/0x8b0 [ 157.303356][ T6903] do_fast_syscall_32+0x32/0x70 [ 157.303379][ T6903] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.303403][ T6903] RIP: 0023:0xf7fb2fec [ 157.303425][ T6903] Code: Unable to access opcode bytes at 0xf7fb2fc2. [ 157.303434][ T6903] RSP: 002b:00000000f54765cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 157.303453][ T6903] RAX: ffffffffffffffda RBX: 00000000f7474f8c RCX: 0000000000000081 [ 157.303465][ T6903] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 157.303477][ T6903] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 157.303488][ T6903] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 157.303499][ T6903] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.303524][ T6903] [ 157.366945][ T840] usb 6-1: Using ep0 maxpacket: 8 [ 157.368830][ T840] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 157.370284][ T840] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 157.370305][ T840] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 157.370321][ T840] usb 6-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 157.370334][ T840] usb 6-1: config 168 interface 0 has no altsetting 0 [ 157.371171][ T840] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 157.371187][ T840] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 157.371205][ T840] usb 6-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 157.371218][ T840] usb 6-1: config 168 interface 0 has no altsetting 0 [ 157.372335][ T840] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 157.372351][ T840] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 157.372366][ T840] usb 6-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 157.372379][ T840] usb 6-1: config 168 interface 0 has no altsetting 0 [ 157.381638][ T840] usb 6-1: string descriptor 0 read error: -22 [ 157.381691][ T840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.387847][ T840] adutux 6-1:168.0: interrupt endpoints not found [ 157.590818][ T840] usb 6-1: USB disconnect, device number 9 [ 158.645052][ T6935] comedi comedi0: No channels found! [ 158.733810][ T6941] kAFS: unable to lookup cell 'Þ({^ú@' [ 159.596895][ T5895] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 159.756510][ T5895] usb 6-1: Using ep0 maxpacket: 8 [ 159.757351][ T5895] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 159.758604][ T5895] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 159.758637][ T5895] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 159.758663][ T5895] usb 6-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 159.758682][ T5895] usb 6-1: config 168 interface 0 has no altsetting 0 [ 159.759707][ T5895] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 159.759733][ T5895] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 159.759767][ T5895] usb 6-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 159.759789][ T5895] usb 6-1: config 168 interface 0 has no altsetting 0 [ 159.760853][ T5895] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 159.760878][ T5895] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 159.760905][ T5895] usb 6-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 159.760926][ T5895] usb 6-1: config 168 interface 0 has no altsetting 0 [ 159.764065][ T5895] usb 6-1: string descriptor 0 read error: -22 [ 159.764177][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.771395][ T5895] adutux 6-1:168.0: interrupt endpoints not found [ 159.972345][ T5895] usb 6-1: USB disconnect, device number 10 [ 160.169952][ T6962] netlink: 16 bytes leftover after parsing attributes in process `syz.2.348'. [ 160.457501][ T6977] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 162.426850][ T5895] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 162.566564][ T5895] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 162.627242][ T7019] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 162.717779][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 162.718568][ T5895] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 162.720081][ T5895] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 162.720111][ T5895] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 162.720141][ T5895] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 162.720163][ T5895] usb 5-1: config 168 interface 0 has no altsetting 0 [ 162.721292][ T5895] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 162.721320][ T5895] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 162.721350][ T5895] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 162.721371][ T5895] usb 5-1: config 168 interface 0 has no altsetting 0 [ 162.722591][ T5895] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 162.722618][ T5895] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 162.722670][ T5895] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 162.722693][ T5895] usb 5-1: config 168 interface 0 has no altsetting 0 [ 162.726024][ T5895] usb 5-1: string descriptor 0 read error: -22 [ 162.726127][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.736379][ T5895] adutux 5-1:168.0: interrupt endpoints not found [ 162.763589][ T7021] UDC core: g1: couldn't find an available UDC or it's busy [ 162.933850][ T9] usb 5-1: USB disconnect, device number 9 [ 163.876918][ T7041] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 164.146547][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 164.320584][ T9] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 164.321552][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.321570][ T9] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 164.323262][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.323274][ T9] usb 7-1: Product: syz [ 164.323281][ T9] usb 7-1: Manufacturer: syz [ 164.323288][ T9] usb 7-1: SerialNumber: syz [ 164.596160][ T7055] netlink: 16 bytes leftover after parsing attributes in process `syz.2.376'. [ 164.739057][ T9] usb 7-1: USB disconnect, device number 10 [ 165.126603][ T5855] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 165.276657][ T5855] usb 6-1: Using ep0 maxpacket: 8 [ 165.279187][ T5855] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 165.280212][ T5855] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 165.280251][ T5855] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 165.280269][ T5855] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 165.280288][ T5855] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 165.280305][ T5855] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.280336][ T5855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.529157][ T5855] usb 6-1: usb_control_msg returned -32 [ 165.529195][ T5855] usbtmc 6-1:16.0: can't read capabilities [ 166.272317][ T7090] usbtmc 6-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 167.406626][ T7114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.408125][ T7114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.879963][ T932] usb 6-1: USB disconnect, device number 11 [ 168.012967][ T7134] comedi comedi0: No channels found! [ 168.109409][ T7134] kAFS: unable to lookup cell 'Þ({^ú@' [ 168.356770][ T5895] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 168.517447][ T5895] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 7.03 [ 168.518119][ T5895] usb 5-1: Dual-Role OTG device on HNP port [ 168.518393][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.064918][ T7163] FAULT_INJECTION: forcing a failure. [ 169.064918][ T7163] name failslab, interval 1, probability 0, space 0, times 0 [ 169.064950][ T7163] CPU: 3 UID: 0 PID: 7163 Comm: syz.1.418 Not tainted syzkaller #0 PREEMPT(full) [ 169.064972][ T7163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.064984][ T7163] Call Trace: [ 169.064991][ T7163] [ 169.064999][ T7163] dump_stack_lvl+0x100/0x190 [ 169.065030][ T7163] should_fail_ex.cold+0x5/0xa [ 169.065059][ T7163] should_failslab+0xc2/0x120 [ 169.065087][ T7163] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 169.065118][ T7163] ? find_held_lock+0x2b/0x80 [ 169.065142][ T7163] ? sock_alloc_inode+0x26/0x2c0 [ 169.065166][ T7163] ? __pfx_sock_alloc_inode+0x10/0x10 [ 169.065187][ T7163] sock_alloc_inode+0x26/0x2c0 [ 169.065207][ T7163] ? __pfx_sock_alloc_inode+0x10/0x10 [ 169.065226][ T7163] alloc_inode+0x68/0x250 [ 169.065255][ T7163] sock_alloc+0x44/0x280 [ 169.065272][ T7163] ? security_socket_create+0x7f/0x250 [ 169.065300][ T7163] __sock_create+0xc2/0x860 [ 169.065327][ T7163] __sys_socket+0x14d/0x260 [ 169.065353][ T7163] ? xfd_validate_state+0x129/0x190 [ 169.065382][ T7163] ? __pfx___sys_socket+0x10/0x10 [ 169.065410][ T7163] __ia32_sys_socket+0x72/0xb0 [ 169.065432][ T7163] ? lockdep_hardirqs_on+0x7d/0x110 [ 169.065452][ T7163] __do_fast_syscall_32+0x13a/0x8b0 [ 169.065476][ T7163] do_fast_syscall_32+0x32/0x70 [ 169.065497][ T7163] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.065521][ T7163] RIP: 0023:0xf7f95fec [ 169.065541][ T7163] Code: Unable to access opcode bytes at 0xf7f95fc2. [ 169.065548][ T7163] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 169.065567][ T7163] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000080805 [ 169.065579][ T7163] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 169.065592][ T7163] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.065603][ T7163] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 169.065615][ T7163] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.065637][ T7163] [ 169.065804][ T7163] socket: no more sockets [ 169.449175][ T5100] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 170.733769][ T7182] binder: 7180:7182 ioctl c0306201 0 returned -14 [ 170.966851][ T50] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 171.116574][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 171.117037][ T50] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 171.119867][ T50] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 171.119884][ T50] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 171.119901][ T50] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 171.119915][ T50] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 171.119926][ T50] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 171.119938][ T50] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 171.119951][ T50] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 171.119963][ T50] usb 6-1: config 168 interface 0 has no altsetting 0 [ 171.120738][ T50] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 171.120754][ T50] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 171.120770][ T50] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 171.120782][ T50] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 171.120794][ T50] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 171.120806][ T50] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 171.120818][ T50] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 171.120830][ T50] usb 6-1: config 168 interface 0 has no altsetting 0 [ 171.121615][ T50] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 171.121630][ T50] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 171.121653][ T50] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 171.121671][ T50] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 171.121689][ T50] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 171.121706][ T50] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 171.121723][ T50] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 171.121735][ T50] usb 6-1: config 168 interface 0 has no altsetting 0 [ 171.123993][ T50] usb 6-1: string descriptor 0 read error: -22 [ 171.124066][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.142621][ T50] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 173.188666][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 173.192943][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 173.325659][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.433'. [ 173.359056][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.433'. [ 173.393780][ T7208] Failed to get privilege flags for destination (handle=0x2:0x0) [ 173.726328][ T7216] binder: 7215:7216 ioctl c0306201 0 returned -14 [ 173.730286][ T7216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.730503][ T7216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.738297][ T5855] usb 6-1: USB disconnect, device number 12 [ 173.751649][ T7216] adutux: No device or device unplugged -19 [ 173.752468][ T7216] adutux: No device or device unplugged -19 [ 174.012982][ T7230] binder: 7229:7230 ioctl c0306201 0 returned -14 [ 174.246587][ T3272] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 174.396641][ T3272] usb 7-1: Using ep0 maxpacket: 8 [ 174.399679][ T3272] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 174.400635][ T3272] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 174.400660][ T3272] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 174.400690][ T3272] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 174.400710][ T3272] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 174.400728][ T3272] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 174.400746][ T3272] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 174.400765][ T3272] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 174.400784][ T3272] usb 7-1: config 168 interface 0 has no altsetting 0 [ 174.402533][ T3272] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 174.402559][ T3272] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 174.402584][ T3272] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 174.402604][ T3272] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 174.402621][ T3272] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 174.402640][ T3272] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 174.402658][ T3272] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 174.402678][ T3272] usb 7-1: config 168 interface 0 has no altsetting 0 [ 174.403636][ T3272] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 174.403659][ T3272] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 174.403685][ T3272] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 174.403703][ T3272] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 174.403720][ T3272] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 174.403738][ T3272] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 174.403757][ T3272] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 174.403775][ T3272] usb 7-1: config 168 interface 0 has no altsetting 0 [ 174.406988][ T3272] usb 7-1: string descriptor 0 read error: -22 [ 174.407075][ T3272] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.422346][ T3272] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 174.758003][ T50] usb 7-1: USB disconnect, device number 11 [ 175.140916][ T7263] se_dev->se_dev_ptr already set for storage object [ 175.294989][ T5855] usb 5-1: USB disconnect, device number 10 [ 176.508125][ T5895] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 176.544297][ T7304] netlink: 28 bytes leftover after parsing attributes in process `syz.2.464'. [ 176.552898][ T7304] netlink: 24 bytes leftover after parsing attributes in process `syz.2.464'. [ 176.605303][ T50] libceph: connect (1)[c::]:6789 error -101 [ 176.605570][ T50] libceph: mon0 (1)[c::]:6789 connect error [ 176.611465][ T50] libceph: connect (1)[c::]:6789 error -101 [ 176.611591][ T50] libceph: mon0 (1)[c::]:6789 connect error [ 176.669668][ T7304] ceph: No mds server is up or the cluster is laggy [ 176.676755][ T5895] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 7.03 [ 176.677283][ T5895] usb 5-1: Dual-Role OTG device on HNP port [ 176.677498][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.076065][ T50] usb 5-1: USB disconnect, device number 11 [ 177.168064][ T840] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 177.316548][ T840] usb 7-1: Using ep0 maxpacket: 8 [ 177.316977][ T840] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 177.317784][ T840] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 177.317808][ T840] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 177.317819][ T840] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 177.317830][ T840] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 177.317841][ T840] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.317860][ T840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.386932][ T7339] 9pnet_fd: Insufficient options for proto=fd [ 177.527340][ T840] usb 7-1: usb_control_msg returned -32 [ 177.527382][ T840] usbtmc 7-1:16.0: can't read capabilities [ 178.074583][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.479'. [ 178.075490][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.479'. [ 178.230894][ T7362] usbtmc 7-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 178.604556][ T7372] 9pnet_fd: Insufficient options for proto=fd [ 178.650594][ T7375] netlink: 28 bytes leftover after parsing attributes in process `syz.3.485'. [ 178.654480][ T7375] netlink: 24 bytes leftover after parsing attributes in process `syz.3.485'. [ 178.683726][ T50] libceph: connect (1)[c::]:6789 error -101 [ 178.683807][ T50] libceph: mon0 (1)[c::]:6789 connect error [ 178.684098][ T50] libceph: connect (1)[c::]:6789 error -101 [ 178.684213][ T50] libceph: mon0 (1)[c::]:6789 connect error [ 178.937425][ T50] libceph: connect (1)[c::]:6789 error -101 [ 178.937512][ T50] libceph: mon0 (1)[c::]:6789 connect error [ 179.317719][ T7390] se_dev->se_dev_ptr already set for storage object [ 179.449366][ T50] libceph: connect (1)[c::]:6789 error -101 [ 179.449448][ T50] libceph: mon0 (1)[c::]:6789 connect error [ 179.481357][ T7375] ceph: No mds server is up or the cluster is laggy [ 179.550883][ T7398] ieee802154 phy0 wpan0: encryption failed: -126 [ 179.879430][ T7414] 9pnet_fd: Insufficient options for proto=fd [ 179.937546][ T10] usb 7-1: USB disconnect, device number 12 [ 179.948910][ T7418] se_dev->se_dev_ptr already set for storage object [ 180.237833][ T840] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 180.387402][ T840] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice= 0.03 [ 180.389423][ T840] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 180.389446][ T840] usb 5-1: config 0 has no interface number 0 [ 180.389477][ T840] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 180.389500][ T840] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 180.391385][ T840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.391401][ T840] usb 5-1: Product: syz [ 180.391410][ T840] usb 5-1: Manufacturer: syz [ 180.391422][ T840] usb 5-1: SerialNumber: syz [ 180.393504][ T840] usb 5-1: config 0 descriptor?? [ 180.393988][ T7420] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 180.396045][ C3] ================================================================== [ 180.396052][ C3] BUG: KASAN: use-after-free in find_endpoint+0x2a3/0x2c0 [ 180.396069][ C3] Read of size 1 at addr ffff888070baf4e8 by task kworker/3:2/840 [ 180.396078][ C3] [ 180.396084][ C3] CPU: 3 UID: 0 PID: 840 Comm: kworker/3:2 Not tainted syzkaller #0 PREEMPT(full) [ 180.396102][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.396109][ C3] Workqueue: usb_hub_wq hub_event [ 180.396122][ C3] Call Trace: [ 180.396127][ C3] [ 180.396131][ C3] dump_stack_lvl+0x100/0x190 [ 180.396149][ C3] print_report+0x13d/0x4b0 [ 180.396165][ C3] ? __virt_addr_valid+0x239/0x430 [ 180.396182][ C3] ? find_endpoint+0x2a3/0x2c0 [ 180.396193][ C3] kasan_report+0xdf/0x1c0 [ 180.396208][ C3] ? find_endpoint+0x2a3/0x2c0 [ 180.396220][ C3] find_endpoint+0x2a3/0x2c0 [ 180.396232][ C3] dummy_timer+0x500/0x3700 [ 180.396247][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 180.396265][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 180.396282][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 180.396295][ C3] ? mark_held_locks+0x40/0x70 [ 180.396313][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 180.396329][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 180.396342][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 180.396356][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 180.396369][ C3] handle_softirqs+0x1e6/0x9d0 [ 180.396386][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 180.396415][ C3] ? _raw_spin_unlock+0x28/0x50 [ 180.396430][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 180.396443][ C3] __irq_exit_rcu+0x16a/0x210 [ 180.396477][ C3] irq_exit_rcu+0x9/0x30 [ 180.396494][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 180.396511][ C3] [ 180.396515][ C3] [ 180.396518][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 180.396531][ C3] RIP: 0010:lock_acquire+0x5e/0x380 [ 180.396550][ C3] Code: 05 4f a5 a5 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 5e a8 5e 0f 0f 82 c9 02 00 00 8b 35 de d9 5e 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 ed a4 a5 12 0f 85 09 03 00 00 48 83 c4 [ 180.396566][ C3] RSP: 0018:ffffc90003d2e378 EFLAGS: 00000206 [ 180.396580][ C3] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 180.396591][ C3] RDX: 0000000000000000 RSI: ffffffff8e36a6dd RDI: ffffffff8c623a80 [ 180.396605][ C3] RBP: ffffffff8edec2e0 R08: 00000000bfd3fe1d R09: 0000000000000007 [ 180.396616][ C3] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 180.396629][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 180.396655][ C3] ? unwind_next_frame+0x3be/0x2090 [ 180.396679][ C3] ? unwind_next_frame+0x3be/0x2090 [ 180.396703][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 180.396728][ C3] unwind_next_frame+0xd1/0x2090 [ 180.396745][ C3] ? unwind_next_frame+0xbd/0x2090 [ 180.396757][ C3] ? worker_thread+0x5ef/0xe50 [ 180.396771][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 180.396785][ C3] arch_stack_walk+0x94/0xf0 [ 180.396798][ C3] ? worker_thread+0x5ef/0xe50 [ 180.396811][ C3] stack_trace_save+0x8e/0xc0 [ 180.396824][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 180.396837][ C3] ? kasan_save_stack+0x3f/0x50 [ 180.396860][ C3] ? kasan_save_stack+0x30/0x50 [ 180.396872][ C3] ? kasan_save_track+0x14/0x30 [ 180.396884][ C3] ? __kasan_kmalloc+0xaa/0xb0 [ 180.396895][ C3] ? __kmalloc_node_track_caller_noprof+0x33d/0x870 [ 180.396909][ C3] ? kstrdup+0x51/0xe0 [ 180.396918][ C3] ? kstrdup_const+0x63/0x80 [ 180.396928][ C3] ? __kernfs_new_node+0x9b/0xa10 [ 180.396942][ C3] kasan_save_stack+0x30/0x50 [ 180.396954][ C3] ? kasan_save_stack+0x30/0x50 [ 180.396967][ C3] ? kasan_save_track+0x14/0x30 [ 180.396979][ C3] ? __kasan_slab_alloc+0x89/0x90 [ 180.396991][ C3] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 180.397003][ C3] ? __kernfs_new_node+0xd2/0xa10 [ 180.397016][ C3] ? kernfs_create_dir_ns+0xa6/0x2b0 [ 180.397030][ C3] ? sysfs_create_dir_ns+0x13a/0x2b0 [ 180.397042][ C3] ? kobject_add_internal+0x2c8/0x930 [ 180.397055][ C3] ? kobject_add+0x16a/0x1e0 [ 180.397067][ C3] ? device_add+0x294/0x1970 [ 180.397078][ C3] ? device_create_groups_vargs+0x1f8/0x270 [ 180.397088][ C3] ? device_create+0xed/0x130 [ 180.397098][ C3] ? usb_register_dev+0x2f0/0x570 [ 180.397111][ C3] ? yurex_probe+0xb03/0xfb0 [ 180.397122][ C3] ? usb_probe_interface+0x386/0x9b0 [ 180.397133][ C3] ? really_probe+0x241/0xa60 [ 180.397149][ C3] ? __driver_probe_device+0x210/0x460 [ 180.397163][ C3] ? driver_probe_device+0x4a/0x140 [ 180.397178][ C3] ? __device_attach_driver+0x1df/0x320 [ 180.397192][ C3] ? bus_for_each_drv+0x159/0x1e0 [ 180.397203][ C3] ? __device_attach+0x1e4/0x4d0 [ 180.397217][ C3] ? device_initial_probe+0xaf/0xd0 [ 180.397232][ C3] ? bus_probe_device+0x64/0x160 [ 180.397244][ C3] ? device_add+0x121d/0x1970 [ 180.397254][ C3] ? usb_set_configuration+0xd97/0x1c60 [ 180.397264][ C3] ? usb_generic_driver_probe+0xa1/0xe0 [ 180.397278][ C3] ? usb_probe_device+0xef/0x400 [ 180.397288][ C3] ? really_probe+0x241/0xa60 [ 180.397302][ C3] ? __driver_probe_device+0x210/0x460 [ 180.397316][ C3] ? driver_probe_device+0x4a/0x140 [ 180.397330][ C3] ? __device_attach_driver+0x1df/0x320 [ 180.397344][ C3] ? bus_for_each_drv+0x159/0x1e0 [ 180.397356][ C3] ? __device_attach+0x1e4/0x4d0 [ 180.397370][ C3] ? device_initial_probe+0xaf/0xd0 [ 180.397385][ C3] ? bus_probe_device+0x64/0x160 [ 180.397397][ C3] ? device_add+0x121d/0x1970 [ 180.397406][ C3] ? usb_new_device.part.0+0xcc2/0x1686 [ 180.397420][ C3] ? hub_event.cold+0x1e3/0xe90 [ 180.397433][ C3] ? process_one_work+0xac7/0x1b10 [ 180.397445][ C3] ? worker_thread+0x5ef/0xe50 [ 180.397460][ C3] kasan_save_track+0x14/0x30 [ 180.397473][ C3] __kasan_slab_alloc+0x89/0x90 [ 180.397486][ C3] kmem_cache_alloc_noprof+0x269/0x6a0 [ 180.397498][ C3] ? __asan_memcpy+0x3c/0x60 [ 180.397509][ C3] ? __kernfs_new_node+0xd2/0xa10 [ 180.397523][ C3] __kernfs_new_node+0xd2/0xa10 [ 180.397537][ C3] ? kernfs_add_one+0x611/0xaa0 [ 180.397551][ C3] ? kernfs_add_one+0x611/0xaa0 [ 180.397565][ C3] ? __pfx___kernfs_new_node+0x10/0x10 [ 180.397579][ C3] ? lock_acquire+0x1d1/0x380 [ 180.397593][ C3] ? kernfs_root+0x23/0x2a0 [ 180.397605][ C3] ? find_held_lock+0x2b/0x80 [ 180.397616][ C3] ? kernfs_root+0xee/0x2a0 [ 180.397628][ C3] ? kernfs_root+0xee/0x2a0 [ 180.397647][ C3] kernfs_create_dir_ns+0xa6/0x2b0 [ 180.397663][ C3] sysfs_create_dir_ns+0x13a/0x2b0 [ 180.397675][ C3] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 180.397687][ C3] ? find_held_lock+0x2b/0x80 [ 180.397698][ C3] ? kobject_add_internal+0x25f/0x930 [ 180.397717][ C3] ? kobject_add_internal+0x25f/0x930 [ 180.397740][ C3] ? class_dir_child_ns_type+0xd/0x60 [ 180.397761][ C3] kobject_add_internal+0x2c8/0x930 [ 180.397788][ C3] kobject_add+0x16a/0x1e0 [ 180.397812][ C3] ? __pfx_kobject_add+0x10/0x10 [ 180.397838][ C3] ? kobject_put+0xb9/0x640 [ 180.397863][ C3] device_add+0x294/0x1970 [ 180.397878][ C3] ? __pfx_device_add+0x10/0x10 [ 180.397887][ C3] ? kfree_const+0x5a/0x70 [ 180.397897][ C3] ? kfree+0x1e5/0x6d0 [ 180.397907][ C3] device_create_groups_vargs+0x1f8/0x270 [ 180.397919][ C3] device_create+0xed/0x130 [ 180.397929][ C3] ? __pfx_device_create+0x10/0x10 [ 180.397940][ C3] ? down_write+0x146/0x1f0 [ 180.397952][ C3] ? __pfx_down_write+0x10/0x10 [ 180.397964][ C3] usb_register_dev+0x2f0/0x570 [ 180.397978][ C3] ? __pfx_usb_register_dev+0x10/0x10 [ 180.397993][ C3] yurex_probe+0xb03/0xfb0 [ 180.398004][ C3] ? _raw_spin_lock_irqsave+0x52/0x60 [ 180.398019][ C3] ? __pfx_yurex_probe+0x10/0x10 [ 180.398030][ C3] ? mark_held_locks+0x40/0x70 [ 180.398044][ C3] ? __pfx_autoremove_wake_function+0x10/0x10 [ 180.398057][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 180.398073][ C3] ? __pm_runtime_set_status+0x13c/0x970 [ 180.398090][ C3] usb_probe_interface+0x386/0x9b0 [ 180.398103][ C3] ? __pfx_usb_probe_interface+0x10/0x10 [ 180.398114][ C3] ? kernfs_put+0x3f/0x60 [ 180.398128][ C3] ? sysfs_create_link+0x68/0xc0 [ 180.398141][ C3] ? __pfx_usb_probe_interface+0x10/0x10 [ 180.398155][ C3] really_probe+0x241/0xa60 [ 180.398169][ C3] __driver_probe_device+0x210/0x460 [ 180.398184][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 180.398200][ C3] driver_probe_device+0x4a/0x140 [ 180.398215][ C3] __device_attach_driver+0x1df/0x320 [ 180.398234][ C3] ? __pfx___device_attach_driver+0x10/0x10 [ 180.398249][ C3] bus_for_each_drv+0x159/0x1e0 [ 180.398261][ C3] ? __pfx_bus_for_each_drv+0x10/0x10 [ 180.398274][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 180.398284][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 180.398301][ C3] __device_attach+0x1e4/0x4d0 [ 180.398315][ C3] ? __pfx___device_attach+0x10/0x10 [ 180.398331][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 180.398342][ C3] device_initial_probe+0xaf/0xd0 [ 180.398357][ C3] bus_probe_device+0x64/0x160 [ 180.398371][ C3] device_add+0x121d/0x1970 [ 180.398381][ C3] ? __pfx_device_add+0x10/0x10 [ 180.398391][ C3] ? mark_held_locks+0x40/0x70 [ 180.398404][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 180.398422][ C3] usb_set_configuration+0xd97/0x1c60 [ 180.398435][ C3] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 180.398450][ C3] usb_generic_driver_probe+0xa1/0xe0 [ 180.398464][ C3] usb_probe_device+0xef/0x400 [ 180.398474][ C3] ? __pfx_usb_probe_device+0x10/0x10 [ 180.398486][ C3] really_probe+0x241/0xa60 [ 180.398500][ C3] __driver_probe_device+0x210/0x460 [ 180.398515][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 180.398531][ C3] driver_probe_device+0x4a/0x140 [ 180.398545][ C3] __device_attach_driver+0x1df/0x320 [ 180.398561][ C3] ? __pfx___device_attach_driver+0x10/0x10 [ 180.398575][ C3] bus_for_each_drv+0x159/0x1e0 [ 180.398587][ C3] ? __pfx_bus_for_each_drv+0x10/0x10 [ 180.398600][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 180.398610][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 180.398626][ C3] __device_attach+0x1e4/0x4d0 [ 180.398645][ C3] ? __pfx___device_attach+0x10/0x10 [ 180.398660][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 180.398671][ C3] device_initial_probe+0xaf/0xd0 [ 180.398687][ C3] bus_probe_device+0x64/0x160 [ 180.398700][ C3] device_add+0x121d/0x1970 [ 180.398710][ C3] ? __pfx_device_add+0x10/0x10 [ 180.398720][ C3] ? add_device_randomness+0xc9/0x110 [ 180.398735][ C3] usb_new_device.part.0+0xcc2/0x1686 [ 180.398750][ C3] ? do_raw_spin_lock+0x128/0x260 [ 180.398760][ C3] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 180.398774][ C3] ? mark_held_locks+0x40/0x70 [ 180.398789][ C3] hub_event.cold+0x1e3/0xe90 [ 180.398807][ C3] ? __pfx_hub_event+0x10/0x10 [ 180.398817][ C3] ? down_write_nested+0x140/0x200 [ 180.398827][ C3] ? lock_acquire+0x1d1/0x380 [ 180.398841][ C3] ? process_one_work+0xa2c/0x1b10 [ 180.398860][ C3] ? process_one_work+0x906/0x1b10 [ 180.398881][ C3] ? process_one_work+0x906/0x1b10 [ 180.398907][ C3] process_one_work+0xac7/0x1b10 [ 180.398935][ C3] ? __pfx_process_one_work+0x10/0x10 [ 180.398960][ C3] ? lock_acquire+0x1d1/0x380 [ 180.398988][ C3] ? __pfx_hub_event+0x10/0x10 [ 180.399004][ C3] worker_thread+0x5ef/0xe50 [ 180.399018][ C3] ? __pfx_worker_thread+0x10/0x10 [ 180.399031][ C3] ? kthread+0x13a/0x450 [ 180.399043][ C3] ? __pfx_worker_thread+0x10/0x10 [ 180.399055][ C3] kthread+0x373/0x450 [ 180.399066][ C3] ? __pfx_kthread+0x10/0x10 [ 180.399078][ C3] ret_from_fork+0x730/0xd60 [ 180.399088][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 180.399098][ C3] ? __switch_to+0x800/0x10f0 [ 180.399112][ C3] ? __pfx_kthread+0x10/0x10 [ 180.399123][ C3] ret_from_fork_asm+0x1a/0x30 [ 180.399136][ C3] [ 180.399141][ C3] [ 180.399146][ C3] The buggy address belongs to the physical page: [ 180.399151][ C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x54f0 pfn:0x70baf [ 180.399161][ C3] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 180.399178][ C3] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 180.399187][ C3] raw: 00000000000054f0 0000000000000000 00000000ffffffff 0000000000000000 [ 180.399193][ C3] page dumped because: kasan: bad access detected [ 180.399198][ C3] page_owner tracks the page as freed [ 180.399201][ C3] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7294, tgid 7293 (syz.2.461), ts 176251585774 [ 180.399218][ C3] post_alloc_hook+0xfd/0x120 [ 180.399234][ C3] get_page_from_freelist+0x110d/0x35d0 [ 180.399244][ C3] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 180.399254][ C3] new_slab+0xa9/0x6e0 [ 180.399262][ C3] refill_objects+0xe3/0x410 [ 180.399271][ C3] __pcs_replace_empty_main+0x35e/0x650 [ 180.399280][ C3] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 180.399289][ C3] snd_mixer_oss_build_test+0x7a/0x380 [ 180.399304][ C3] snd_mixer_oss_build_test_all+0x5d0/0x6e0 [ 180.399318][ C3] snd_mixer_oss_build_input+0x139/0xd50 [ 180.399332][ C3] snd_mixer_oss_notify_handler+0x48d/0x990 [ 180.399347][ C3] snd_card_register+0x2af/0x760 [ 180.399358][ C3] f_midi2_bind+0x1198/0x2770 [ 180.399373][ C3] usb_add_function+0x219/0x890 [ 180.399384][ C3] configfs_composite_bind+0xd83/0x1960 [ 180.399394][ C3] gadget_bind_driver+0x28c/0xbf0 [ 180.399407][ C3] page last free pid 6931 tgid 6931 ts 179966973136 stack trace: [ 180.399414][ C3] __free_frozen_pages+0x79f/0x10f0 [ 180.399428][ C3] qlist_free_all+0x47/0xf0 [ 180.399439][ C3] kasan_quarantine_reduce+0x1a0/0x1f0 [ 180.399450][ C3] __kasan_slab_alloc+0x69/0x90 [ 180.399462][ C3] kmem_cache_alloc_noprof+0x269/0x6a0 [ 180.399473][ C3] do_getname+0x35/0x390 [ 180.399487][ C3] do_sys_openat2+0xc7/0x1e0 [ 180.399500][ C3] __x64_sys_openat+0x12d/0x210 [ 180.399514][ C3] do_syscall_64+0x121/0x770 [ 180.399524][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.399534][ C3] [ 180.399536][ C3] Memory state around the buggy address: [ 180.399541][ C3] ffff888070baf380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 180.399548][ C3] ffff888070baf400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 180.399555][ C3] >ffff888070baf480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 180.399560][ C3] ^ [ 180.399566][ C3] ffff888070baf500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 180.399573][ C3] ffff888070baf580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 180.399578][ C3] ================================================================== [ 180.399585][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 181.006272][ C3] CPU: 3 UID: 0 PID: 840 Comm: kworker/3:2 Not tainted syzkaller #0 PREEMPT(full) [ 181.009877][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.013866][ C3] Workqueue: usb_hub_wq hub_event [ 181.015876][ C3] Call Trace: [ 181.017225][ C3] [ 181.018306][ C3] dump_stack_lvl+0x100/0x190 [ 181.020041][ C3] vpanic+0x553/0x970 [ 181.021648][ C3] ? __pfx_vpanic+0x10/0x10 [ 181.023491][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 181.025516][ C3] ? find_endpoint+0x2a3/0x2c0 [ 181.027417][ C3] panic+0xd1/0xe0 [ 181.028865][ C3] ? __pfx_panic+0x10/0x10 [ 181.030521][ C3] ? end_report.part.0+0x23/0x90 [ 181.032516][ C3] ? rcu_is_watching+0x13/0xc0 [ 181.034439][ C3] ? end_report.part.0+0x23/0x90 [ 181.036402][ C3] check_panic_on_warn.cold+0x19/0x34 [ 181.038487][ C3] end_report.part.0+0x3a/0x90 [ 181.040407][ C3] kasan_report.cold+0xe/0x18 [ 181.042281][ C3] ? find_endpoint+0x2a3/0x2c0 [ 181.044224][ C3] find_endpoint+0x2a3/0x2c0 [ 181.046074][ C3] dummy_timer+0x500/0x3700 [ 181.047884][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 181.050208][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 181.052434][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 181.054427][ C3] ? mark_held_locks+0x40/0x70 [ 181.056334][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 181.058661][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 181.060643][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 181.062729][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 181.064794][ C3] handle_softirqs+0x1e6/0x9d0 [ 181.066707][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 181.068823][ C3] ? _raw_spin_unlock+0x28/0x50 [ 181.070755][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 181.072988][ C3] __irq_exit_rcu+0x16a/0x210 [ 181.074872][ C3] irq_exit_rcu+0x9/0x30 [ 181.076584][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 181.078813][ C3] [ 181.079997][ C3] [ 181.081183][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 181.083594][ C3] RIP: 0010:lock_acquire+0x5e/0x380 [ 181.085692][ C3] Code: 05 4f a5 a5 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 5e a8 5e 0f 0f 82 c9 02 00 00 8b 35 de d9 5e 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 ed a4 a5 12 0f 85 09 03 00 00 48 83 c4 [ 181.093264][ C3] RSP: 0018:ffffc90003d2e378 EFLAGS: 00000206 [ 181.095663][ C3] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 181.098784][ C3] RDX: 0000000000000000 RSI: ffffffff8e36a6dd RDI: ffffffff8c623a80 [ 181.101925][ C3] RBP: ffffffff8edec2e0 R08: 00000000bfd3fe1d R09: 0000000000000007 [ 181.105058][ C3] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 181.108167][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 181.111281][ C3] ? unwind_next_frame+0x3be/0x2090 [ 181.113290][ C3] ? unwind_next_frame+0x3be/0x2090 [ 181.115237][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 181.117584][ C3] unwind_next_frame+0xd1/0x2090 [ 181.119374][ C3] ? unwind_next_frame+0xbd/0x2090 [ 181.121292][ C3] ? worker_thread+0x5ef/0xe50 [ 181.123190][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 181.125598][ C3] arch_stack_walk+0x94/0xf0 [ 181.127388][ C3] ? worker_thread+0x5ef/0xe50 [ 181.129274][ C3] stack_trace_save+0x8e/0xc0 [ 181.131138][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 181.133236][ C3] ? kasan_save_stack+0x3f/0x50 [ 181.135159][ C3] ? kasan_save_stack+0x30/0x50 [ 181.137063][ C3] ? kasan_save_track+0x14/0x30 [ 181.138996][ C3] ? __kasan_kmalloc+0xaa/0xb0 [ 181.140880][ C3] ? __kmalloc_node_track_caller_noprof+0x33d/0x870 [ 181.143374][ C3] ? kstrdup+0x51/0xe0 [ 181.144980][ C3] ? kstrdup_const+0x63/0x80 [ 181.146794][ C3] ? __kernfs_new_node+0x9b/0xa10 [ 181.148742][ C3] kasan_save_stack+0x30/0x50 [ 181.150539][ C3] ? kasan_save_stack+0x30/0x50 [ 181.152451][ C3] ? kasan_save_track+0x14/0x30 [ 181.154364][ C3] ? __kasan_slab_alloc+0x89/0x90 [ 181.156275][ C3] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 181.158461][ C3] ? __kernfs_new_node+0xd2/0xa10 [ 181.160383][ C3] ? kernfs_create_dir_ns+0xa6/0x2b0 [ 181.162426][ C3] ? sysfs_create_dir_ns+0x13a/0x2b0 [ 181.164537][ C3] ? kobject_add_internal+0x2c8/0x930 [ 181.166576][ C3] ? kobject_add+0x16a/0x1e0 [ 181.168377][ C3] ? device_add+0x294/0x1970 [ 181.170218][ C3] ? device_create_groups_vargs+0x1f8/0x270 [ 181.172541][ C3] ? device_create+0xed/0x130 [ 181.174348][ C3] ? usb_register_dev+0x2f0/0x570 [ 181.176309][ C3] ? yurex_probe+0xb03/0xfb0 [ 181.178136][ C3] ? usb_probe_interface+0x386/0x9b0 [ 181.180166][ C3] ? really_probe+0x241/0xa60 [ 181.182037][ C3] ? __driver_probe_device+0x210/0x460 [ 181.184153][ C3] ? driver_probe_device+0x4a/0x140 [ 181.186147][ C3] ? __device_attach_driver+0x1df/0x320 [ 181.188324][ C3] ? bus_for_each_drv+0x159/0x1e0 [ 181.190284][ C3] ? __device_attach+0x1e4/0x4d0 [ 181.192191][ C3] ? device_initial_probe+0xaf/0xd0 [ 181.194253][ C3] ? bus_probe_device+0x64/0x160 [ 181.196198][ C3] ? device_add+0x121d/0x1970 [ 181.198005][ C3] ? usb_set_configuration+0xd97/0x1c60 [ 181.200163][ C3] ? usb_generic_driver_probe+0xa1/0xe0 [ 181.202320][ C3] ? usb_probe_device+0xef/0x400 [ 181.204187][ C3] ? really_probe+0x241/0xa60 [ 181.205980][ C3] ? __driver_probe_device+0x210/0x460 [ 181.208038][ C3] ? driver_probe_device+0x4a/0x140 [ 181.210057][ C3] ? __device_attach_driver+0x1df/0x320 [ 181.212213][ C3] ? bus_for_each_drv+0x159/0x1e0 [ 181.213738][ C3] ? __device_attach+0x1e4/0x4d0 [ 181.215125][ C3] ? device_initial_probe+0xaf/0xd0 [ 181.216773][ C3] ? bus_probe_device+0x64/0x160 [ 181.218761][ C3] ? device_add+0x121d/0x1970 [ 181.220648][ C3] ? usb_new_device.part.0+0xcc2/0x1686 [ 181.222889][ C3] ? hub_event.cold+0x1e3/0xe90 [ 181.224771][ C3] ? process_one_work+0xac7/0x1b10 [ 181.226733][ C3] ? worker_thread+0x5ef/0xe50 [ 181.228658][ C3] kasan_save_track+0x14/0x30 [ 181.230519][ C3] __kasan_slab_alloc+0x89/0x90 [ 181.232475][ C3] kmem_cache_alloc_noprof+0x269/0x6a0 [ 181.234626][ C3] ? __asan_memcpy+0x3c/0x60 [ 181.236473][ C3] ? __kernfs_new_node+0xd2/0xa10 [ 181.238472][ C3] __kernfs_new_node+0xd2/0xa10 [ 181.240414][ C3] ? kernfs_add_one+0x611/0xaa0 [ 181.242335][ C3] ? kernfs_add_one+0x611/0xaa0 [ 181.244316][ C3] ? __pfx___kernfs_new_node+0x10/0x10 [ 181.246508][ C3] ? lock_acquire+0x1d1/0x380 [ 181.248384][ C3] ? kernfs_root+0x23/0x2a0 [ 181.250208][ C3] ? find_held_lock+0x2b/0x80 [ 181.252025][ C3] ? kernfs_root+0xee/0x2a0 [ 181.253894][ C3] ? kernfs_root+0xee/0x2a0 [ 181.255671][ C3] kernfs_create_dir_ns+0xa6/0x2b0 [ 181.257713][ C3] sysfs_create_dir_ns+0x13a/0x2b0 [ 181.259754][ C3] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 181.261990][ C3] ? find_held_lock+0x2b/0x80 [ 181.263896][ C3] ? kobject_add_internal+0x25f/0x930 [ 181.266052][ C3] ? kobject_add_internal+0x25f/0x930 [ 181.268183][ C3] ? class_dir_child_ns_type+0xd/0x60 [ 181.270318][ C3] kobject_add_internal+0x2c8/0x930 [ 181.272372][ C3] kobject_add+0x16a/0x1e0 [ 181.274176][ C3] ? __pfx_kobject_add+0x10/0x10 [ 181.276163][ C3] ? kobject_put+0xb9/0x640 [ 181.277980][ C3] device_add+0x294/0x1970 [ 181.279762][ C3] ? __pfx_device_add+0x10/0x10 [ 181.281719][ C3] ? kfree_const+0x5a/0x70 [ 181.283505][ C3] ? kfree+0x1e5/0x6d0 [ 181.285163][ C3] device_create_groups_vargs+0x1f8/0x270 [ 181.287419][ C3] device_create+0xed/0x130 [ 181.289248][ C3] ? __pfx_device_create+0x10/0x10 [ 181.291284][ C3] ? down_write+0x146/0x1f0 [ 181.293115][ C3] ? __pfx_down_write+0x10/0x10 [ 181.295055][ C3] usb_register_dev+0x2f0/0x570 [ 181.297015][ C3] ? __pfx_usb_register_dev+0x10/0x10 [ 181.299286][ C3] yurex_probe+0xb03/0xfb0 [ 181.301083][ C3] ? _raw_spin_lock_irqsave+0x52/0x60 [ 181.303225][ C3] ? __pfx_yurex_probe+0x10/0x10 [ 181.305209][ C3] ? mark_held_locks+0x40/0x70 [ 181.307117][ C3] ? __pfx_autoremove_wake_function+0x10/0x10 [ 181.309534][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 181.311852][ C3] ? __pm_runtime_set_status+0x13c/0x970 [ 181.314073][ C3] usb_probe_interface+0x386/0x9b0 [ 181.316108][ C3] ? __pfx_usb_probe_interface+0x10/0x10 [ 181.318330][ C3] ? kernfs_put+0x3f/0x60 [ 181.320069][ C3] ? sysfs_create_link+0x68/0xc0 [ 181.322046][ C3] ? __pfx_usb_probe_interface+0x10/0x10 [ 181.324303][ C3] really_probe+0x241/0xa60 [ 181.326117][ C3] __driver_probe_device+0x210/0x460 [ 181.328208][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 181.330537][ C3] driver_probe_device+0x4a/0x140 [ 181.332588][ C3] __device_attach_driver+0x1df/0x320 [ 181.334722][ C3] ? __pfx___device_attach_driver+0x10/0x10 [ 181.337081][ C3] bus_for_each_drv+0x159/0x1e0 [ 181.339020][ C3] ? __pfx_bus_for_each_drv+0x10/0x10 [ 181.341156][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 181.343233][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 181.345574][ C3] __device_attach+0x1e4/0x4d0 [ 181.347487][ C3] ? __pfx___device_attach+0x10/0x10 [ 181.349589][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 181.351658][ C3] device_initial_probe+0xaf/0xd0 [ 181.353692][ C3] bus_probe_device+0x64/0x160 [ 181.355597][ C3] device_add+0x121d/0x1970 [ 181.357420][ C3] ? __pfx_device_add+0x10/0x10 [ 181.359342][ C3] ? mark_held_locks+0x40/0x70 [ 181.361237][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 181.363574][ C3] usb_set_configuration+0xd97/0x1c60 [ 181.365746][ C3] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 181.368156][ C3] usb_generic_driver_probe+0xa1/0xe0 [ 181.370299][ C3] usb_probe_device+0xef/0x400 [ 181.372248][ C3] ? __pfx_usb_probe_device+0x10/0x10 [ 181.374381][ C3] really_probe+0x241/0xa60 [ 181.376201][ C3] __driver_probe_device+0x210/0x460 [ 181.378315][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 181.380616][ C3] driver_probe_device+0x4a/0x140 [ 181.382605][ C3] __device_attach_driver+0x1df/0x320 [ 181.384749][ C3] ? __pfx___device_attach_driver+0x10/0x10 [ 181.387077][ C3] bus_for_each_drv+0x159/0x1e0 [ 181.389015][ C3] ? __pfx_bus_for_each_drv+0x10/0x10 [ 181.391134][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 181.393223][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 181.395537][ C3] __device_attach+0x1e4/0x4d0 [ 181.397461][ C3] ? __pfx___device_attach+0x10/0x10 [ 181.399556][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 181.401644][ C3] device_initial_probe+0xaf/0xd0 [ 181.403676][ C3] bus_probe_device+0x64/0x160 [ 181.405609][ C3] device_add+0x121d/0x1970 [ 181.407382][ C3] ? __pfx_device_add+0x10/0x10 [ 181.409322][ C3] ? add_device_randomness+0xc9/0x110 [ 181.411465][ C3] usb_new_device.part.0+0xcc2/0x1686 [ 181.413381][ C3] ? do_raw_spin_lock+0x128/0x260 [ 181.415358][ C3] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 181.417660][ C3] ? mark_held_locks+0x40/0x70 [ 181.419563][ C3] hub_event.cold+0x1e3/0xe90 [ 181.421443][ C3] ? __pfx_hub_event+0x10/0x10 [ 181.423351][ C3] ? down_write_nested+0x140/0x200 [ 181.425337][ C3] ? lock_acquire+0x1d1/0x380 [ 181.427187][ C3] ? process_one_work+0xa2c/0x1b10 [ 181.429136][ C3] ? process_one_work+0x906/0x1b10 [ 181.431144][ C3] ? process_one_work+0x906/0x1b10 [ 181.433114][ C3] process_one_work+0xac7/0x1b10 [ 181.435108][ C3] ? __pfx_process_one_work+0x10/0x10 [ 181.437231][ C3] ? lock_acquire+0x1d1/0x380 [ 181.439090][ C3] ? __pfx_hub_event+0x10/0x10 [ 181.440987][ C3] worker_thread+0x5ef/0xe50 [ 181.442860][ C3] ? __pfx_worker_thread+0x10/0x10 [ 181.444850][ C3] ? kthread+0x13a/0x450 [ 181.446514][ C3] ? __pfx_worker_thread+0x10/0x10 [ 181.448503][ C3] kthread+0x373/0x450 [ 181.450062][ C3] ? __pfx_kthread+0x10/0x10 [ 181.451866][ C3] ret_from_fork+0x730/0xd60 [ 181.453714][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 181.455669][ C3] ? __switch_to+0x800/0x10f0 [ 181.457480][ C3] ? __pfx_kthread+0x10/0x10 [ 181.459255][ C3] ret_from_fork_asm+0x1a/0x30 [ 181.461091][ C3] [ 181.463066][ C3] Kernel Offset: disabled [ 181.464747][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:29:47 Registers: info registers vcpu 0 CPU#0 RAX=000000000018924d RBX=ffffffff8ea91580 RCX=ffffffff8bcf91c5 RDX=0000000000000001 RSI=ffffffff8e390af9 RDI=ffffffff8c623a80 RBP=fffffbfff1d522b0 RSP=ffffffff8ea07cf0 R8 =0000000000000001 R9 =ffffed10056467bd R10=ffff88802b233deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d40fa2 R15=dffffc0000000000 RIP=ffffffff8bcf76ff RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096959000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7238c10 CR3=0000000046218000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000001 RDX=ffff8880284f2580 RSI=ffffffff81fec68e RDI=ffff8880284f2580 RBP=ffff88802b543b20 RSP=ffffc900043bf4d0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed100509e763 R13=0000000000000003 R14=ffffed10056a8765 R15=0000000000000001 RIP=ffffffff81fec690 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096a59000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f055c0 CR3=000000006797d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000007 RBX=ffff888024e656d8 RCX=0000000000000200 RDX=8249c1dcfe9d3631 RSI=00000000d967cd7d RDI=00000000d11f4a9e RBP=0000000000000007 RSP=ffffc9000400f0f8 R8 =00000000f654b352 R9 =0000000000000007 R10=0000000000000001 R11=0000000000000001 R12=ffff888024e64b00 R13=0000000000000001 R14=0000000000000005 R15=8249c1dcfe9d3631 RIP=ffffffff81e6b280 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1dc7660300 ffffffff 00c00000 GS =0000 ffff888096b59000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005600f52a3000 CR3=0000000051044000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8288aec2 ffffffff8a75d41d 0000000500000004 0000000600040008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000200 ffffffff82c1ac2e ffffffff8a2a19ca ffffffff81c7e653 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000fffffffff0201 c70800060143fe2a 0000031d00000014 0000000100000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d000020208000008 0006015bba0e0800 00030fffffffff02 0fffffffff021c08 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000080008015292 0fffffffff020408 000008000208007c 08000a0150860004 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000080002800201 c7080008014de600 327265636e657571 65732f7665642f01 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff df08028003000800 0fffffffff020108 0006017bbe079808 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000100000408060a 0106ec00312e302e 302e37323101ffff ffffffffffffeb08 ZMM25=9f4da0719f4da071 9f4da0719f4da071 9f4da0719f4da071 9f4da0719f4da071 9f4da0719f4da071 9f4da0719f4da071 9f4da0719f4da071 9f4da0719f4da071 ZMM26=bbdb569ebbdb569e bbdb569ebbdb569e bbdb569ebbdb569e bbdb569ebbdb569e bbdb569ebbdb569e bbdb569ebbdb569e bbdb569ebbdb569e bbdb569ebbdb569e ZMM27=ab955f1bab955f1b ab955f1bab955f1b ab955f1bab955f1b ab955f1bab955f1b ab955f1bab955f1b ab955f1bab955f1b ab955f1bab955f1b ab955f1bab955f1b ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=1c0500001c050000 1c0500001c050000 1c0500001c050000 1c0500001c050000 1c0500001c050000 1c0500001c050000 1c0500001c050000 1c0500001c050000 info registers vcpu 3 CPU#3 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85af7645 RDI=ffffffff9bc5e3e0 RBP=ffffffff9bc5e3a0 RSP=ffffc900005f83c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000038 R14=0000000000000003 R15=ffffc900005f86e0 RIP=ffffffff85af766f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096c59000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f71d8c10 CR3=0000000029a23000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefefc00 Opmask01=0000000000000000 Opmask02=00000000ffff7fdf Opmask03=0000000000004104 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a88c1efc00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a88c1e8970 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312d352f35627375 2f302e6463685f79 6d6d75642f6d726f 6674616c702f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000181 0000000000000050 0000000000000000 0000000000000030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a88c1d7810 000055a88c1da070 0000000000000031 0000000000000030 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000