last executing test programs: 5.440759783s ago: executing program 0 (id=4822): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x11) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f00000008c0)=ANY=[], 0x0, 0x3f, 0x0, 0x0, 0xb}, 0x28) r3 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000280)={'nat\x00', 0x2, [{}, {}]}, 0x48) sendmmsg$inet6(r3, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000440)}}], 0x1, 0x4c0c0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) getsockopt$sock_buf(r4, 0x1, 0x1a, 0x0, &(0x7f0000000140)) 3.730398207s ago: executing program 0 (id=4833): r0 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000240)) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r1, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe000000200"/136], 0x110) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000740)={{}, 0x0, 0x0}, 0x20) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x548a}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 2.799024044s ago: executing program 0 (id=4836): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) 2.700254915s ago: executing program 0 (id=4837): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400), 0x0) 2.699896134s ago: executing program 0 (id=4838): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)}], 0x2}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/26, 0x1a}, {&(0x7f0000000440)=""/131, 0x83}], 0x2}, 0x40012030) 2.604151002s ago: executing program 0 (id=4839): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000580)={0x60, 0xd, 0x9, {0x9, 0x3, "a862558e02d650"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x421}}, 0x0, 0x0}, 0x0) 1.400274144s ago: executing program 3 (id=4846): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) 1.097652197s ago: executing program 3 (id=4850): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x48000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000004280)=[{{&(0x7f0000000500)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000540)='\'', 0x1}], 0x1}}], 0x1, 0x20000040) alarm(0x400) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) write(r2, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000e5787148f84b11dfc652f55be299339711d9ca721391a023ae5d9f38fc4acbdb126a4f36178098f69d09de9d85c682792c62c0b81b4b3cf74eab521cf9a151278eff6d9268151e7b5cd4dad17341a62de10872cff8dd279f246c0f61b8cf2b255255a1df06e629f3c90ea789e68763bdd2185e954bf26c01a6480cd38afe93dd7ec982ba6473309391e3e5c9b8f21cbd2307c29082693f92756522ddd0add4c164d0"]) alarm(0x9) 978.419659ms ago: executing program 2 (id=4851): keyctl$invalidate(0x15, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000000)='0\x00', 0x2) 962.989404ms ago: executing program 2 (id=4853): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_open_dev$dvb_demux(&(0x7f0000000000), 0x2, 0x8000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000023c0)='virtiofs\x00', 0x320081a, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r1, {0xe, 0x3}, {0xc}, {0x9, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040852}, 0x40004) 879.231821ms ago: executing program 2 (id=4855): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pread64(r0, &(0x7f0000000400), 0x8, 0x1000) pread64(r0, &(0x7f00000002c0)=""/7, 0x7, 0x9) 812.61189ms ago: executing program 2 (id=4856): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000280)={0x4, 0x0, {0xffffffffffffffff}, {}, 0x8}) ptrace$getenv(0x4201, r3, 0x4, &(0x7f0000000300)) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/dummy_hcd.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='dwc3\x00', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='dummy_hcd.0\x00', 0xc) 458.531725ms ago: executing program 1 (id=4858): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r0, &(0x7f0000010b40)=[{&(0x7f0000000140)="58ddb007", 0x4}, {&(0x7f0000000540)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a085852456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290faee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020", 0xac1}, {&(0x7f0000000240)="b0c089c1c3e1216756615dde8fd8e358908803df4459f506479ab9cf61eb0266", 0x20}, {&(0x7f0000010b00)="534f13aae2f684103d7b99c8da97c70c6fabc31168c297e1b3124ec1156a8415ef3c45b66dcdb8346c00e85245877c04779c49b78e9cbc61499a1727", 0x3c}], 0x4) 447.22167ms ago: executing program 2 (id=4859): socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x64) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x4100100, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b7050000000b00006110200000000000d40500002000000095000000000000009abb1723bf2c203831c9545b21c751ee4024f479cbe4b89f9807836ea5847c95ffc926c2e182c7a3221481f5009edaf5f542a715b99fb3d2a73dd02584a54ee68c70dbfbcdcea76ee541e318cbe84cd4f5381f522e258a4d9aeb9b16feb66bf40fdf73be95633dc5de907f2ffdcc18494f09c327abd3a76fee11357181f05f7ac06d6a9078df8bc21f00cd8ac4109850ce4aa147beacafecd5c7ccdeecb146ca1e7611f8b3adb41b39029c1b9b59fbf1b4a80167ca6b113a1600000000000000000000cdb7fe6d684423596ee2bdad7787936c24c84d4721327a695ed24946de35ff5e000091e0610ac2d72b9b6f453f98e7b5a25941905bd564aac36dbe7d1db9f5561ad6f7c2e79fb80b6949d626024b5fb96e3da0d7113b1c826f49a2cbc18001d315aaf280a8a762689f8c6fee958836002f48815ad19ee99d81c9e3cda430cef4a75e5c4dd14c3cbb6af58e3f3b3f8cbd858532b02995d79ca5dac0fd49aa150f6e212e3f46e4f37f372ee43f136e4d3af6cc4a0ce2379cc1010d8483b82e54feeefa1e89d6a3b74fbb4b619c43984223674b40fbe29ea5752c76a5e6a44d95382a9e04f9a51881aedb6d6242d0fe2e7dcf1f8b22f46c37fb010f8e86c62a4c72327c7eaaf720aff72529429aed45219cb1b6476e53b650927d193b4062c4640de2781643edc5e59280c59332e92b52675a02009db11b3829d8424fdf33ccdb7f89bfa14f9c2a17f9183cb48222e685f49340891845efdac175d90c116eaa013315165865f9a3785e21b41fd4b5eda7eb5a7462307fe72a3fe53eb02c75867e6eeebfc3037683f66d407fc28c4735a221bb5b78a6f966474a98ceceb20f0d4757b8e81ab14d29bad2b19aa5aff53ee333009688b401064898f58f88226f0e675cc74f0adaf4b97315e12e88b5eabd519e523a7f0e839fe91774f85a65068de244a78687c12e4e6dffb556c8d30b8ee73faaac455701569da7ae1a4e44fdd2cf28965a9f5e09acf476e07e5ea768c558a5622601742b27b91724dde6a0f96d3e53e67db57bbd0d3f2dd8439192dfc71f9e5f289c7f519e8b794fb09b64fb3c1bcd46731051de09510ebd717eb57655d447753fd2ff052a9d6889ddb5a5f68564bd00a5ff58a75805eadb00000000000000006a9af2471aada1ad164502199e0a668ad4daa53e5658f82733b3c7f36fcf3146adf7025dfd79c5a67c27395f5ca5a90d45402e58b42946b5a977a56385f31083a4b65d61ec4991cd6c91a02bd788825a"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) 446.28411ms ago: executing program 1 (id=4860): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) 185.06881ms ago: executing program 3 (id=4861): keyctl$invalidate(0x15, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000000)='0\x00', 0x2) 177.439267ms ago: executing program 1 (id=4862): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="3c00238005001100"], 0x58}, 0x1, 0x0, 0x0, 0x8851}, 0x4800) 119.867598ms ago: executing program 2 (id=4863): read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) close(0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 119.151472ms ago: executing program 1 (id=4864): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_open_dev$dvb_demux(&(0x7f0000000000), 0x2, 0x8000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000023c0)='virtiofs\x00', 0x320081a, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r1, {0xe, 0x3}, {0xc}, {0x9, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040852}, 0x40004) 119.077496ms ago: executing program 3 (id=4865): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b00)=@newchain={0x24, 0x1e, 0x1, 0x1, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0x9}}}, 0x24}}, 0x4044004) 48.167336ms ago: executing program 3 (id=4866): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 47.108677ms ago: executing program 1 (id=4867): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/232, 0xe8}], 0x1}, 0xf0) 46.032893ms ago: executing program 3 (id=4868): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000002c0)={0x0, 0xfffffffffffffff9, 0x7fffffff, 0x20000000, 0x800, 0x3, 0x8000001000000000}, 0x0, &(0x7f00000000c0)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e22, 0x0, 0x4}, 0x0, 0x0) 0s ago: executing program 1 (id=4869): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x48000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000004280)=[{{&(0x7f0000000500)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000540)='\'', 0x1}], 0x1}}], 0x1, 0x20000040) alarm(0x400) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) write(r2, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) alarm(0x9) kernel console output (not intermixed with test programs): T11785] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1430.417824][T11785] usb 6-1: can't read configurations, error -71 [ 1430.531690][T20118] can0 (unregistered): slcan off ttyS3. [ 1434.166703][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1434.184814][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1434.507179][T20164] can0: slcan on ttyS3. [ 1435.472450][T20172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3936'. [ 1435.548691][T20172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3936'. [ 1436.140248][T19819] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1436.294529][T20155] can0 (unregistered): slcan off ttyS3. [ 1436.500112][T20177] netlink: 'syz.0.3938': attribute type 10 has an invalid length. [ 1438.587088][T20203] can0: slcan on ttyS3. [ 1438.888763][T19819] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1438.912967][T19819] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1438.917984][T19819] usb 5-1: can't read configurations, error -71 [ 1439.722765][T12193] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1440.146882][T20217] netlink: 'syz.3.3944': attribute type 10 has an invalid length. [ 1440.339346][T12193] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1440.347630][T12193] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1440.352618][T12193] usb 8-1: can't read configurations, error -71 [ 1442.148226][T20203] can0 (unregistered): slcan off ttyS3. [ 1442.584172][T20231] can0: slcan on ttyS3. [ 1444.193957][T20231] can0 (unregistered): slcan off ttyS3. [ 1449.388921][T19014] Bluetooth: hci3: command 0x0406 tx timeout [ 1450.364740][T20300] can0: slcan on ttyS3. [ 1450.938102][T20300] can0 (unregistered): slcan off ttyS3. [ 1451.056946][T20311] can0: slcan on ttyS3. [ 1452.287618][T20311] can0 (unregistered): slcan off ttyS3. [ 1453.060734][T20331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3962'. [ 1453.065445][T20331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3962'. [ 1456.210471][T20368] can0: slcan on ttyS3. [ 1456.858427][T19014] Bluetooth: hci3: command 0x0406 tx timeout [ 1457.243951][T20369] can0 (unregistered): slcan off ttyS3. [ 1457.749039][T20384] can0: slcan on ttyS3. [ 1458.774948][T20384] can0 (unregistered): slcan off ttyS3. [ 1460.110561][T19014] Bluetooth: hci3: command 0x0406 tx timeout [ 1462.816230][T20420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3977'. [ 1462.819771][T20420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3977'. [ 1462.831390][T20425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3978'. [ 1462.835832][T20425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3978'. [ 1464.206700][T20435] can0: slcan on ttyS3. [ 1465.050072][T20437] can0 (unregistered): slcan off ttyS3. [ 1466.572892][T20448] can0: slcan on ttyS3. [ 1467.756284][T20455] can0 (unregistered): slcan off ttyS3. [ 1468.768051][T20476] can0: slcan on ttyS3. [ 1469.743711][ T9772] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1470.586476][T20502] netlink: 'syz.3.3989': attribute type 10 has an invalid length. [ 1470.891749][ T9772] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1470.923341][ T9772] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1470.928493][ T9772] usb 8-1: can't read configurations, error -71 [ 1471.214235][T20470] can0 (unregistered): slcan off ttyS3. [ 1471.790143][ T6741] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1472.073423][T20512] netlink: 'syz.1.3991': attribute type 10 has an invalid length. [ 1472.702349][ T6741] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1472.708146][ T6741] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1472.712805][ T6741] usb 6-1: can't read configurations, error -71 [ 1473.183156][T20527] can0: slcan on ttyS3. [ 1475.862403][T20524] can0 (unregistered): slcan off ttyS3. [ 1477.486000][T20566] can0: slcan on ttyS3. [ 1478.697409][T20570] can0 (unregistered): slcan off ttyS3. [ 1482.421012][ T6741] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1482.736413][T20608] netlink: 'syz.2.4007': attribute type 10 has an invalid length. [ 1482.985688][T20617] can0: slcan on ttyS3. [ 1485.014907][T20617] can0 (unregistered): slcan off ttyS3. [ 1485.147963][ T6741] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1485.171692][ T6741] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1485.197491][ T6741] usb 7-1: can't read configurations, error -71 [ 1491.313527][T20672] can0: slcan on ttyS3. [ 1492.903611][T20669] can0 (unregistered): slcan off ttyS3. [ 1493.646037][T20710] can0: slcan on ttyS3. [ 1495.148877][T20717] can0 (unregistered): slcan off ttyS3. [ 1495.521110][T20728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4023'. [ 1495.545252][T20728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4023'. [ 1495.559730][T20715] can0: slcan on ttyS3. [ 1495.576837][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1495.582781][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1496.952186][T20711] can0 (unregistered): slcan off ttyS3. [ 1497.925584][T20741] can0: slcan on ttyS3. [ 1498.843851][T20758] can0 (unregistered): slcan off ttyS3. [ 1501.030511][ T9772] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1501.388881][T20769] netlink: 'syz.2.4029': attribute type 10 has an invalid length. [ 1501.685500][ T9772] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1501.691417][ T9772] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1501.699364][ T9772] usb 7-1: can't read configurations, error -71 [ 1501.865729][T20773] can0: slcan on ttyS3. [ 1502.982499][T20783] can0 (unregistered): slcan off ttyS3. [ 1508.556995][T20823] can0: slcan on ttyS3. [ 1510.199219][T20824] can0 (unregistered): slcan off ttyS3. [ 1513.471565][ T9772] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1513.844131][T20866] netlink: 'syz.3.4044': attribute type 10 has an invalid length. [ 1514.784504][T20864] can0: slcan on ttyS3. [ 1515.206579][T20864] can0 (unregistered): slcan off ttyS3. [ 1516.200358][ T9772] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1516.234376][ T9772] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1516.291109][ T9772] usb 8-1: can't read configurations, error -71 [ 1517.425535][T20898] can0: slcan on ttyS3. [ 1518.774775][T20898] can0 (unregistered): slcan off ttyS3. [ 1519.078476][T20891] can0: slcan on ttyS3. [ 1519.518530][T20891] can0 (unregistered): slcan off ttyS3. [ 1521.507627][T20937] can0: slcan on ttyS3. [ 1522.892823][T20938] can0 (unregistered): slcan off ttyS3. [ 1523.896643][T20954] can0: slcan on ttyS3. [ 1525.632057][T20954] can0 (unregistered): slcan off ttyS3. [ 1527.344341][T20973] can0: slcan on ttyS3. [ 1527.867791][T20978] can0 (unregistered): slcan off ttyS3. [ 1528.111070][T20997] can0: slcan on ttyS3. [ 1529.110013][T21003] can0 (unregistered): slcan off ttyS3. [ 1534.989239][T21060] can0: slcan on ttyS3. [ 1537.061213][T19014] Bluetooth: hci3: command 0x0406 tx timeout [ 1537.758111][T21063] can0 (unregistered): slcan off ttyS3. [ 1541.337230][T21088] can0: slcan on ttyS3. [ 1542.162548][T21094] can0 (unregistered): slcan off ttyS3. [ 1545.471441][T21114] can0: slcan on ttyS3. [ 1546.345366][T21127] can0 (unregistered): slcan off ttyS3. [ 1548.418980][T21144] can0: slcan on ttyS3. [ 1549.000060][T21144] can0 (unregistered): slcan off ttyS3. [ 1549.127615][T21142] can0: slcan on ttyS3. [ 1549.989229][T21153] can0 (unregistered): slcan off ttyS3. [ 1550.817313][T21174] can0: slcan on ttyS3. [ 1552.671533][T21171] can0 (unregistered): slcan off ttyS3. [ 1556.374112][T21218] can0: slcan on ttyS3. [ 1556.976775][T21230] can0 (unregistered): slcan off ttyS3. [ 1557.053985][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1557.056903][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1557.125375][T21231] can0: slcan on ttyS3. [ 1557.490506][T16410] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1557.560006][T21231] can0 (unregistered): slcan off ttyS3. [ 1557.841203][T21233] netlink: 'syz.2.4098': attribute type 10 has an invalid length. [ 1560.176994][T21260] can0: slcan on ttyS3. [ 1560.260375][T16410] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1560.381781][T16410] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1560.388197][T16410] usb 7-1: can't read configurations, error -71 [ 1561.808900][T21260] can0 (unregistered): slcan off ttyS3. [ 1564.291591][T21295] can0: slcan on ttyS3. [ 1567.030334][T21291] can0 (unregistered): slcan off ttyS3. [ 1567.622854][ T9783] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1567.914255][T21326] netlink: 'syz.0.4112': attribute type 10 has an invalid length. [ 1571.410089][ T9783] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1571.415081][ T9783] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1571.419237][ T9783] usb 5-1: can't read configurations, error -71 [ 1572.253046][T21371] can0: slcan on ttyS3. [ 1573.131238][T21371] can0 (unregistered): slcan off ttyS3. [ 1574.600637][T21384] can0: slcan on ttyS3. [ 1575.912490][T21384] can0 (unregistered): slcan off ttyS3. [ 1576.390291][T16410] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1577.135633][T21419] netlink: 'syz.3.4125': attribute type 10 has an invalid length. [ 1577.224289][T16410] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1577.757534][T16410] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1577.822695][T16410] usb 8-1: can't read configurations, error -71 [ 1580.612849][T21439] can0: slcan on ttyS3. [ 1583.319703][T21453] can0 (unregistered): slcan off ttyS3. [ 1592.416735][T21518] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4145'. [ 1592.862445][T21518] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1592.862507][T21518] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1592.871993][T21518] vhci_hcd vhci_hcd.0: Device attached [ 1593.314622][ T75] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 1593.534138][T21527] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4148'. [ 1593.740880][T21529] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1593.740915][T21529] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1593.741073][T21529] vhci_hcd vhci_hcd.0: Device attached [ 1594.235478][T21530] vhci_hcd: connection closed [ 1594.253911][T13625] vhci_hcd vhci_hcd.2: stop threads [ 1594.255780][T13625] vhci_hcd vhci_hcd.2: release socket [ 1594.257409][T13625] vhci_hcd vhci_hcd.2: disconnect device [ 1594.353947][ T56] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 1594.354836][ T56] usb 41-1: enqueue for inactive port 0 [ 1594.399508][T21520] vhci_hcd: connection reset by peer [ 1594.777868][T13625] vhci_hcd vhci_hcd.0: stop threads [ 1594.777976][T13625] vhci_hcd vhci_hcd.0: release socket [ 1594.778065][T13625] vhci_hcd vhci_hcd.0: disconnect device [ 1594.798709][ T56] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1596.097887][T21537] can0: slcan on ttyS3. [ 1597.438762][T21537] can0 (unregistered): slcan off ttyS3. [ 1598.583218][ T75] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1600.052609][T21583] can0: slcan on ttyS3. [ 1600.815155][T21590] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4156'. [ 1600.898464][T21583] can0 (unregistered): slcan off ttyS3. [ 1600.934788][T21589] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 1600.934815][T21589] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1600.934892][T21589] vhci_hcd vhci_hcd.0: Device attached [ 1601.181064][T16410] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 1601.641182][T21593] vhci_hcd: connection reset by peer [ 1601.653172][T18713] vhci_hcd vhci_hcd.1: stop threads [ 1601.655672][T18713] vhci_hcd vhci_hcd.1: release socket [ 1601.658324][T18713] vhci_hcd vhci_hcd.1: disconnect device [ 1604.007035][T21603] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4160'. [ 1604.071060][T21603] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1604.088475][T21603] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1604.095195][T21603] vhci_hcd vhci_hcd.0: Device attached [ 1604.340029][T12193] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 1604.852502][T21613] can0: slcan on ttyS3. [ 1605.209921][T21617] vhci_hcd: connection reset by peer [ 1605.251799][T18713] vhci_hcd vhci_hcd.2: stop threads [ 1605.259412][T18713] vhci_hcd vhci_hcd.2: release socket [ 1605.262765][T18713] vhci_hcd vhci_hcd.2: disconnect device [ 1605.648192][T21614] can0 (unregistered): slcan off ttyS3. [ 1606.342918][T16410] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1606.517862][T21630] can0: slcan on ttyS3. [ 1607.353056][T21630] can0 (unregistered): slcan off ttyS3. [ 1610.180043][T12193] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1613.817281][T21687] can0: slcan on ttyS3. [ 1615.393706][T21688] can0 (unregistered): slcan off ttyS3. [ 1615.893294][T21698] can0: slcan on ttyS3. [ 1616.126633][T21708] can0 (unregistered): slcan off ttyS3. [ 1616.901050][T21723] can0: slcan on ttyS3. [ 1618.496259][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1618.496551][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1618.719665][T21741] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1618.719703][T21741] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1618.760700][T21741] vhci_hcd vhci_hcd.0: Device attached [ 1619.104497][T21740] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4179'. [ 1619.165209][ T9783] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 1619.253187][T21723] can0 (unregistered): slcan off ttyS3. [ 1619.485714][T21742] vhci_hcd: connection reset by peer [ 1619.886395][T18713] vhci_hcd vhci_hcd.2: stop threads [ 1619.886464][T18713] vhci_hcd vhci_hcd.2: release socket [ 1619.886536][T18713] vhci_hcd vhci_hcd.2: disconnect device [ 1620.271903][T21747] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 1620.271954][T21747] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1620.272061][T21747] vhci_hcd vhci_hcd.0: Device attached [ 1620.299211][T21745] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4180'. [ 1621.041459][T21748] vhci_hcd: connection closed [ 1621.065982][T13625] vhci_hcd vhci_hcd.3: stop threads [ 1621.066015][T13625] vhci_hcd vhci_hcd.3: release socket [ 1621.066036][T13625] vhci_hcd vhci_hcd.3: disconnect device [ 1623.477365][T21788] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4182'. [ 1623.670783][T21785] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1623.674515][T21785] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1623.679101][T21785] vhci_hcd vhci_hcd.0: Device attached [ 1624.239542][ T75] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 1624.353613][ T9783] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1624.633015][T21776] can0: slcan on ttyS3. [ 1624.672019][T21790] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 2 [ 1624.812850][T13625] vhci_hcd vhci_hcd.0: stop threads [ 1624.816037][T13625] vhci_hcd vhci_hcd.0: release socket [ 1624.873083][T13625] vhci_hcd vhci_hcd.0: disconnect device [ 1627.040002][T21801] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1627.040062][T21801] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1627.043082][T21801] vhci_hcd vhci_hcd.0: Device attached [ 1627.293638][T21800] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4189'. [ 1627.405868][T21786] can0 (unregistered): slcan off ttyS3. [ 1628.428360][T21802] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 2 [ 1629.307326][T21803] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1629.424874][T13625] vhci_hcd vhci_hcd.0: stop threads [ 1629.427846][T13625] vhci_hcd vhci_hcd.0: release socket [ 1629.430961][T13625] vhci_hcd vhci_hcd.0: disconnect device [ 1629.533716][ T75] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1631.116104][T21820] can0: slcan on ttyS3. [ 1632.331737][T21840] can0 (unregistered): slcan off ttyS3. [ 1632.720376][T21852] can0: slcan on ttyS3. [ 1633.080012][T21856] can0 (unregistered): slcan off ttyS3. [ 1633.293135][T21842] can0: slcan on ttyS3. [ 1634.445639][T21847] can0 (unregistered): slcan off ttyS3. [ 1636.291070][T21891] can0: slcan on ttyS3. [ 1637.596623][T21891] can0 (unregistered): slcan off ttyS3. [ 1638.293153][T21908] can0: slcan on ttyS3. [ 1639.231796][T21916] can0 (unregistered): slcan off ttyS3. [ 1640.955418][T21944] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 1640.955447][T21944] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1640.955711][T21944] vhci_hcd vhci_hcd.0: Device attached [ 1641.231627][T21942] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4211'. [ 1641.371399][T12193] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 1642.178697][T21945] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 1642.696640][T18713] vhci_hcd vhci_hcd.3: stop threads [ 1642.703374][T18713] vhci_hcd vhci_hcd.3: release socket [ 1643.128828][T18713] vhci_hcd vhci_hcd.3: disconnect device [ 1643.278677][T21939] can0: slcan on ttyS3. [ 1644.684416][T21939] can0 (unregistered): slcan off ttyS3. [ 1645.943857][T21975] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4215'. [ 1645.961797][T21964] can0: slcan on ttyS3. [ 1646.059325][T21973] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 1646.059351][T21973] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1646.059496][T21973] vhci_hcd vhci_hcd.0: Device attached [ 1646.403420][T21981] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4216'. [ 1646.552762][ T75] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 1646.654777][T12193] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1646.766262][T21976] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 2 [ 1646.769741][T18713] vhci_hcd vhci_hcd.1: stop threads [ 1646.769762][T18713] vhci_hcd vhci_hcd.1: release socket [ 1646.770953][T18713] vhci_hcd vhci_hcd.1: disconnect device [ 1647.251124][T21979] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1647.251157][T21979] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1647.251234][T21979] vhci_hcd vhci_hcd.0: Device attached [ 1647.765178][T19075] usb 41-1: new low-speed USB device number 5 using vhci_hcd [ 1648.126609][T21983] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 3 [ 1648.169692][T18713] vhci_hcd vhci_hcd.2: stop threads [ 1648.171638][T18713] vhci_hcd vhci_hcd.2: release socket [ 1648.178299][T18713] vhci_hcd vhci_hcd.2: disconnect device [ 1650.122032][T21964] can0 (unregistered): slcan off ttyS3. [ 1650.470488][T21986] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4219'. [ 1650.515938][T21986] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1650.518876][T21986] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1650.528223][T21986] vhci_hcd vhci_hcd.0: Device attached [ 1650.858167][T21999] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 3 [ 1650.909287][ T56] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 1650.914365][T22000] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1650.963589][T18713] vhci_hcd vhci_hcd.0: stop threads [ 1650.965535][T18713] vhci_hcd vhci_hcd.0: release socket [ 1650.967784][T18713] vhci_hcd vhci_hcd.0: disconnect device [ 1651.750858][ T75] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1652.183560][T22016] can0: slcan on ttyS3. [ 1652.935299][T22031] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1652.935327][T22031] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1652.935386][T22031] vhci_hcd vhci_hcd.0: Device attached [ 1652.935453][T22030] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4226'. [ 1653.311311][T19075] usb 41-1: device descriptor read/64, error -110 [ 1653.341722][T22020] can0 (unregistered): slcan off ttyS3. [ 1653.607831][T19075] usb 41-1: new low-speed USB device number 6 using vhci_hcd [ 1653.725862][T19014] Bluetooth: hci3: command 0x0406 tx timeout [ 1653.897774][T22032] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 4 [ 1653.917865][T18713] vhci_hcd vhci_hcd.2: stop threads [ 1653.922007][T18713] vhci_hcd vhci_hcd.2: release socket [ 1653.927149][T18713] vhci_hcd vhci_hcd.2: disconnect device [ 1655.538399][T22042] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4227'. [ 1655.628820][T22024] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1655.631650][T22024] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1655.638871][T22024] vhci_hcd vhci_hcd.0: Device attached [ 1655.741141][T22047] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 4 [ 1655.748844][T18713] vhci_hcd vhci_hcd.0: stop threads [ 1655.756580][T18713] vhci_hcd vhci_hcd.0: release socket [ 1655.920046][T18713] vhci_hcd vhci_hcd.0: disconnect device [ 1656.141091][ T56] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1658.730145][T19075] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1658.824578][T22073] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1658.824609][T22073] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1658.824671][T22073] vhci_hcd vhci_hcd.0: Device attached [ 1659.076576][T22072] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4232'. [ 1659.128807][T22074] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 4 [ 1659.129509][T18713] vhci_hcd vhci_hcd.2: stop threads [ 1659.129529][T18713] vhci_hcd vhci_hcd.2: release socket [ 1659.129580][T18713] vhci_hcd vhci_hcd.2: disconnect device [ 1659.250012][T19075] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1660.747223][T22064] can0: slcan on ttyS3. [ 1662.676217][T22077] can0 (unregistered): slcan off ttyS3. [ 1664.025858][T22102] can0: slcan on ttyS3. [ 1664.541005][T22114] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4237'. [ 1664.590967][T22095] can0 (unregistered): slcan off ttyS3. [ 1664.798078][T22114] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 1664.798107][T22114] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1664.798244][T22114] vhci_hcd vhci_hcd.0: Device attached [ 1665.017109][T22116] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 2 [ 1665.020477][T18713] vhci_hcd vhci_hcd.1: stop threads [ 1665.020500][T18713] vhci_hcd vhci_hcd.1: release socket [ 1665.020559][T18713] vhci_hcd vhci_hcd.1: disconnect device [ 1665.050036][T15973] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1667.428519][T22143] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4241'. [ 1667.576865][T22144] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1667.576894][T22144] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1667.588745][T22144] vhci_hcd vhci_hcd.0: Device attached [ 1667.733037][T22145] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 4 [ 1667.802014][T18713] vhci_hcd vhci_hcd.0: stop threads [ 1667.802035][T18713] vhci_hcd vhci_hcd.0: release socket [ 1667.802056][T18713] vhci_hcd vhci_hcd.0: disconnect device [ 1668.299414][T22148] fuse: Bad value for 'fd' [ 1672.585262][T22174] can0: slcan on ttyS3. [ 1673.157092][T22186] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4250'. [ 1673.181067][T22174] can0 (unregistered): slcan off ttyS3. [ 1673.187404][T22187] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 1673.187433][T22187] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1673.187509][T22187] vhci_hcd vhci_hcd.0: Device attached [ 1673.560669][T12193] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 1673.941225][T22188] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 3 [ 1674.218274][T18713] vhci_hcd vhci_hcd.1: stop threads [ 1674.255206][T18713] vhci_hcd vhci_hcd.1: release socket [ 1674.299769][T18713] vhci_hcd vhci_hcd.1: disconnect device [ 1676.988387][T22207] can0: slcan on ttyS3. [ 1678.493890][T22227] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4256'. [ 1678.857468][T12193] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1679.484589][T22228] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 1679.487816][T22228] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1679.543053][T22228] vhci_hcd vhci_hcd.0: Device attached [ 1679.653354][T22202] can0 (unregistered): slcan off ttyS3. [ 1679.921246][T12193] usb 39-1: device descriptor read/64, error -110 [ 1679.932069][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1679.934792][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1679.963599][T22230] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 3 [ 1679.970667][T18713] vhci_hcd vhci_hcd.1: stop threads [ 1679.973062][T18713] vhci_hcd vhci_hcd.1: release socket [ 1679.976784][T18713] vhci_hcd vhci_hcd.1: disconnect device [ 1680.100550][T12193] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1681.900435][T22249] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 1681.900464][T22249] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1681.901947][T22249] vhci_hcd vhci_hcd.0: Device attached [ 1682.242717][T15194] usb 37-1: new low-speed USB device number 5 using vhci_hcd [ 1682.294245][T22250] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 5 [ 1682.312662][T18713] vhci_hcd vhci_hcd.0: stop threads [ 1682.318072][T18713] vhci_hcd vhci_hcd.0: release socket [ 1682.323427][T18713] vhci_hcd vhci_hcd.0: disconnect device [ 1683.299722][T22244] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4260'. [ 1684.016844][T22244] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 1684.019675][T22244] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1684.036904][T22244] vhci_hcd vhci_hcd.0: Device attached [ 1684.567546][T22260] vhci_hcd: connection closed [ 1684.950207][ T34] usb 39-1: new low-speed USB device number 7 using vhci_hcd [ 1684.953889][T22263] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1685.106824][T13625] vhci_hcd vhci_hcd.1: stop threads [ 1685.125528][T13625] vhci_hcd vhci_hcd.1: release socket [ 1685.130971][T13625] vhci_hcd vhci_hcd.1: disconnect device [ 1685.246571][T22254] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4262'. [ 1685.586232][T22269] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1685.590496][T22269] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1685.777320][T22269] vhci_hcd vhci_hcd.0: Device attached [ 1685.942646][T22271] vhci_hcd: connection closed [ 1685.967289][T13625] vhci_hcd vhci_hcd.2: stop threads [ 1685.977839][T13625] vhci_hcd vhci_hcd.2: release socket [ 1685.983179][T13625] vhci_hcd vhci_hcd.2: disconnect device [ 1686.020171][T15973] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1687.625073][T15194] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1688.092257][T22289] can0: slcan on ttyS3. [ 1688.600594][T22292] can0 (unregistered): slcan off ttyS3. [ 1689.425882][T22307] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4266'. [ 1689.587453][T22299] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1689.622260][T22299] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1689.670283][T22299] vhci_hcd vhci_hcd.0: Device attached [ 1689.982825][ T9783] usb 41-1: new low-speed USB device number 8 using vhci_hcd [ 1690.034940][T22308] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 5 [ 1690.043048][T13625] vhci_hcd vhci_hcd.2: stop threads [ 1690.046879][T13625] vhci_hcd vhci_hcd.2: release socket [ 1690.065593][T13625] vhci_hcd vhci_hcd.2: disconnect device [ 1690.141415][ T34] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1691.273852][T22323] can0: slcan on ttyS3. [ 1691.983406][T22325] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4267'. [ 1692.145350][T22305] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 1692.148225][T22305] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1692.153707][T22305] vhci_hcd vhci_hcd.0: Device attached [ 1692.513461][T22326] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 1692.517390][T13625] vhci_hcd vhci_hcd.3: stop threads [ 1692.521842][T13625] vhci_hcd vhci_hcd.3: release socket [ 1692.525782][T13625] vhci_hcd vhci_hcd.3: disconnect device [ 1692.540191][T22322] can0 (unregistered): slcan off ttyS3. [ 1692.630225][T12193] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 1692.725811][T12193] usb 43-1: enqueue for inactive port 0 [ 1692.768811][T22330] fuse: Bad value for 'fd' [ 1692.838942][T12193] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1693.288876][T22334] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4270'. [ 1694.494060][T22321] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 1694.496678][T22321] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1694.541395][T22321] vhci_hcd vhci_hcd.0: Device attached [ 1694.822118][ T5179] usb 39-1: new low-speed USB device number 8 using vhci_hcd [ 1695.218843][ T9783] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1695.559662][T22342] vhci_hcd: connection reset by peer [ 1695.617785][T13625] vhci_hcd vhci_hcd.1: stop threads [ 1695.639963][T13625] vhci_hcd vhci_hcd.1: release socket [ 1695.834758][T13625] vhci_hcd vhci_hcd.1: disconnect device [ 1696.467130][T22352] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4272'. [ 1696.758693][T22353] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1696.758724][T22353] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1696.758928][T22353] vhci_hcd vhci_hcd.0: Device attached [ 1697.110722][T12193] usb 37-1: new low-speed USB device number 6 using vhci_hcd [ 1697.463253][T22360] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4274'. [ 1697.465664][T22361] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1697.465690][T22361] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1697.482585][T22361] vhci_hcd vhci_hcd.0: Device attached [ 1697.664754][T22354] vhci_hcd: connection reset by peer [ 1697.821550][T13625] vhci_hcd vhci_hcd.0: stop threads [ 1697.821641][T13625] vhci_hcd vhci_hcd.0: release socket [ 1697.821755][T13625] vhci_hcd vhci_hcd.0: disconnect device [ 1698.225750][T19819] usb 41-1: new low-speed USB device number 9 using vhci_hcd [ 1698.397296][T22362] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 6 [ 1698.681128][T13625] vhci_hcd vhci_hcd.2: stop threads [ 1698.681156][T13625] vhci_hcd vhci_hcd.2: release socket [ 1698.681205][T13625] vhci_hcd vhci_hcd.2: disconnect device [ 1700.007439][ T5179] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1700.343968][T22379] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4275'. [ 1700.410379][T22364] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 1700.410407][T22364] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1700.410540][T22364] vhci_hcd vhci_hcd.0: Device attached [ 1700.445049][T22375] overlayfs: failed to resolve './file0': -2 [ 1700.573141][T22380] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 5 [ 1700.628787][T13625] vhci_hcd vhci_hcd.1: stop threads [ 1700.628884][T13625] vhci_hcd vhci_hcd.1: release socket [ 1700.631942][T13625] vhci_hcd vhci_hcd.1: disconnect device [ 1700.750333][ T5179] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1702.301089][T22393] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4277'. [ 1702.416922][T12193] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1702.958773][T22371] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1702.963559][T22371] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1703.060398][T22371] vhci_hcd vhci_hcd.0: Device attached [ 1703.503829][T22398] vhci_hcd: connection reset by peer [ 1703.509631][T13625] vhci_hcd vhci_hcd.2: stop threads [ 1703.513295][T13625] vhci_hcd vhci_hcd.2: release socket [ 1703.523132][T13625] vhci_hcd vhci_hcd.2: disconnect device [ 1703.620254][T19819] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1703.950012][T22402] can0: slcan on ttyS3. [ 1704.935399][T22402] can0 (unregistered): slcan off ttyS3. [ 1706.646928][T22434] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4284'. [ 1706.679372][T22434] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 1706.679405][T22434] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1706.679571][T22434] vhci_hcd vhci_hcd.0: Device attached [ 1707.031489][T19819] usb 43-1: new low-speed USB device number 4 using vhci_hcd [ 1707.643318][T22423] can0: slcan on ttyS3. [ 1708.685936][T22435] vhci_hcd: connection reset by peer [ 1708.727713][T13625] vhci_hcd vhci_hcd.3: stop threads [ 1708.727810][T13625] vhci_hcd vhci_hcd.3: release socket [ 1708.728403][T13625] vhci_hcd vhci_hcd.3: disconnect device [ 1708.868570][T22445] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 1708.868600][T22445] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1708.868689][T22445] vhci_hcd vhci_hcd.0: Device attached [ 1708.906207][T22429] can0 (unregistered): slcan off ttyS3. [ 1709.130129][ T5896] usb 39-1: new low-speed USB device number 9 using vhci_hcd [ 1709.685571][T22444] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4286'. [ 1709.956566][T22446] vhci_hcd: connection reset by peer [ 1709.959366][T13625] vhci_hcd vhci_hcd.1: stop threads [ 1710.352287][T13625] vhci_hcd vhci_hcd.1: release socket [ 1710.355837][T13625] vhci_hcd vhci_hcd.1: disconnect device [ 1711.588028][T22450] can0: slcan on ttyS3. [ 1712.261181][T19819] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1712.359701][T22455] can0 (unregistered): slcan off ttyS3. [ 1713.191413][T22473] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 1713.191443][T22473] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1713.197222][T22473] vhci_hcd vhci_hcd.0: Device attached [ 1713.386282][T22474] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 2 [ 1713.514305][T22481] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 1713.514335][T22481] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1713.514412][T22481] vhci_hcd vhci_hcd.0: Device attached [ 1713.672556][T19819] usb 43-1: new low-speed USB device number 5 using vhci_hcd [ 1714.197352][T22482] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 6 [ 1714.233241][T13625] vhci_hcd vhci_hcd.3: stop threads [ 1714.233265][T13625] vhci_hcd vhci_hcd.3: release socket [ 1714.233316][T13625] vhci_hcd vhci_hcd.3: disconnect device [ 1714.277096][T13625] vhci_hcd vhci_hcd.1: stop threads [ 1714.277117][T13625] vhci_hcd vhci_hcd.1: release socket [ 1714.277220][T13625] vhci_hcd vhci_hcd.1: disconnect device [ 1714.386933][ T5896] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1714.391618][T22471] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4289'. [ 1714.567687][T22477] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4290'. [ 1717.538658][T22517] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4292'. [ 1718.072082][T22490] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1718.074979][T22490] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1718.088289][T22490] vhci_hcd vhci_hcd.0: Device attached [ 1718.764654][ T56] usb 41-1: new low-speed USB device number 10 using vhci_hcd [ 1718.872627][T19819] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1719.173906][T22518] vhci_hcd: connection reset by peer [ 1719.176843][T13625] vhci_hcd vhci_hcd.2: stop threads [ 1719.191996][T13625] vhci_hcd vhci_hcd.2: release socket [ 1719.194454][T13625] vhci_hcd vhci_hcd.2: disconnect device [ 1719.801422][T22532] fuse: Bad value for 'fd' [ 1720.329170][T22529] can0: slcan on ttyS3. [ 1720.858314][T22534] can0 (unregistered): slcan off ttyS3. [ 1721.645107][T15194] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1722.210260][T22553] can0: slcan on ttyS3. [ 1722.306441][T22563] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4302'. [ 1722.339955][T12193] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1722.576351][T12193] usb 5-1: Using ep0 maxpacket: 16 [ 1722.618456][T12193] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1722.625508][T12193] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1722.668415][T12193] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1722.673709][T12193] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1722.677610][T12193] usb 5-1: SerialNumber: syz [ 1723.032103][T15194] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1723.051741][T12193] usb 5-1: 0:2 : does not exist [ 1723.119345][T22551] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 1723.123122][T22551] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1723.164507][T22551] vhci_hcd vhci_hcd.0: Device attached [ 1723.168496][T15194] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1723.172640][T15194] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 1723.218290][T15194] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.351579][T22568] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 3 [ 1723.354818][T18713] vhci_hcd vhci_hcd.3: stop threads [ 1723.357204][T18713] vhci_hcd vhci_hcd.3: release socket [ 1723.359623][T18713] vhci_hcd vhci_hcd.3: disconnect device [ 1723.425061][T22573] netlink: 'syz.0.4304': attribute type 10 has an invalid length. [ 1723.443105][T16410] usb 43-1: new low-speed USB device number 6 using vhci_hcd [ 1723.446153][T16410] usb 43-1: enqueue for inactive port 0 [ 1723.496740][T16410] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1723.732525][T22573] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1723.809146][T22553] can0 (unregistered): slcan off ttyS3. [ 1724.449552][ T56] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1724.557699][T15194] gud 6-1:1.0: No supported pixel formats found [ 1724.567426][T15194] gud 6-1:1.0: probe with driver gud failed with error -22 [ 1724.820435][T12193] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1724.858583][T12193] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1724.980006][T12193] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1725.037368][T12193] usb 5-1: USB disconnect, device number 3 [ 1725.662463][T16410] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1725.859976][ T5896] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1725.865561][T16410] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1725.876291][T16410] usb 7-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 1725.890246][T16410] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.917368][T16410] usb 7-1: config 0 descriptor?? [ 1725.938376][T22591] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1726.089964][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 1726.094305][ T5896] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023 [ 1726.116716][ T5896] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1726.121505][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.126315][ T5896] usb 5-1: Product: syz [ 1726.129776][ T5896] usb 5-1: Manufacturer: syz [ 1726.134781][ T5896] usb 5-1: SerialNumber: syz [ 1726.192822][T22601] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1726.341682][T19819] usb 6-1: USB disconnect, device number 22 [ 1726.409032][T16410] hid (null): unknown global tag 0xc [ 1726.411998][T16410] hid (null): global environment stack underflow [ 1726.432215][T16410] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 1726.435261][ T5896] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1726.475921][T16410] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 1726.477821][ T5896] usb 5-1: MIDIStreaming interface descriptor not found [ 1726.489388][T16410] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 1726.496026][T16410] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 1726.500418][T16410] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 1726.505444][T16410] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 1726.511151][T16410] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 1726.516682][T16410] asus 0003:0B05:1ABE.0007: unknown main item tag 0x1 [ 1726.521336][T16410] asus 0003:0B05:1ABE.0007: unknown global tag 0xc [ 1726.526209][T16410] asus 0003:0B05:1ABE.0007: item 0 1 1 12 parsing failed [ 1726.534047][T16410] asus 0003:0B05:1ABE.0007: Asus hid parse failed: -22 [ 1726.539104][T16410] asus 0003:0B05:1ABE.0007: probe with driver asus failed with error -22 [ 1726.610478][T16410] usb 7-1: USB disconnect, device number 26 [ 1726.661152][ T5896] usb 5-1: USB disconnect, device number 4 [ 1726.879773][T22617] udevd[22617]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1727.107044][T22622] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4319'. [ 1728.492589][T15194] IPVS: starting estimator thread 0... [ 1728.640823][T22645] IPVS: using max 29 ests per chain, 69600 per kthread [ 1728.734617][T22656] tipc: Enabling of bearer rejected, failed to enable media [ 1728.904975][T22665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4336'. [ 1728.916695][T22665] netlink: 'syz.1.4336': attribute type 5 has an invalid length. [ 1728.919923][T22665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4336'. [ 1728.968920][T13625] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1728.994098][T13625] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1729.000421][T13625] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1729.010003][T13625] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1730.251743][T22704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4355'. [ 1730.924909][T22705] orangefs_mount: mount request failed with -4 [ 1731.671241][T22737] jffs2: notice: (22737) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1732.524542][T16410] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1732.561123][ T42] audit: type=1326 audit(1786160573.537:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22765 comm="syz.2.4382" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25fec code=0x7ffc0000 [ 1732.606744][ T42] audit: type=1326 audit(1786160573.537:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22765 comm="syz.2.4382" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25fec code=0x7ffc0000 [ 1732.640792][ T42] audit: type=1326 audit(1786160573.617:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22765 comm="syz.2.4382" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25fec code=0x7ffc0000 [ 1732.716025][ T42] audit: type=1326 audit(1786160573.617:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22765 comm="syz.2.4382" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25fec code=0x7ffc0000 [ 1732.729439][T16410] usb 8-1: Using ep0 maxpacket: 8 [ 1732.755195][ T42] audit: type=1326 audit(1786160573.617:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22765 comm="syz.2.4382" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f25fec code=0x7ffc0000 [ 1732.767327][ T42] audit: type=1326 audit(1786160573.617:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22765 comm="syz.2.4382" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25fec code=0x7ffc0000 [ 1732.793147][T16410] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1732.821809][T16410] usb 8-1: config 4 interface 0 has no altsetting 0 [ 1732.845502][ T42] audit: type=1326 audit(1786160573.617:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22765 comm="syz.2.4382" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25fec code=0x7ffc0000 [ 1732.868880][T16410] usb 8-1: string descriptor 0 read error: -22 [ 1732.872628][T16410] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1732.877906][T16410] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1732.887743][ T42] audit: type=1326 audit(1786160573.617:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22765 comm="syz.2.4382" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25fec code=0x7ffc0000 [ 1732.911143][T16410] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1732.990001][ T42] audit: type=1326 audit(1786160573.617:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22765 comm="syz.2.4382" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25fec code=0x7ffc0000 [ 1732.997940][T16410] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1733.050753][T16410] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1733.058214][T16410] usb 8-1: media controller created [ 1733.075729][ T42] audit: type=1326 audit(1786160573.617:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22765 comm="syz.2.4382" exe="/syz-executor" sig=0 arch=40000003 syscall=63 compat=1 ip=0xf7f25fec code=0x7ffc0000 [ 1733.157766][T16410] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1733.228267][T16410] zl10353_read_register: readreg error (reg=127, ret==0) [ 1733.471061][T16410] usb 8-1: USB disconnect, device number 28 [ 1733.799203][T22790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1734.953122][T22818] xt_hashlimit: overflow, try lower: 0/0 [ 1735.013785][T22821] netlink: 'syz.0.4405': attribute type 10 has an invalid length. [ 1735.062533][T22821] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1737.848979][T22841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4413'. [ 1737.940570][T22841] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1738.040617][T22841] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 1741.359550][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1741.362802][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1745.695524][ T34] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1746.603565][ T34] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1747.075144][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1747.081145][ T34] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1747.089256][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1747.538438][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1747.578939][ T34] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1747.582817][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1747.991156][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1747.995277][ T34] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1748.017137][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1748.663742][ T34] usb 6-1: unable to read config index 3 descriptor/all [ 1748.710958][ T34] usb 6-1: can't read configurations, error -71 [ 1750.254680][T22970] block device autoloading is deprecated and will be removed. [ 1750.822021][T22976] mmap: syz.0.4460 (22976) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1751.872315][T22993] loop2: detected capacity change from 0 to 7 [ 1752.041935][T22993] Dev loop2: unable to read RDB block 7 [ 1752.044628][T22993] loop2: unable to read partition table [ 1752.048093][T22993] loop2: partition table beyond EOD, truncated [ 1752.052192][T22993] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1753.443057][T23002] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4469'. [ 1754.302114][T23013] netlink: 420 bytes leftover after parsing attributes in process `syz.3.4474'. [ 1755.631576][T15211] rpcbind: server 127.0.0.1 not responding, timed out [ 1756.400867][T23029] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4479'. [ 1757.172650][T23036] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4483'. [ 1758.976603][T23050] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4487'. [ 1760.134515][T23065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4493'. [ 1762.334745][T23108] netlink: 'syz.3.4512': attribute type 2 has an invalid length. [ 1762.468476][T15973] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1762.619106][T23115] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 1762.624381][T23115] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 1762.640411][T23115] udc dummy_udc.0: failed to start g1: -22 [ 1762.645489][T23115] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 1762.683454][T15973] usb 6-1: config 1 has an invalid descriptor of length 117, skipping remainder of the config [ 1762.694247][T15973] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1762.732576][T15973] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 1762.743157][T15973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.800403][T15973] usb 6-1: Product: syz [ 1762.806011][T15973] usb 6-1: Manufacturer: syz [ 1762.811342][T15973] usb 6-1: SerialNumber: syz [ 1762.889458][T15973] usb 6-1: 0:1 : does not exist [ 1762.928650][T23115] UDC core: g1: couldn't find an available UDC or it's busy [ 1763.237099][T15973] usb 6-1: 3:0: failed to get current value for ch 0 (-71) [ 1763.271903][T15973] usb 6-1: unit 13 not found! [ 1763.539527][T15973] usb 6-1: USB disconnect, device number 25 [ 1763.635032][T22903] udevd[22903]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1764.740378][T12193] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1765.020222][T12193] usb 7-1: Using ep0 maxpacket: 32 [ 1765.040915][T12193] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1765.046362][T12193] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1765.079262][T12193] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1765.124953][T12193] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1765.133266][T12193] usb 7-1: config 0 descriptor?? [ 1765.191009][T12193] hub 7-1:0.0: USB hub found [ 1765.409199][T12193] hub 7-1:0.0: config failed, can't read hub descriptor (err -90) [ 1765.620952][T12193] usbhid 7-1:0.0: can't add hid device: -71 [ 1765.652901][T12193] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1765.780777][T12193] usb 7-1: USB disconnect, device number 27 [ 1769.153054][T23197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4548'. [ 1769.163231][T23197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4548'. [ 1770.408209][T23211] No source specified [ 1771.930126][T12193] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1772.153289][T12193] usb 8-1: Using ep0 maxpacket: 8 [ 1772.162044][T12193] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1772.172667][T12193] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1772.209253][T12193] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1772.240016][T12193] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1772.251955][T12193] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1772.302946][T12193] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1772.307074][T12193] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1772.327534][T12193] usb 8-1: Product: syz [ 1772.329711][T12193] usb 8-1: Manufacturer: syz [ 1772.332153][T12193] usb 8-1: SerialNumber: syz [ 1772.337213][T12193] usb 8-1: config 0 descriptor?? [ 1772.606070][T23231] loop6: detected capacity change from 0 to 2640 [ 1772.626369][T23231] buffer_io_error: 138 callbacks suppressed [ 1772.626388][T23231] Buffer I/O error on dev loop6, logical block 0, async page read [ 1772.632104][T23231] Buffer I/O error on dev loop6, logical block 0, async page read [ 1772.635311][T23231] Buffer I/O error on dev loop6, logical block 0, async page read [ 1772.640918][T23231] Buffer I/O error on dev loop6, logical block 0, async page read [ 1772.663876][T23231] Buffer I/O error on dev loop6, logical block 0, async page read [ 1772.692413][T23231] Buffer I/O error on dev loop6, logical block 0, async page read [ 1772.728580][T23231] Buffer I/O error on dev loop6, logical block 0, async page read [ 1772.739353][T23231] Buffer I/O error on dev loop6, logical block 0, async page read [ 1772.753829][T23231] ldm_validate_partition_table(): Disk read failed. [ 1772.756868][T23231] Buffer I/O error on dev loop6, logical block 0, async page read [ 1772.782679][T23231] Buffer I/O error on dev loop6, logical block 0, async page read [ 1772.807751][T23231] Dev loop6: unable to read RDB block 0 [ 1772.860673][T23231] loop6: unable to read partition table [ 1772.884020][T12193] radio-si470x 8-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 1772.889984][T12193] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -5 [ 1772.893466][T23231] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1773.052893][ T5140] ldm_validate_partition_table(): Disk read failed. [ 1773.057071][ T5140] Dev loop6: unable to read RDB block 0 [ 1773.060803][ T5140] loop6: unable to read partition table [ 1773.064873][ T9639] usb 8-1: USB disconnect, device number 29 [ 1774.153357][T23263] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4576'. [ 1774.432404][T23269] program syz.0.4578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1775.999458][T23287] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4585'. [ 1776.621762][ T9783] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1776.800071][ T5179] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1776.833046][ T9783] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1776.836245][ T9783] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1776.841089][ T9783] usb 7-1: config 0 has no interface number 0 [ 1776.851362][ T9783] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1776.872399][ T9783] usb 7-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1776.876252][ T9783] usb 7-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 1776.881733][ T9783] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.901219][ T9783] usb 7-1: config 0 descriptor?? [ 1777.086659][ T5179] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1777.093546][ T5179] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1777.308698][ T9783] usb 7-1: USB disconnect, device number 28 [ 1777.339310][ T5179] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1777.398557][ T5179] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1777.423983][ T5179] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1777.428009][ T5179] usb 6-1: SerialNumber: syz [ 1777.755820][ T5179] usb 6-1: cannot find UAC_HEADER [ 1778.055575][ T5179] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1778.089772][ T5179] usb 6-1: USB disconnect, device number 26 [ 1778.164310][T23314] udevd[23314]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1780.709549][T23358] loop8: detected capacity change from 0 to 7 [ 1780.715624][T23358] Dev loop8: unable to read RDB block 7 [ 1780.739283][T23358] loop8: AHDI p1 p2 [ 1780.741107][T23358] loop8: partition table partially beyond EOD, truncated [ 1780.747135][T23358] loop8: p1 start 1700754297 is beyond EOD, truncated [ 1781.297250][T23365] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4616'. [ 1782.223108][T23377] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4619'. [ 1784.488450][T23395] i2c i2c-0: new_device: Missing parameters [ 1784.872919][T19014] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1784.926275][T19014] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1785.016218][T19014] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1785.073865][T19014] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1785.150767][T19014] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1787.053589][T18713] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1787.129192][T18713] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.295088][T19014] Bluetooth: hci0: command tx timeout [ 1787.941151][T18713] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1787.948538][T18713] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.540939][T23439] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 1788.568260][T19014] Bluetooth: hci2: command 0x0406 tx timeout [ 1788.694719][T23445] loop8: detected capacity change from 0 to 7 [ 1788.744784][T23445] Dev loop8: unable to read RDB block 7 [ 1788.747206][T23445] loop8: AHDI p1 p2 [ 1788.748900][T23445] loop8: partition table partially beyond EOD, truncated [ 1788.762134][T23445] loop8: p1 start 1700754297 is beyond EOD, truncated [ 1788.967319][T18713] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1789.005527][T18713] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1789.320060][T11852] Bluetooth: hci0: command tx timeout [ 1789.467397][T23450] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4641'. [ 1789.492751][T23401] bridge0: port 1(bridge_slave_0) entered blocking state [ 1789.499066][T23401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.505143][T23401] bridge_slave_0: entered allmulticast mode [ 1789.516868][T23401] bridge_slave_0: entered promiscuous mode [ 1789.574100][T23401] bridge0: port 2(bridge_slave_1) entered blocking state [ 1789.594392][T23401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.613370][T23401] bridge_slave_1: entered allmulticast mode [ 1789.633861][T23401] bridge_slave_1: entered promiscuous mode [ 1789.724019][T18713] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1789.742974][T18713] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1789.828920][T23401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1789.877802][T23401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1789.952639][T23401] team0: Port device team_slave_0 added [ 1790.029593][T23401] team0: Port device team_slave_1 added [ 1790.139191][T23401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1790.153277][T23401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1790.180480][T23401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1790.208484][T23401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1790.214822][T23401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1790.243556][T23401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1790.355776][T23401] hsr_slave_0: entered promiscuous mode [ 1790.361932][T23401] hsr_slave_1: entered promiscuous mode [ 1790.727066][T23460] loop8: detected capacity change from 0 to 7 [ 1790.786328][T23460] Dev loop8: unable to read RDB block 7 [ 1790.810143][T23460] loop8: unable to read partition table [ 1790.814096][T23460] loop8: partition table beyond EOD, truncated [ 1790.817786][T23460] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1791.175230][T18713] bridge_slave_1: left allmulticast mode [ 1791.177713][T18713] bridge_slave_1: left promiscuous mode [ 1791.181317][T18713] bridge0: port 2(bridge_slave_1) entered disabled state [ 1791.238335][T18713] bridge_slave_0: left allmulticast mode [ 1791.253197][T18713] bridge_slave_0: left promiscuous mode [ 1791.255661][T18713] bridge0: port 1(bridge_slave_0) entered disabled state [ 1791.277247][T18713] dvmrp0: left allmulticast mode [ 1791.410199][T11852] Bluetooth: hci0: command tx timeout [ 1791.622459][T23485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1791.726230][T18713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1791.735464][T18713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1791.767279][T18713] bond0 (unregistering): Released all slaves [ 1791.787613][ T5443] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1792.074128][T18713] tipc: Disabling bearer [ 1792.085858][T18713] tipc: Left network mode [ 1792.332658][ T5443] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1792.839008][T18713] hsr_slave_0: left promiscuous mode [ 1792.855572][T18713] hsr_slave_1: left promiscuous mode [ 1792.861374][T18713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1792.868136][T18713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1792.874807][T18713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1792.878053][T18713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1792.900202][T18713] veth1_macvtap: left promiscuous mode [ 1792.904486][T18713] veth0_macvtap: left promiscuous mode [ 1792.907011][T18713] veth1_vlan: left promiscuous mode [ 1792.910410][T18713] veth0_vlan: left promiscuous mode [ 1793.262949][T18713] team0 (unregistering): Port device team_slave_1 removed [ 1793.272317][T18713] team0 (unregistering): Port device team_slave_0 removed [ 1793.320871][T23542] ntfs3(loop3): try to read out of volume at offset 0x0 [ 1793.464900][T23401] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1793.469975][T11852] Bluetooth: hci0: command tx timeout [ 1793.471433][T23401] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1793.476230][T23401] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1793.482907][T23401] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1793.485825][T23401] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1793.494518][T23401] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1793.498960][T23401] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1793.524903][T23401] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1793.602869][T23551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4676'. [ 1793.620211][T21501] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1793.749868][T23401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1793.759748][T23401] 8021q: adding VLAN 0 to HW filter on device team0 [ 1793.769554][T15211] bridge0: port 1(bridge_slave_0) entered blocking state [ 1793.772585][T15211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1793.782049][T15211] bridge0: port 2(bridge_slave_1) entered blocking state [ 1793.784987][T15211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1793.820727][T23401] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1793.825032][T23401] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1793.839971][T21501] usb 8-1: Using ep0 maxpacket: 16 [ 1793.852734][T21501] usb 8-1: config 9 has an invalid interface number: 189 but max is 0 [ 1793.855444][T21501] usb 8-1: config 9 has no interface number 0 [ 1793.860838][T21501] usb 8-1: New USB device found, idVendor=19d2, idProduct=fffc, bcdDevice=ac.a6 [ 1793.863730][T21501] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.866619][T21501] usb 8-1: Product: syz [ 1793.871899][T21501] usb 8-1: Manufacturer: syz [ 1793.873343][T21501] usb 8-1: SerialNumber: syz [ 1794.084061][T21501] usb 8-1: No union descriptors [ 1794.105313][T21501] usb 8-1: USB disconnect, device number 30 [ 1794.219235][T23401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1794.283177][T23401] veth0_vlan: entered promiscuous mode [ 1794.289422][T23401] veth1_vlan: entered promiscuous mode [ 1794.307199][T23401] veth0_macvtap: entered promiscuous mode [ 1794.312861][T23401] veth1_macvtap: entered promiscuous mode [ 1794.326249][T23401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1794.378908][T23401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1794.510080][T18713] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.512947][T18713] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.516875][T18713] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.519633][T18713] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.558292][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1794.561570][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1794.613015][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1794.615808][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1794.796980][T23589] input: syz1 as /devices/virtual/input/input17 [ 1797.320914][T23620] orangefs_mount: mount request failed with -4 [ 1797.653709][T23648] syz.0.4705 invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=1000 [ 1797.660959][T23648] CPU: 0 UID: 0 PID: 23648 Comm: syz.0.4705 Tainted: G L syzkaller #0 PREEMPT(full) [ 1797.660983][T23648] Tainted: [L]=SOFTLOCKUP [ 1797.660986][T23648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1797.661009][T23648] Call Trace: [ 1797.661021][T23648] [ 1797.661026][T23648] dump_stack_lvl+0x100/0x190 [ 1797.661186][T23648] dump_header+0xfb/0x606 [ 1797.661220][T23648] oom_kill_process.cold+0xd/0x330 [ 1797.661233][T23648] out_of_memory+0x1256/0x14f0 [ 1797.661271][T23648] ? __pfx_out_of_memory+0x10/0x10 [ 1797.661286][T23648] __alloc_frozen_pages_noprof+0x24c2/0x2dc0 [ 1797.661314][T23648] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1797.661328][T23648] ? check_noncircular+0x97/0x160 [ 1797.661367][T23648] ? mark_held_locks+0x40/0x70 [ 1797.661385][T23648] ? irqentry_exit+0x24d/0xa00 [ 1797.661467][T23648] ? irqentry_exit+0x24d/0xa00 [ 1797.661487][T23648] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1797.661511][T23648] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 1797.661527][T23648] ? policy_nodemask+0xed/0x4f0 [ 1797.661551][T23648] alloc_pages_mpol+0x1fb/0x540 [ 1797.661568][T23648] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1797.661585][T23648] ? do_raw_read_unlock+0x3f/0x70 [ 1797.661597][T23648] ? _raw_read_unlock+0x28/0x50 [ 1797.661614][T23648] folio_alloc_mpol_noprof+0x36/0x260 [ 1797.661627][T23648] vma_alloc_folio_noprof+0xed/0x1d0 [ 1797.661638][T23648] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1797.661653][T23648] ? __pfx_filemap_map_pages+0x10/0x10 [ 1797.661669][T23648] do_fault+0x1e6/0x1750 [ 1797.661689][T23648] __handle_mm_fault+0x187d/0x2a00 [ 1797.661702][T23648] ? mt_find+0x45e/0x8e0 [ 1797.661730][T23648] ? __pfx___handle_mm_fault+0x10/0x10 [ 1797.661744][T23648] ? __pfx_mt_find+0x10/0x10 [ 1797.661778][T23648] ? find_vma+0xbf/0x140 [ 1797.661799][T23648] ? __pfx_find_vma+0x10/0x10 [ 1797.661824][T23648] handle_mm_fault+0x37b/0xa30 [ 1797.661847][T23648] do_user_addr_fault+0x74c/0x12f0 [ 1797.661887][T23648] exc_page_fault+0x6f/0xd0 [ 1797.661910][T23648] asm_exc_page_fault+0x26/0x30 [ 1797.661928][T23648] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 1797.662015][T23648] Code: 89 ee 48 89 ef e8 b1 3a ee fc 4d 85 ff 75 26 e8 c7 40 ee fc 89 de 4c 89 e7 e8 6d da 5d fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 a1 40 ee fc 48 89 d8 5b 5d 41 [ 1797.662031][T23648] RSP: 0018:ffffc90003157ce8 EFLAGS: 00050297 [ 1797.662046][T23648] RAX: 0000000000000001 RBX: 0000000000000004 RCX: 0000000000000004 [ 1797.662057][T23648] RDX: 0000000000000001 RSI: ffffc90003157da0 RDI: 0000000080044000 [ 1797.662067][T23648] RBP: 0000000080044000 R08: 0000000000000000 R09: fffff5200062afb4 [ 1797.662077][T23648] R10: 0000000000000003 R11: 0000000000000000 R12: ffffc90003157da0 [ 1797.662087][T23648] R13: 0000000080044004 R14: 00007ffffffff000 R15: 0000000000000000 [ 1797.662110][T23648] ? _copy_to_user+0x93/0xd0 [ 1797.662152][T23648] do_timer_create+0x6d9/0x1460 [ 1797.662186][T23648] ? __pfx_do_timer_create+0x10/0x10 [ 1797.662209][T23648] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1797.662239][T23648] __ia32_compat_sys_timer_create+0x193/0x1c0 [ 1797.662261][T23648] ? __pfx___ia32_compat_sys_timer_create+0x10/0x10 [ 1797.662283][T23648] ? lockdep_softirqs_on+0xad/0x120 [ 1797.662300][T23648] ? handle_softirqs+0x835/0x9b0 [ 1797.662334][T23648] __do_fast_syscall_32+0xe7/0x970 [ 1797.662363][T23648] do_fast_syscall_32+0x32/0x70 [ 1797.662387][T23648] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1797.662406][T23648] RIP: 0023:0xf7f78fec [ 1797.662425][T23648] Code: Unable to access opcode bytes at 0xf7f78fc2. [ 1797.662432][T23648] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000103 [ 1797.662447][T23648] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1797.662456][T23648] RDX: 0000000080044000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1797.662466][T23648] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1797.662475][T23648] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1797.662484][T23648] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1797.662506][T23648] [ 1797.665104][T23648] Mem-Info: [ 1797.702643][T23650] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4704'. [ 1797.826667][T23648] active_anon:3913 inactive_anon:1667 isolated_anon:0 [ 1797.826667][T23648] active_file:4238 inactive_file:14930 isolated_file:0 [ 1797.826667][T23648] unevictable:1000 dirty:159 writeback:0 [ 1797.826667][T23648] slab_reclaimable:10115 slab_unreclaimable:75066 [ 1797.826667][T23648] mapped:26748 shmem:3877 pagetables:1331 [ 1797.826667][T23648] sec_pagetables:383 bounce:0 [ 1797.826667][T23648] kernel_misc_reclaimable:0 [ 1797.826667][T23648] free:60123 free_pcp:0 free_cma:0 [ 1797.844083][T23648] Node 0 active_anon:0kB inactive_anon:200kB active_file:8kB inactive_file:0kB unevictable:556kB isolated(anon):0kB isolated(file):0kB mapped:2080kB dirty:4kB writeback:0kB shmem:556kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7648kB pagetables:1284kB sec_pagetables:1280kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1797.856923][T23648] Node 0 DMA free:2252kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1797.869130][T23648] lowmem_reserve[]: 0 280 280 280 280 [ 1797.871452][T23648] Node 0 DMA32 free:38352kB boost:28740kB min:41516kB low:44708kB high:47900kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:200kB active_file:8kB inactive_file:0kB unevictable:556kB writepending:4kB zspages:208kB present:1032196kB managed:287072kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1797.883236][T23648] lowmem_reserve[]: 0 0 0 0 0 [ 1797.885242][T23648] Node 0 DMA: 29*4kB (UM) 13*8kB (UM) 7*16kB (UM) 8*32kB (UM) 2*64kB (M) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2252kB [ 1797.890725][T23648] Node 0 DMA32: 1188*4kB (UME) 518*8kB (UME) 155*16kB (UM) 257*32kB (UME) 69*64kB (UME) 32*128kB (UME) 8*256kB (UME) 8*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 38352kB [ 1797.897521][T23648] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1797.901431][T23648] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1797.905103][T23648] 21942 total pagecache pages [ 1797.907013][T23648] 1749 pages in swap cache [ 1797.908854][T23648] Free swap = 103284kB [ 1797.913030][T23648] Total swap = 124996kB [ 1797.914716][T23648] 524155 pages RAM [ 1797.916236][T23648] 0 pages HighMem/MovableOnly [ 1797.918111][T23648] 211494 pages reserved [ 1797.919790][T23648] 0 pages cma reserved [ 1797.921483][T23648] Unreclaimable slab info: [ 1797.924127][T23648] Name Used Total [ 1797.930921][T23648] pid_2 50KB 78KB [ 1797.933580][T23648] bio-464 17KB 31KB [ 1797.936186][T23648] bio-528 19KB 31KB [ 1797.938876][T23648] bio-544 19KB 31KB [ 1797.953433][T23648] bio-552 19KB 31KB [ 1797.955968][T23648] zswap_entry 298KB 454KB [ 1797.958557][T23648] AF_VSOCK 48KB 122KB [ 1797.961100][T23648] sw_flow_stats 15KB 24KB [ 1797.964357][T23648] sw_flow 43KB 61KB [ 1797.966813][T23648] batadv_tt_change_cache 10KB 16KB [ 1797.988350][T23648] batadv_tl_cache 27KB 32KB [ 1797.991176][T23648] IEEE-802.15.4-MAC 67KB 125KB [ 1797.993632][T23648] IEEE-802.15.4-RAW 36KB 94KB [ 1797.996080][T23648] p9_req_t 7KB 7KB [ 1797.998498][T23648] SMC6 65KB 125KB [ 1798.002886][T23648] SMC 118KB 218KB [ 1798.005406][T23648] TIPC 63KB 154KB [ 1798.007877][T23648] RDS 45KB 216KB [ 1798.014686][T23648] rds_connection 8KB 15KB [ 1798.016886][T23648] SCTPv6 69KB 210KB [ 1798.019235][T23648] SCTP 43KB 153KB [ 1798.022620][T23648] sctp_chunk 15KB 62KB [ 1798.025369][T23648] sctp_bind_bucket 6KB 24KB [ 1798.027672][T23648] PNPIPE 34KB 61KB [ 1798.030489][T23648] PHONET 49KB 94KB [ 1798.033123][T23648] L2TP/IPv6 45KB 127KB [ 1798.035127][T23648] L2TP/IP 38KB 157KB [ 1798.037498][T23648] KCM 48KB 186KB [ 1798.040252][T23648] kcm_mux 57KB 126KB [ 1798.042782][T23648] RXRPC 64KB 128KB [ 1798.045151][T23648] rxrpc_call_jar 146KB 255KB [ 1798.047186][T23648] can_receiver 25KB 31KB [ 1798.049660][T23648] net_bridge_fdb_entry 34KB 47KB [ 1798.052681][T23648] MPTCPv6 73KB 191KB [ 1798.055171][T23648] fib6_node 189KB 224KB [ 1798.057488][T23648] ip6_dst_cache 258KB 429KB [ 1798.059565][T23648] PINGv6 22KB 30KB [ 1798.062465][T23648] RAWv6 127KB 247KB [ 1798.065868][T23648] UDPv6 130KB 252KB [ 1798.068403][T23648] tw_sock_TCPv6 28KB 47KB [ 1798.071108][T23648] TCPv6 172KB 303KB [ 1798.073365][T23648] nf_conntrack 18KB 55KB [ 1798.075858][T23648] wg_peer 148KB 208KB [ 1798.078312][T23648] allowedips_node 23KB 31KB [ 1798.081236][T23648] t10_alua_lu_gp_cache 8KB 15KB [ 1798.083706][T23648] scsi_sense_cache 60KB 60KB [ 1798.086166][T23648] virtio_scsi_cmd 21KB 24KB [ 1798.088582][T23648] bio-136 52KB 68KB [ 1798.091924][T23648] io_kiocb 0KB 31KB [ 1798.094684][T23648] bio-264 10KB 15KB [ 1798.097076][T23648] mqueue_inode_cache 40KB 123KB [ 1798.099219][T23648] bio-272 10KB 15KB [ 1798.102216][T23648] f2fs_bio_post_read_ctx 30KB 31KB [ 1798.104945][T23648] jfs_mp 14KB 15KB [ 1798.107303][T23648] orangefs_op_cache 51KB 68KB [ 1798.109359][T23648] fuse_request 12KB 39KB [ 1798.112305][T23648] jffs2_xattr_ref 11KB 12KB [ 1798.114705][T23648] jffs2_xattr_datum 22KB 24KB [ 1798.117121][T23648] jffs2_inode_cache 10KB 12KB [ 1798.119299][T23648] jffs2_node_frag 9KB 11KB [ 1798.122197][T23648] jffs2_refblock 16KB 38KB [ 1798.124712][T23648] jffs2_tmp_dnode_info 13KB 23KB [ 1798.127122][T23648] jffs2_raw_inode 13KB 16KB [ 1798.129253][T23648] jffs2_raw_dirent 3KB 4KB [ 1798.132613][T23648] jffs2_full_dnode 5KB 11KB [ 1798.135137][T23648] cifs_small_rq 28KB 32KB [ 1798.137548][T23648] cifs_request 67KB 67KB [ 1798.139472][T23648] cifs_mpx_ids 8KB 15KB [ 1798.143181][T23648] cifs_io_subrequest 42KB 47KB [ 1798.145362][T23648] cifs_io_request 105KB 111KB [ 1798.147662][T23648] nfs_commit_data 24KB 31KB [ 1798.150525][T23648] nfs_write_data 38KB 63KB [ 1798.153477][T23648] jbd2_inode 22KB 27KB [ 1798.156012][T23648] ext4_system_zone 1KB 3KB [ 1798.174798][T23648] ext4_io_end_vec 6KB 15KB [ 1798.177339][T23648] kioctx 26KB 95KB [ 1798.179758][T23648] aio_kiocb 16KB 23KB [ 1798.185979][T23648] fasync_cache 18KB 23KB [ 1798.190027][T23648] userfaultfd_ctx_cache 35KB 110KB [ 1798.200010][T23648] zspage 107KB 165KB [ 1798.202614][T23648] zs_handle 102KB 204KB [ 1798.205080][T23648] pid_namespace 66KB 108KB [ 1798.207527][T23648] kvm_gmem_inode_cache 29KB 30KB [ 1798.212393][T23648] kvm_vcpu 73KB 219KB [ 1798.214389][T23648] kvm_mmu_page_header 9KB 23KB [ 1798.219996][T23648] pte_list_desc 18KB 27KB [ 1798.224022][T23648] x86_emulator 66KB 223KB [ 1798.228776][T23648] rpc_buffers 65KB 95KB [ 1798.233162][T23648] rpc_tasks 24KB 39KB [ 1798.235662][T23648] UNIX-STREAM 87KB 255KB [ 1798.238100][T23648] UNIX 136KB 318KB [ 1798.249940][T23648] mfc_cache 13KB 16KB [ 1798.252377][T23648] MPTCP 82KB 183KB [ 1798.254718][T23648] tcp_bind2_bucket 19KB 32KB [ 1798.256614][T23648] tcp_bind_bucket 8KB 28KB [ 1798.259078][T23648] xfrm_dst 3KB 70KB [ 1798.262165][T23648] xfrm_state 200KB 318KB [ 1798.267552][T23648] ip_fib_trie 28KB 32KB [ 1798.270725][T23648] ip_fib_alias 86KB 102KB [ 1798.272675][T23648] rtable 35KB 172KB [ 1798.274562][T23648] PING 64KB 126KB [ 1798.276511][T23648] RAW 97KB 255KB [ 1798.278456][T23648] UDP 129KB 255KB [ 1798.280463][T23648] tw_sock_TCP 15KB 39KB [ 1798.282413][T23648] request_sock_TCP 41KB 61KB [ 1798.284343][T23648] TCP 409KB 526KB [ 1798.286290][T23648] fs_bio_integrity 7KB 8KB [ 1798.288234][T23648] hugetlbfs_inode_cache 16KB 31KB [ 1798.290313][T23648] netfs_subrequest 35KB 39KB [ 1798.292296][T23648] netfs_request 105KB 111KB [ 1798.294216][T23648] bio-288 31KB 31KB [ 1798.296147][T23648] ep_head 4KB 23KB [ 1798.298095][T23648] eventpoll_pwq 9KB 35KB [ 1798.300146][T23648] eventpoll_epi 43KB 55KB [ 1798.302102][T23648] inotify_inode_mark 38KB 50KB [ 1798.304090][T23648] bpf_fs_inode_cache 14KB 31KB [ 1798.306047][T23648] sgpool-128 38KB 297KB [ 1798.307998][T23648] sgpool-64 78KB 255KB [ 1798.310274][T23648] sgpool-32 37KB 189KB [ 1798.312227][T23648] sgpool-16 35KB 125KB [ 1798.314164][T23648] sgpool-8 10KB 62KB [ 1798.316151][T23648] bio_crypt_ctx 9KB 11KB [ 1798.318108][T23648] bio_integrity_data 7KB 8KB [ 1798.320145][T23648] request_queue 223KB 242KB [ 1798.322123][T23648] blkdev_ioc 7KB 15KB [ 1798.324081][T23648] bio-200 56KB 109KB [ 1798.326092][T23648] biovec-max 399KB 624KB [ 1798.328143][T23648] biovec-128 61KB 191KB [ 1798.330223][T23648] biovec-64 37KB 189KB [ 1798.332241][T23648] biovec-16 18KB 62KB [ 1798.334227][T23648] mm_slot 5KB 15KB [ 1798.336189][T23648] user_namespace 13KB 30KB [ 1798.338145][T23648] uid_cache 33KB 54KB [ 1798.340301][T23648] iommu_iova_magazine 992KB 1134KB [ 1798.342274][T23648] iommu_iova 278KB 284KB [ 1798.344327][T23648] dmaengine-unmap-256 26KB 30KB [ 1798.346363][T23648] dmaengine-unmap-128 14KB 30KB [ 1798.348782][T23648] dmaengine-unmap-16 7KB 8KB [ 1798.351293][T23648] dmaengine-unmap-2 3KB 4KB [ 1798.353218][T23648] QIPCRTR 35KB 62KB [ 1798.355115][T23648] audit_buffer 19KB 35KB [ 1798.357031][T23648] skbuff_ext_cache 18KB 40KB [ 1798.359025][T23648] skbuff_small_head 1639KB 1976KB [ 1798.361052][T23648] skbuff_fclone_cache 157KB 234KB [ 1798.362960][T23648] skbuff_head_cache 1523KB 1656KB [ 1798.364872][T23648] configfs_dir_cache 52KB 56KB [ 1798.367266][T23648] file_lease_cache 7KB 7KB [ 1798.369237][T23648] file_lock_cache 17KB 39KB [ 1798.371385][T23648] file_lock_ctx 40KB 47KB [ 1798.373653][T23648] fsnotify_inode_mark_connector 32KB 47KB [ 1798.376378][T23648] posix_timers_cache 21KB 48KB [ 1798.378705][T23648] taskstats 62KB 159KB [ 1798.381060][T23648] mem_cgroup_per_node 123KB 185KB [ 1798.383048][T23648] mem_cgroup 165KB 216KB [ 1798.385011][T23648] proc_dir_entry 686KB 804KB [ 1798.386954][T23648] pde_opener 11KB 15KB [ 1798.388919][T23648] seq_file 16KB 70KB [ 1798.390956][T23648] sigqueue 16KB 39KB [ 1798.392919][T23648] shmem_inode_cache 7141KB 7282KB [ 1798.394839][T23648] kernfs_iattrs_cache 25KB 31KB [ 1798.396863][T23648] kernfs_node_cache 27738KB 27886KB [ 1798.398794][T23648] mnt_cache 102KB 118KB [ 1798.400922][T23648] bfilp 45KB 63KB [ 1798.403489][T23648] filp 321KB 606KB [ 1798.406137][T23648] names_cache 273KB 284KB [ 1798.408231][T23648] net_namespace 147KB 264KB [ 1798.410299][T23648] ima_iint_cache 40KB 71KB [ 1798.412458][T23648] lsm_inode_cache 1828KB 2835KB [ 1798.414590][T23648] lsm_file_cache 140KB 268KB [ 1798.416741][T23648] key_jar 37KB 78KB [ 1798.418818][T23648] uts_namespace 80KB 123KB [ 1798.421030][T23648] nsproxy 10KB 27KB [ 1798.425806][T23648] vm_area_struct 804KB 1179KB [ 1798.427973][T23648] fs_cache 34KB 60KB [ 1798.430212][T23648] files_cache 127KB 207KB [ 1798.432235][T23648] task_exec_state 11KB 28KB [ 1798.434275][T23648] signal_cache 882KB 2156KB [ 1798.436339][T23648] sighand_cache 1126KB 2465KB [ 1798.438425][T23648] task_struct 4758KB 5084KB [ 1798.440925][T23648] cred 139KB 372KB [ 1798.442992][T23648] anon_vma_chain 239KB 334KB [ 1798.445017][T23648] anon_vma 246KB 479KB [ 1798.447167][T23648] pid 144KB 406KB [ 1798.449296][T23648] Acpi-Operand 192KB 336KB [ 1798.451447][T23648] Acpi-ParseExt 21KB 31KB [ 1798.453741][T23648] Acpi-Parse 11KB 27KB [ 1798.455743][T23648] Acpi-State 14KB 27KB [ 1798.457807][T23648] Acpi-Namespace 31KB 52KB [ 1798.460005][T23648] shared_policy_node 7KB 8KB [ 1798.462139][T23648] numa_policy 10KB 24KB [ 1798.464150][T23648] perf_event 15KB 31KB [ 1798.466117][T23648] trace_event_file 577KB 580KB [ 1798.468052][T23648] ftrace_event_field 1118KB 1122KB [ 1798.470079][T23648] pool_workqueue 2265KB 2512KB [ 1798.472015][T23648] task_group 24KB 32KB [ 1798.474430][T23648] maple_node 986KB 1728KB [ 1798.476365][T23648] mm_struct 274KB 478KB [ 1798.478278][T23648] vmap_area 930KB 1057KB [ 1798.480677][T23648] debug_objects_cache 2661KB 13789KB [ 1798.482637][T23648] page->ptl 145KB 149KB [ 1798.484563][T23648] kmalloc-cg-8k 1536KB 1792KB [ 1798.486495][T23648] kmalloc-cg-4k 14992KB 16480KB [ 1798.488414][T23648] kmalloc-cg-2k 9720KB 12448KB [ 1798.490985][T23648] kmalloc-cg-1k 3102KB 4000KB [ 1798.493178][T23648] kmalloc-cg-512 1594KB 1776KB [ 1798.495327][T23648] kmalloc-cg-256 402KB 624KB [ 1798.497306][T23648] kmalloc-cg-128 263KB 328KB [ 1798.499685][T23648] kmalloc-cg-64 53KB 100KB [ 1798.502049][T23648] kmalloc-cg-32 41KB 172KB [ 1798.504269][T23648] kmalloc-cg-16 5KB 24KB [ 1798.506145][T23648] kmalloc-cg-8 21KB 40KB [ 1798.508341][T23648] kmalloc-cg-192 64KB 80KB [ 1798.510598][T23648] kmalloc-cg-96 61KB 84KB [ 1798.512549][T23648] kmalloc-8k 6160KB 6496KB [ 1798.514844][T23648] kmalloc-4k 27736KB 27808KB [ 1798.516781][T23648] kmalloc-2k 15200KB 18144KB [ 1798.518695][T23648] kmalloc-1k 8140KB 10496KB [ 1798.520702][T23648] kmalloc-512 12548KB 14192KB [ 1798.522584][T23648] kmalloc-256 5279KB 5560KB [ 1798.524491][T23648] kmalloc-128 1696KB 1828KB [ 1798.526404][T23648] kmalloc-64 3519KB 3752KB [ 1798.528327][T23648] kmalloc-32 1907KB 2664KB [ 1798.530530][T23648] kmalloc-16 500KB 880KB [ 1798.532459][T23648] kmalloc-8 453KB 560KB [ 1798.534448][T23648] kmalloc-192 1869KB 2340KB [ 1798.536375][T23648] kmalloc-96 1844KB 2064KB [ 1798.538295][T23648] kmem_cache_node 214KB 220KB [ 1798.540394][T23648] kmem_cache 178KB 218KB [ 1798.542303][T23648] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz0,task=syz.0.4705,pid=23648,uid=0 [ 1798.549048][T23648] Out of memory (oom_kill_allocating_task): Killed process 23648 (syz.0.4705) total-vm:104072kB, anon-rss:232kB, file-rss:22908kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 1798.785311][T23672] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1799.033850][T23690] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4714'. [ 1799.396869][T23709] input: syz1 as /devices/virtual/input/input18 [ 1799.556517][T23715] syz.2.4730 invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=1000 [ 1799.561232][T23715] CPU: 0 UID: 0 PID: 23715 Comm: syz.2.4730 Tainted: G L syzkaller #0 PREEMPT(full) [ 1799.561253][T23715] Tainted: [L]=SOFTLOCKUP [ 1799.561257][T23715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1799.561265][T23715] Call Trace: [ 1799.561270][T23715] [ 1799.561275][T23715] dump_stack_lvl+0x100/0x190 [ 1799.561295][T23715] dump_header+0xfb/0x606 [ 1799.561311][T23715] oom_kill_process.cold+0xd/0x330 [ 1799.561326][T23715] out_of_memory+0x1256/0x14f0 [ 1799.561343][T23715] ? __pfx_out_of_memory+0x10/0x10 [ 1799.561360][T23715] __alloc_frozen_pages_noprof+0x24c2/0x2dc0 [ 1799.561386][T23715] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1799.561417][T23715] ? __lock_acquire+0x49f/0x1a40 [ 1799.561444][T23715] ? __lock_acquire+0x49f/0x1a40 [ 1799.561467][T23715] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1799.561486][T23715] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 1799.561502][T23715] ? policy_nodemask+0xed/0x4f0 [ 1799.561523][T23715] alloc_pages_mpol+0x1fb/0x540 [ 1799.561542][T23715] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1799.561561][T23715] ? do_raw_read_unlock+0x3f/0x70 [ 1799.561579][T23715] ? _raw_read_unlock+0x28/0x50 [ 1799.561605][T23715] folio_alloc_mpol_noprof+0x36/0x260 [ 1799.561632][T23715] vma_alloc_folio_noprof+0xed/0x1d0 [ 1799.561651][T23715] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1799.561678][T23715] ? __pfx_filemap_map_pages+0x10/0x10 [ 1799.561697][T23715] do_fault+0x1e6/0x1750 [ 1799.561728][T23715] __handle_mm_fault+0x187d/0x2a00 [ 1799.561753][T23715] ? mt_find+0x45e/0x8e0 [ 1799.561781][T23715] ? __pfx___handle_mm_fault+0x10/0x10 [ 1799.561798][T23715] ? __pfx_mt_find+0x10/0x10 [ 1799.561836][T23715] ? find_vma+0xbf/0x140 [ 1799.561857][T23715] ? __pfx_find_vma+0x10/0x10 [ 1799.561882][T23715] handle_mm_fault+0x37b/0xa30 [ 1799.561904][T23715] do_user_addr_fault+0x74c/0x12f0 [ 1799.561935][T23715] exc_page_fault+0x6f/0xd0 [ 1799.561958][T23715] asm_exc_page_fault+0x26/0x30 [ 1799.561975][T23715] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 1799.562000][T23715] Code: 89 ee 48 89 ef e8 b1 3a ee fc 4d 85 ff 75 26 e8 c7 40 ee fc 89 de 4c 89 e7 e8 6d da 5d fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 a1 40 ee fc 48 89 d8 5b 5d 41 [ 1799.562015][T23715] RSP: 0018:ffffc90003c6fce8 EFLAGS: 00050297 [ 1799.562031][T23715] RAX: 0000000000000001 RBX: 0000000000000004 RCX: 0000000000000004 [ 1799.562042][T23715] RDX: 0000000000000001 RSI: ffffc90003c6fda0 RDI: 0000000080044000 [ 1799.562052][T23715] RBP: 0000000080044000 R08: 0000000000000000 R09: fffff5200078dfb4 [ 1799.562062][T23715] R10: 0000000000000003 R11: 0000000000000000 R12: ffffc90003c6fda0 [ 1799.562072][T23715] R13: 0000000080044004 R14: 00007ffffffff000 R15: 0000000000000000 [ 1799.562094][T23715] ? _copy_to_user+0x93/0xd0 [ 1799.562120][T23715] do_timer_create+0x6d9/0x1460 [ 1799.562147][T23715] ? __pfx_do_timer_create+0x10/0x10 [ 1799.562166][T23715] ? __pfx_do_futex+0x10/0x10 [ 1799.562186][T23715] ? __pfx_get_nodes+0x10/0x10 [ 1799.562212][T23715] __ia32_compat_sys_timer_create+0x193/0x1c0 [ 1799.562235][T23715] ? __pfx___ia32_compat_sys_timer_create+0x10/0x10 [ 1799.562255][T23715] ? xfd_validate_state+0x129/0x190 [ 1799.562300][T23715] __do_fast_syscall_32+0xe7/0x970 [ 1799.562328][T23715] do_fast_syscall_32+0x32/0x70 [ 1799.562352][T23715] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1799.562372][T23715] RIP: 0023:0xf7f25fec [ 1799.562392][T23715] Code: Unable to access opcode bytes at 0xf7f25fc2. [ 1799.562399][T23715] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000103 [ 1799.562414][T23715] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1799.562425][T23715] RDX: 0000000080044000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1799.562434][T23715] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1799.562444][T23715] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1799.562453][T23715] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1799.562476][T23715] [ 1799.562483][T23715] Mem-Info: [ 1799.707408][T23715] active_anon:3755 inactive_anon:1643 isolated_anon:0 [ 1799.707408][T23715] active_file:4523 inactive_file:14548 isolated_file:0 [ 1799.707408][T23715] unevictable:1000 dirty:227 writeback:0 [ 1799.707408][T23715] slab_reclaimable:10245 slab_unreclaimable:74966 [ 1799.707408][T23715] mapped:25357 shmem:3877 pagetables:1296 [ 1799.707408][T23715] sec_pagetables:383 bounce:0 [ 1799.707408][T23715] kernel_misc_reclaimable:0 [ 1799.707408][T23715] free:58584 free_pcp:0 free_cma:0 [ 1799.724600][T23715] Node 0 active_anon:28kB inactive_anon:172kB active_file:8kB inactive_file:0kB unevictable:556kB isolated(anon):0kB isolated(file):0kB mapped:2080kB dirty:4kB writeback:0kB shmem:556kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7680kB pagetables:1284kB sec_pagetables:1280kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1799.741099][T23715] Node 0 DMA free:2252kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1799.754074][T23715] lowmem_reserve[]: 0 280 280 280 280 [ 1799.755907][T23715] Node 0 DMA32 free:38352kB boost:28740kB min:41516kB low:44708kB high:47900kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:172kB active_file:8kB inactive_file:0kB unevictable:556kB writepending:4kB zspages:208kB present:1032196kB managed:287072kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1799.766376][T23715] lowmem_reserve[]: 0 0 0 0 0 [ 1799.769978][T23715] Node 0 DMA: 29*4kB (UM) 13*8kB (UM) 7*16kB (UM) 8*32kB (UM) 2*64kB (M) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2252kB [ 1799.775207][T23715] Node 0 DMA32: 1188*4kB (UME) 518*8kB (UME) 155*16kB (UM) 257*32kB (UME) 69*64kB (UME) 32*128kB (UME) 8*256kB (UME) 8*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 38352kB [ 1799.781798][T23715] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1799.785568][T23715] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1799.789233][T23715] 24703 total pagecache pages [ 1799.791241][T23715] 1757 pages in swap cache [ 1799.793033][T23715] Free swap = 103284kB [ 1799.794690][T23715] Total swap = 124996kB [ 1799.796354][T23715] 524155 pages RAM [ 1799.797854][T23715] 0 pages HighMem/MovableOnly [ 1799.799782][T23715] 211494 pages reserved [ 1799.801541][T23715] 0 pages cma reserved [ 1799.803178][T23715] Unreclaimable slab info: [ 1799.804982][T23715] Name Used Total [ 1799.808001][T23715] pid_2 54KB 86KB [ 1799.810588][T23715] bio-464 17KB 31KB [ 1799.812986][T23715] bio-528 19KB 31KB [ 1799.814888][T23715] bio-544 19KB 31KB [ 1799.817186][T23715] bio-552 19KB 31KB [ 1799.819599][T23715] zswap_entry 299KB 454KB [ 1799.821634][T23715] AF_VSOCK 48KB 122KB [ 1799.823914][T23715] sw_flow_stats 15KB 24KB [ 1799.826305][T23715] sw_flow 43KB 61KB [ 1799.828291][T23715] batadv_tt_change_cache 9KB 16KB [ 1799.830706][T23715] batadv_tl_cache 27KB 32KB [ 1799.833137][T23715] IEEE-802.15.4-MAC 67KB 125KB [ 1799.835542][T23715] IEEE-802.15.4-RAW 36KB 94KB [ 1799.837945][T23715] p9_req_t 7KB 7KB [ 1799.840398][T23715] SMC6 65KB 125KB [ 1799.842299][T23715] SMC 118KB 218KB [ 1799.844689][T23715] TIPC 61KB 154KB [ 1799.847110][T23715] RDS 45KB 216KB [ 1799.849304][T23715] rds_connection 8KB 15KB [ 1799.851638][T23715] SCTPv6 97KB 210KB [ 1799.854118][T23715] SCTP 43KB 153KB [ 1799.856523][T23715] sctp_chunk 15KB 62KB [ 1799.858941][T23715] sctp_bind_bucket 6KB 24KB [ 1799.861285][T23715] PNPIPE 34KB 61KB [ 1799.864082][T23715] PHONET 49KB 94KB [ 1799.866911][T23715] L2TP/IPv6 45KB 127KB [ 1799.869725][T23715] L2TP/IP 38KB 157KB [ 1799.872928][T23715] KCM 48KB 186KB [ 1799.875602][T23715] kcm_mux 57KB 126KB [ 1799.878189][T23715] RXRPC 64KB 128KB [ 1799.881261][T23715] rxrpc_call_jar 146KB 255KB [ 1799.883926][T23715] can_receiver 25KB 31KB [ 1799.886527][T23715] net_bridge_fdb_entry 34KB 47KB [ 1799.889246][T23715] MPTCPv6 73KB 191KB [ 1799.892027][T23715] fib6_node 189KB 224KB [ 1799.894676][T23715] ip6_dst_cache 221KB 421KB [ 1799.897274][T23715] PINGv6 22KB 30KB [ 1799.900066][T23715] RAWv6 127KB 247KB [ 1799.902815][T23715] UDPv6 130KB 252KB [ 1799.905433][T23715] tw_sock_TCPv6 28KB 47KB [ 1799.908677][T23715] TCPv6 222KB 334KB [ 1799.911324][T23715] nf_conntrack 18KB 55KB [ 1799.913996][T23715] wg_peer 148KB 208KB [ 1799.916698][T23715] allowedips_node 23KB 31KB [ 1799.919340][T23715] t10_alua_lu_gp_cache 8KB 15KB [ 1799.922095][T23715] scsi_sense_cache 60KB 60KB [ 1799.924690][T23715] virtio_scsi_cmd 21KB 24KB [ 1799.927331][T23715] bio-136 68KB 80KB [ 1799.930124][T23715] io_kiocb 0KB 31KB [ 1799.932711][T23715] bio-264 10KB 15KB [ 1799.935264][T23715] mqueue_inode_cache 40KB 123KB [ 1799.937882][T23715] bio-272 10KB 15KB [ 1799.941424][T23715] f2fs_bio_post_read_ctx 30KB 31KB [ 1799.944327][T23715] jfs_mp 14KB 15KB [ 1799.946931][T23715] orangefs_op_cache 34KB 68KB [ 1799.949528][T23715] fuse_request 12KB 39KB [ 1799.952365][T23715] jffs2_xattr_ref 11KB 12KB [ 1799.954953][T23715] jffs2_xattr_datum 22KB 24KB [ 1799.957560][T23715] jffs2_inode_cache 10KB 12KB [ 1799.960363][T23715] jffs2_node_frag 9KB 11KB [ 1799.963197][T23715] jffs2_refblock 16KB 38KB [ 1799.965909][T23715] jffs2_tmp_dnode_info 13KB 23KB [ 1799.968626][T23715] jffs2_raw_inode 13KB 16KB [ 1799.971841][T23715] jffs2_raw_dirent 3KB 4KB [ 1799.974479][T23715] jffs2_full_dnode 5KB 11KB [ 1799.977058][T23715] cifs_small_rq 28KB 32KB [ 1799.979632][T23715] cifs_request 67KB 67KB [ 1799.982399][T23715] cifs_mpx_ids 8KB 15KB [ 1799.984960][T23715] cifs_io_subrequest 42KB 47KB [ 1799.987537][T23715] cifs_io_request 105KB 111KB [ 1799.990290][T23715] nfs_commit_data 24KB 31KB [ 1799.992990][T23715] nfs_write_data 38KB 63KB [ 1799.995558][T23715] jbd2_inode 22KB 27KB [ 1799.998112][T23715] ext4_system_zone 1KB 3KB [ 1800.000629][T23715] ext4_io_end_vec 6KB 15KB [ 1800.003020][T23715] kioctx 26KB 95KB [ 1800.005403][T23715] aio_kiocb 16KB 23KB [ 1800.007799][T23715] fasync_cache 18KB 23KB [ 1800.010683][T23715] userfaultfd_ctx_cache 35KB 110KB [ 1800.013264][T23715] zspage 107KB 165KB [ 1800.015672][T23715] zs_handle 104KB 200KB [ 1800.018054][T23715] pid_namespace 65KB 108KB [ 1800.021212][T23715] kvm_gmem_inode_cache 29KB 30KB [ 1800.023723][T23715] kvm_vcpu 73KB 219KB [ 1800.026121][T23715] kvm_mmu_page_header 9KB 23KB [ 1800.028572][T23715] pte_list_desc 18KB 27KB [ 1800.031047][T23715] x86_emulator 66KB 223KB [ 1800.033412][T23715] rpc_buffers 65KB 95KB [ 1800.035791][T23715] rpc_tasks 24KB 39KB [ 1800.038160][T23715] UNIX-STREAM 85KB 255KB [ 1800.040734][T23715] UNIX 157KB 318KB [ 1800.043123][T23715] mfc_cache 13KB 16KB [ 1800.045501][T23715] MPTCP 82KB 183KB [ 1800.047893][T23715] tcp_bind2_bucket 19KB 28KB [ 1800.050400][T23715] tcp_bind_bucket 8KB 28KB [ 1800.052797][T23715] xfrm_dst 3KB 70KB [ 1800.055171][T23715] xfrm_state 200KB 318KB [ 1800.057550][T23715] ip_fib_trie 36KB 40KB [ 1800.060026][T23715] ip_fib_alias 107KB 110KB [ 1800.062386][T23715] rtable 552KB 556KB [ 1800.064769][T23715] PING 64KB 126KB [ 1800.067141][T23715] RAW 97KB 255KB [ 1800.069552][T23715] UDP 127KB 255KB [ 1800.072011][T23715] tw_sock_TCP 15KB 39KB [ 1800.074357][T23715] request_sock_TCP 40KB 61KB [ 1800.076732][T23715] TCP 341KB 468KB [ 1800.079106][T23715] fs_bio_integrity 7KB 8KB [ 1800.081544][T23715] hugetlbfs_inode_cache 16KB 31KB [ 1800.084029][T23715] netfs_subrequest 35KB 39KB [ 1800.086405][T23715] netfs_request 105KB 111KB [ 1800.088786][T23715] bio-288 31KB 31KB [ 1800.091283][T23715] ep_head 4KB 23KB [ 1800.093647][T23715] eventpoll_pwq 9KB 35KB [ 1800.096020][T23715] eventpoll_epi 43KB 55KB [ 1800.098389][T23715] inotify_inode_mark 38KB 50KB [ 1800.101700][T23715] bpf_fs_inode_cache 14KB 31KB [ 1800.104231][T23715] sgpool-128 38KB 297KB [ 1800.106606][T23715] sgpool-64 78KB 255KB [ 1800.109012][T23715] sgpool-32 37KB 189KB [ 1800.111494][T23715] sgpool-16 35KB 125KB [ 1800.114257][T23715] sgpool-8 10KB 62KB [ 1800.116637][T23715] bio_crypt_ctx 9KB 11KB [ 1800.119050][T23715] bio_integrity_data 7KB 8KB [ 1800.121197][T23715] request_queue 223KB 242KB [ 1800.123542][T23715] blkdev_ioc 7KB 15KB [ 1800.125913][T23715] bio-200 960KB 968KB [ 1800.128295][T23715] biovec-max 399KB 624KB [ 1800.130851][T23715] biovec-128 61KB 191KB [ 1800.133295][T23715] biovec-64 126KB 252KB [ 1800.135653][T23715] biovec-16 17KB 62KB [ 1800.138021][T23715] mm_slot 5KB 15KB [ 1800.140465][T23715] user_namespace 13KB 30KB [ 1800.142826][T23715] uid_cache 33KB 54KB [ 1800.145223][T23715] iommu_iova_magazine 990KB 1134KB [ 1800.147666][T23715] iommu_iova 278KB 284KB [ 1800.150140][T23715] dmaengine-unmap-256 26KB 30KB [ 1800.152565][T23715] dmaengine-unmap-128 14KB 30KB [ 1800.154983][T23715] dmaengine-unmap-16 7KB 8KB [ 1800.157386][T23715] dmaengine-unmap-2 3KB 4KB [ 1800.159784][T23715] QIPCRTR 35KB 62KB [ 1800.162465][T23715] audit_buffer 19KB 35KB [ 1800.164848][T23715] skbuff_ext_cache 15KB 32KB [ 1800.167262][T23715] skbuff_small_head 2198KB 2470KB [ 1800.169659][T23715] skbuff_fclone_cache 135KB 218KB [ 1800.172349][T23715] skbuff_head_cache 2690KB 2757KB [ 1800.174695][T23715] configfs_dir_cache 52KB 56KB [ 1800.177110][T23715] file_lease_cache 7KB 7KB [ 1800.179489][T23715] file_lock_cache 17KB 39KB [ 1800.181961][T23715] file_lock_ctx 40KB 47KB [ 1800.184675][T23715] fsnotify_inode_mark_connector 32KB 47KB [ 1800.187486][T23715] posix_timers_cache 21KB 48KB [ 1800.189993][T23715] taskstats 90KB 159KB [ 1800.192366][T23715] mem_cgroup_per_node 123KB 185KB [ 1800.194818][T23715] mem_cgroup 165KB 216KB [ 1800.197207][T23715] proc_dir_entry 686KB 804KB [ 1800.199586][T23715] pde_opener 11KB 15KB [ 1800.202061][T23715] seq_file 16KB 63KB [ 1800.204405][T23715] sigqueue 18KB 35KB [ 1800.206692][T23715] shmem_inode_cache 7145KB 7282KB [ 1800.209072][T23715] kernfs_iattrs_cache 25KB 31KB [ 1800.211552][T23715] kernfs_node_cache 27770KB 27886KB [ 1800.213913][T23715] mnt_cache 84KB 118KB [ 1800.217785][T23715] bfilp 45KB 63KB [ 1800.220319][T23715] filp 325KB 551KB [ 1800.222736][T23715] names_cache 261KB 296KB [ 1800.227086][T23715] net_namespace 147KB 264KB [ 1800.228997][T23715] ima_iint_cache 40KB 71KB [ 1800.231136][T23715] lsm_inode_cache 1827KB 2835KB [ 1800.233029][T23715] lsm_file_cache 144KB 268KB [ 1800.234891][T23715] key_jar 37KB 78KB [ 1800.237045][T23715] uts_namespace 79KB 123KB [ 1800.239214][T23715] nsproxy 10KB 27KB [ 1800.241923][T23715] vm_area_struct 837KB 1132KB [ 1800.243992][T23715] fs_cache 36KB 60KB [ 1800.245965][T23715] files_cache 133KB 223KB [ 1800.247871][T23715] task_exec_state 10KB 28KB [ 1800.249899][T23715] signal_cache 866KB 2156KB [ 1800.251857][T23715] sighand_cache 1079KB 2465KB [ 1800.253749][T23715] task_struct 4851KB 5084KB [ 1800.255653][T23715] cred 133KB 372KB [ 1800.257609][T23715] anon_vma_chain 253KB 334KB [ 1800.259525][T23715] anon_vma 263KB 479KB [ 1800.262280][T23715] pid 144KB 406KB [ 1800.264239][T23715] Acpi-Operand 192KB 336KB [ 1800.266223][T23715] Acpi-ParseExt 21KB 31KB [ 1800.268126][T23715] Acpi-Parse 11KB 27KB [ 1800.270140][T23715] Acpi-State 14KB 27KB [ 1800.272030][T23715] Acpi-Namespace 31KB 52KB [ 1800.273921][T23715] shared_policy_node 11KB 12KB [ 1800.275845][T23715] numa_policy 14KB 28KB [ 1800.277811][T23715] perf_event 15KB 31KB [ 1800.280074][T23715] trace_event_file 577KB 580KB [ 1800.282107][T23715] ftrace_event_field 1118KB 1122KB [ 1800.284064][T23715] pool_workqueue 2255KB 2512KB [ 1800.286003][T23715] task_group 24KB 32KB [ 1800.287920][T23715] maple_node 692KB 1536KB [ 1800.289893][T23715] mm_struct 283KB 446KB [ 1800.291862][T23715] vmap_area 844KB 1065KB [ 1800.294173][T23715] debug_objects_cache 2756KB 13789KB [ 1800.296210][T23715] page->ptl 139KB 173KB [ 1800.298295][T23715] kmalloc-cg-8k 1536KB 1792KB [ 1800.300863][T23715] kmalloc-cg-4k 15112KB 16448KB [ 1800.303314][T23715] kmalloc-cg-2k 9652KB 12352KB [ 1800.305741][T23715] kmalloc-cg-1k 3010KB 4000KB [ 1800.307938][T23715] kmalloc-cg-512 2189KB 2208KB [ 1800.310139][T23715] kmalloc-cg-256 398KB 624KB [ 1800.312101][T23715] kmalloc-cg-128 259KB 328KB [ 1800.314084][T23715] kmalloc-cg-64 55KB 100KB [ 1800.316072][T23715] kmalloc-cg-32 43KB 172KB [ 1800.318293][T23715] kmalloc-cg-16 4KB 24KB [ 1800.320408][T23715] kmalloc-cg-8 20KB 40KB [ 1800.322312][T23715] kmalloc-cg-192 70KB 80KB [ 1800.324222][T23715] kmalloc-cg-96 61KB 84KB [ 1800.326156][T23715] kmalloc-8k 6160KB 6496KB [ 1800.328155][T23715] kmalloc-4k 22864KB 25216KB [ 1800.330156][T23715] kmalloc-2k 15588KB 18208KB [ 1800.332155][T23715] kmalloc-1k 7518KB 10496KB [ 1800.334188][T23715] kmalloc-512 12517KB 14192KB [ 1800.336113][T23715] kmalloc-256 5255KB 5560KB [ 1800.338041][T23715] kmalloc-128 1682KB 1828KB [ 1800.340470][T23715] kmalloc-64 3531KB 3760KB [ 1800.342534][T23715] kmalloc-32 2177KB 2668KB [ 1800.344453][T23715] kmalloc-16 492KB 880KB [ 1800.346413][T23715] kmalloc-8 447KB 556KB [ 1800.348426][T23715] kmalloc-192 1908KB 2336KB [ 1800.350444][T23715] kmalloc-96 1779KB 2048KB [ 1800.352485][T23715] kmem_cache_node 214KB 220KB [ 1800.354399][T23715] kmem_cache 178KB 218KB [ 1800.356351][T23715] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz2,task=syz.2.4730,pid=23715,uid=0 [ 1800.361107][T23715] Out of memory (oom_kill_allocating_task): Killed process 23714 (syz.2.4730) total-vm:104072kB, anon-rss:228kB, file-rss:22864kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 1800.551295][T23737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4737'. [ 1800.809113][T23753] netdevsim0 speed is unknown, defaulting to 1000 [ 1800.815470][T23753] netdevsim0 speed is unknown, defaulting to 1000 [ 1800.825433][T23753] netdevsim0 speed is unknown, defaulting to 1000 [ 1800.835001][T23753] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1800.839718][T23753] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1800.845095][T23753] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1800.852340][T23753] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1800.866450][T23753] netdevsim0 speed is unknown, defaulting to 1000 [ 1800.871463][T23753] netdevsim0 speed is unknown, defaulting to 1000 [ 1800.880789][T23753] netdevsim0 speed is unknown, defaulting to 1000 [ 1800.885524][T23753] netdevsim0 speed is unknown, defaulting to 1000 [ 1800.894831][T23753] netdevsim0 speed is unknown, defaulting to 1000 [ 1801.665083][T11852] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 1801.731626][T23775] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4747'. [ 1802.220846][T23786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1802.223446][T23786] batadv_slave_1: entered promiscuous mode [ 1802.285872][T23790] binder: 23789:23790 ioctl c0306201 0 returned -14 [ 1802.315535][T23792] Bluetooth: hci4: Frame reassembly failed (-84) [ 1802.741106][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1802.743237][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1802.797533][T23809] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4761'. [ 1803.860103][T23402] Bluetooth: hci0: command 0x0406 tx timeout [ 1804.339986][T23402] Bluetooth: hci4: command 0xfc11 tx timeout [ 1804.340060][T19014] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1804.636843][T23836] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4773'. [ 1804.770946][T23844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4775'. [ 1804.992775][T23851] PKCS8: Unsupported PKCS#8 version [ 1805.119949][T23863] netlink: 'syz.2.4783': attribute type 4 has an invalid length. [ 1805.125066][T23863] netlink: 'syz.2.4783': attribute type 4 has an invalid length. [ 1805.156412][T23865] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4784'. [ 1805.210675][T23872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4788'. [ 1805.347405][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 1805.347423][ T42] audit: type=1326 audit(1786160646.357:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23875 comm="syz.0.4789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78fec code=0x7ffc0000 [ 1805.364710][ T42] audit: type=1326 audit(1786160646.357:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23875 comm="syz.0.4789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78fec code=0x7ffc0000 [ 1805.385244][ T42] audit: type=1326 audit(1786160646.377:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23875 comm="syz.0.4789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78fec code=0x7ffc0000 [ 1805.395471][ T42] audit: type=1326 audit(1786160646.377:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23875 comm="syz.0.4789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78fec code=0x7ffc0000 [ 1805.417294][ T42] audit: type=1326 audit(1786160646.377:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23875 comm="syz.0.4789" exe="/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7f78fec code=0x7ffc0000 [ 1805.428476][ T42] audit: type=1326 audit(1786160646.377:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23875 comm="syz.0.4789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78fec code=0x7ffc0000 [ 1805.442896][ T42] audit: type=1326 audit(1786160646.377:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23875 comm="syz.0.4789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78fec code=0x7ffc0000 [ 1805.456733][ T42] audit: type=1326 audit(1786160646.377:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23875 comm="syz.0.4789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78fec code=0x7ffc0000 [ 1805.470185][ T42] audit: type=1326 audit(1786160646.377:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23875 comm="syz.0.4789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78fec code=0x7ffc0000 [ 1805.484893][ T42] audit: type=1326 audit(1786160646.377:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23875 comm="syz.0.4789" exe="/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf7f78fec code=0x7ffc0000 [ 1805.579329][T23880] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4787'. [ 1807.418905][T23919] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4799'. [ 1807.870312][T11852] Bluetooth: hci3: command 0x0406 tx timeout [ 1807.962633][T23928] device-mapper: ioctl: name not supplied when creating device [ 1808.284725][T23933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4807'. [ 1808.900029][T11852] Bluetooth: hci1: command 0x0406 tx timeout [ 1810.051889][T23956] device-mapper: ioctl: name not supplied when creating device [ 1810.068793][T23958] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4816'. [ 1810.748161][T23967] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer. [ 1811.361731][T11852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1811.381765][T11852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1811.387630][T11852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1811.398969][T11852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1811.412142][T11852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1812.033914][T23972] netdevsim0 speed is unknown, defaulting to 1000 [ 1812.109966][T15973] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1812.220590][ C3] af_packet: tpacket_rcv: packet too big, clamped from 78 to 4294967286. macoff=82 [ 1812.269976][T15973] usb 6-1: Using ep0 maxpacket: 16 [ 1812.272567][T15973] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 1812.278505][T15973] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1812.286997][T23972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1812.287030][T15973] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1812.290059][T23972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1812.301048][T23972] bridge_slave_0: entered allmulticast mode [ 1812.305013][T23972] bridge_slave_0: entered promiscuous mode [ 1812.305065][T15973] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1812.310010][T23972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1812.313464][T15973] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1812.314345][T23972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1812.318752][T15973] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1812.320993][T23972] bridge_slave_1: entered allmulticast mode [ 1812.322344][T23972] bridge_slave_1: entered promiscuous mode [ 1812.338171][T15973] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1812.349209][T15973] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1812.355032][T23972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1812.363602][T23972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1812.366597][T15973] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1812.376718][T15973] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1812.381055][T15973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1812.383939][T15973] usb 6-1: SerialNumber: syz [ 1812.390596][T15973] usb 6-1: config 0 descriptor?? [ 1812.406000][T15973] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input19 [ 1812.414564][T23972] team0: Port device team_slave_0 added [ 1812.419213][T23972] team0: Port device team_slave_1 added [ 1812.433550][T23972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1812.435765][T23972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1812.444147][T23972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1812.448896][T23972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1812.451274][T23972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1812.460570][T23972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1812.503881][T23972] hsr_slave_0: entered promiscuous mode [ 1812.506603][T23972] hsr_slave_1: entered promiscuous mode [ 1812.508870][T23972] debugfs: 'hsr0' already exists in 'hsr' [ 1812.512837][T23972] Cannot create hsr debugfs directory [ 1812.663280][ T5124] bcm5974 6-1:0.0: could not read from device [ 1812.679967][T23972] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1812.680266][ T5124] bcm5974 6-1:0.0: could not read from device [ 1812.693341][ T6741] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1812.702782][T23997] bcm5974 6-1:0.0: could not read from device [ 1812.714743][T15973] usb 6-1: USB disconnect, device number 27 [ 1812.840938][T23972] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1812.859927][ T6741] usb 8-1: Using ep0 maxpacket: 16 [ 1812.862878][ T6741] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1812.866415][ T6741] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1812.869535][ T6741] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1812.874180][ T6741] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1812.877095][ T6741] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1812.881659][ T6741] usb 8-1: config 0 descriptor?? [ 1812.951545][T23972] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1813.106869][T24020] WARNING! power/level is deprecated; use power/control instead [ 1813.124259][T23972] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1813.265275][T23972] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1813.270520][T23972] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1813.273279][T23972] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1813.280353][T23972] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1813.283571][T23972] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1813.294908][T23972] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1813.298458][T23972] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1813.304884][T23972] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1813.369608][T23972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1813.378332][ T6741] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1813.381586][ T6741] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1813.384071][ T6741] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1813.386401][ T6741] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1813.388675][ T6741] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1813.392120][ T6741] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1813.394465][ T6741] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1813.396744][ T6741] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1813.399046][ T6741] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1813.401451][ T6741] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1813.405228][ T6741] microsoft 0003:045E:07DA.0008: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1813.406639][T23972] 8021q: adding VLAN 0 to HW filter on device team0 [ 1813.408869][ T6741] microsoft 0003:045E:07DA.0008: no inputs found [ 1813.413283][ T6741] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 1813.415772][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 1813.418299][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1813.425762][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 1813.428066][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1813.461413][T11852] Bluetooth: hci2: command tx timeout [ 1813.583009][ T6741] usb 8-1: USB disconnect, device number 31 [ 1813.619494][T24045] fido_id[24045]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb8/report_descriptor': No such file or directory [ 1813.791631][T23972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1813.857379][T23972] veth0_vlan: entered promiscuous mode [ 1813.873774][T23972] veth1_vlan: entered promiscuous mode [ 1813.894849][T23972] veth0_macvtap: entered promiscuous mode [ 1813.897937][T11852] Bluetooth: hci0: failed to read key size for handle 200 [ 1813.902665][T23972] veth1_macvtap: entered promiscuous mode [ 1813.902886][T11852] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 1813.918245][T23972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1813.940689][T23972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1814.000336][T23454] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.043196][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1814.045912][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1814.064730][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1814.067441][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1814.081706][T18713] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.089346][T18713] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.092221][T18713] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.750662][T24092] No source specified [ 1814.979278][T24101] dummy_hcd dummy_hcd.0: remove, state 4 [ 1814.984382][T24101] usb usb5: USB disconnect, device number 1 [ 1815.118587][T24101] dummy_hcd dummy_hcd.0: stopped [ 1815.120443][T24101] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 1815.540709][T19014] Bluetooth: hci2: command tx timeout [ 1815.583118][T24122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4865'. [ 1815.593287][T24124] No source specified [ 1815.734995][T19014] Bluetooth: hci2: failed to read key size for handle 200 [ 1816.060099][T24031] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 1816.063523][T24031] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1816.065970][T24031] CPU: 2 UID: 0 PID: 24031 Comm: syz.0.4839 Tainted: G L syzkaller #0 PREEMPT(full) [ 1816.069041][T24031] Tainted: [L]=SOFTLOCKUP [ 1816.070282][T24031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1816.073137][T24031] RIP: 0010:dummy_udc_stop+0x8f/0x180 [ 1816.074728][T24031] Code: c1 ea 03 80 3c 02 00 0f 85 f9 00 00 00 48 8b 9b 90 06 00 00 e8 f2 d2 3c fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 c5 00 00 00 48 8b 1b 48 89 df e8 7c 07 ee 03 48 [ 1816.080163][T24031] RSP: 0000:ffffc9000d6078c8 EFLAGS: 00010246 [ 1816.081894][T24031] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff87ccedd2 [ 1816.084143][T24031] RDX: 0000000000000000 RSI: ffffffff87ccee0e RDI: ffff88801da99290 [ 1816.086393][T24031] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000005 [ 1816.088659][T24031] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888025ab8050 [ 1816.090898][T24031] R13: ffff888024e9d540 R14: ffff88801da98c00 R15: ffffffff8cb76a20 [ 1816.093148][T24031] FS: 0000000000000000(0000) GS:ffff888096df3000(0000) knlGS:0000000000000000 [ 1816.095683][T24031] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1816.097579][T24031] CR2: 00000000f7fba190 CR3: 0000000049806000 CR4: 0000000000352ef0 [ 1816.099870][T24031] Call Trace: [ 1816.100844][T24031] [ 1816.101712][T24031] gadget_unbind_driver+0x2ca/0x4f0 [ 1816.103222][T24031] ? __pfx_dummy_udc_async_callbacks+0x10/0x10 [ 1816.105006][T24031] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 1816.106638][T24031] device_remove+0xcb/0x180 [ 1816.107998][T24031] device_release_driver_internal+0x44e/0x620 [ 1816.109762][T24031] driver_detach+0xd8/0x1b0 [ 1816.111078][T24031] bus_remove_driver+0x13b/0x2e0 [ 1816.112505][T24031] driver_unregister+0x76/0xb0 [ 1816.113895][T24031] usb_gadget_unregister_driver+0x49/0x70 [ 1816.115542][T24031] raw_release+0x19b/0x260 [ 1816.116851][T24031] ? __pfx_raw_release+0x10/0x10 [ 1816.118270][T24031] __fput+0x3ff/0xb50 [ 1816.119468][T24031] task_work_run+0x150/0x240 [ 1816.120819][T24031] ? __pfx_task_work_run+0x10/0x10 [ 1816.122298][T24031] ? do_raw_spin_unlock+0x145/0x1e0 [ 1816.123813][T24031] do_exit+0x951/0x2ae0 [ 1816.125019][T24031] ? __pfx_debug_object_free+0x10/0x10 [ 1816.126615][T24031] ? __pfx_do_exit+0x10/0x10 [ 1816.127977][T24031] ? do_raw_spin_lock+0x1e0/0x260 [ 1816.129460][T24031] ? find_held_lock+0x2b/0x80 [ 1816.130842][T24031] ? get_signal+0x7e0/0x21e0 [ 1816.132194][T24031] do_group_exit+0xd5/0x2a0 [ 1816.133528][T24031] get_signal+0x1ec7/0x21e0 [ 1816.134856][T24031] ? __pfx_get_signal+0x10/0x10 [ 1816.136292][T24031] ? do_futex+0x190/0x440 [ 1816.137559][T24031] arch_do_signal_or_restart+0x91/0x7a0 [ 1816.139167][T24031] ? ktime_get+0x22c/0x320 [ 1816.140472][T24031] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1816.142243][T24031] exit_to_user_mode_loop+0x139/0x6f0 [ 1816.143812][T24031] ? rcu_is_watching+0x12/0xc0 [ 1816.145199][T24031] __do_fast_syscall_32+0x701/0x970 [ 1816.146724][T24031] do_fast_syscall_32+0x32/0x70 [ 1816.148128][T24031] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1816.149961][T24031] RIP: 0023:0xf7f78fec [ 1816.151140][T24031] Code: Unable to access opcode bytes at 0xf7f78fc2. [ 1816.153046][T24031] RSP: 002b:00000000ffbcd16c EFLAGS: 00000202 ORIG_RAX: 00000000000000f0 [ 1816.155429][T24031] RAX: fffffffffffffdfc RBX: 00000000f7434f8c RCX: 0000000000000080 [ 1816.157696][T24031] RDX: 0000000000000000 RSI: 00000000ffbcd308 RDI: 0000000000000000 [ 1816.159966][T24031] RBP: 00000000000f4240 R08: 0000000000000000 R09: 0000000000000000 [ 1816.162220][T24031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1816.164462][T24031] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1816.166722][T24031] [ 1816.167640][T24031] Modules linked in: [ 1816.169410][T24031] ---[ end trace 0000000000000000 ]--- [ 1816.172004][T24031] RIP: 0010:dummy_udc_stop+0x8f/0x180 [ 1816.173683][T24031] Code: c1 ea 03 80 3c 02 00 0f 85 f9 00 00 00 48 8b 9b 90 06 00 00 e8 f2 d2 3c fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 c5 00 00 00 48 8b 1b 48 89 df e8 7c 07 ee 03 48 [ 1816.179294][T24031] RSP: 0000:ffffc9000d6078c8 EFLAGS: 00010246 [ 1816.181225][T24031] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff87ccedd2 [ 1816.183566][T24031] RDX: 0000000000000000 RSI: ffffffff87ccee0e RDI: ffff88801da99290 [ 1816.185909][T24031] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000005 [ 1816.188223][T24031] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888025ab8050 [ 1816.190834][T24031] R13: ffff888024e9d540 R14: ffff88801da98c00 R15: ffffffff8cb76a20 [ 1816.193186][T24031] FS: 0000000000000000(0000) GS:ffff888096df3000(0000) knlGS:0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1816.195796][T24031] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1816.198114][T24031] CR2: 00000000f7fba190 CR3: 0000000049806000 CR4: 0000000000352ef0 [ 1816.200507][T24031] Kernel panic - not syncing: Fatal exception [ 1816.202804][T24031] Kernel Offset: disabled [ 1816.204044][T24031] Rebooting in 86400 seconds..