last executing test programs: 13.996764467s ago: executing program 2 (id=637): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="a00000004100010026bd700000ccd900030100000f00000012000100002802e08a17503ca13e6d3e88a8000004"], 0xa0}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) 13.994212458s ago: executing program 2 (id=639): syz_emit_ethernet(0x6a, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x5c, 0x0, 0x0, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4bd5ffa8e842cdd19baeb25d342579f7e63d2d1e5317517e", "b1fe94141226cc71e718e86db665dd4fbd49b20523893e8724968b868600ac13"}}}}}}, 0x0) 13.915736984s ago: executing program 2 (id=640): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x1, 0xc, &(0x7f0000000d00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xf800}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x25}}]}, &(0x7f0000000d80)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 13.915586629s ago: executing program 2 (id=641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000c80)=ANY=[@ANYRES16=r2, @ANYBLOB="010026bd600000000000159300000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 13.856434334s ago: executing program 2 (id=642): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/mtrr\x00', 0x2, 0x0) r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 13.856318323s ago: executing program 2 (id=643): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f0000000180)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0xf2) open_by_handle_at(r0, &(0x7f0000000200)=@OVL_FILEID_V1={0x18, 0xf8, {'\x00', {0x0, 0xfb, 0x15, 0x6, 0x5, "a8371f2efe088557001f00"}}}, 0x5f1502) 3.086826968s ago: executing program 3 (id=768): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.976738416s ago: executing program 3 (id=771): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ad00"/16, 0x10) syz_genetlink_get_family_id$batadv(0x0, r1) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x8) 2.915449245s ago: executing program 3 (id=772): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001bc0)='./proc\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x204001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001c80)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000001cc0)='270', 0x3) r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r3, 0xc138fd03, &(0x7f0000000bc0)={0x4, 0x0, 0x0, 0x15b, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000340)=ANY=[@ANYBLOB="12010002020000102505a1a440000102030109023b00010108102b090400130302060000052406000005240007000d240f0101000000a3dbf502080905"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) io_uring_setup(0xf06, &(0x7f0000000a00)={0x0, 0xe5f, 0x38c1, 0x2, 0xf0}) 1.746489691s ago: executing program 3 (id=779): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='2', 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r1, &(0x7f0000000180)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=t', 0x31) umount2(0x0, 0x1) 1.66467049s ago: executing program 3 (id=781): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00"/13, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3c) writev(r1, &(0x7f0000000880)=[{&(0x7f0000000900)}, {&(0x7f0000000f00)}], 0x2) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000f80)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(0xffffffffffffffff, 0x84, 0x25, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x2}, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000001080)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)={0x34, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) write(r3, &(0x7f0000001340)="080211000001080211000000080045", 0xf) 1.314702277s ago: executing program 3 (id=783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000001c0)={0x3, &(0x7f0000000240)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x48, 0x0, 0x0, 0xb928}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) syz_emit_ethernet(0x1e, &(0x7f0000000280)={@multicast, @remote, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x5, 0x1, 0x1}}, {@mpls_uc={0x8847, {[], @llc={@snap={0x155, 0xaa, '\x00', "705104", 0xc}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="060000001000"}) r6 = socket$inet(0x2, 0x2, 0xfffffffd) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x10, r3, 0x0) syz_usb_connect(0x3, 0x54, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002e0010140120a0100fbfd010203010902360002010080000904000003e001010007058103100001070502020002000705820200"], 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x0) 1.176831284s ago: executing program 1 (id=789): mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0xa2fac000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffd, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000200)={0x0, 0x20, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r3, 0x1, 0x70bd2c, 0x9000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x13, &(0x7f0000000e80)=ANY=[], &(0x7f0000000f40)='GPL\x00', 0x2, 0xde, &(0x7f0000000f80)=""/222}, 0x94) 1.176708616s ago: executing program 0 (id=790): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000001300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.176581078s ago: executing program 0 (id=791): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl(r0, 0x40186f40, &(0x7f0000000100)) 1.140888518s ago: executing program 1 (id=792): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00"/13, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3c) writev(r1, &(0x7f0000000880)=[{&(0x7f0000000900)}, {&(0x7f0000000f00)}], 0x2) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000f80)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(0xffffffffffffffff, 0x84, 0x25, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x2}, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000001080)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)={0x34, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) write(r3, &(0x7f0000001340)="080211000001080211000000080045", 0xf) 1.076545874s ago: executing program 1 (id=793): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r5, {0xb, 0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0xffffffffffffffff, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r3) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000680)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f00000006c0), 0x56) sendmsg$kcm(r6, &(0x7f0000000700)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000800)="27030200dc0f14000e0000000025c10200000006125c", 0x16}, {&(0x7f0000000040)="02db0b9ef1cafdabc0356e8eb692d5ce214549d51f0063d6630020013818b953", 0x20}], 0x2}, 0x4005) 994.783601ms ago: executing program 0 (id=794): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='27', 0x2) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) write(r1, &(0x7f0000000180)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=t', 0x31) 915.496534ms ago: executing program 0 (id=795): openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) syz_open_procfs(0x0, &(0x7f00000007c0)='fd/3\x00') 915.337859ms ago: executing program 0 (id=796): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3aee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d320f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c16af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf700"/1664], &(0x7f0000001a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001a80), 0x0, 0x10, &(0x7f0000001ac0), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b00)={r0, 0x702, 0x64, 0x0, &(0x7f0000001b80)="e460334470b8d480eb00c152082e", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 806.963349ms ago: executing program 0 (id=797): syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff00000007058102"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x63) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f0000000100)="01") 65.96177ms ago: executing program 1 (id=798): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000009c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)=@delchain={0x70, 0x65, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffe0, 0x7}, {0x9, 0xffeb}, {0x10, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @broadcast}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6}]}}, @TCA_CHAIN={0x8, 0xb, 0xc0}, @TCA_CHAIN={0x8, 0xb, 0x11000000}, @TCA_RATE={0x6, 0x5, {0xd6, 0xc}}, @TCA_RATE={0x6, 0x5, {0x9, 0xff}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x2000000) openat$ptmx(0xffffffffffffff9c, &(0x7f00000058c0), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x12, 0xffffffffffffffff, 0x100000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000040)=@generic={0x0}, 0x18) openat$dm_control(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write(0xca, &(0x7f0000000940)="040e04016d0c00", 0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x1003}, 0x38) 64.896422ms ago: executing program 1 (id=799): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0) write(r0, &(0x7f0000000780)='1', 0x1) 0s ago: executing program 1 (id=800): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)) sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="70ed"], 0xc) kernel console output (not intermixed with test programs): ]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 40.957221][ T5962] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 40.990320][ T5962] RDS/IB: syz2: added [ 40.990383][ T5962] smc: adding ib device syz2 with port count 1 [ 40.990408][ T5962] smc: ib device syz2 port 1 has no pnetid [ 40.990484][ T5876] wg1 speed is unknown, defaulting to 1000 [ 40.993200][ T5962] wg1 speed is unknown, defaulting to 1000 [ 41.035396][ T65] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 41.061834][ T5975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 41.092529][ T5967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 41.112844][ T5962] wg1 speed is unknown, defaulting to 1000 [ 41.196463][ T65] usb 6-1: Using ep0 maxpacket: 8 [ 41.197688][ T65] usb 6-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 41.199740][ T65] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 41.199783][ T65] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 41.199801][ T65] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 41.199819][ T65] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 41.199836][ T65] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 41.199866][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.215013][ T5962] wg1 speed is unknown, defaulting to 1000 [ 41.303937][ T5962] wg1 speed is unknown, defaulting to 1000 [ 41.424311][ T65] usb 6-1: usb_control_msg returned -32 [ 41.424350][ T65] usbtmc 6-1:16.0: can't read capabilities [ 41.484007][ T5983] device-mapper: table: 248:0: ram5 too small for target: start=1024, len=8272, dev_size=8192 [ 41.484034][ T5983] device-mapper: core: Cannot calculate initial queue limits [ 41.484041][ T5983] device-mapper: ioctl: unable to set up device queue for new table. [ 41.780289][ T5990] usbtmc 6-1:16.0: INITIATE_CLEAR returned 0 [ 41.954918][ T5994] syzkaller0: entered promiscuous mode [ 41.954932][ T5994] syzkaller0: entered allmulticast mode [ 41.983846][ T65] usb 6-1: USB disconnect, device number 2 [ 42.185507][ T68] Bluetooth: hci1: command tx timeout [ 42.195229][ T68] Bluetooth: hci3: command tx timeout [ 42.195252][ T68] Bluetooth: hci2: command tx timeout [ 42.195264][ T68] Bluetooth: hci0: command tx timeout [ 42.415331][ T5876] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 42.575287][ T5876] usb 7-1: Using ep0 maxpacket: 8 [ 42.576799][ T5876] usb 7-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 42.577273][ T5876] usb 7-1: config 0 has no interfaces? [ 42.578796][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.578807][ T5876] usb 7-1: Product: syz [ 42.578813][ T5876] usb 7-1: Manufacturer: syz [ 42.578820][ T5876] usb 7-1: SerialNumber: syz [ 42.580540][ T5876] usb 7-1: config 0 descriptor?? [ 42.765178][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 42.925220][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 42.925693][ T10] usb 6-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 42.926548][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.926570][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 42.926582][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 42.926592][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 42.926602][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 42.927500][ T10] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 42.927516][ T10] usb 6-1: Manufacturer: syz [ 42.928985][ T10] usb 6-1: config 0 descriptor?? [ 43.215158][ T10] rc_core: IR keymap rc-hauppauge not found [ 43.215169][ T10] Registered IR keymap rc-empty [ 43.216296][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 43.235521][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 43.238279][ T6007] bond1: (slave vlan2): making interface the new active one [ 43.239525][ T6007] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 43.266723][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 43.268488][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input5 [ 43.273090][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 43.295244][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 43.316623][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 43.335415][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 43.355299][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 43.375241][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 43.395270][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 43.425773][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 43.455809][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 43.486069][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 43.510621][ T10] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 43.510642][ T10] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 43.517485][ T10] usb 6-1: USB disconnect, device number 3 [ 43.618588][ T6016] udevd[6016]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 43.674830][ T6021] netlink: 'syz.0.26': attribute type 1 has an invalid length. [ 43.681719][ T6021] netlink: 'syz.0.26': attribute type 10 has an invalid length. [ 43.681822][ T6021] netlink: 40 bytes leftover after parsing attributes in process `syz.0.26'. [ 43.681935][ T6021] dummy0: entered promiscuous mode [ 43.750215][ T6023] nvme nvme0: failed to connect socket: -111 [ 44.026267][ T1045] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 44.109365][ T6037] input: syz0 as /devices/virtual/input/input6 [ 44.175161][ T1045] usb 5-1: Using ep0 maxpacket: 8 [ 44.175651][ T1045] usb 5-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 44.176513][ T1045] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 44.176525][ T1045] usb 5-1: config 179 has no interface number 0 [ 44.176542][ T1045] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 44.176554][ T1045] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 44.176566][ T1045] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 44.176577][ T1045] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 44.176588][ T1045] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 44.176605][ T1045] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.179312][ T6026] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 44.265297][ T68] Bluetooth: hci3: command tx timeout [ 44.275924][ T68] Bluetooth: hci2: command tx timeout [ 44.275945][ T68] Bluetooth: hci1: command tx timeout [ 44.398651][ T5895] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input7 [ 44.405583][ T34] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 44.555230][ T34] usb 8-1: Using ep0 maxpacket: 32 [ 44.556229][ T34] usb 8-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 44.558418][ T34] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 44.558431][ T34] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 44.558441][ T34] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 44.558460][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 44.558470][ T34] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 44.558481][ T34] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 44.558499][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.559932][ T34] usb 8-1: config 0 descriptor?? [ 44.594315][ T5887] usb 5-1: USB disconnect, device number 2 [ 44.594319][ C3] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 44.594357][ C3] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 44.770257][ T34] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 45.024492][ C3] usblp0: nonzero read bulk status received: -71 [ 45.024836][ T65] usb 8-1: USB disconnect, device number 2 [ 45.027255][ T6041] usblp0: error -71 reading from printer [ 45.032280][ T65] usblp0: removed [ 45.137626][ T6048] warning: `syz.0.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 45.162110][ T10] usb 7-1: USB disconnect, device number 2 [ 45.199946][ T6052] Bluetooth: MGMT ver 1.23 [ 45.386639][ T68] Bluetooth: hci0: command tx timeout [ 45.443971][ T6067] FAULT_INJECTION: forcing a failure. [ 45.443971][ T6067] name failslab, interval 1, probability 0, space 0, times 1 [ 45.443989][ T6067] CPU: 2 UID: 0 PID: 6067 Comm: syz.2.43 Not tainted syzkaller #0 PREEMPT(full) [ 45.444001][ T6067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 45.444007][ T6067] Call Trace: [ 45.444011][ T6067] [ 45.444016][ T6067] dump_stack_lvl+0x100/0x190 [ 45.444039][ T6067] should_fail_ex.cold+0x5/0xa [ 45.444055][ T6067] should_failslab+0xc2/0x120 [ 45.444069][ T6067] __kmalloc_cache_noprof+0x91/0x6d0 [ 45.444084][ T6067] ? lockdep_init_map_type+0x5c/0x250 [ 45.444097][ T6067] ? snd_seq_prioq_new+0x3f/0x110 [ 45.444117][ T6067] snd_seq_prioq_new+0x3f/0x110 [ 45.444132][ T6067] snd_seq_queue_alloc+0x153/0x540 [ 45.444148][ T6067] snd_seq_ioctl_create_queue+0xa9/0x370 [ 45.444160][ T6067] call_seq_client_ctl+0xa3/0x130 [ 45.444179][ T6067] snd_seq_kernel_client_ctl+0x7c/0xd0 [ 45.444192][ T6067] alloc_seq_queue+0xdb/0x180 [ 45.444205][ T6067] ? __pfx_alloc_seq_queue+0x10/0x10 [ 45.444225][ T6067] ? find_held_lock+0x2b/0x80 [ 45.444242][ T6067] ? mark_held_locks+0x40/0x70 [ 45.444256][ T6067] snd_seq_oss_open+0x2b2/0xa40 [ 45.444272][ T6067] odev_open+0x6f/0x90 [ 45.444283][ T6067] ? __pfx_odev_open+0x10/0x10 [ 45.444295][ T6067] soundcore_open+0x2e3/0x5a0 [ 45.444308][ T6067] ? __pfx_soundcore_open+0x10/0x10 [ 45.444322][ T6067] chrdev_open+0x234/0x6a0 [ 45.444339][ T6067] ? __pfx_chrdev_open+0x10/0x10 [ 45.444357][ T6067] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 45.444385][ T6067] do_dentry_open+0x674/0x1470 [ 45.444421][ T6067] ? __pfx_chrdev_open+0x10/0x10 [ 45.444448][ T6067] vfs_open_consume+0xcc/0x460 [ 45.444469][ T6067] path_openat+0x1547/0x23f0 [ 45.444484][ T6067] ? __pfx_path_openat+0x10/0x10 [ 45.444499][ T6067] do_file_open+0x20e/0x430 [ 45.444512][ T6067] ? __pfx_do_file_open+0x10/0x10 [ 45.444533][ T6067] ? _raw_spin_unlock+0x28/0x50 [ 45.444545][ T6067] ? alloc_fd+0x471/0x7a0 [ 45.444561][ T6067] do_sys_openat2+0x163/0x1d0 [ 45.444574][ T6067] ? __pfx_do_sys_openat2+0x10/0x10 [ 45.444593][ T6067] __ia32_compat_sys_openat+0x12d/0x210 [ 45.444608][ T6067] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 45.444628][ T6067] __do_fast_syscall_32+0x14b/0x8c0 [ 45.444644][ T6067] do_fast_syscall_32+0x32/0x70 [ 45.444657][ T6067] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 45.444685][ T6067] RIP: 0023:0xf7fa5fbc [ 45.444694][ T6067] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 45.444704][ T6067] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 45.444715][ T6067] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000500 [ 45.444722][ T6067] RDX: 0000000000080200 RSI: 0000000000000000 RDI: 0000000000000000 [ 45.444728][ T6067] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 45.444735][ T6067] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 45.444741][ T6067] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 45.444755][ T6067] [ 45.475207][ T5887] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 45.629725][ T5887] usb 6-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 45.630970][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.631005][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.632971][ T5887] usb 6-1: config 0 descriptor?? [ 45.642158][ T6077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.48'. [ 45.659380][ T1173] IPVS: starting estimator thread 0... [ 45.660516][ T6077] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 45.717521][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.51'. [ 45.745389][ T6080] IPVS: using max 44 ests per chain, 105600 per kthread [ 45.767338][ T6082] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 45.767377][ T6082] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 45.779569][ T6082] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 45.802064][ T6082] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 45.802162][ T6082] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 45.806900][ T6082] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 45.812797][ T6082] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 45.812834][ T6082] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 45.820162][ T6082] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 45.827975][ T6082] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 45.828038][ T6082] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 45.832031][ T6082] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 45.848461][ T5887] usbhid 6-1:0.0: can't add hid device: -71 [ 45.848536][ T5887] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 45.853385][ T5887] usb 6-1: USB disconnect, device number 4 [ 45.948215][ T6104] Zero length message leads to an empty skb [ 46.245190][ T65] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 46.285255][ T5887] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 46.405204][ T65] usb 7-1: Using ep0 maxpacket: 8 [ 46.405758][ T65] usb 7-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 46.406633][ T65] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 46.406656][ T65] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 46.406675][ T65] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 46.406688][ T65] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 46.406699][ T65] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 46.406710][ T65] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 46.406721][ T65] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 46.406733][ T65] usb 7-1: config 168 interface 0 has no altsetting 0 [ 46.407457][ T65] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 46.407471][ T65] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 46.407487][ T65] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 46.407498][ T65] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 46.407509][ T65] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 46.407523][ T65] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 46.407540][ T65] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 46.407558][ T65] usb 7-1: config 168 interface 0 has no altsetting 0 [ 46.408298][ T65] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 46.408313][ T65] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 46.408329][ T65] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 46.408340][ T65] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 46.408351][ T65] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 46.408362][ T65] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 46.408373][ T65] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 46.408384][ T65] usb 7-1: config 168 interface 0 has no altsetting 0 [ 46.410641][ T65] usb 7-1: string descriptor 0 read error: -22 [ 46.410699][ T65] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.420996][ T65] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 46.436012][ T5887] usb 6-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00 [ 46.436926][ T5887] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 46.436956][ T5887] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 46.436972][ T5887] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 46.438663][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.438680][ T5887] usb 6-1: Product: syz [ 46.438686][ T5887] usb 6-1: Manufacturer: syz [ 46.438732][ T5887] usb 6-1: SerialNumber: syz [ 46.642301][ T41] usb 7-1: USB disconnect, device number 3 [ 46.763004][ T6112] infiniband syz0: set active [ 46.763130][ T6112] infiniband syz0: added bond0 [ 46.775467][ T6112] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 46.775499][ T6112] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 46.775653][ T6112] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 46.791759][ T6112] RDS/IB: syz0: added [ 46.791802][ T6112] smc: adding ib device syz0 with port count 1 [ 46.791818][ T6112] smc: ib device syz0 port 1 has no pnetid [ 46.854140][ T6106] adutux: No device or device unplugged -19 [ 46.862491][ T860] usb 6-1: USB disconnect, device number 5 [ 47.367764][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.61'. [ 47.613001][ T6128] device-mapper: thin: Creation of new thinly-provisioned device with id 00000000000000000002 failed. [ 47.865250][ T5789] Bluetooth: hci2: command 0x0c1a tx timeout [ 47.865310][ T5789] Bluetooth: hci1: command 0x0c1a tx timeout [ 47.865332][ T5789] Bluetooth: hci0: command 0x0c1a tx timeout [ 47.870000][ T68] Bluetooth: hci3: command 0x0c1a tx timeout [ 48.272782][ T34] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.449856][ T6161] ======================================================= [ 48.449856][ T6161] WARNING: The mand mount option has been deprecated and [ 48.449856][ T6161] and is ignored by this kernel. Remove the mand [ 48.449856][ T6161] option from the mount to silence this warning. [ 48.449856][ T6161] ======================================================= [ 48.451436][ T6161] FAULT_INJECTION: forcing a failure. [ 48.451436][ T6161] name failslab, interval 1, probability 0, space 0, times 0 [ 48.451460][ T6161] CPU: 2 UID: 0 PID: 6161 Comm: syz.1.77 Not tainted syzkaller #0 PREEMPT(full) [ 48.451478][ T6161] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 48.451489][ T6161] Call Trace: [ 48.451494][ T6161] [ 48.451499][ T6161] dump_stack_lvl+0x100/0x190 [ 48.451528][ T6161] should_fail_ex.cold+0x5/0xa [ 48.451553][ T6161] should_failslab+0xc2/0x120 [ 48.451573][ T6161] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 48.451598][ T6161] ? _raw_spin_unlock+0x28/0x50 [ 48.451613][ T6161] ? alloc_inode+0x183/0x250 [ 48.451640][ T6161] alloc_inode+0x183/0x250 [ 48.451665][ T6161] new_inode+0x22/0x1c0 [ 48.451687][ T6161] ? dput.part.0+0x4a/0x240 [ 48.451706][ T6161] simple_fill_super+0x2e6/0x6a0 [ 48.451729][ T6161] ? __pfx_nfsd_fill_super+0x10/0x10 [ 48.451751][ T6161] nfsd_fill_super+0x98/0x560 [ 48.451774][ T6161] ? __pfx_nfsd_fill_super+0x10/0x10 [ 48.451792][ T6161] get_tree_keyed+0x114/0x1d0 [ 48.451805][ T6161] vfs_get_tree+0x92/0x320 [ 48.451828][ T6161] path_mount+0x7d0/0x2850 [ 48.451860][ T6161] ? __pfx_path_mount+0x10/0x10 [ 48.451879][ T6161] ? lockdep_hardirqs_on+0x7d/0x110 [ 48.451898][ T6161] ? putname+0xb1/0x110 [ 48.451918][ T6161] ? kmem_cache_free+0x127/0x6c0 [ 48.451949][ T6161] ? __ia32_sys_mount+0x292/0x310 [ 48.451970][ T6161] __ia32_sys_mount+0x292/0x310 [ 48.452014][ T6161] ? __pfx___ia32_sys_mount+0x10/0x10 [ 48.452045][ T6161] __do_fast_syscall_32+0x14b/0x8c0 [ 48.452073][ T6161] do_fast_syscall_32+0x32/0x70 [ 48.452089][ T6161] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 48.452110][ T6161] RIP: 0023:0xf73eefbc [ 48.452123][ T6161] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 48.452138][ T6161] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 48.452155][ T6161] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080002680 [ 48.452164][ T6161] RDX: 00000000800026c0 RSI: 0000000001214040 RDI: 0000000000000000 [ 48.452170][ T6161] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 48.452177][ T6161] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 48.452187][ T6161] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 48.452210][ T6161] [ 48.455009][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.78'. [ 48.685289][ T34] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 48.835187][ T34] usb 5-1: Using ep0 maxpacket: 16 [ 48.835912][ T34] usb 5-1: New USB device found: idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 48.837047][ T34] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 48.839916][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.839935][ T34] usb 5-1: Product: syz [ 48.839947][ T34] usb 5-1: Manufacturer: syz [ 48.839959][ T34] usb 5-1: SerialNumber: syz [ 48.868436][ T34] r8152-cfgselector 5-1: Unknown version 0x0000 [ 48.868459][ T34] r8152-cfgselector 5-1: config 0 descriptor?? [ 49.110323][ T34] r8152-cfgselector 5-1: Unknown version 0x0000 [ 49.111423][ T34] r8152-cfgselector 5-1: No union descriptors [ 49.129614][ T34] r8152-cfgselector 5-1: USB disconnect, device number 3 [ 49.304961][ T6117] syz.3.59 (6117) used greatest stack depth: 19464 bytes left [ 49.948022][ T68] Bluetooth: hci3: command 0x0c1a tx timeout [ 49.948060][ T68] Bluetooth: hci0: command 0x0c1a tx timeout [ 49.948083][ T68] Bluetooth: hci1: command 0x0c1a tx timeout [ 49.948107][ T68] Bluetooth: hci2: command 0x0c1a tx timeout [ 50.551057][ T5866] nci: nci_ntf_packet: unknown ntf opcode 0x2d [ 51.111600][ T6206] orangefs_mount: mount request failed with -4 [ 51.190468][ T6223] device-mapper: ioctl: can't replace immutable target type thin-pool [ 51.845232][ T1045] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 52.006132][ T1045] usb 5-1: New USB device found: idVendor=0a12, idProduct=0001, bcdDevice=fd.fb [ 52.007229][ T1045] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.007247][ T1045] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 52.007305][ T1045] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 52.007322][ T1045] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 52.012502][ T1045] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.012519][ T1045] usb 5-1: Product: syz [ 52.012640][ T1045] usb 5-1: Manufacturer: syz [ 52.012652][ T1045] usb 5-1: SerialNumber: syz [ 52.035612][ T5789] Bluetooth: hci2: command 0x0c1a tx timeout [ 52.035644][ T5789] Bluetooth: hci1: command 0x0c1a tx timeout [ 52.035665][ T5789] Bluetooth: hci0: command 0x0c1a tx timeout [ 52.035685][ T5789] Bluetooth: hci3: command 0x0c1a tx timeout [ 52.040334][ T68] Bluetooth: hci4: urb ffff88806e77f600 submission failed (90) [ 52.155747][ T6245] input: syz1 as /devices/virtual/input/input8 [ 52.187123][ T68] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 53.270113][ T6259] FAULT_INJECTION: forcing a failure. [ 53.270113][ T6259] name failslab, interval 1, probability 0, space 0, times 0 [ 53.270132][ T6259] CPU: 1 UID: 0 PID: 6259 Comm: syz.3.106 Not tainted syzkaller #0 PREEMPT(full) [ 53.270144][ T6259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.270151][ T6259] Call Trace: [ 53.270155][ T6259] [ 53.270160][ T6259] dump_stack_lvl+0x100/0x190 [ 53.270181][ T6259] should_fail_ex.cold+0x5/0xa [ 53.270197][ T6259] should_failslab+0xc2/0x120 [ 53.270210][ T6259] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 53.270227][ T6259] ? _raw_spin_unlock+0x28/0x50 [ 53.270238][ T6259] ? alloc_inode+0x183/0x250 [ 53.270254][ T6259] ? __pfx_nfsd_fill_super+0x10/0x10 [ 53.270267][ T6259] alloc_inode+0x183/0x250 [ 53.270283][ T6259] new_inode+0x22/0x1c0 [ 53.270298][ T6259] ? __pfx_nfsd_fill_super+0x10/0x10 [ 53.270312][ T6259] nfsd_fill_super+0x14b/0x560 [ 53.270325][ T6259] ? __pfx_nfsd_fill_super+0x10/0x10 [ 53.270342][ T6259] get_tree_keyed+0x114/0x1d0 [ 53.270353][ T6259] vfs_get_tree+0x92/0x320 [ 53.270367][ T6259] path_mount+0x7d0/0x2850 [ 53.270382][ T6259] ? __pfx_path_mount+0x10/0x10 [ 53.270395][ T6259] ? lockdep_hardirqs_on+0x7d/0x110 [ 53.270410][ T6259] ? putname+0xb1/0x110 [ 53.270423][ T6259] ? kmem_cache_free+0x127/0x6c0 [ 53.270443][ T6259] ? __ia32_sys_mount+0x292/0x310 [ 53.270457][ T6259] __ia32_sys_mount+0x292/0x310 [ 53.270472][ T6259] ? __pfx___ia32_sys_mount+0x10/0x10 [ 53.270491][ T6259] __do_fast_syscall_32+0x14b/0x8c0 [ 53.270508][ T6259] do_fast_syscall_32+0x32/0x70 [ 53.270521][ T6259] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.270536][ T6259] RIP: 0023:0xf7f25fbc [ 53.270548][ T6259] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 53.270562][ T6259] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 53.270578][ T6259] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080002680 [ 53.270589][ T6259] RDX: 00000000800026c0 RSI: 0000000001214040 RDI: 0000000000000000 [ 53.270598][ T6259] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 53.270606][ T6259] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 53.270616][ T6259] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.270638][ T6259] [ 53.452295][ T6215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 54.445494][ T5882] usb 5-1: USB disconnect, device number 4 [ 54.471642][ T6272] orangefs_mount: mount request failed with -4 [ 54.774455][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.129'. [ 54.800725][ T6278] input: syz1 as /devices/virtual/input/input9 [ 54.829549][ T68] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 54.871731][ T6311] device-mapper: thin metadata: sb_check failed: magic 0: wanted 27022010 [ 54.871840][ T6311] device-mapper: block manager: superblock validator check failed for block 0 [ 54.871849][ T6311] device-mapper: thin metadata: couldn't read superblock [ 55.031587][ T6311] device-mapper: table: 248:3: thin-pool: Error creating metadata object (-EILSEQ) [ 55.031602][ T6311] device-mapper: ioctl: error adding target to table [ 55.040769][ T6311] device-mapper: ioctl: The device has no table. [ 55.365245][ T5888] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 55.515918][ T5888] usb 5-1: New USB device found: idVendor=0a12, idProduct=0001, bcdDevice=fd.fb [ 55.516931][ T5888] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.516943][ T5888] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 55.516964][ T5888] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 55.516974][ T5888] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 55.519656][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.519668][ T5888] usb 5-1: Product: syz [ 55.519674][ T5888] usb 5-1: Manufacturer: syz [ 55.519681][ T5888] usb 5-1: SerialNumber: syz [ 55.537581][ T68] Bluetooth: hci4: urb ffff8880157c1400 submission failed (90) [ 55.762002][ T6358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.152'. [ 55.784426][ T64] IPVS: starting estimator thread 0... [ 55.784785][ T6358] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 55.886453][ T6359] IPVS: using max 28 ests per chain, 67200 per kthread [ 56.658035][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.162'. [ 56.719519][ T6387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.165'. [ 56.815178][ T5887] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 56.985329][ T5887] usb 7-1: Using ep0 maxpacket: 8 [ 56.985909][ T5887] usb 7-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 56.986817][ T5887] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 56.986842][ T5887] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 56.986866][ T5887] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 56.986884][ T5887] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 56.986900][ T5887] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 56.986916][ T5887] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 56.986933][ T5887] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 56.986951][ T5887] usb 7-1: config 168 interface 0 has no altsetting 0 [ 56.987888][ T5887] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 56.987922][ T5887] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 56.987952][ T5887] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 56.987972][ T5887] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 56.987990][ T5887] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 56.988009][ T5887] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 56.988026][ T5887] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 56.988041][ T5887] usb 7-1: config 168 interface 0 has no altsetting 0 [ 56.989048][ T5887] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 56.989064][ T5887] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 56.989079][ T5887] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 56.989110][ T5887] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 56.989121][ T5887] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 56.989133][ T5887] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 56.989145][ T5887] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 56.989163][ T5887] usb 7-1: config 168 interface 0 has no altsetting 0 [ 56.991592][ T5887] usb 7-1: string descriptor 0 read error: -22 [ 56.991644][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.999820][ T5887] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 57.060080][ T41] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 57.073954][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'. [ 57.201305][ T34] usb 7-1: USB disconnect, device number 4 [ 57.245982][ T41] usb 8-1: New USB device found: idVendor=0582, idProduct=007d, bcdDevice=0.00 [ 57.247060][ T41] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 57.247075][ T41] usb 8-1: can't read configurations, error -61 [ 57.385356][ T41] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 57.402632][ T6375] adutux: No device or device unplugged -19 [ 57.407462][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.185'. [ 57.535975][ T41] usb 8-1: New USB device found: idVendor=0582, idProduct=007d, bcdDevice=0.00 [ 57.537444][ T41] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 57.537470][ T41] usb 8-1: can't read configurations, error -61 [ 57.537853][ T41] usb usb8-port1: attempt power cycle [ 57.833792][ T34] usb 5-1: USB disconnect, device number 5 [ 57.896004][ T41] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 57.916431][ T41] usb 8-1: New USB device found: idVendor=0582, idProduct=007d, bcdDevice=0.00 [ 57.917732][ T41] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 57.917756][ T41] usb 8-1: can't read configurations, error -61 [ 58.055221][ T41] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 58.088821][ T41] usb 8-1: New USB device found: idVendor=0582, idProduct=007d, bcdDevice=0.00 [ 58.090265][ T41] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 58.090290][ T41] usb 8-1: can't read configurations, error -61 [ 58.091802][ T41] usb usb8-port1: unable to enumerate USB device [ 58.375183][ T5882] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 58.525276][ T5882] usb 7-1: Using ep0 maxpacket: 8 [ 58.526069][ T5882] usb 7-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 58.526981][ T5882] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 58.526997][ T5882] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 58.527014][ T5882] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 58.527026][ T5882] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 58.527037][ T5882] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 58.527048][ T5882] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 58.527059][ T5882] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 58.527071][ T5882] usb 7-1: config 168 interface 0 has no altsetting 0 [ 58.528001][ T5882] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 58.528025][ T5882] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 58.528052][ T5882] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 58.528071][ T5882] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 58.528088][ T5882] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 58.528105][ T5882] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 58.528123][ T5882] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 58.528140][ T5882] usb 7-1: config 168 interface 0 has no altsetting 0 [ 58.529316][ T5882] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 58.529339][ T5882] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 58.529364][ T5882] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 58.529381][ T5882] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 58.529398][ T5882] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 58.529416][ T5882] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 58.529433][ T5882] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 58.529451][ T5882] usb 7-1: config 168 interface 0 has no altsetting 0 [ 58.532769][ T5882] usb 7-1: string descriptor 0 read error: -22 [ 58.532859][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.539445][ T5882] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 58.565315][ T41] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 58.715934][ T41] usb 5-1: New USB device found: idVendor=0a12, idProduct=0001, bcdDevice=fd.fb [ 58.717064][ T41] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.717105][ T41] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 58.717143][ T41] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 58.717352][ T41] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 58.719397][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.719415][ T41] usb 5-1: Product: syz [ 58.719427][ T41] usb 5-1: Manufacturer: syz [ 58.720084][ T41] usb 5-1: SerialNumber: syz [ 58.738260][ T68] Bluetooth: hci4: urb ffff8880148fdb00 submission failed (90) [ 58.741606][ T5882] usb 7-1: USB disconnect, device number 5 [ 59.058059][ T6497] FAULT_INJECTION: forcing a failure. [ 59.058059][ T6497] name failslab, interval 1, probability 0, space 0, times 0 [ 59.058078][ T6497] CPU: 2 UID: 0 PID: 6497 Comm: syz.1.219 Not tainted syzkaller #0 PREEMPT(full) [ 59.058091][ T6497] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.058098][ T6497] Call Trace: [ 59.058102][ T6497] [ 59.058107][ T6497] dump_stack_lvl+0x100/0x190 [ 59.058127][ T6497] should_fail_ex.cold+0x5/0xa [ 59.058143][ T6497] should_failslab+0xc2/0x120 [ 59.058157][ T6497] __kmalloc_cache_noprof+0x91/0x6d0 [ 59.058172][ T6497] ? get_mountpoint+0x174/0x520 [ 59.058191][ T6497] get_mountpoint+0x174/0x520 [ 59.058207][ T6497] attach_recursive_mnt.isra.0+0x28c/0x1e20 [ 59.058228][ T6497] ? __pfx_attach_recursive_mnt.isra.0+0x10/0x10 [ 59.058242][ T6497] ? find_held_lock+0x2b/0x80 [ 59.058260][ T6497] ? do_raw_spin_unlock+0x145/0x1e0 [ 59.058274][ T6497] ? graft_tree+0x19f/0x250 [ 59.058286][ T6497] ? do_lock_mount.part.0+0x447/0xab0 [ 59.058297][ T6497] graft_tree+0x19f/0x250 [ 59.058311][ T6497] do_add_mount+0x1e2/0x380 [ 59.058325][ T6497] path_mount+0x907/0x2850 [ 59.058341][ T6497] ? __pfx_path_mount+0x10/0x10 [ 59.058353][ T6497] ? lockdep_hardirqs_on+0x7d/0x110 [ 59.058376][ T6497] ? __ia32_sys_mount+0x292/0x310 [ 59.058389][ T6497] __ia32_sys_mount+0x292/0x310 [ 59.058403][ T6497] ? __pfx___ia32_sys_mount+0x10/0x10 [ 59.058420][ T6497] __do_fast_syscall_32+0x14b/0x8c0 [ 59.058436][ T6497] do_fast_syscall_32+0x32/0x70 [ 59.058449][ T6497] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 59.058462][ T6497] RIP: 0023:0xf73eefbc [ 59.058471][ T6497] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 59.058481][ T6497] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 59.058492][ T6497] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080002680 [ 59.058498][ T6497] RDX: 00000000800026c0 RSI: 0000000001214040 RDI: 0000000000000000 [ 59.058504][ T6497] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 59.058510][ T6497] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 59.058516][ T6497] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 59.058529][ T6497] [ 59.138091][ T6501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.221'. [ 59.583681][ T6537] FAULT_INJECTION: forcing a failure. [ 59.583681][ T6537] name failslab, interval 1, probability 0, space 0, times 0 [ 59.583710][ T6537] CPU: 1 UID: 0 PID: 6537 Comm: syz.1.239 Not tainted syzkaller #0 PREEMPT(full) [ 59.583732][ T6537] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.583744][ T6537] Call Trace: [ 59.583750][ T6537] [ 59.583758][ T6537] dump_stack_lvl+0x100/0x190 [ 59.583790][ T6537] should_fail_ex.cold+0x5/0xa [ 59.583819][ T6537] should_failslab+0xc2/0x120 [ 59.583842][ T6537] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 59.583874][ T6537] ? __d_alloc+0x34/0xad0 [ 59.583904][ T6537] __d_alloc+0x34/0xad0 [ 59.583931][ T6537] d_alloc+0x4a/0x1e0 [ 59.583955][ T6537] lookup_one_qstr_excl+0x171/0x250 [ 59.583984][ T6537] start_dirop+0x59/0xb0 [ 59.584004][ T6537] simple_start_creating+0xf9/0x110 [ 59.584025][ T6537] ? __pfx_simple_start_creating+0x10/0x10 [ 59.584053][ T6537] nfsd_mkdir+0xf6/0x460 [ 59.584079][ T6537] nfsd_fill_super+0x402/0x560 [ 59.584103][ T6537] ? __pfx_nfsd_fill_super+0x10/0x10 [ 59.584125][ T6537] get_tree_keyed+0x114/0x1d0 [ 59.584144][ T6537] vfs_get_tree+0x92/0x320 [ 59.584169][ T6537] path_mount+0x7d0/0x2850 [ 59.584197][ T6537] ? __pfx_path_mount+0x10/0x10 [ 59.584221][ T6537] ? lockdep_hardirqs_on+0x7d/0x110 [ 59.584248][ T6537] ? putname+0xb1/0x110 [ 59.584269][ T6537] ? kmem_cache_free+0x127/0x6c0 [ 59.584302][ T6537] ? __ia32_sys_mount+0x292/0x310 [ 59.584325][ T6537] __ia32_sys_mount+0x292/0x310 [ 59.584351][ T6537] ? __pfx___ia32_sys_mount+0x10/0x10 [ 59.584384][ T6537] __do_fast_syscall_32+0x14b/0x8c0 [ 59.584413][ T6537] do_fast_syscall_32+0x32/0x70 [ 59.584437][ T6537] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 59.584460][ T6537] RIP: 0023:0xf73eefbc [ 59.584475][ T6537] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 59.584491][ T6537] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 59.584509][ T6537] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080002680 [ 59.584520][ T6537] RDX: 00000000800026c0 RSI: 0000000001214040 RDI: 0000000000000000 [ 59.584531][ T6537] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 59.584541][ T6537] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 59.584551][ T6537] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 59.584575][ T6537] [ 59.695232][ T34] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 59.875182][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 59.875651][ T34] usb 7-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 59.876627][ T34] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 59.876643][ T34] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 59.876660][ T34] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 59.876672][ T34] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 59.876683][ T34] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 59.876694][ T34] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 59.876706][ T34] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 59.876717][ T34] usb 7-1: config 168 interface 0 has no altsetting 0 [ 59.879674][ T34] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 59.879696][ T34] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 59.879724][ T34] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 59.879742][ T34] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 59.879755][ T34] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 59.879772][ T34] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 59.879790][ T34] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 59.879808][ T34] usb 7-1: config 168 interface 0 has no altsetting 0 [ 59.880858][ T34] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 59.880882][ T34] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 59.880909][ T34] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 59.880926][ T34] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 59.880939][ T34] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 59.880956][ T34] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 59.880975][ T34] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 59.880993][ T34] usb 7-1: config 168 interface 0 has no altsetting 0 [ 59.883863][ T34] usb 7-1: string descriptor 0 read error: -22 [ 59.883955][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.898928][ T34] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 60.099402][ T5882] usb 7-1: USB disconnect, device number 6 [ 60.285184][ T5887] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 60.438067][ T5887] usb 6-1: New USB device found: idVendor=0582, idProduct=007d, bcdDevice=0.00 [ 60.439856][ T5887] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.439875][ T5887] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 60.439903][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.662239][ T5887] usb 6-1: USB disconnect, device number 6 [ 61.035213][ T2415] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 61.085844][ T5882] usb 5-1: USB disconnect, device number 6 [ 61.186267][ T2415] usb 8-1: Using ep0 maxpacket: 8 [ 61.186860][ T2415] usb 8-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 61.187927][ T2415] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 61.187951][ T2415] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 61.187996][ T2415] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 61.188015][ T2415] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 61.188032][ T2415] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 61.188049][ T2415] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 61.188067][ T2415] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 61.188085][ T2415] usb 8-1: config 168 interface 0 has no altsetting 0 [ 61.190720][ T2415] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 61.190744][ T2415] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 61.191894][ T2415] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 61.192157][ T2415] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 61.192176][ T2415] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 61.192193][ T2415] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 61.192211][ T2415] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 61.192228][ T2415] usb 8-1: config 168 interface 0 has no altsetting 0 [ 61.193688][ T2415] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 61.193711][ T2415] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 61.193752][ T2415] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 61.193770][ T2415] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 61.193786][ T2415] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 61.193810][ T2415] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 61.193827][ T2415] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 61.193844][ T2415] usb 8-1: config 168 interface 0 has no altsetting 0 [ 61.200781][ T2415] usb 8-1: string descriptor 0 read error: -22 [ 61.200874][ T2415] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.214494][ T2415] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 61.233016][ T6641] overlayfs: failed to resolve './file0': -2 [ 61.410946][ T5882] usb 8-1: USB disconnect, device number 7 [ 61.535206][ T2415] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 61.695908][ T2415] usb 5-1: Using ep0 maxpacket: 8 [ 61.696622][ T2415] usb 5-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 61.697608][ T2415] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 61.697626][ T2415] usb 5-1: config 179 has no interface number 0 [ 61.697661][ T2415] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 61.697679][ T2415] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 61.697699][ T2415] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 61.697715][ T2415] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 61.697733][ T2415] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 61.697762][ T2415] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.700352][ T6646] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 61.740996][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 61.885833][ T9] usb 6-1: New USB device found: idVendor=0a12, idProduct=0001, bcdDevice=fd.fb [ 61.886776][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.886793][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 61.886826][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 61.886844][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 61.888684][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.888701][ T9] usb 6-1: Product: syz [ 61.888714][ T9] usb 6-1: Manufacturer: syz [ 61.888725][ T9] usb 6-1: SerialNumber: syz [ 61.908361][ T2415] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input10 [ 61.909208][ T68] Bluetooth: hci4: urb ffff88806de1ff00 submission failed (90) [ 62.109167][ T2415] usb 5-1: USB disconnect, device number 7 [ 62.109272][ C3] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 62.109293][ C3] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 62.295232][ T5887] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 62.425270][ T34] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 62.475997][ T5887] usb 7-1: New USB device found: idVendor=0582, idProduct=007d, bcdDevice=0.00 [ 62.476904][ T5887] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.476920][ T5887] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 62.476942][ T5887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.595235][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 62.595957][ T34] usb 8-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 62.596847][ T34] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 62.596872][ T34] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 62.596901][ T34] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 62.596920][ T34] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 62.596937][ T34] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 62.596955][ T34] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 62.596973][ T34] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 62.596992][ T34] usb 8-1: config 168 interface 0 has no altsetting 0 [ 62.597873][ T34] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 62.597896][ T34] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 62.597923][ T34] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 62.597942][ T34] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 62.597959][ T34] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 62.597977][ T34] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 62.597996][ T34] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 62.598015][ T34] usb 8-1: config 168 interface 0 has no altsetting 0 [ 62.598847][ T34] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 62.598870][ T34] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 62.598894][ T34] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 62.598913][ T34] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 62.598930][ T34] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 62.598947][ T34] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 62.598965][ T34] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 62.598983][ T34] usb 8-1: config 168 interface 0 has no altsetting 0 [ 62.601643][ T34] usb 8-1: string descriptor 0 read error: -22 [ 62.601737][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.613178][ T34] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 62.709899][ T34] usb 7-1: USB disconnect, device number 7 [ 62.813371][ T9] usb 8-1: USB disconnect, device number 8 [ 63.341898][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.309'. [ 63.559262][ T6700] overlayfs: failed to resolve './file1': -2 [ 64.000031][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.323'. [ 64.007084][ T6725] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 64.125278][ T41] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 64.217377][ T6729] overlayfs: failed to resolve './file1': -2 [ 64.285170][ T41] usb 8-1: Using ep0 maxpacket: 8 [ 64.285678][ T41] usb 8-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 64.286735][ T41] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 64.286753][ T41] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 64.286771][ T41] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 64.286783][ T41] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.286794][ T41] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 64.286805][ T41] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 64.286817][ T41] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 64.286828][ T41] usb 8-1: config 168 interface 0 has no altsetting 0 [ 64.287629][ T41] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 64.287645][ T41] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 64.287661][ T41] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 64.287673][ T41] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.287683][ T41] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 64.287694][ T41] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 64.287705][ T41] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 64.287717][ T41] usb 8-1: config 168 interface 0 has no altsetting 0 [ 64.288568][ T41] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 64.288591][ T41] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 64.288616][ T41] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 64.288634][ T41] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.288651][ T41] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 64.288669][ T41] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 64.288687][ T41] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 64.288707][ T41] usb 8-1: config 168 interface 0 has no altsetting 0 [ 64.291097][ T41] usb 8-1: string descriptor 0 read error: -22 [ 64.291285][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.300745][ T41] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 64.334644][ T2415] usb 6-1: USB disconnect, device number 7 [ 64.471196][ T6742] FAULT_INJECTION: forcing a failure. [ 64.471196][ T6742] name failslab, interval 1, probability 0, space 0, times 0 [ 64.471226][ T6742] CPU: 0 UID: 0 PID: 6742 Comm: syz.2.330 Not tainted syzkaller #0 PREEMPT(full) [ 64.471254][ T6742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.471265][ T6742] Call Trace: [ 64.471272][ T6742] [ 64.471280][ T6742] dump_stack_lvl+0x100/0x190 [ 64.471314][ T6742] should_fail_ex.cold+0x5/0xa [ 64.471341][ T6742] should_failslab+0xc2/0x120 [ 64.471364][ T6742] __kmalloc_cache_noprof+0x91/0x6d0 [ 64.471389][ T6742] ? init_srcu_struct_fields+0xb16/0x1060 [ 64.471418][ T6742] init_srcu_struct_fields+0xb16/0x1060 [ 64.471439][ T6742] ? lockdep_init_map_type+0x5c/0x250 [ 64.471463][ T6742] nvme_init_ctrl+0xfa/0xe20 [ 64.471491][ T6742] nvme_tcp_create_ctrl+0xc6f/0x13d0 [ 64.471521][ T6742] nvmf_dev_write+0x4ee/0xb60 [ 64.471547][ T6742] vfs_write+0x2aa/0x1050 [ 64.471565][ T6742] ? __pfx_nvmf_dev_write+0x10/0x10 [ 64.471585][ T6742] ? lock_acquire+0x1d1/0x380 [ 64.471602][ T6742] ? __fget_files+0x34/0x3d0 [ 64.471621][ T6742] ? __pfx_vfs_write+0x10/0x10 [ 64.471638][ T6742] ? find_held_lock+0x2b/0x80 [ 64.471663][ T6742] ? __fget_files+0x215/0x3d0 [ 64.471682][ T6742] ? __fget_files+0x215/0x3d0 [ 64.471707][ T6742] ? __fget_files+0x21f/0x3d0 [ 64.471734][ T6742] ksys_write+0x12a/0x250 [ 64.471752][ T6742] ? __pfx_ksys_write+0x10/0x10 [ 64.471777][ T6742] __do_fast_syscall_32+0x14b/0x8c0 [ 64.471807][ T6742] do_fast_syscall_32+0x32/0x70 [ 64.471831][ T6742] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.471853][ T6742] RIP: 0023:0xf7fa5fbc [ 64.471867][ T6742] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 64.471883][ T6742] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 64.471901][ T6742] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 64.471912][ T6742] RDX: 0000000000000031 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.471923][ T6742] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.471934][ T6742] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 64.471944][ T6742] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.471968][ T6742] [ 64.526479][ T9] usb 8-1: USB disconnect, device number 9 [ 64.919747][ T6758] overlayfs: failed to resolve './file1': -2 [ 65.369130][ T6777] syzkaller0: entered promiscuous mode [ 65.369149][ T6777] syzkaller0: entered allmulticast mode [ 66.335246][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 66.465350][ T41] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 66.485965][ T9] usb 5-1: New USB device found: idVendor=0582, idProduct=007d, bcdDevice=0.00 [ 66.486770][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.486786][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.486819][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.497033][ T9] usb 5-1: interface 1 not found [ 66.615232][ T41] usb 8-1: Using ep0 maxpacket: 8 [ 66.616052][ T41] usb 8-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 66.617097][ T41] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 66.617124][ T41] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 66.617153][ T41] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 66.617180][ T41] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 66.617199][ T41] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 66.617219][ T41] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 66.617239][ T41] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 66.617259][ T41] usb 8-1: config 168 interface 0 has no altsetting 0 [ 66.618325][ T41] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 66.618351][ T41] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 66.618378][ T41] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 66.618398][ T41] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 66.618416][ T41] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 66.618434][ T41] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 66.618453][ T41] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 66.618472][ T41] usb 8-1: config 168 interface 0 has no altsetting 0 [ 66.619541][ T41] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 66.619565][ T41] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 66.619613][ T41] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 66.619633][ T41] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 66.619651][ T41] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 66.619669][ T41] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 66.619687][ T41] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 66.619706][ T41] usb 8-1: config 168 interface 0 has no altsetting 0 [ 66.622842][ T41] usb 8-1: string descriptor 0 read error: -22 [ 66.622937][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.628895][ T41] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 66.831407][ T41] usb 8-1: USB disconnect, device number 10 [ 67.517806][ T6745] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 67.533916][ T2415] usb 5-1: USB disconnect, device number 8 [ 67.558260][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.352'. [ 67.600518][ T6801] overlayfs: failed to resolve './file0': -2 [ 67.653123][ T6812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.361'. [ 67.662410][ T6812] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 68.074987][ T6822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.364'. [ 68.279310][ T6827] syzkaller0: entered promiscuous mode [ 68.279328][ T6827] syzkaller0: entered allmulticast mode [ 68.655428][ T6848] syzkaller0: entered promiscuous mode [ 68.655440][ T6848] syzkaller0: entered allmulticast mode [ 68.755265][ T5888] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 68.916288][ T5888] usb 5-1: New USB device found: idVendor=0582, idProduct=007d, bcdDevice=0.00 [ 68.918012][ T5888] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.918030][ T5888] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.918065][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.926490][ T5888] usb 5-1: interface 1 not found [ 69.215139][ T5888] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 69.385955][ T5888] usb 8-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 69.386788][ T5888] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.386820][ T5888] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.388446][ T5888] usb 8-1: config 0 descriptor?? [ 69.598704][ T5888] usbhid 8-1:0.0: can't add hid device: -71 [ 69.598786][ T5888] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 69.600480][ T5888] usb 8-1: USB disconnect, device number 11 [ 70.035411][ T5888] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 70.195920][ T5888] usb 8-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00 [ 70.196802][ T5888] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 70.196823][ T5888] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 70.196834][ T5888] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 70.198464][ T5888] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.198480][ T5888] usb 8-1: Product: syz [ 70.198491][ T5888] usb 8-1: Manufacturer: syz [ 70.198503][ T5888] usb 8-1: SerialNumber: syz [ 70.692941][ T6816] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 70.696941][ T1045] usb 5-1: USB disconnect, device number 9 [ 70.818050][ T6867] syzkaller0: entered promiscuous mode [ 70.818069][ T6867] syzkaller0: entered allmulticast mode [ 70.918855][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.918976][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.921751][ T1470] cfg80211: failed to load regulatory.db [ 71.235849][ T6891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.396'. [ 71.705174][ T1470] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 71.855682][ T1470] usb 7-1: New USB device found: idVendor=0a12, idProduct=0001, bcdDevice=fd.fb [ 71.856641][ T1470] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.856658][ T1470] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 71.856692][ T1470] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 71.856708][ T1470] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 71.858576][ T1470] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.858592][ T1470] usb 7-1: Product: syz [ 71.858603][ T1470] usb 7-1: Manufacturer: syz [ 71.858613][ T1470] usb 7-1: SerialNumber: syz [ 71.869082][ T68] Bluetooth: hci4: urb ffff888015089000 submission failed (90) [ 71.961666][ T5888] usb 8-1: USB disconnect, device number 12 [ 71.996839][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.401'. [ 72.118061][ T6914] 9p: Bad value for 'version' [ 72.181519][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.407'. [ 72.287148][ T6922] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 72.942813][ T6917] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 72.943007][ T6917] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 72.943077][ T6917] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 72.948595][ T6917] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 73.030091][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.411'. [ 73.073584][ T6937] 9p: Bad value for 'version' [ 73.195340][ T5862] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 73.231369][ T6946] nvme nvme0: failed to connect socket: -111 [ 73.286847][ T6950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.420'. [ 73.289407][ T6950] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 73.356392][ T5862] usb 6-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 73.357478][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.357513][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.361916][ T5862] usb 6-1: config 0 descriptor?? [ 73.572253][ T5862] usbhid 6-1:0.0: can't add hid device: -71 [ 73.572309][ T5862] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 73.573420][ T5862] usb 6-1: USB disconnect, device number 8 [ 73.688319][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.422'. [ 73.754242][ T6958] 9p: Bad value for 'version' [ 73.936137][ T6966] nvme nvme0: failed to connect socket: -111 [ 74.025202][ T5862] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 74.196288][ T5862] usb 6-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00 [ 74.197134][ T5862] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 74.197155][ T5862] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 74.197166][ T5862] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.198632][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.198643][ T5862] usb 6-1: Product: syz [ 74.198649][ T5862] usb 6-1: Manufacturer: syz [ 74.198656][ T5862] usb 6-1: SerialNumber: syz [ 74.239679][ T860] usb 7-1: USB disconnect, device number 8 [ 74.275227][ T68] Bluetooth: hci0: command 0x0c1a tx timeout [ 74.309690][ T6980] 9p: Bad value for 'version' [ 74.362545][ T6984] nvme nvme0: failed to connect socket: -111 [ 74.389502][ T6988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.438'. [ 74.391722][ T6988] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 74.442540][ T6996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.442'. [ 74.975357][ T5895] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 74.985215][ T68] Bluetooth: hci2: command 0x0c1a tx timeout [ 74.987430][ T68] Bluetooth: hci1: command 0x0c1a tx timeout [ 75.125892][ T5895] usb 8-1: New USB device found: idVendor=0a12, idProduct=0001, bcdDevice=fd.fb [ 75.126806][ T5895] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.126823][ T5895] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 75.126856][ T5895] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 75.126872][ T5895] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 75.128745][ T5895] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.128763][ T5895] usb 8-1: Product: syz [ 75.128774][ T5895] usb 8-1: Manufacturer: syz [ 75.128786][ T5895] usb 8-1: SerialNumber: syz [ 75.146923][ T68] Bluetooth: hci4: urb ffff888015438e00 submission failed (90) [ 75.247567][ T7014] nvme nvme0: failed to connect socket: -111 [ 75.433838][ T7028] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 75.434058][ T7028] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 75.434198][ T7028] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 75.434318][ T7028] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 75.549329][ T9] usb 6-1: USB disconnect, device number 9 [ 75.635354][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.461'. [ 75.725465][ T1470] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 75.852448][ T7055] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 75.852568][ T7055] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 75.852653][ T7055] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 75.852737][ T7055] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 75.875211][ T1470] usb 5-1: Using ep0 maxpacket: 8 [ 75.875758][ T1470] usb 5-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 75.876916][ T1470] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 75.876943][ T1470] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 75.876971][ T1470] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 75.876992][ T1470] usb 5-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 75.877040][ T1470] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 75.877060][ T1470] usb 5-1: config 168 interface 0 has no altsetting 0 [ 75.878176][ T1470] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 75.878199][ T1470] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 75.878214][ T1470] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 75.878226][ T1470] usb 5-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 75.878235][ T1470] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 75.878247][ T1470] usb 5-1: config 168 interface 0 has no altsetting 0 [ 75.879105][ T1470] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 75.879126][ T1470] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 75.879154][ T1470] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 75.879174][ T1470] usb 5-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 75.879191][ T1470] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 75.879211][ T1470] usb 5-1: config 168 interface 0 has no altsetting 0 [ 75.882478][ T1470] usb 5-1: string descriptor 0 read error: -22 [ 75.882574][ T1470] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.889361][ T1470] adutux 5-1:168.0: interrupt endpoints not found [ 76.093891][ T860] usb 5-1: USB disconnect, device number 10 [ 76.316710][ T7073] overlayfs: missing 'lowerdir' [ 76.607645][ T7088] FAULT_INJECTION: forcing a failure. [ 76.607645][ T7088] name failslab, interval 1, probability 0, space 0, times 0 [ 76.607671][ T7088] CPU: 2 UID: 0 PID: 7088 Comm: syz.1.480 Not tainted syzkaller #0 PREEMPT(full) [ 76.607691][ T7088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.607701][ T7088] Call Trace: [ 76.607708][ T7088] [ 76.607715][ T7088] dump_stack_lvl+0x100/0x190 [ 76.607749][ T7088] should_fail_ex.cold+0x5/0xa [ 76.607776][ T7088] should_failslab+0xc2/0x120 [ 76.607798][ T7088] kmem_cache_alloc_noprof+0x92/0x6a0 [ 76.607826][ T7088] ? __pfx_map_id_range_down+0x10/0x10 [ 76.607845][ T7088] ? rcu_is_watching+0x13/0xc0 [ 76.607868][ T7088] ? security_inode_alloc+0x3b/0x2c0 [ 76.607894][ T7088] security_inode_alloc+0x3b/0x2c0 [ 76.607916][ T7088] inode_init_always_gfp+0xc75/0xfb0 [ 76.607941][ T7088] alloc_inode+0x8e/0x250 [ 76.607967][ T7088] sock_alloc+0x42/0x240 [ 76.607994][ T7088] __sock_create+0xc2/0x860 [ 76.608018][ T7088] __sys_socket+0x14d/0x260 [ 76.608039][ T7088] ? __pfx___sys_socket+0x10/0x10 [ 76.608068][ T7088] ? __might_fault+0xc5/0x140 [ 76.608096][ T7088] __ia32_sys_socket+0x72/0xb0 [ 76.608116][ T7088] __do_fast_syscall_32+0x14b/0x8c0 [ 76.608141][ T7088] do_fast_syscall_32+0x32/0x70 [ 76.608163][ T7088] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 76.608185][ T7088] RIP: 0023:0xf73eefbc [ 76.608199][ T7088] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 76.608215][ T7088] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 76.608232][ T7088] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 76.608244][ T7088] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 76.608255][ T7088] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 76.608265][ T7088] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 76.608275][ T7088] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.608297][ T7088] [ 76.608322][ T7088] socket: no more sockets [ 76.890063][ T7109] FAULT_INJECTION: forcing a failure. [ 76.890063][ T7109] name failslab, interval 1, probability 0, space 0, times 0 [ 76.890081][ T7109] CPU: 3 UID: 0 PID: 7109 Comm: syz.0.489 Not tainted syzkaller #0 PREEMPT(full) [ 76.890092][ T7109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.890098][ T7109] Call Trace: [ 76.890101][ T7109] [ 76.890105][ T7109] dump_stack_lvl+0x100/0x190 [ 76.890126][ T7109] should_fail_ex.cold+0x5/0xa [ 76.890143][ T7109] should_failslab+0xc2/0x120 [ 76.890156][ T7109] kmem_cache_alloc_noprof+0x92/0x6a0 [ 76.890173][ T7109] ? __pfx_map_id_range_down+0x10/0x10 [ 76.890185][ T7109] ? rcu_is_watching+0x13/0xc0 [ 76.890207][ T7109] ? security_inode_alloc+0x3b/0x2c0 [ 76.890223][ T7109] security_inode_alloc+0x3b/0x2c0 [ 76.890237][ T7109] inode_init_always_gfp+0xc75/0xfb0 [ 76.890253][ T7109] alloc_inode+0x8e/0x250 [ 76.890268][ T7109] sock_alloc+0x42/0x240 [ 76.890287][ T7109] __sock_create+0xc2/0x860 [ 76.890300][ T7109] __sys_socket+0x14d/0x260 [ 76.890312][ T7109] ? __pfx___sys_socket+0x10/0x10 [ 76.890323][ T7109] ? __might_fault+0xc5/0x140 [ 76.890338][ T7109] __ia32_sys_socket+0x72/0xb0 [ 76.890350][ T7109] __do_fast_syscall_32+0x14b/0x8c0 [ 76.890366][ T7109] do_fast_syscall_32+0x32/0x70 [ 76.890379][ T7109] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 76.890392][ T7109] RIP: 0023:0xf741efbc [ 76.890401][ T7109] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 76.890410][ T7109] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 76.890420][ T7109] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 76.890426][ T7109] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 76.890432][ T7109] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 76.890437][ T7109] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 76.890443][ T7109] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.890456][ T7109] [ 76.890469][ T7109] socket: no more sockets [ 76.975177][ T860] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 76.991326][ T7117] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 77.031367][ T7121] No source specified [ 77.135229][ T860] usb 7-1: Using ep0 maxpacket: 8 [ 77.135971][ T860] usb 7-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 77.136488][ T860] usb 7-1: config 0 has no interfaces? [ 77.138695][ T860] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.138713][ T860] usb 7-1: Product: syz [ 77.138723][ T860] usb 7-1: Manufacturer: syz [ 77.138734][ T860] usb 7-1: SerialNumber: syz [ 77.142647][ T860] usb 7-1: config 0 descriptor?? [ 77.336248][ T7131] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 77.336343][ T7131] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 77.336410][ T7131] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 77.336474][ T7131] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 77.345707][ T860] usb 7-1: USB disconnect, device number 9 [ 77.460052][ T7139] nvme nvme0: failed to connect socket: -111 [ 77.524010][ T1470] usb 8-1: USB disconnect, device number 13 [ 77.629407][ T7150] syzkaller0: entered promiscuous mode [ 77.629428][ T7150] syzkaller0: entered allmulticast mode [ 77.932382][ T7175] syzkaller0: entered promiscuous mode [ 77.932402][ T7175] syzkaller0: entered allmulticast mode [ 78.355144][ T1470] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 78.375145][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 78.507091][ T1470] usb 5-1: New USB device found: idVendor=0a12, idProduct=0001, bcdDevice=fd.fb [ 78.508862][ T1470] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.508875][ T1470] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 78.508895][ T1470] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 78.508905][ T1470] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 78.510487][ T1470] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.510499][ T1470] usb 5-1: Product: syz [ 78.510506][ T1470] usb 5-1: Manufacturer: syz [ 78.510513][ T1470] usb 5-1: SerialNumber: syz [ 78.524071][ T5147] Bluetooth: hci4: urb ffff88804cf51e00 submission failed (90) [ 78.525422][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 78.525934][ T10] usb 7-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 78.526434][ T10] usb 7-1: config 0 has no interfaces? [ 78.532360][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.532373][ T10] usb 7-1: Product: syz [ 78.532380][ T10] usb 7-1: Manufacturer: syz [ 78.532387][ T10] usb 7-1: SerialNumber: syz [ 78.533598][ T10] usb 7-1: config 0 descriptor?? [ 78.581662][ T7201] syzkaller0: entered promiscuous mode [ 78.581677][ T7201] syzkaller0: entered allmulticast mode [ 78.738936][ T65] usb 7-1: USB disconnect, device number 10 [ 78.878336][ T7219] netlink: 116 bytes leftover after parsing attributes in process `syz.1.539'. [ 79.247158][ T7231] syzkaller0: entered promiscuous mode [ 79.247179][ T7231] syzkaller0: entered allmulticast mode [ 79.395822][ T5147] Bluetooth: hci2: command 0x0c1a tx timeout [ 79.395849][ T5147] Bluetooth: hci3: command 0x0c1a tx timeout [ 79.395892][ T5147] Bluetooth: hci0: command 0x0c1a tx timeout [ 79.395895][ T5789] Bluetooth: hci1: command 0x0c1a tx timeout [ 79.415043][ T7241] syzkaller0: entered promiscuous mode [ 79.415055][ T7241] syzkaller0: entered allmulticast mode [ 79.698878][ T7260] syzkaller0: entered promiscuous mode [ 79.698893][ T7260] syzkaller0: entered allmulticast mode [ 79.835155][ T5895] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 79.973900][ T7272] overlayfs: missing 'workdir' [ 80.005277][ T5895] usb 6-1: Using ep0 maxpacket: 8 [ 80.005795][ T5895] usb 6-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 80.007372][ T5895] usb 6-1: config 0 has no interfaces? [ 80.008904][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.008916][ T5895] usb 6-1: Product: syz [ 80.008923][ T5895] usb 6-1: Manufacturer: syz [ 80.008930][ T5895] usb 6-1: SerialNumber: syz [ 80.010097][ T5895] usb 6-1: config 0 descriptor?? [ 80.135463][ T2415] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 80.216917][ T5895] usb 6-1: USB disconnect, device number 10 [ 80.307274][ T2415] usb 7-1: Using ep0 maxpacket: 8 [ 80.307882][ T2415] usb 7-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 80.308653][ T2415] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 80.308666][ T2415] usb 7-1: config 179 has no interface number 0 [ 80.308684][ T2415] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 80.308696][ T2415] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 80.308708][ T2415] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 80.308720][ T2415] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 80.308732][ T2415] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 80.308755][ T2415] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.310771][ T7270] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 80.523069][ T5895] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input11 [ 80.692891][ T7303] FAULT_INJECTION: forcing a failure. [ 80.692891][ T7303] name failslab, interval 1, probability 0, space 0, times 0 [ 80.692912][ T7303] CPU: 3 UID: 0 PID: 7303 Comm: syz.3.576 Not tainted syzkaller #0 PREEMPT(full) [ 80.692935][ T7303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.692943][ T7303] Call Trace: [ 80.692947][ T7303] [ 80.692952][ T7303] dump_stack_lvl+0x100/0x190 [ 80.692989][ T7303] should_fail_ex.cold+0x5/0xa [ 80.693007][ T7303] should_failslab+0xc2/0x120 [ 80.693022][ T7303] __kmalloc_cache_noprof+0x91/0x6d0 [ 80.693038][ T7303] ? snd_seq_pool_new+0x44/0x230 [ 80.693053][ T7303] ? __pfx_snd_seq_open+0x10/0x10 [ 80.693064][ T7303] snd_seq_pool_new+0x44/0x230 [ 80.693078][ T7303] snd_seq_fifo_new+0x5a/0x270 [ 80.693093][ T7303] snd_seq_open+0x144/0x530 [ 80.693104][ T7303] ? __pfx_snd_seq_open+0x10/0x10 [ 80.693115][ T7303] snd_open+0x201/0x450 [ 80.693129][ T7303] ? __pfx_snd_open+0x10/0x10 [ 80.693141][ T7303] chrdev_open+0x234/0x6a0 [ 80.693152][ T7303] ? __pfx_apparmor_file_open+0x10/0x10 [ 80.693166][ T7303] ? __pfx_chrdev_open+0x10/0x10 [ 80.693178][ T7303] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 80.693195][ T7303] do_dentry_open+0x674/0x1470 [ 80.693207][ T7303] ? __pfx_chrdev_open+0x10/0x10 [ 80.693220][ T7303] vfs_open_consume+0xcc/0x460 [ 80.693236][ T7303] path_openat+0x1547/0x23f0 [ 80.693253][ T7303] ? __pfx_path_openat+0x10/0x10 [ 80.693269][ T7303] do_file_open+0x20e/0x430 [ 80.693282][ T7303] ? __pfx_do_file_open+0x10/0x10 [ 80.693304][ T7303] ? _raw_spin_unlock+0x28/0x50 [ 80.693315][ T7303] ? alloc_fd+0x471/0x7a0 [ 80.693331][ T7303] do_sys_openat2+0x163/0x1d0 [ 80.693345][ T7303] ? __pfx_do_sys_openat2+0x10/0x10 [ 80.693365][ T7303] __ia32_compat_sys_openat+0x12d/0x210 [ 80.693380][ T7303] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 80.693401][ T7303] __do_fast_syscall_32+0x14b/0x8c0 [ 80.693417][ T7303] do_fast_syscall_32+0x32/0x70 [ 80.693430][ T7303] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.693444][ T7303] RIP: 0023:0xf7f25fbc [ 80.693453][ T7303] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 80.693463][ T7303] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 80.693473][ T7303] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000f40 [ 80.693480][ T7303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.693486][ T7303] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.693491][ T7303] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 80.693497][ T7303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.693511][ T7303] [ 80.717759][ T5888] usb 7-1: USB disconnect, device number 11 [ 80.717868][ C3] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 80.717891][ C3] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 80.838423][ T7312] nvme nvme0: failed to connect socket: -111 [ 80.890694][ T5895] usb 5-1: USB disconnect, device number 11 [ 81.092531][ T7337] nvme nvme0: failed to connect socket: -111 [ 81.320074][ T7359] nvme nvme0: failed to connect socket: -111 [ 81.336141][ T5895] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 81.465498][ T68] Bluetooth: hci3: command 0x0c1a tx timeout [ 81.485295][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 81.486060][ T5895] usb 5-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 81.486636][ T5895] usb 5-1: config 0 has no interfaces? [ 81.489868][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.489888][ T5895] usb 5-1: Product: syz [ 81.489899][ T5895] usb 5-1: Manufacturer: syz [ 81.489910][ T5895] usb 5-1: SerialNumber: syz [ 81.492139][ T5895] usb 5-1: config 0 descriptor?? [ 81.632017][ T7380] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 81.675202][ T5862] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 81.699543][ T1045] usb 5-1: USB disconnect, device number 12 [ 81.825942][ T5862] usb 6-1: New USB device found: idVendor=0a12, idProduct=0001, bcdDevice=fd.fb [ 81.826863][ T5862] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.826880][ T5862] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 81.826915][ T5862] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 81.826932][ T5862] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 81.828757][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.828772][ T5862] usb 6-1: Product: syz [ 81.828783][ T5862] usb 6-1: Manufacturer: syz [ 81.828792][ T5862] usb 6-1: SerialNumber: syz [ 81.841115][ T68] Bluetooth: hci4: urb ffff88806ddb3d00 submission failed (90) [ 81.915152][ T5888] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 82.095188][ T5888] usb 7-1: Using ep0 maxpacket: 8 [ 82.095905][ T5888] usb 7-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 82.097008][ T5888] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 82.097027][ T5888] usb 7-1: config 179 has no interface number 0 [ 82.097055][ T5888] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 82.097073][ T5888] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 82.097092][ T5888] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 82.097109][ T5888] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 82.097127][ T5888] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 82.097155][ T5888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.099691][ T7382] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 82.307450][ T10] usb 7-1: USB disconnect, device number 12 [ 82.307524][ C2] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 82.307558][ C2] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 82.330395][ T7388] nvme nvme0: failed to connect socket: -111 [ 82.872702][ T7407] netlink: 116 bytes leftover after parsing attributes in process `syz.0.618'. [ 82.898747][ T7409] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 82.946639][ T7413] FAULT_INJECTION: forcing a failure. [ 82.946639][ T7413] name failslab, interval 1, probability 0, space 0, times 0 [ 82.946658][ T7413] CPU: 1 UID: 0 PID: 7413 Comm: syz.0.621 Not tainted syzkaller #0 PREEMPT(full) [ 82.946672][ T7413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.946679][ T7413] Call Trace: [ 82.946683][ T7413] [ 82.946688][ T7413] dump_stack_lvl+0x100/0x190 [ 82.946711][ T7413] should_fail_ex.cold+0x5/0xa [ 82.946729][ T7413] should_failslab+0xc2/0x120 [ 82.946743][ T7413] __kmalloc_noprof+0xfc/0x840 [ 82.946759][ T7413] ? lockdep_init_map_type+0x5c/0x250 [ 82.946772][ T7413] ? nvme_tcp_create_ctrl+0x836/0x13d0 [ 82.946789][ T7413] nvme_tcp_create_ctrl+0x836/0x13d0 [ 82.946807][ T7413] nvmf_dev_write+0x4ee/0xb60 [ 82.946822][ T7413] vfs_write+0x2aa/0x1050 [ 82.946833][ T7413] ? __pfx_nvmf_dev_write+0x10/0x10 [ 82.946844][ T7413] ? lock_acquire+0x1d1/0x380 [ 82.946854][ T7413] ? __fget_files+0x34/0x3d0 [ 82.946866][ T7413] ? __pfx_vfs_write+0x10/0x10 [ 82.946875][ T7413] ? find_held_lock+0x2b/0x80 [ 82.946888][ T7413] ? __fget_files+0x215/0x3d0 [ 82.946899][ T7413] ? __fget_files+0x215/0x3d0 [ 82.946912][ T7413] ? __fget_files+0x21f/0x3d0 [ 82.946927][ T7413] ksys_write+0x12a/0x250 [ 82.946938][ T7413] ? __pfx_ksys_write+0x10/0x10 [ 82.946953][ T7413] __do_fast_syscall_32+0x14b/0x8c0 [ 82.946969][ T7413] do_fast_syscall_32+0x32/0x70 [ 82.946982][ T7413] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 82.946995][ T7413] RIP: 0023:0xf741efbc [ 82.947004][ T7413] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 82.947014][ T7413] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 82.947025][ T7413] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 82.947031][ T7413] RDX: 0000000000000031 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.947037][ T7413] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 82.947043][ T7413] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 82.947049][ T7413] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 82.947062][ T7413] [ 83.081054][ T7424] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 83.081199][ T7424] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 83.081268][ T7424] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 83.082207][ T7424] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 83.319895][ T7444] netlink: 256 bytes leftover after parsing attributes in process `syz.2.632'. [ 83.350588][ T7446] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 83.350606][ T7446] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 83.350621][ T7446] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 83.584459][ T7458] netlink: 112 bytes leftover after parsing attributes in process `syz.2.637'. [ 83.619728][ T7460] syzkaller0: entered promiscuous mode [ 83.619749][ T7460] syzkaller0: entered allmulticast mode [ 84.236366][ T5895] usb 6-1: USB disconnect, device number 11 [ 84.424061][ T7478] jffs2: notice: (7478) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 84.487365][ T7488] netlink: 112 bytes leftover after parsing attributes in process `syz.0.649'. [ 84.516242][ T7485] nvme nvme0: failed to connect socket: -111 [ 84.755256][ T7383] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 84.763657][ T7506] jffs2: notice: (7506) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 84.842025][ T7512] syzkaller0: entered promiscuous mode [ 84.842042][ T7512] syzkaller0: entered allmulticast mode [ 84.905262][ T7383] usb 5-1: Using ep0 maxpacket: 8 [ 84.906257][ T7383] usb 5-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 84.906805][ T7383] usb 5-1: config 0 has no interfaces? [ 84.909017][ T7383] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.909035][ T7383] usb 5-1: Product: syz [ 84.909046][ T7383] usb 5-1: Manufacturer: syz [ 84.909057][ T7383] usb 5-1: SerialNumber: syz [ 84.914878][ T7383] usb 5-1: config 0 descriptor?? [ 85.065248][ T68] Bluetooth: hci0: command 0x0c1a tx timeout [ 85.123760][ T7383] usb 5-1: USB disconnect, device number 13 [ 85.145597][ T5147] Bluetooth: hci1: command 0x0c1a tx timeout [ 85.145625][ T68] Bluetooth: hci2: command 0x0c1a tx timeout [ 85.155258][ T68] Bluetooth: hci3: command 0x0c1a tx timeout [ 85.562806][ T7516] nvme nvme0: failed to connect socket: -111 [ 85.603550][ T7520] netlink: 112 bytes leftover after parsing attributes in process `syz.3.660'. [ 85.881350][ T7539] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 85.881999][ T7539] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 85.882129][ T7539] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 85.883233][ T7539] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 86.035972][ T7556] nvme nvme0: failed to connect socket: -111 [ 86.062060][ T7559] syzkaller0: entered promiscuous mode [ 86.062082][ T7559] syzkaller0: entered allmulticast mode [ 86.935524][ T7566] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 86.935651][ T7566] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 86.935750][ T7566] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 86.937707][ T7566] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 87.122575][ T7588] jffs2: notice: (7588) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 87.182025][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.686'. [ 87.258438][ T7595] syzkaller0: entered promiscuous mode [ 87.258464][ T7595] syzkaller0: entered allmulticast mode [ 87.295173][ T1470] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 87.445292][ T1470] usb 5-1: Using ep0 maxpacket: 8 [ 87.445986][ T1470] usb 5-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 87.446877][ T1470] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 87.446894][ T1470] usb 5-1: config 179 has no interface number 0 [ 87.446928][ T1470] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 87.446946][ T1470] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 87.446965][ T1470] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 87.446983][ T1470] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 87.447001][ T1470] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 87.447029][ T1470] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.452502][ T7584] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 87.660008][ T860] usb 5-1: USB disconnect, device number 14 [ 87.661375][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 88.358410][ T7620] syzkaller0: entered promiscuous mode [ 88.358426][ T7620] syzkaller0: entered allmulticast mode [ 88.985293][ T68] Bluetooth: hci3: command 0x0c1a tx timeout [ 88.985319][ T68] Bluetooth: hci2: command 0x0c1a tx timeout [ 88.985333][ T68] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.985331][ T5147] Bluetooth: hci1: command 0x0c1a tx timeout [ 89.231800][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 89.251346][ T7641] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 89.277318][ T7645] FAULT_INJECTION: forcing a failure. [ 89.277318][ T7645] name failslab, interval 1, probability 0, space 0, times 0 [ 89.277336][ T7645] CPU: 3 UID: 0 PID: 7645 Comm: syz.0.709 Not tainted syzkaller #0 PREEMPT(full) [ 89.277348][ T7645] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.277354][ T7645] Call Trace: [ 89.277358][ T7645] [ 89.277363][ T7645] dump_stack_lvl+0x100/0x190 [ 89.277383][ T7645] should_fail_ex.cold+0x5/0xa [ 89.277398][ T7645] should_failslab+0xc2/0x120 [ 89.277411][ T7645] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 89.277429][ T7645] ? __kasan_kmalloc+0xaa/0xb0 [ 89.277440][ T7645] ? __request_module+0x2d5/0x6a0 [ 89.277456][ T7645] kstrdup+0x51/0xe0 [ 89.277470][ T7645] __request_module+0x2d5/0x6a0 [ 89.277485][ T7645] ? __pfx___request_module+0x10/0x10 [ 89.277504][ T7645] ? find_held_lock+0x2b/0x80 [ 89.277518][ T7645] ? rtnl_link_ops_get+0x17b/0x2c0 [ 89.277533][ T7645] ? rtnl_link_ops_get+0x17b/0x2c0 [ 89.277553][ T7645] rtnl_newlink+0x1883/0x2620 [ 89.277568][ T7645] ? __pfx_rtnl_newlink+0x10/0x10 [ 89.277586][ T7645] ? rcu_is_watching+0x13/0xc0 [ 89.277602][ T7645] ? kasan_quarantine_put+0x104/0x240 [ 89.277629][ T7645] ? lockdep_hardirqs_on+0x7d/0x110 [ 89.277647][ T7645] ? kfree_skbmem+0x19a/0x210 [ 89.277667][ T7645] ? __dev_queue_xmit+0xa2e/0x48d0 [ 89.277684][ T7645] ? lock_acquire+0x1d1/0x380 [ 89.277694][ T7645] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 89.277705][ T7645] ? find_held_lock+0x2b/0x80 [ 89.277719][ T7645] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 89.277730][ T7645] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 89.277742][ T7645] ? __pfx_rtnl_newlink+0x10/0x10 [ 89.277753][ T7645] rtnetlink_rcv_msg+0x95e/0xe90 [ 89.277766][ T7645] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 89.277785][ T7645] netlink_rcv_skb+0x159/0x420 [ 89.277800][ T7645] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 89.277812][ T7645] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 89.277826][ T7645] ? __asan_memcpy+0x3c/0x60 [ 89.277845][ T7645] ? netlink_deliver_tap+0x1ae/0xb50 [ 89.277862][ T7645] netlink_unicast+0x668/0x950 [ 89.277878][ T7645] ? __pfx_netlink_unicast+0x10/0x10 [ 89.277896][ T7645] netlink_sendmsg+0x9ac/0x10c0 [ 89.277914][ T7645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.277932][ T7645] ? apparmor_socket_sendmsg+0x165/0x280 [ 89.277947][ T7645] ? ____sys_sendmsg+0xa99/0xc30 [ 89.277957][ T7645] ____sys_sendmsg+0xa99/0xc30 [ 89.277967][ T7645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.277983][ T7645] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.278001][ T7645] ___sys_sendmsg+0x190/0x1e0 [ 89.278014][ T7645] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.278030][ T7645] ? futex_wait+0x11e/0x370 [ 89.278047][ T7645] ? find_held_lock+0x2b/0x80 [ 89.278070][ T7645] __sys_sendmsg+0x160/0x210 [ 89.278087][ T7645] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.278109][ T7645] __do_fast_syscall_32+0x14b/0x8c0 [ 89.278126][ T7645] do_fast_syscall_32+0x32/0x70 [ 89.278140][ T7645] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.278154][ T7645] RIP: 0023:0xf741efbc [ 89.278163][ T7645] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 89.278173][ T7645] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 89.278184][ T7645] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 89.278191][ T7645] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.278197][ T7645] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.278202][ T7645] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 89.278208][ T7645] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.278222][ T7645] [ 89.278337][ T7645] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.278631][ T7645] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.278684][ T7645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.595155][ T5862] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 89.745692][ T5862] usb 5-1: New USB device found: idVendor=0582, idProduct=007d, bcdDevice=0.00 [ 89.746692][ T5862] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.746703][ T5862] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.746724][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.752150][ T5862] usb 5-1: interface 1 not found [ 89.803990][ T7651] nvme nvme0: failed to connect socket: -111 [ 89.902025][ T5789] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 89.906036][ T7664] syzkaller0: entered promiscuous mode [ 89.906055][ T7664] syzkaller0: entered allmulticast mode [ 89.959190][ T5862] usb 5-1: USB disconnect, device number 15 [ 90.463971][ T7670] rdma_rxe: rxe_newlink: failed to add wg1 [ 90.760081][ T7679] nvme nvme0: failed to connect socket: -111 [ 90.788783][ T7682] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 90.956806][ T7699] syzkaller0: entered promiscuous mode [ 90.956822][ T7699] syzkaller0: entered allmulticast mode [ 91.067804][ T5789] Bluetooth: hci3: command 0x0c1a tx timeout [ 91.079774][ T7705] nvme nvme0: failed to connect socket: -111 [ 91.235965][ T7715] nvme nvme0: failed to connect socket: -111 [ 91.747954][ T7708] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.748217][ T7708] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.748274][ T7708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.109214][ T7718] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 92.109328][ T7718] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 92.109412][ T7718] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 92.109493][ T7718] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 92.157277][ T7737] nvme nvme0: failed to connect socket: -111 [ 92.204802][ T7742] nvme nvme0: failed to connect socket: -111 [ 92.312594][ T7752] syzkaller0: entered promiscuous mode [ 92.312611][ T7752] syzkaller0: entered allmulticast mode [ 92.685170][ T860] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 92.835569][ T860] usb 5-1: New USB device found: idVendor=0a12, idProduct=0001, bcdDevice=fd.fb [ 92.836363][ T860] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.836376][ T860] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 92.836396][ T860] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 92.836406][ T860] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 92.837913][ T860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.837924][ T860] usb 5-1: Product: syz [ 92.837931][ T860] usb 5-1: Manufacturer: syz [ 92.837937][ T860] usb 5-1: SerialNumber: syz [ 92.886628][ T5789] Bluetooth: hci4: urb ffff888027b3a500 submission failed (90) [ 93.159438][ T7764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.756'. [ 93.159513][ T7764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.165494][ T7764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.378878][ T7770] nvme nvme0: failed to connect socket: -111 [ 93.471927][ T7773] nvme nvme0: failed to connect socket: -111 [ 93.589567][ T7782] syzkaller0: entered promiscuous mode [ 93.589582][ T7782] syzkaller0: entered allmulticast mode [ 93.865179][ T5789] Bluetooth: hci0: command 0x0c1a tx timeout [ 94.185221][ T5789] Bluetooth: hci3: command 0x0c1a tx timeout [ 94.185247][ T5789] Bluetooth: hci2: command 0x0c1a tx timeout [ 94.185260][ T5789] Bluetooth: hci1: command 0x0c1a tx timeout [ 94.416930][ T7788] FAULT_INJECTION: forcing a failure. [ 94.416930][ T7788] name failslab, interval 1, probability 0, space 0, times 0 [ 94.416947][ T7788] CPU: 3 UID: 0 PID: 7788 Comm: syz.1.766 Not tainted syzkaller #0 PREEMPT(full) [ 94.416960][ T7788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.416967][ T7788] Call Trace: [ 94.416972][ T7788] [ 94.416977][ T7788] dump_stack_lvl+0x100/0x190 [ 94.416998][ T7788] should_fail_ex.cold+0x5/0xa [ 94.417014][ T7788] should_failslab+0xc2/0x120 [ 94.417027][ T7788] kmem_cache_alloc_noprof+0x92/0x6a0 [ 94.417043][ T7788] ? vm_area_dup+0x27/0x9d0 [ 94.417056][ T7788] vm_area_dup+0x27/0x9d0 [ 94.417067][ T7788] __split_vma+0x19c/0x22c0 [ 94.417083][ T7788] ? __pfx___split_vma+0x10/0x10 [ 94.417095][ T7788] ? lock_acquire+0x1d1/0x380 [ 94.417115][ T7788] vma_modify+0x1553/0x2de0 [ 94.417134][ T7788] ? __pfx_vma_modify+0x10/0x10 [ 94.417149][ T7788] ? __lock_acquire+0x5c0/0x1f40 [ 94.417165][ T7788] vma_modify_flags_uffd+0x312/0x470 [ 94.417180][ T7788] ? __pfx_vma_modify_flags_uffd+0x10/0x10 [ 94.417200][ T7788] ? __pfx_vma_can_userfault+0x10/0x10 [ 94.417216][ T7788] ? __pfx___might_resched+0x10/0x10 [ 94.417234][ T7788] userfaultfd_register_range+0x4b9/0x760 [ 94.417253][ T7788] ? __pfx_userfaultfd_register_range+0x10/0x10 [ 94.417270][ T7788] ? anon_can_userfault+0x24/0x40 [ 94.417282][ T7788] ? vma_can_userfault+0x2c4/0x6b0 [ 94.417298][ T7788] ? __pfx_vma_can_userfault+0x10/0x10 [ 94.417313][ T7788] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 94.417329][ T7788] userfaultfd_register+0x8fb/0xe60 [ 94.417348][ T7788] ? __pfx_userfaultfd_register+0x10/0x10 [ 94.417364][ T7788] ? kasan_quarantine_put+0x104/0x240 [ 94.417380][ T7788] ? tomoyo_path_number_perm+0x188/0x580 [ 94.417395][ T7788] userfaultfd_ioctl+0x2e6f/0x6550 [ 94.417416][ T7788] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 94.417431][ T7788] ? do_vfs_ioctl+0x226/0x13e0 [ 94.417446][ T7788] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 94.417464][ T7788] ? __fget_files+0x34/0x3d0 [ 94.417475][ T7788] ? find_held_lock+0x2b/0x80 [ 94.417489][ T7788] ? __fget_files+0x215/0x3d0 [ 94.417499][ T7788] ? hook_file_ioctl_common+0x140/0x440 [ 94.417516][ T7788] ? __fget_files+0x21f/0x3d0 [ 94.417527][ T7788] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 94.417542][ T7788] ? compat_ptr_ioctl+0x6e/0xa0 [ 94.417556][ T7788] compat_ptr_ioctl+0x6e/0xa0 [ 94.417570][ T7788] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 94.417585][ T7788] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 94.417602][ T7788] __do_fast_syscall_32+0x14b/0x8c0 [ 94.417625][ T7788] do_fast_syscall_32+0x32/0x70 [ 94.417640][ T7788] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.417653][ T7788] RIP: 0023:0xf73eefbc [ 94.417664][ T7788] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 94.417674][ T7788] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 94.417685][ T7788] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c020aa00 [ 94.417692][ T7788] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.417699][ T7788] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.417704][ T7788] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 94.417710][ T7788] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.417724][ T7788] [ 94.468814][ T7792] netlink: 'syz.3.768': attribute type 1 has an invalid length. [ 94.485359][ T7792] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.496111][ T7795] FAULT_INJECTION: forcing a failure. [ 94.496111][ T7795] name fail_futex, interval 1, probability 0, space 0, times 1 [ 94.496128][ T7795] CPU: 1 UID: 0 PID: 7795 Comm: syz.1.769 Not tainted syzkaller #0 PREEMPT(full) [ 94.496147][ T7795] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.496153][ T7795] Call Trace: [ 94.496157][ T7795] [ 94.496162][ T7795] dump_stack_lvl+0x100/0x190 [ 94.496182][ T7795] should_fail_ex.cold+0x5/0xa [ 94.496198][ T7795] get_futex_key+0x1c9/0x13e0 [ 94.496214][ T7795] ? __pfx_get_futex_key+0x10/0x10 [ 94.496233][ T7795] futex_wait_setup+0x91/0x540 [ 94.496249][ T7795] __futex_wait+0x19f/0x360 [ 94.496261][ T7795] ? __pfx___futex_wait+0x10/0x10 [ 94.496270][ T7795] ? __pfx_try_to_wake_up+0x10/0x10 [ 94.496281][ T7795] ? futex_hash+0x311/0x400 [ 94.496296][ T7795] ? __pfx_futex_wake_mark+0x10/0x10 [ 94.496308][ T7795] ? find_held_lock+0x2b/0x80 [ 94.496322][ T7795] ? futex_wake+0x4ea/0x5e0 [ 94.496336][ T7795] futex_wait+0xe6/0x370 [ 94.496348][ T7795] ? __pfx_futex_wait+0x10/0x10 [ 94.496362][ T7795] ? rcu_read_lock_any_held+0x6a/0x90 [ 94.496377][ T7795] ? find_held_lock+0x2b/0x80 [ 94.496390][ T7795] ? ksys_write+0x190/0x250 [ 94.496400][ T7795] ? ksys_write+0x190/0x250 [ 94.496411][ T7795] do_futex+0x265/0x440 [ 94.496426][ T7795] ? __pfx_do_futex+0x10/0x10 [ 94.496441][ T7795] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 94.496458][ T7795] __ia32_sys_futex_time32+0x2f4/0x470 [ 94.496476][ T7795] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 94.496492][ T7795] ? __might_fault+0xc5/0x140 [ 94.496508][ T7795] __do_fast_syscall_32+0x14b/0x8c0 [ 94.496524][ T7795] do_fast_syscall_32+0x32/0x70 [ 94.496537][ T7795] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.496552][ T7795] RIP: 0023:0xf73eefbc [ 94.496561][ T7795] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 94.496571][ T7795] RSP: 002b:00000000f54065bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 94.496581][ T7795] RAX: ffffffffffffffda RBX: 00000000f7414f88 RCX: 0000000000000080 [ 94.496588][ T7795] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7414f8c [ 94.496594][ T7795] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 94.496600][ T7795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.496606][ T7795] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.496619][ T7795] [ 94.511215][ T7792] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.511374][ T7792] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 94.514072][ T7792] bond2: (slave gre1): Error -95 calling set_mac_address [ 94.536885][ T7795] nvme nvme0: failed to connect socket: -111 [ 94.612874][ T7798] nvme nvme0: failed to connect socket: -111 [ 94.905136][ T65] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 95.067453][ T65] usb 8-1: not running at top speed; connect to a high speed hub [ 95.067473][ T65] usb 8-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 95.068263][ T65] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.068283][ T65] usb 8-1: config 1 interface 0 altsetting 19 has an invalid descriptor for endpoint zero, skipping [ 95.068293][ T65] usb 8-1: config 1 interface 0 altsetting 19 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 95.068305][ T65] usb 8-1: config 1 interface 0 has no altsetting 0 [ 95.069790][ T65] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.069801][ T65] usb 8-1: Product: syz [ 95.069808][ T65] usb 8-1: Manufacturer: syz [ 95.069814][ T65] usb 8-1: SerialNumber: syz [ 95.224731][ T860] usb 5-1: USB disconnect, device number 16 [ 95.278168][ T65] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 95.281681][ T65] usb 8-1: USB disconnect, device number 14 [ 95.371392][ T7819] syzkaller0: entered promiscuous mode [ 95.371408][ T7819] syzkaller0: entered allmulticast mode [ 95.817312][ T7825] FAULT_INJECTION: forcing a failure. [ 95.817312][ T7825] name fail_futex, interval 1, probability 0, space 0, times 0 [ 95.817332][ T7825] CPU: 3 UID: 0 PID: 7825 Comm: syz.3.779 Not tainted syzkaller #0 PREEMPT(full) [ 95.817345][ T7825] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.817351][ T7825] Call Trace: [ 95.817355][ T7825] [ 95.817359][ T7825] dump_stack_lvl+0x100/0x190 [ 95.817381][ T7825] should_fail_ex.cold+0x5/0xa [ 95.817398][ T7825] get_futex_key+0x1c9/0x13e0 [ 95.817416][ T7825] ? __pfx_get_futex_key+0x10/0x10 [ 95.817434][ T7825] futex_wait_setup+0x91/0x540 [ 95.817448][ T7825] __futex_wait+0x19f/0x360 [ 95.817460][ T7825] ? __pfx___futex_wait+0x10/0x10 [ 95.817470][ T7825] ? __pfx_try_to_wake_up+0x10/0x10 [ 95.817481][ T7825] ? futex_hash+0x311/0x400 [ 95.817495][ T7825] ? __pfx_futex_wake_mark+0x10/0x10 [ 95.817508][ T7825] ? find_held_lock+0x2b/0x80 [ 95.817522][ T7825] ? futex_wake+0x4ea/0x5e0 [ 95.817536][ T7825] futex_wait+0xe6/0x370 [ 95.817548][ T7825] ? __pfx_futex_wait+0x10/0x10 [ 95.817562][ T7825] ? rcu_read_lock_any_held+0x6a/0x90 [ 95.817576][ T7825] ? find_held_lock+0x2b/0x80 [ 95.817590][ T7825] ? ksys_write+0x190/0x250 [ 95.817600][ T7825] ? ksys_write+0x190/0x250 [ 95.817612][ T7825] do_futex+0x265/0x440 [ 95.817628][ T7825] ? __pfx_do_futex+0x10/0x10 [ 95.817643][ T7825] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 95.817661][ T7825] __ia32_sys_futex_time32+0x2f4/0x470 [ 95.817680][ T7825] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 95.817697][ T7825] ? __might_fault+0xc5/0x140 [ 95.817714][ T7825] __do_fast_syscall_32+0x14b/0x8c0 [ 95.817729][ T7825] do_fast_syscall_32+0x32/0x70 [ 95.817743][ T7825] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 95.817759][ T7825] RIP: 0023:0xf7f25fbc [ 95.817768][ T7825] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 95.817778][ T7825] RSP: 002b:00000000f53d65bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 95.817789][ T7825] RAX: ffffffffffffffda RBX: 00000000f73e4f88 RCX: 0000000000000080 [ 95.817795][ T7825] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73e4f8c [ 95.817801][ T7825] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 95.817807][ T7825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.817813][ T7825] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.817826][ T7825] [ 95.845490][ T7825] nvme nvme0: failed to connect socket: -111 [ 96.312551][ T7842] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 96.312571][ T7842] openvswitch: netlink: Message has 16 unknown bytes. [ 96.354961][ T7847] comedi comedi0: aio_iiro_16: I/O base address not correctly aligned [ 96.418721][ T7853] ubi0: attaching mtd0 [ 96.419998][ T7853] ubi0: scanning is finished [ 96.420024][ T7853] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 96.519793][ T7858] syzkaller0: entered promiscuous mode [ 96.519816][ T7858] syzkaller0: entered allmulticast mode [ 96.537397][ T7853] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 96.609223][ T7860] nvme nvme0: failed to connect socket: -111 [ 96.705891][ T65] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 96.865940][ T65] usb 8-1: New USB device found: idVendor=0a12, idProduct=0001, bcdDevice=fd.fb [ 96.866900][ T65] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.866918][ T65] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 96.866955][ T65] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 96.866972][ T65] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 96.868893][ T65] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.868930][ T65] usb 8-1: Product: syz [ 96.868941][ T65] usb 8-1: Manufacturer: syz [ 96.868951][ T65] usb 8-1: SerialNumber: syz [ 96.885241][ T5147] Bluetooth: hci4: urb ffff888000303700 submission failed (90) [ 97.195223][ T1045] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 97.351105][ T1045] usb 5-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00 [ 97.357556][ T1045] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.357581][ T1045] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.357591][ T1045] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 97.357602][ T1045] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.369838][ T1045] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.369858][ T1045] usb 5-1: Product: syz [ 97.369869][ T1045] usb 5-1: Manufacturer: syz [ 97.369880][ T1045] usb 5-1: SerialNumber: syz [ 97.488119][ T5147] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 97.559394][ T5866] smpboot: CPU 1 is now offline [ 97.574876][ T1045] usb 5-1: USB disconnect, device number 17 [ 97.626181][ T5866] [ 97.627164][ T5866] ====================================================== [ 97.629215][ T5866] WARNING: possible circular locking dependency detected [ 97.631383][ T5866] syzkaller #0 Not tainted [ 97.632866][ T5866] ------------------------------------------------------ [ 97.634985][ T5866] kworker/u32:3/5866 is trying to acquire lock: [ 97.637496][ T5866] ffff88801ef35e18 (kn->active#5){++++}-{0:0}, at: __kernfs_remove+0x34c/0xbc0 [ 97.641234][ T5866] [ 97.641234][ T5866] but task is already holding lock: [ 97.644194][ T5866] ffffffff8fe7a570 (cpu_hotplug_lock){++++}-{0:0}, at: acpi_processor_post_eject+0x146/0x390 [ 97.648352][ T5866] [ 97.648352][ T5866] which lock already depends on the new lock. [ 97.648352][ T5866] [ 97.652528][ T5866] [ 97.652528][ T5866] the existing dependency chain (in reverse order) is: [ 97.656209][ T5866] [ 97.656209][ T5866] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 97.659302][ T5866] lock_acquire+0x1d1/0x380 [ 97.660849][ T5866] percpu_down_write+0x4e/0x3d0 [ 97.662592][ T5866] _cpu_up+0x68/0x960 [ 97.664104][ T5866] cpu_up+0x1ba/0x230 [ 97.665883][ T5866] cpuhp_bringup_mask+0xf8/0x180 [ 97.668119][ T5866] bringup_nonboot_cpus+0xd9/0x1b0 [ 97.670443][ T5866] smp_init+0x32/0x150 [ 97.672355][ T5866] kernel_init_freeable+0x44b/0x7b0 [ 97.674710][ T5866] kernel_init+0x21/0x1e0 [ 97.676698][ T5866] ret_from_fork+0x730/0xd60 [ 97.678778][ T5866] ret_from_fork_asm+0x1a/0x30 [ 97.680928][ T5866] [ 97.680928][ T5866] -> #2 (cpu_add_remove_lock){+.+.}-{4:4}: [ 97.684160][ T5866] lock_acquire+0x1d1/0x380 [ 97.686298][ T5866] __mutex_lock+0x19f/0x1c10 [ 97.688126][ T5866] cpu_device_down+0x46/0xc0 [ 97.689738][ T5866] device_offline+0x2f4/0x400 [ 97.691281][ T5866] acpi_bus_offline+0x3c7/0x550 [ 97.692888][ T5866] acpi_device_hotplug+0x627/0xbe0 [ 97.694599][ T5866] acpi_hotplug_work_fn+0x5e/0x90 [ 97.696683][ T5866] process_one_work+0xac7/0x1b10 [ 97.698810][ T5866] worker_thread+0x5ef/0xe50 [ 97.700683][ T5866] kthread+0x373/0x450 [ 97.702135][ T5866] ret_from_fork+0x730/0xd60 [ 97.703672][ T5866] ret_from_fork_asm+0x1a/0x30 [ 97.705340][ T5866] [ 97.705340][ T5866] -> #1 (&device->physical_node_lock){+.+.}-{4:4}: [ 97.707908][ T5866] lock_acquire+0x1d1/0x380 [ 97.709576][ T5866] __mutex_lock+0x19f/0x1c10 [ 97.711165][ T5866] acpi_companion_match+0xc0/0x180 [ 97.712934][ T5866] acpi_device_uevent_modalias+0x19/0x30 [ 97.714892][ T5866] platform_uevent+0x51/0xc0 [ 97.716642][ T5866] dev_uevent+0x1de/0x870 [ 97.718200][ T5866] kobject_uevent_env+0x6eb/0x18b0 [ 97.719946][ T5866] kobject_synth_uevent+0x6f1/0x830 [ 97.721720][ T5866] uevent_store+0x24/0x90 [ 97.723205][ T5866] dev_attr_store+0x58/0x80 [ 97.724781][ T5866] sysfs_kf_write+0xf2/0x150 [ 97.726515][ T5866] kernfs_fop_write_iter+0x3e0/0x5f0 [ 97.728231][ T5866] vfs_write+0x6af/0x1050 [ 97.729680][ T5866] ksys_write+0x12a/0x250 [ 97.731096][ T5866] do_syscall_64+0x121/0x770 [ 97.732978][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.735504][ T5866] [ 97.735504][ T5866] -> #0 (kn->active#5){++++}-{0:0}: [ 97.738184][ T5866] check_prev_add+0xeb/0xe60 [ 97.739754][ T5866] __lock_acquire+0x1528/0x1f40 [ 97.741358][ T5866] lock_acquire+0x1d1/0x380 [ 97.742878][ T5866] kernfs_drain+0x4eb/0x600 [ 97.744917][ T5866] __kernfs_remove+0x34c/0xbc0 [ 97.747095][ T5866] kernfs_remove_by_name_ns+0x7c/0x120 [ 97.749090][ T5866] device_del+0x361/0x9b0 [ 97.750576][ T5866] device_unregister+0x1d/0xe0 [ 97.752135][ T5866] unregister_cpu+0xa0/0x140 [ 97.753653][ T5866] acpi_processor_post_eject+0x16f/0x390 [ 97.755529][ T5866] acpi_device_hotplug+0x9df/0xbe0 [ 97.757622][ T5866] acpi_hotplug_work_fn+0x5e/0x90 [ 97.759553][ T5866] process_one_work+0xac7/0x1b10 [ 97.761176][ T5866] worker_thread+0x5ef/0xe50 [ 97.762688][ T5866] kthread+0x373/0x450 [ 97.764065][ T5866] ret_from_fork+0x730/0xd60 [ 97.765703][ T5866] ret_from_fork_asm+0x1a/0x30 [ 97.767480][ T5866] [ 97.767480][ T5866] other info that might help us debug this: [ 97.767480][ T5866] [ 97.770380][ T5866] Chain exists of: [ 97.770380][ T5866] kn->active#5 --> cpu_add_remove_lock --> cpu_hotplug_lock [ 97.770380][ T5866] [ 97.774167][ T5866] Possible unsafe locking scenario: [ 97.774167][ T5866] [ 97.776552][ T5866] CPU0 CPU1 [ 97.778148][ T5866] ---- ---- [ 97.779746][ T5866] lock(cpu_hotplug_lock); [ 97.781129][ T5866] lock(cpu_add_remove_lock); [ 97.783312][ T5866] lock(cpu_hotplug_lock); [ 97.785459][ T5866] lock(kn->active#5); [ 97.786703][ T5866] [ 97.786703][ T5866] *** DEADLOCK *** [ 97.786703][ T5866] [ 97.789050][ T5866] locks held by kworker/u32:3/5866: 6, last CPU#2: [ 97.790933][ T5866] #0: ffff888022738148 ((wq_completion)kacpi_hotplug){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 97.794083][ T5866] #1: ffffc9000671fd08 ((work_completion)(&hpw->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 97.797612][ T5866] #2: ffffffff91053060 (device_hotplug_lock){+.+.}-{4:4}, at: acpi_device_hotplug+0x7e/0xbe0 [ 97.800620][ T5866] #3: ffffffff90d21800 (acpi_scan_lock){+.+.}-{4:4}, at: acpi_device_hotplug+0x8c/0xbe0 [ 97.803449][ T5866] #4: ffffffff8fe7a620 (cpu_add_remove_lock){+.+.}-{4:4}, at: acpi_processor_post_eject+0x141/0x390 [ 97.806507][ T5866] #5: ffffffff8fe7a570 (cpu_hotplug_lock){++++}-{0:0}, at: acpi_processor_post_eject+0x146/0x390 [ 97.809585][ T5866] [ 97.809585][ T5866] stack backtrace: [ 97.811324][ T5866] CPU: 2 UID: 0 PID: 5866 Comm: kworker/u32:3 Not tainted syzkaller #0 PREEMPT(full) [ 97.814082][ T5866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.817313][ T5866] Workqueue: kacpi_hotplug acpi_hotplug_work_fn [ 97.819192][ T5866] Call Trace: [ 97.820180][ T5866] [ 97.821086][ T5866] dump_stack_lvl+0x100/0x190 [ 97.822492][ T5866] print_circular_bug.cold+0x178/0x1be [ 97.824125][ T5866] check_noncircular+0x146/0x160 [ 97.825731][ T5866] check_prev_add+0xeb/0xe60 [ 97.827087][ T5866] __lock_acquire+0x1528/0x1f40 [ 97.828492][ T5866] lock_acquire+0x1d1/0x380 [ 97.829918][ T5866] ? __kernfs_remove+0x34c/0xbc0 [ 97.831406][ T5866] ? kernfs_drain+0x4c2/0x600 [ 97.832812][ T5866] kernfs_drain+0x4eb/0x600 [ 97.834185][ T5866] ? __kernfs_remove+0x34c/0xbc0 [ 97.835732][ T5866] ? __pfx_kernfs_drain+0x10/0x10 [ 97.837239][ T5866] ? find_held_lock+0x2b/0x80 [ 97.838687][ T5866] ? __kernfs_remove+0x224/0xbc0 [ 97.840177][ T5866] ? __kernfs_remove+0x224/0xbc0 [ 97.841716][ T5866] ? up_write+0x2dc/0x5b0 [ 97.843087][ T5866] __kernfs_remove+0x34c/0xbc0 [ 97.844560][ T5866] ? __pfx_acpi_processor_post_eject+0x10/0x10 [ 97.846460][ T5866] kernfs_remove_by_name_ns+0x7c/0x120 [ 97.848083][ T5866] device_del+0x361/0x9b0 [ 97.849414][ T5866] ? __pfx_device_del+0x10/0x10 [ 97.850937][ T5866] ? __pfx_acpi_processor_post_eject+0x10/0x10 [ 97.852857][ T5866] ? kernfs_remove_by_name_ns+0xbb/0x120 [ 97.854623][ T5866] ? __pfx_acpi_processor_post_eject+0x10/0x10 [ 97.856701][ T5866] device_unregister+0x1d/0xe0 [ 97.858217][ T5866] unregister_cpu+0xa0/0x140 [ 97.859677][ T5866] acpi_processor_post_eject+0x16f/0x390 [ 97.861432][ T5866] acpi_device_hotplug+0x9df/0xbe0 [ 97.863037][ T5866] ? __pfx_acpi_device_hotplug+0x10/0x10 [ 97.864799][ T5866] acpi_hotplug_work_fn+0x5e/0x90 [ 97.866693][ T5866] process_one_work+0xac7/0x1b10 [ 97.868533][ T5866] ? __pfx_process_one_work+0x10/0x10 [ 97.870225][ T5866] ? lock_acquire+0x1d1/0x380 [ 97.871693][ T5866] ? __pfx_acpi_hotplug_work_fn+0x10/0x10 [ 97.873461][ T5866] worker_thread+0x5ef/0xe50 [ 97.874909][ T5866] ? __pfx_worker_thread+0x10/0x10 [ 97.876763][ T5866] ? kthread+0x13a/0x450 [ 97.878077][ T5866] ? __pfx_worker_thread+0x10/0x10 [ 97.879628][ T5866] kthread+0x373/0x450 [ 97.880916][ T5866] ? __pfx_kthread+0x10/0x10 [ 97.882365][ T5866] ret_from_fork+0x730/0xd60 [ 97.883811][ T5866] ? __pfx_ret_from_fork+0x10/0x10 [ 97.885494][ T5866] ? __switch_to+0x800/0x10e0 [ 97.887175][ T5866] ? __pfx_kthread+0x10/0x10 [ 97.888650][ T5866] ret_from_fork_asm+0x1a/0x30 [ 97.890157][ T5866] [ 99.250142][ T2415] usb 8-1: USB disconnect, device number 15