last executing test programs: 9.62963644s ago: executing program 0 (id=545): socket(0x1e, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = syz_ublk_setup_io_uring(0xd30, &(0x7f0000000100)={0x0, 0x11aa, 0x400, 0x2, 0x313}, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000003c0)={&(0x7f0000002000)={[{&(0x7f0000000340)="f2816b4da9bc64351dbd293ca3bbe9804a894729259fd6f6c97458f103cd9dd1f6123032a690d2add5e3bdb51c34e67d2da6bf30ea63865a034014dfc25b7f80d950e1d8617e8ae15e3e03094b91462997dfc6bd530d94871bcaef40691565e3bdadeab43575208bbeac1a69771233", 0x6f}]}, 0x1}, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000000fe800000000700000000000000000000fe8000000000000000000000000000aa000000000000000000"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c010000160001000000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa4e240000000000000000a0003b00", @ANYRESOCT, @ANYRESHEX, @ANYRES16], 0x11c}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket(0x28, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x48}}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe48, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2, 0x4}, 0xfffe}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8820}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='stat\x00') preadv(r3, &(0x7f0000007240)=[{&(0x7f0000006f80)=""/7, 0x7}], 0x1, 0x4, 0x8000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.state\x00', 0x275a, 0x0) ftruncate(r5, 0x101fff) copy_file_range(r5, 0x0, r4, 0x0, 0xe003e45c, 0x700000000000000) openat$uinput(0xffffff9c, &(0x7f0000000000), 0x802, 0x0) 8.67219701s ago: executing program 0 (id=546): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000851}, 0x800) r1 = epoll_create(0x4) r2 = socket(0x28, 0x801, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r4, &(0x7f0000000140), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$hidraw(0x0, 0x82, 0x2) preadv(r5, 0x0, 0x0, 0x9, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0x8ea1, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x5, 0x4, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x1, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7ff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x4, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0xd607, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x80005, 0x80000001, 0xfffffff8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0x101, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x20009, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x405, 0x1, 0x9, 0x4001000, 0x7f, 0x1, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x1003b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) readv(r7, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3b) ioctl$KVM_SET_USER_MEMORY_REGION2(r8, 0x40a0ae49, &(0x7f0000000100)={0x10201, 0x5, 0x80a0000, 0x1000, &(0x7f0000107000/0x1000)=nil, 0x9, r3}) shutdown(r2, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000280)={0x30000010}) 6.671193041s ago: executing program 0 (id=559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e24, @local}, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x46}}, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 'syzkaller0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='100000', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x4}, {0x0, 0x4}]}]}}, 0x0, 0x36, 0x0, 0x1}, 0x28) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x4003, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x2c, 0x18, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40915}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = openat$pfkey(0xffffff9c, &(0x7f0000000280), 0x400000, 0x0) mkdirat(r5, &(0x7f00000002c0)='./file0\x00', 0x1c0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000001100)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000001300)=@deltclass={0x44, 0x29, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x7}, {0x0, 0xa}, {0xb, 0xd}}, [@tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1}}, @TCA_RATE={0x6, 0x5, {0xdb, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x40804) 5.582997375s ago: executing program 0 (id=566): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) syncfs(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x1, &(0x7f0000005000)='ufstype=sunx86\x00') 5.574268805s ago: executing program 0 (id=569): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r0, 0x5452, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x36}) mkdir(&(0x7f0000000000)='./file0\x00', 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x5, 0xc194) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7ff}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}, @NFT_MSG_NEWSETELEM={0x7c, 0xc, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "119b435d82ec9dc3847470fe14fb9ae89519b3987f9eb3305a758f7be41d94214b65280409dbe8e6ae54e502ca0de76c4de3613b4b5b12e228283cb20f0750e25c"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x14c}}, 0x20050800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.343240841s ago: executing program 2 (id=582): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x12) ioctl$VT_ACTIVATE(r0, 0x5606, 0x4) 3.359533329s ago: executing program 1 (id=586): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='usbip-vudc\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='0x01', 0x4) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000002100)='usbip-vudc.0', 0xc) (fail_nth: 3) 3.303218637s ago: executing program 1 (id=587): syz_emit_ethernet(0xe5, 0x0, 0x0) (async) syz_emit_ethernet(0xe5, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0xd4382, 0x0) close(r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) socket(0x15, 0x3, 0xc1) socket(0x18, 0x5, 0x1000000) (async) socket(0x18, 0x5, 0x1000000) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0xaaa5, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth0_to_batadv\x00', {0x1}, 0x2a}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth0_to_batadv\x00', {0x1}, 0x2a}) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) (async) bind$rxrpc(r5, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r5, 0x4) sendmmsg$inet6(r4, 0x0, 0x0, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa0000000000000150300000a004e002d35010000000000950041000000000069163a0000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e9149a1c9d20a809ce3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x3c) open$dir(&(0x7f0000000140)='./file0\x00', 0x20000, 0x0) 3.302335283s ago: executing program 2 (id=588): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004000)={0x2020}, 0xffffff64) 2.69388444s ago: executing program 2 (id=589): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004000)={0x2020}, 0xffffff64) (fail_nth: 3) 2.491728278s ago: executing program 2 (id=590): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setitimer(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=0x1], 0x50) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000000140)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0xbb1e, 0x10500, 0x2, 0x0, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000)) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) 2.469680429s ago: executing program 0 (id=591): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff00000007058102"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) read$char_usb(r2, 0x0, 0x0) 2.071544086s ago: executing program 1 (id=592): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2}) syz_clone3(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) getdents64(r3, 0x0, 0x4f) 1.550316062s ago: executing program 2 (id=593): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = syz_io_uring_setup(0x17e1, &(0x7f0000000580)={0x0, 0xbbda, 0x13d00, 0x0, 0x2cb}, &(0x7f0000000140), &(0x7f0000000480), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) 1.463421964s ago: executing program 3 (id=595): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat(r0, &(0x7f0000000400)='test\x00', 0x42, 0x1ff) unlinkat(r0, &(0x7f0000000400)='test\x00', 0x0) r1 = openat(r0, &(0x7f0000000600)='test2\x00', 0x42, 0x1ff) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000000)=@md0, 0x0, &(0x7f0000000040)) write(r1, &(0x7f0000000500)='B', 0x1000) 1.403919732s ago: executing program 3 (id=596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x34, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x24008000) (fail_nth: 2) 1.314577728s ago: executing program 3 (id=597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40488c0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="341f000000080102c81700000000000000000000000506000240001c00000500030084ffffffff0004800900010073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x24008000) 1.242780813s ago: executing program 2 (id=598): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_int(r1, 0x0, 0x18, 0x0, &(0x7f0000000680)=0xe193e7befaa93be3) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @private=0xa010102, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000200)=ANY=[]) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000002640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffda6) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x200, "c6c0e6ed8755b5dc4e0e080c58ea0000000000060000000000000000000800", 0xfffffffb, 0xfffffffe, 0x2, 0x5}, 0x3c) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) ioctl$sock_netdev_private(r1, 0x89f4, &(0x7f00000006c0)="b2d311af94b8b8229af36783a7c917af570ae7b1e843a0a788f69d7891ade96769393efc8056a6f002e30c8d84568d737b56856a562c774053d0096856e5793fa1d5eece360b8e32970f256a6b5e797d92fc70f0bbf7cf41ac7523191c5565438e836ebd8eba368cc270864fb703f797122b8690d189cd617620c10d0a7a87960000000064d61000000000000000") r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r7, 0xc0405665, &(0x7f0000000040)={0x8000, 0x1, 0x5, 0x10, 0x91b, 0x7fffffff, 0xe}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x4e23, @empty}, {0x2, 0x4e25, @broadcast}, 0x304, 0x0, 0x0, 0x0, 0x2006, 0x0, 0x200003, 0x7, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001840)={0xffffffffffffffff, 0x0, 0xf1, 0x1007, &(0x7f0000000240)="99a44b279076353a3ec2faeb817fdd06d909a76a415bf59ead282a857c3371ab6737450c45313d826edd2a5d1209ef53207299e1a844278fa177a8f911142e25f73b3ac8175518a911096c314d1988d266d30878b7b3d852ee1bfa05d9ee892a2af378d14488fbebef10f9df106c9d65e336f4044aee6d06ca11ddd515bd636df2b5cb06138a9cbfb743d2d24bbd8756d2461e98120db45b66f3cca3d62e9bf9b591b7d7d2d1172d82cc4232844bda196ba56b4f5519a0a2b8f7b79827d7d08c40a4c5dfad4171592d8a6975e378a84b708c5f8a51e7c859f8b58ec175ac43e6294235cdf70b3b0fff9d0f321f994205f1", &(0x7f0000004680)=""/4103, 0x7, 0x0, 0x61, 0xd4, &(0x7f00000016c0)="081df3ed55393ed412cf60809cc44e1684d459499399fe6b32c58c836449e1e3ef66ee4077f5fe3e9485e95644b0901d2940db80f0274dde82c73292a260fc5bc3e580bf6a290b51a94a1d41136ca79371f4dbe03a4aaddc9cb49c5cd48c56afb2", &(0x7f0000000440)="79695d0a0789a67f7750953eef204de3cff6967d8756e703b9403df877474daccaf8316086973d2f3647bf5c0ab891c668f20bc071e9945f08eadd2626dd968c5801ee902e9dff812d5fbbcea49f36000c17bb0ec4179c5e5d8151961cb7a0615873a44c0d7caef4dbaa46edb9b0f8f306aec2a2413d3f19190ca1978c6f610b822643abb052f0b00c10d06ab47fa19e7140d45ef8d3c97f989d2d5eec45903936961c95868bd8ff063b719773622802db1e90e53fcec112cef7664618ae7790138e1a52819d6140bfb0331870d224ca4125f22c", 0x4, 0x0, 0x8}, 0x4c) write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x185b2000) r8 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80100, 0x9c) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r9, 0x29, 0x41, &(0x7f0000000340)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC, @ANYRESHEX=r9, @ANYRES16=r8, @ANYRESDEC=r4, @ANYRES32=r1, @ANYRES16=r1], 0x54) setsockopt$WPAN_WANTLQI(r8, 0x0, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$packet(r8, &(0x7f00000003c0)={0x11, 0x12, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002280), 0xffffffffffffffff) 1.113903335s ago: executing program 1 (id=599): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) syz_usbip_server_init(0x1) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000ffc)) 1.023644111s ago: executing program 3 (id=600): mkdir(0x0, 0x0) r0 = syz_open_dev$cec(0x0, 0x0, 0xe8c00) r1 = dup2(r0, r0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d1d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) syz_open_dev$usbfs(&(0x7f00000000c0), 0xd, 0x20000) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) chmod(0x0, 0x52) mount$9p_virtio(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000000080)={'trans=virtio,', {[{@access_uid={'access', 0x3d, 0xffffffffffffffff}}]}}) 328.076035ms ago: executing program 1 (id=601): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/kernel/mm/ksm/sleep_millisecs\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="10", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xc, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000004000070100000000fddbdf25047c00000c00c580080008"], 0x20}, 0x1, 0x0, 0x0, 0x2000c880}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r6 = geteuid() r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x2c, 0x3, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x40}}, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@ipv6_newaddr={0x3c, 0x14, 0x9535393fea6295b5, 0xfffffffe, 0x0, {0xa, 0x0, 0x46, 0xfe, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6bc}, @IFA_FLAGS={0xfffffd58, 0x8, 0x552}]}, 0x3c}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0xeff, 0x0, [@sadb_key={0x3, 0x9, 0x48, 0x0, "883dc2fd387d8aa5b9"}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x5, 0x2, 0xe0000000}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x68}, 0x1, 0x7}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=@newae={0x3a0, 0x1e, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@mcast1, 0x4d6, 0xa, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4, 0x3503}, [@extra_flags={0x8, 0x18, 0x101}, @policy={0xa8, 0x7, {{@in6=@private1, @in=@multicast2, 0x4e24, 0x2, 0x4e21, 0x400, 0xa, 0x20, 0x80, 0x6, r2, r4}, {0x1, 0x8000000000000001, 0x400, 0x2, 0xd, 0x6, 0x0, 0xf79f}, {0x800, 0xa45b, 0x80000001, 0xfffffffffffff9de}, 0x1ff, 0x6e6bb4, 0x1, 0x1, 0x2}}, @proto={0x5, 0x19, 0x32}, @proto={0x5}, @sa={0xe0, 0x6, {{@in=@multicast2, @in=@private=0xa010101, 0x4e21, 0x0, 0x4e22, 0x1, 0xa, 0x80, 0x20, 0x67, r5, r6}, {@in6=@loopback, 0x4d2, 0xff}, @in=@multicast2, {0x3, 0xc03, 0x0, 0x2, 0x5, 0x0, 0x574, 0x8}, {0x2, 0x1, 0x0, 0xfffffffffffffff3}, {0xfffffffc, 0x3, 0x5}, 0x70bd2a, 0x3502, 0xa, 0x0, 0xc}}, @sa={0xe0, 0x6, {{@in=@dev={0xac, 0x14, 0x14, 0xa}, @in=@multicast2, 0x4e24, 0x9, 0x4e21, 0x0, 0xa, 0x0, 0xa0, 0x5c, r9, r11}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d5, 0xff}, @in=@local, {0x6, 0x9, 0x3, 0x80000001, 0x90, 0x7, 0xffffffffffffffff, 0x2}, {0x1, 0x4, 0x3ff, 0xffffffff}, {0x0, 0x9, 0xbd32}, 0x70bd2b, 0x3507, 0x2, 0x1, 0x8, 0x59}}, @address_filter={0x28, 0x1a, {@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@empty, 0xd4868bdccc64311, 0x4, 0x3}}, @coaddr={0x14, 0xe, @in=@private=0xa010101}, @migrate={0x9c, 0x11, [{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast1, @in=@loopback, 0x32, 0x3, 0x0, 0x34ff, 0x2, 0xa}, {@in6=@local, @in=@loopback, @in=@multicast2, @in6=@mcast2, 0x6c, 0x3, 0x0, 0x3506, 0xa, 0xa}]}, @proto={0x5, 0x19, 0x33}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x24000002}, 0x4c810) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r13, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r13, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 172.532032ms ago: executing program 1 (id=602): mkdir(0x0, 0x0) r0 = syz_open_dev$cec(0x0, 0x0, 0xe8c00) r1 = dup2(r0, r0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d1d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) syz_open_dev$usbfs(&(0x7f00000000c0), 0xd, 0x20000) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) chmod(0x0, 0x52) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000000080)={'trans=virtio,', {[{@access_uid={'access', 0x3d, 0xffffffffffffffff}}]}}) 62.360856ms ago: executing program 3 (id=603): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x80}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) splice(r0, &(0x7f0000000040)=0x2, r2, 0x0, 0x889, 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r4, r5, 0x25, 0x0, @val=@iter={0x0}}, 0x20) r6 = open(&(0x7f0000000640)='./file0\x00', 0x2800, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x35, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000400000000000000070000001811000002a53b6aaf63f0e44eebdac080976ca9909894cd5c2496dc64af312a1de106d38ea8beda27ad24c9e6a458de5fdf2abd1bc9b29ed79cb8b64a27060076c962e9037657379815c28ce385f0b47499bcafcf3278f715f3b197303a1448b0c00365e0cc025d3e1e36a3df25c5362593cb2b11e695d0ebe5dbbb48623c", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x4, 0x9f, &(0x7f00000004c0)=""/159, 0x40f00, 0x11, '\x00', r5, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xa988, r6, 0x5, &(0x7f0000000680)=[0xffffffffffffffff, r0], &(0x7f00000006c0)=[{0x3, 0x4, 0xa, 0x2}, {0x3, 0x1, 0x0, 0x3}, {0x4, 0x4, 0xa, 0x3}, {0x2, 0x4, 0x0, 0x6}, {0x4, 0x2, 0xf, 0x8}], 0x10, 0x560}, 0x94) r7 = syz_io_uring_setup(0x17e1, &(0x7f0000000580)={0x0, 0xbbda, 0x13d00, 0x0, 0x2cb}, &(0x7f0000000140), &(0x7f0000000480), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x21, &(0x7f0000000440), 0x1) 0s ago: executing program 3 (id=604): r0 = open(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x6}}}, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x4e24, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0x8, 0x4) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): no altsetting 0 [ 142.875831][ T41] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.879058][ T41] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 142.882671][ T41] usb 8-1: config 0 interface 0 has no altsetting 0 [ 142.885060][ T5813] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 142.888094][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.890803][ T5813] usb 6-1: Product: syz [ 142.892266][ T5813] usb 6-1: Manufacturer: syz [ 142.894102][ T41] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.897435][ T41] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 142.900835][ T5813] usb 6-1: SerialNumber: syz [ 142.902996][ T41] usb 8-1: config 0 interface 0 has no altsetting 0 [ 142.906626][ T5813] usb 6-1: config 0 descriptor?? [ 142.909043][ T41] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.913570][ T41] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 142.917029][ T41] usb 8-1: config 0 interface 0 has no altsetting 0 [ 142.920177][ T41] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.923007][ T41] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 142.926410][ T41] usb 8-1: config 0 interface 0 has no altsetting 0 [ 142.929809][ T41] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.935004][ T41] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 142.938969][ T41] usb 8-1: config 0 interface 0 has no altsetting 0 [ 142.958827][ T41] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.961790][ T41] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 142.962337][ T7202] netlink: 'syz.2.264': attribute type 11 has an invalid length. [ 142.965276][ T41] usb 8-1: config 0 interface 0 has no altsetting 0 [ 142.970869][ T41] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.973785][ T41] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 142.977025][ T41] usb 8-1: config 0 interface 0 has no altsetting 0 [ 142.981165][ T41] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 142.984204][ T41] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 142.986848][ T41] usb 8-1: Product: syz [ 142.988315][ T41] usb 8-1: Manufacturer: syz [ 142.989833][ T41] usb 8-1: SerialNumber: syz [ 142.996207][ T41] usb 8-1: config 0 descriptor?? [ 143.005193][ T41] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 143.174932][ T7202] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.178663][ T7202] A link change request failed with some changes committed already. Interface s may have been left with an inconsistent configuration, please check. [ 143.189184][ T7204] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 143.191753][ T7204] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 143.258535][ T56] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 143.305009][ T1486] usb 8-1: USB disconnect, device number 43 [ 143.312363][ T1486] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 143.316802][ T5813] usbhid 6-1:0.0: can't add hid device: -71 [ 143.318807][ T5813] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 143.329751][ T5813] usb 6-1: USB disconnect, device number 27 [ 143.418072][ T56] usb 5-1: Using ep0 maxpacket: 32 [ 143.436597][ T56] usb 5-1: config 0 has no interfaces? [ 143.455794][ T56] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 143.468647][ T56] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 143.478064][ T56] usb 5-1: Product: syz [ 143.479989][ T56] usb 5-1: Manufacturer: syz [ 143.483824][ T56] usb 5-1: SerialNumber: syz [ 143.531700][ T56] usb 5-1: config 0 descriptor?? [ 143.879724][ T5813] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 144.088100][ T5813] usb 7-1: Using ep0 maxpacket: 32 [ 144.111324][ T5813] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 144.119198][ T5813] usb 7-1: can't read configurations, error -61 [ 144.247965][ T5813] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 144.408694][ T5813] usb 7-1: Using ep0 maxpacket: 32 [ 144.424494][ T5813] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 144.440913][ T5813] usb 7-1: can't read configurations, error -61 [ 144.446218][ T5813] usb usb7-port1: attempt power cycle [ 144.832566][ T5813] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 144.860376][ T6443] usb 5-1: USB disconnect, device number 33 [ 144.880596][ T5813] usb 7-1: Using ep0 maxpacket: 32 [ 144.916862][ T5813] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 144.957019][ T5813] usb 7-1: can't read configurations, error -61 [ 145.077483][ T7218] scsi_strcpy_devinfo: vendor string '¼QTò?¬Ý]Ð+É,r' is too long [ 145.119533][ T7228] comedi comedi3: comedi_config --init_data is deprecated [ 145.147787][ T5813] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 145.168259][ T5813] usb 7-1: Using ep0 maxpacket: 32 [ 145.174022][ T5813] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 145.181330][ T5813] usb 7-1: can't read configurations, error -61 [ 145.185930][ T5813] usb usb7-port1: unable to enumerate USB device [ 146.247868][ T6720] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 146.399792][ T6720] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 146.403851][ T6720] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 146.407986][ T6720] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 146.411752][ T6720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.423439][ T6720] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 146.436751][ T6720] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 146.448057][ T6781] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 146.599594][ T6781] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.604187][ T6781] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 146.608131][ T6781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.613968][ T6781] usb 5-1: config 0 descriptor?? [ 146.808051][ T7260] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 146.813742][ T7260] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 146.817243][ T7260] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 146.831595][ T6781] usbhid 5-1:0.0: can't add hid device: -71 [ 146.834266][ T6781] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 146.840436][ T6781] usb 5-1: USB disconnect, device number 34 [ 146.887938][ T41] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 146.913611][ T7260] SPCP8x5 ttyUSB0: Set UART format 0x70b failed (error = -32) [ 147.049378][ T41] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.052915][ T41] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 147.055872][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.060126][ T41] usb 7-1: config 0 descriptor?? [ 147.109655][ T6781] usb 6-1: USB disconnect, device number 28 [ 147.119006][ T6781] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 147.123080][ T6781] spcp8x5 6-1:1.0: device disconnected [ 147.270742][ T41] usbhid 7-1:0.0: can't add hid device: -71 [ 147.272674][ T41] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 147.277052][ T41] usb 7-1: USB disconnect, device number 38 [ 147.561962][ T7274] comedi comedi3: comedi_config --init_data is deprecated [ 147.717835][ T41] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 147.879036][ T41] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 147.882550][ T41] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.889701][ T41] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 147.893785][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.896499][ T41] usb 7-1: Product: syz [ 147.898111][ T41] usb 7-1: Manufacturer: syz [ 147.899746][ T41] usb 7-1: SerialNumber: syz [ 147.906199][ T41] usbhid 7-1:1.0: couldn't find an input interrupt endpoint [ 147.988092][ T6781] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 148.157977][ T6781] usb 6-1: Using ep0 maxpacket: 32 [ 148.165993][ T6781] usb 6-1: config 0 has no interfaces? [ 148.177869][ T6781] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 148.181393][ T6781] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 148.185097][ T6781] usb 6-1: Product: syz [ 148.187030][ T6781] usb 6-1: Manufacturer: syz [ 148.188961][ T6781] usb 6-1: SerialNumber: syz [ 148.221074][ T6781] usb 6-1: config 0 descriptor?? [ 148.308774][ T41] usb 7-1: USB disconnect, device number 39 [ 148.818164][ T6720] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 148.998873][ T6720] usb 8-1: Using ep0 maxpacket: 32 [ 149.015990][ T6720] usb 8-1: config 0 has no interfaces? [ 149.033309][ T6720] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 149.050528][ T6720] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 149.069619][ T6720] usb 8-1: Product: syz [ 149.080344][ T6720] usb 8-1: Manufacturer: syz [ 149.089070][ T6720] usb 8-1: SerialNumber: syz [ 149.240764][ T6720] usb 8-1: config 0 descriptor?? [ 149.493172][ T34] usb 6-1: USB disconnect, device number 29 [ 149.957945][ T5842] usb 8-1: USB disconnect, device number 44 [ 150.134842][ T7294] comedi comedi3: comedi_config --init_data is deprecated [ 150.818463][ T41] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 150.987922][ T41] usb 5-1: Using ep0 maxpacket: 32 [ 150.992813][ T41] usb 5-1: no configurations [ 150.994262][ T41] usb 5-1: can't read configurations, error -22 [ 151.128576][ T41] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 151.287974][ T41] usb 5-1: Using ep0 maxpacket: 32 [ 151.297967][ T41] usb 5-1: no configurations [ 151.309615][ T41] usb 5-1: can't read configurations, error -22 [ 151.324882][ T41] usb usb5-port1: attempt power cycle [ 151.690916][ T41] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 151.724043][ T7310] comedi comedi3: comedi_config --init_data is deprecated [ 151.765751][ T41] usb 5-1: Using ep0 maxpacket: 32 [ 151.838529][ T41] usb 5-1: no configurations [ 151.876854][ T41] usb 5-1: can't read configurations, error -22 [ 152.069988][ T41] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 152.113908][ T41] usb 5-1: Using ep0 maxpacket: 32 [ 152.210488][ T41] usb 5-1: no configurations [ 152.293132][ T41] usb 5-1: can't read configurations, error -22 [ 152.344214][ T41] usb usb5-port1: unable to enumerate USB device [ 152.828250][ T56] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 153.009310][ T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.012834][ T56] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 153.015782][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.020238][ T56] usb 7-1: config 0 descriptor?? [ 153.078137][ T5885] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 153.234190][ T7345] netlink: 'syz.1.294': attribute type 1 has an invalid length. [ 153.237643][ T56] usbhid 7-1:0.0: can't add hid device: -71 [ 153.240406][ T56] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 153.249436][ T56] usb 7-1: USB disconnect, device number 40 [ 153.254443][ T7345] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 153.307885][ T5885] usb 8-1: Using ep0 maxpacket: 32 [ 153.568065][ T1486] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 153.718004][ T1486] usb 5-1: Using ep0 maxpacket: 32 [ 153.722732][ T1486] usb 5-1: config 0 has no interfaces? [ 153.727354][ T1486] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 153.730871][ T1486] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 153.737967][ T1486] usb 5-1: Product: syz [ 153.739655][ T1486] usb 5-1: Manufacturer: syz [ 153.741870][ T1486] usb 5-1: SerialNumber: syz [ 153.755081][ T1486] usb 5-1: config 0 descriptor?? [ 153.788532][ T6781] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 153.957856][ T6781] usb 6-1: Using ep0 maxpacket: 32 [ 153.966911][ T5885] usb 8-1: config 0 has no interfaces? [ 153.967126][ T6781] usb 6-1: config 0 has no interfaces? [ 153.975897][ T6781] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 153.978967][ T6781] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 153.981776][ T6781] usb 6-1: Product: syz [ 153.983262][ T6781] usb 6-1: Manufacturer: syz [ 153.985490][ T6781] usb 6-1: SerialNumber: syz [ 154.018286][ T6781] usb 6-1: config 0 descriptor?? [ 154.387816][ T56] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 154.587767][ T5885] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 154.692513][ T5885] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 154.695158][ T5885] usb 8-1: Product: syz [ 154.696511][ T5885] usb 8-1: Manufacturer: syz [ 154.698077][ T5885] usb 8-1: SerialNumber: syz [ 154.703200][ T5885] usb 8-1: config 0 descriptor?? [ 154.745206][ T1486] usb 5-1: USB disconnect, device number 39 [ 154.945690][ T5885] usb 8-1: USB disconnect, device number 45 [ 155.144720][ T6781] usb 6-1: USB disconnect, device number 30 [ 155.179260][ T56] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 155.183245][ T56] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.189973][ T56] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 155.193532][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.196642][ T56] usb 7-1: Product: syz [ 155.198437][ T56] usb 7-1: Manufacturer: syz [ 155.200219][ T56] usb 7-1: SerialNumber: syz [ 155.208206][ T56] usbhid 7-1:1.0: couldn't find an input interrupt endpoint [ 155.312460][ T7360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.297'. [ 155.380509][ T7362] netlink: 16 bytes leftover after parsing attributes in process `syz.0.298'. [ 155.619691][ T5885] usb 7-1: USB disconnect, device number 41 [ 155.631139][ T7370] comedi comedi3: comedi_config --init_data is deprecated [ 157.409245][ T6720] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 157.607827][ T6720] usb 7-1: Using ep0 maxpacket: 32 [ 157.614296][ T6720] usb 7-1: no configurations [ 157.616592][ T6720] usb 7-1: can't read configurations, error -22 [ 157.757841][ T6720] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 157.925091][ T7415] FAULT_INJECTION: forcing a failure. [ 157.925091][ T7415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.932111][ T7415] CPU: 2 UID: 0 PID: 7415 Comm: syz.3.307 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.932142][ T7415] Tainted: [L]=SOFTLOCKUP [ 157.932148][ T7415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.932159][ T7415] Call Trace: [ 157.932166][ T7415] [ 157.932173][ T7415] dump_stack_lvl+0x100/0x190 [ 157.932219][ T7415] should_fail_ex.cold+0x5/0xa [ 157.932241][ T7415] _copy_from_iter+0x1f4/0x1690 [ 157.932271][ T7415] ? __asan_memset+0x23/0x50 [ 157.932293][ T7415] ? __pfx__copy_from_iter+0x10/0x10 [ 157.932317][ T7415] ? __pfx___alloc_skb+0x10/0x10 [ 157.932350][ T7415] netlink_sendmsg+0x808/0xda0 [ 157.932373][ T7415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.932394][ T7415] ? apparmor_socket_sendmsg+0x15b/0x270 [ 157.932417][ T7415] ____sys_sendmsg+0xa4d/0xbe0 [ 157.932433][ T7415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.932453][ T7415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.932478][ T7415] ___sys_sendmsg+0x190/0x1e0 [ 157.932496][ T7415] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.932524][ T7415] ? find_held_lock+0x2b/0x80 [ 157.932576][ T7415] __sys_sendmsg+0x160/0x210 [ 157.932601][ T7415] ? __pfx___sys_sendmsg+0x10/0x10 [ 157.932628][ T7415] ? __pfx_ksys_write+0x10/0x10 [ 157.932650][ T7415] __do_fast_syscall_32+0xe7/0x970 [ 157.932676][ T7415] ? lockdep_hardirqs_on+0x78/0x100 [ 157.932699][ T7415] do_fast_syscall_32+0x32/0x70 [ 157.932723][ T7415] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.932745][ T7415] RIP: 0023:0xf700efec [ 157.932764][ T7415] Code: Unable to access opcode bytes at 0xf700efc2. [ 157.932879][ T7415] RSP: 002b:00000000f53dc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 157.932897][ T7415] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 157.932908][ T7415] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.932917][ T7415] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.932927][ T7415] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 157.932937][ T7415] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.932958][ T7415] [ 158.257818][ T6720] usb 7-1: Using ep0 maxpacket: 32 [ 158.260800][ T6720] usb 7-1: no configurations [ 158.262820][ T6720] usb 7-1: can't read configurations, error -22 [ 158.265550][ T6720] usb usb7-port1: attempt power cycle [ 158.467804][ T5885] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 158.518341][ T6443] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 158.629270][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.632787][ T5885] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 158.635677][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.640316][ T5885] usb 5-1: config 0 descriptor?? [ 158.677875][ T6720] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 158.699040][ T6720] usb 7-1: Using ep0 maxpacket: 32 [ 158.701430][ T6720] usb 7-1: no configurations [ 158.702953][ T6720] usb 7-1: can't read configurations, error -22 [ 158.711689][ T6443] usb 8-1: Using ep0 maxpacket: 32 [ 158.732889][ T6443] usb 8-1: config 0 has no interfaces? [ 158.752258][ T6443] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 158.782616][ T6443] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 158.793868][ T6443] usb 8-1: Product: syz [ 158.798594][ T6443] usb 8-1: Manufacturer: syz [ 158.804228][ T6443] usb 8-1: SerialNumber: syz [ 158.842755][ T6443] usb 8-1: config 0 descriptor?? [ 158.850209][ T5885] usbhid 5-1:0.0: can't add hid device: -71 [ 158.852229][ T5885] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 158.858931][ T5885] usb 5-1: USB disconnect, device number 40 [ 158.860899][ T6720] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 158.878527][ T6720] usb 7-1: Using ep0 maxpacket: 32 [ 158.880721][ T6720] usb 7-1: no configurations [ 158.882189][ T6720] usb 7-1: can't read configurations, error -22 [ 158.884435][ T6720] usb usb7-port1: unable to enumerate USB device [ 159.187890][ T7431] gadgetfs: bound to dummy_udc driver [ 159.298363][ T5885] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 159.548243][ T5885] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 159.551691][ T5885] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.558011][ T5885] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 159.561083][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.563733][ T5885] usb 5-1: Product: syz [ 159.565211][ T5885] usb 5-1: Manufacturer: syz [ 159.566861][ T5885] usb 5-1: SerialNumber: syz [ 159.573898][ T5885] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 159.787485][ T7437] comedi comedi3: comedi_config --init_data is deprecated [ 159.931526][ T6443] usb 8-1: USB disconnect, device number 46 [ 159.974215][ T5846] usb 5-1: USB disconnect, device number 41 [ 160.518891][ T7443] WARNING! power/level is deprecated; use power/control instead [ 160.898111][ T55] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 161.058673][ T55] usb 6-1: Using ep0 maxpacket: 32 [ 161.073136][ T55] usb 6-1: config 0 has no interfaces? [ 161.090422][ T55] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 161.101983][ T55] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 161.113344][ T55] usb 6-1: Product: syz [ 161.121077][ T55] usb 6-1: Manufacturer: syz [ 161.128148][ T55] usb 6-1: SerialNumber: syz [ 161.129713][ T5846] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 161.198156][ T55] usb 6-1: config 0 descriptor?? [ 161.288247][ T5846] usb 5-1: Using ep0 maxpacket: 32 [ 161.338559][ T5846] usb 5-1: config 0 has no interfaces? [ 161.347382][ T5846] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 161.360674][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 161.365114][ T5846] usb 5-1: Product: syz [ 161.366770][ T5846] usb 5-1: Manufacturer: syz [ 161.371306][ T5846] usb 5-1: SerialNumber: syz [ 161.507904][ T5846] usb 5-1: config 0 descriptor?? [ 162.871050][ T55] usb 6-1: USB disconnect, device number 31 [ 162.968931][ T6720] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 163.127888][ T6720] usb 8-1: Using ep0 maxpacket: 32 [ 163.143237][ T6720] usb 8-1: config 0 has no interfaces? [ 163.161353][ T6720] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 163.174012][ T6720] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 163.183265][ T6720] usb 8-1: Product: syz [ 163.187086][ T6720] usb 8-1: Manufacturer: syz [ 163.191322][ T6720] usb 8-1: SerialNumber: syz [ 163.229397][ T6720] usb 8-1: config 0 descriptor?? [ 163.527950][ T6443] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 163.679733][ T6443] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.684366][ T6443] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 163.688361][ T6443] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.694348][ T6443] usb 7-1: config 0 descriptor?? [ 163.700319][ T6720] usb 5-1: USB disconnect, device number 42 [ 163.906506][ T6443] usbhid 7-1:0.0: can't add hid device: -71 [ 163.909668][ T6443] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 163.920710][ T6443] usb 7-1: USB disconnect, device number 46 [ 164.347874][ T55] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 164.509816][ T55] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 164.513888][ T55] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 164.520348][ T55] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 164.523314][ T55] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.525844][ T55] usb 7-1: Product: syz [ 164.527175][ T55] usb 7-1: Manufacturer: syz [ 164.530367][ T55] usb 7-1: SerialNumber: syz [ 164.538604][ T6781] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 164.687791][ T6781] usb 5-1: Using ep0 maxpacket: 8 [ 164.690875][ T6781] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.694808][ T6781] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 164.698573][ T6781] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 164.704119][ T6781] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 164.707127][ T6781] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 164.709594][ T6781] usb 5-1: Product: syz [ 164.710905][ T6781] usb 5-1: Manufacturer: syz [ 164.712400][ T6781] usb 5-1: SerialNumber: syz [ 164.716197][ T6781] usb 5-1: config 0 descriptor?? [ 164.744396][ T6443] usb 8-1: USB disconnect, device number 47 [ 164.777878][ T6781] rc_core: IR keymap rc-imon-rsc not found [ 164.779815][ T6781] Registered IR keymap rc-empty [ 164.784199][ T6781] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 164.788723][ T6781] input: iMON Station as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 164.939014][ T6781] usb 7-1: USB disconnect, device number 47 [ 165.026512][ T7475] FAULT_INJECTION: forcing a failure. [ 165.026512][ T7475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.031689][ T7475] CPU: 2 UID: 0 PID: 7475 Comm: syz.0.329 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.031710][ T7475] Tainted: [L]=SOFTLOCKUP [ 165.031715][ T7475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 165.031723][ T7475] Call Trace: [ 165.031728][ T7475] [ 165.031732][ T7475] dump_stack_lvl+0x100/0x190 [ 165.031752][ T7475] should_fail_ex.cold+0x5/0xa [ 165.031766][ T7475] _copy_from_user+0x2e/0xd0 [ 165.031784][ T7475] evdev_handle_set_keycode_v2+0xb5/0x150 [ 165.031803][ T7475] ? __pfx_evdev_handle_set_keycode_v2+0x10/0x10 [ 165.031824][ T7475] ? rcu_is_watching+0x12/0xc0 [ 165.031840][ T7475] ? trace_contention_end+0x126/0x160 [ 165.031854][ T7475] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 165.031874][ T7475] evdev_do_ioctl+0x706/0x1b60 [ 165.031893][ T7475] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 165.031910][ T7475] ? __pfx___mutex_lock+0x10/0x10 [ 165.031962][ T7475] evdev_ioctl_compat+0x16f/0x1a0 [ 165.031980][ T7475] ? __pfx_evdev_ioctl_compat+0x10/0x10 [ 165.031998][ T7475] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 165.032019][ T7475] __do_fast_syscall_32+0xe7/0x970 [ 165.032036][ T7475] ? lockdep_hardirqs_on+0x78/0x100 [ 165.032053][ T7475] do_fast_syscall_32+0x32/0x70 [ 165.032070][ T7475] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 165.032085][ T7475] RIP: 0023:0xf7fa5fec [ 165.032099][ T7475] Code: Unable to access opcode bytes at 0xf7fa5fc2. [ 165.032104][ T7475] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 165.032116][ T7475] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000040284504 [ 165.032124][ T7475] RDX: 0000000080004e40 RSI: 0000000000000000 RDI: 0000000000000000 [ 165.032130][ T7475] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 165.032137][ T7475] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 165.032143][ T7475] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 165.032156][ T7475] [ 165.033277][ T55] usb 5-1: USB disconnect, device number 43 [ 165.459997][ T7489] comedi comedi3: comedi_config --init_data is deprecated [ 165.782231][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.335'. [ 166.179291][ T6443] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 166.207437][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'. [ 166.338406][ T6443] usb 7-1: Using ep0 maxpacket: 32 [ 166.360809][ T6443] usb 7-1: config 0 has no interfaces? [ 166.400649][ T6443] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 166.426956][ T6443] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 166.453237][ T6443] usb 7-1: Product: syz [ 166.479685][ T6443] usb 7-1: Manufacturer: syz [ 166.521030][ T6443] usb 7-1: SerialNumber: syz [ 166.656915][ T6443] usb 7-1: config 0 descriptor?? [ 167.780859][ T56] usb 7-1: USB disconnect, device number 48 [ 167.863317][ T7518] gadgetfs: bound to dummy_udc driver [ 168.315222][ T7523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'. [ 168.407819][ T55] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 168.506852][ T7533] input: syz0 as /devices/virtual/input/input8 [ 168.637863][ T55] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 168.642364][ T7536] hub 1-0:1.0: USB hub found [ 168.642784][ T55] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 168.645970][ T7536] hub 1-0:1.0: 2 ports detected [ 168.648817][ T55] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 168.654801][ T55] usb 5-1: config 0 interface 0 has no altsetting 0 [ 168.658527][ T55] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 168.661765][ T55] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 168.665285][ T55] usb 5-1: config 0 interface 0 has no altsetting 0 [ 168.668936][ T55] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 168.672033][ T55] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 168.675487][ T55] usb 5-1: config 0 interface 0 has no altsetting 0 [ 168.678918][ T55] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 168.681826][ T55] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 168.685315][ T55] usb 5-1: config 0 interface 0 has no altsetting 0 [ 168.688653][ T55] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 168.691575][ T55] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 168.695034][ T55] usb 5-1: config 0 interface 0 has no altsetting 0 [ 168.698576][ T55] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 168.701623][ T55] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 168.705099][ T55] usb 5-1: config 0 interface 0 has no altsetting 0 [ 168.708184][ T55] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 168.711013][ T55] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 168.714384][ T55] usb 5-1: config 0 interface 0 has no altsetting 0 [ 168.717196][ T55] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 168.720129][ T55] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 168.723549][ T55] usb 5-1: config 0 interface 0 has no altsetting 0 [ 168.727029][ T55] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 168.729982][ T55] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 168.732836][ T55] usb 5-1: Product: syz [ 168.734230][ T55] usb 5-1: Manufacturer: syz [ 168.742118][ T55] usb 5-1: SerialNumber: syz [ 168.745173][ T55] usb 5-1: config 0 descriptor?? [ 168.759077][ T55] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 168.973660][ T55] usb 5-1: USB disconnect, device number 44 [ 168.985576][ T55] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 169.401819][ T7547] comedi comedi3: comedi_config --init_data is deprecated [ 169.530915][ T7549] input: syz0 as /devices/virtual/input/input9 [ 169.565214][ T7551] comedi comedi3: comedi_config --init_data is deprecated [ 170.064420][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'. [ 170.208496][ T7559] hub 1-0:1.0: USB hub found [ 170.211220][ T7559] hub 1-0:1.0: 2 ports detected [ 170.337897][ T5741] Bluetooth: hci1: command 0x0406 tx timeout [ 170.337963][ T5746] Bluetooth: hci2: command 0x0406 tx timeout [ 170.347778][ T5746] Bluetooth: hci3: command 0x0406 tx timeout [ 170.347787][ T5741] Bluetooth: hci0: command 0x0406 tx timeout [ 170.717920][ T6720] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 170.898177][ T6720] usb 5-1: Using ep0 maxpacket: 32 [ 170.923479][ T6720] usb 5-1: config 0 has no interfaces? [ 170.933693][ T6720] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 170.939981][ T6720] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 170.947402][ T6720] usb 5-1: Product: syz [ 170.953317][ T6720] usb 5-1: Manufacturer: syz [ 170.960228][ T6720] usb 5-1: SerialNumber: syz [ 171.038799][ T6720] usb 5-1: config 0 descriptor?? [ 172.523617][ T6720] usb 5-1: USB disconnect, device number 45 [ 172.673355][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.354'. [ 173.093356][ T7594] comedi comedi3: comedi_config --init_data is deprecated [ 174.698020][ T1486] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 174.890741][ T1486] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 174.903598][ T1486] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.913025][ T1486] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.926047][ T1486] usb 7-1: config 0 interface 0 has no altsetting 0 [ 174.946206][ T1486] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.949466][ T1486] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.953060][ T1486] usb 7-1: config 0 interface 0 has no altsetting 0 [ 174.957464][ T1486] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.960899][ T1486] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.964386][ T1486] usb 7-1: config 0 interface 0 has no altsetting 0 [ 174.976558][ T1486] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.980070][ T1486] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.984323][ T1486] usb 7-1: config 0 interface 0 has no altsetting 0 [ 174.992387][ T1486] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.995532][ T1486] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.999559][ T1486] usb 7-1: config 0 interface 0 has no altsetting 0 [ 175.007005][ T1486] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.011710][ T1486] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.017501][ T1486] usb 7-1: config 0 interface 0 has no altsetting 0 [ 175.027894][ T1486] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.033883][ T1486] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.037288][ T1486] usb 7-1: config 0 interface 0 has no altsetting 0 [ 175.049662][ T1486] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.052818][ T1486] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.057667][ T1486] usb 7-1: config 0 interface 0 has no altsetting 0 [ 175.075787][ T1486] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 175.079480][ T1486] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 175.082881][ T1486] usb 7-1: Product: syz [ 175.084342][ T1486] usb 7-1: Manufacturer: syz [ 175.086110][ T1486] usb 7-1: SerialNumber: syz [ 175.112897][ T1486] usb 7-1: config 0 descriptor?? [ 175.195327][ T1486] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 175.598024][ T1486] usb 7-1: USB disconnect, device number 49 [ 175.624689][ T1486] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 176.412092][ T6443] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 176.490335][ T7631] FAULT_INJECTION: forcing a failure. [ 176.490335][ T7631] name failslab, interval 1, probability 0, space 0, times 0 [ 176.498368][ T7631] CPU: 3 UID: 0 PID: 7631 Comm: syz.2.369 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.498402][ T7631] Tainted: [L]=SOFTLOCKUP [ 176.498406][ T7631] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.498414][ T7631] Call Trace: [ 176.498418][ T7631] [ 176.498423][ T7631] dump_stack_lvl+0x100/0x190 [ 176.498443][ T7631] should_fail_ex.cold+0x5/0xa [ 176.498457][ T7631] should_failslab+0xc2/0x120 [ 176.498476][ T7631] kmem_cache_alloc_noprof+0x91/0x6a0 [ 176.498493][ T7631] ? anon_vma_clone+0x2ba/0xcd0 [ 176.498515][ T7631] anon_vma_clone+0x2ba/0xcd0 [ 176.498537][ T7631] __split_vma+0x51f/0xda0 [ 176.498551][ T7631] ? __pfx___split_vma+0x10/0x10 [ 176.498561][ T7631] ? __lock_acquire+0x49f/0x1a40 [ 176.498586][ T7631] ? __lock_acquire+0x49f/0x1a40 [ 176.498606][ T7631] vms_gather_munmap_vmas+0x1d2/0x1720 [ 176.498620][ T7631] ? mtree_range_walk+0x72b/0xb70 [ 176.498636][ T7631] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 176.498653][ T7631] ? mas_walk+0x6ef/0x9b0 [ 176.498674][ T7631] __mmap_region+0x4a7/0x2db0 [ 176.498687][ T7631] ? __pfx___might_resched+0x10/0x10 [ 176.498707][ T7631] ? __pfx___mmap_region+0x10/0x10 [ 176.498718][ T7631] ? find_held_lock+0x2b/0x80 [ 176.498732][ T7631] ? process_measurement+0x4c8/0x2350 [ 176.498751][ T7631] ? process_measurement+0x4c8/0x2350 [ 176.498764][ T7631] ? down_write+0x146/0x1f0 [ 176.498790][ T7631] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 176.498822][ T7631] ? find_held_lock+0x2b/0x80 [ 176.498836][ T7631] ? is_bpf_text_address+0x8a/0x1a0 [ 176.498854][ T7631] ? is_bpf_text_address+0x8a/0x1a0 [ 176.498894][ T7631] mmap_region+0x35d/0x620 [ 176.498909][ T7631] ? __pfx_mmap_region+0x10/0x10 [ 176.498925][ T7631] ? bpf_lsm_capable+0x9/0x10 [ 176.498940][ T7631] ? security_capable+0x80/0x260 [ 176.498955][ T7631] do_mmap+0xc63/0x12f0 [ 176.498975][ T7631] ? __pfx_do_mmap+0x10/0x10 [ 176.498991][ T7631] ? __pfx_down_write_killable+0x10/0x10 [ 176.499012][ T7631] vm_mmap_pgoff+0x29e/0x470 [ 176.499033][ T7631] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 176.499048][ T7631] ? __fget_files+0x215/0x3d0 [ 176.499063][ T7631] ? __fget_files+0x21f/0x3d0 [ 176.499076][ T7631] ksys_mmap_pgoff+0x3cb/0x610 [ 176.499094][ T7631] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 176.499108][ T7631] ? ksys_write+0x1ac/0x250 [ 176.499119][ T7631] ? __pfx_ksys_write+0x10/0x10 [ 176.499143][ T7631] __do_fast_syscall_32+0xe7/0x970 [ 176.499163][ T7631] ? lockdep_hardirqs_on+0x78/0x100 [ 176.499180][ T7631] do_fast_syscall_32+0x32/0x70 [ 176.499197][ T7631] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.499212][ T7631] RIP: 0023:0xf706efec [ 176.499226][ T7631] Code: Unable to access opcode bytes at 0xf706efc2. [ 176.499231][ T7631] RSP: 002b:00000000f541b50c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 176.499243][ T7631] RAX: ffffffffffffffda RBX: 0000000080200000 RCX: 0000000000400000 [ 176.499250][ T7631] RDX: 000000000000000b RSI: 0000000000002012 RDI: 000000000000000f [ 176.499257][ T7631] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 176.499263][ T7631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.499270][ T7631] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.499283][ T7631] [ 176.557790][ T6443] usb 6-1: Using ep0 maxpacket: 32 [ 176.651059][ T6443] usb 6-1: config 0 has no interfaces? [ 176.654463][ T6443] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 176.657475][ T6443] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 176.667063][ T6443] usb 6-1: Product: syz [ 176.672528][ T6443] usb 6-1: Manufacturer: syz [ 176.674038][ T6443] usb 6-1: SerialNumber: syz [ 176.681636][ T6443] usb 6-1: config 0 descriptor?? [ 176.895319][ T6443] usb 6-1: USB disconnect, device number 32 [ 177.057905][ T5846] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 177.207815][ T5846] usb 5-1: Using ep0 maxpacket: 16 [ 177.212235][ T5846] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.216542][ T5846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 177.221855][ T5846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 177.225807][ T5846] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 177.231073][ T5846] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.237304][ T5846] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 177.241629][ T5846] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 177.246170][ T5846] usb 5-1: Manufacturer: syz [ 177.255017][ T5846] usb 5-1: config 0 descriptor?? [ 177.697896][ T5846] rc_core: IR keymap rc-hauppauge not found [ 178.278613][ T5846] Registered IR keymap rc-empty [ 178.280288][ T5846] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 178.307980][ T5846] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 178.328842][ T5846] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 178.345245][ T5846] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 178.353864][ T5846] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 178.362133][ T7658] netlink: 16 bytes leftover after parsing attributes in process `syz.3.378'. [ 178.378429][ T5846] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 178.397833][ T5846] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 178.417874][ T5846] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 178.437811][ T5846] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 178.458510][ T5846] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 178.477819][ T5846] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 178.499754][ T5846] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 178.520023][ T5846] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 178.537794][ T5846] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 178.572458][ T5846] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 178.577910][ T5846] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 178.594224][ T5846] usb 5-1: USB disconnect, device number 46 [ 178.777874][ T1486] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 178.928494][ T1486] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 178.934640][ T1486] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 178.940862][ T1486] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 178.945384][ T1486] usb 7-1: config 0 interface 0 has no altsetting 0 [ 178.951480][ T1486] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 178.964954][ T1486] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 178.978777][ T1486] usb 7-1: config 0 interface 0 has no altsetting 0 [ 178.984368][ T1486] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 178.989382][ T1486] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 178.997800][ T1486] usb 7-1: config 0 interface 0 has no altsetting 0 [ 179.001669][ T1486] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.010461][ T1486] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.027904][ T1486] usb 7-1: config 0 interface 0 has no altsetting 0 [ 179.031829][ T1486] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.035542][ T1486] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.041684][ T1486] usb 7-1: config 0 interface 0 has no altsetting 0 [ 179.045406][ T1486] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.049629][ T1486] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.053977][ T1486] usb 7-1: config 0 interface 0 has no altsetting 0 [ 179.059909][ T1486] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.063442][ T1486] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.067586][ T1486] usb 7-1: config 0 interface 0 has no altsetting 0 [ 179.071373][ T1486] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.075187][ T1486] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.079663][ T1486] usb 7-1: config 0 interface 0 has no altsetting 0 [ 179.084804][ T1486] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 179.089713][ T1486] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 179.093368][ T1486] usb 7-1: Product: syz [ 179.095249][ T1486] usb 7-1: Manufacturer: syz [ 179.097349][ T1486] usb 7-1: SerialNumber: syz [ 179.113398][ T1486] usb 7-1: config 0 descriptor?? [ 179.125891][ T1486] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 179.218387][ T55] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 179.333453][ T1486] usb 7-1: USB disconnect, device number 50 [ 179.347661][ T1486] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 179.377964][ T55] usb 5-1: Using ep0 maxpacket: 32 [ 179.392502][ T55] usb 5-1: config 0 has no interfaces? [ 179.400616][ T55] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 179.407437][ T55] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 179.424695][ T55] usb 5-1: Product: syz [ 179.434609][ T55] usb 5-1: Manufacturer: syz [ 179.439675][ T55] usb 5-1: SerialNumber: syz [ 179.502834][ T55] usb 5-1: config 0 descriptor?? [ 179.735808][ T7694] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 180.317053][ T7702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.387'. [ 180.830598][ T55] usb 5-1: USB disconnect, device number 47 [ 181.026476][ T7709] netlink: 64 bytes leftover after parsing attributes in process `syz.2.390'. [ 181.056578][ T7709] syzkaller1: entered promiscuous mode [ 181.058825][ T7709] syzkaller1: entered allmulticast mode [ 181.447793][ T5842] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 181.628879][ T5842] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 181.632623][ T5842] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 181.635681][ T5842] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.639414][ T5842] usb 7-1: config 0 interface 0 has no altsetting 0 [ 181.642973][ T5842] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 181.646106][ T5842] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.649821][ T5842] usb 7-1: config 0 interface 0 has no altsetting 0 [ 181.652714][ T5842] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 181.655879][ T5842] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.660269][ T5842] usb 7-1: config 0 interface 0 has no altsetting 0 [ 181.663441][ T5842] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 181.666406][ T5842] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.670063][ T5842] usb 7-1: config 0 interface 0 has no altsetting 0 [ 181.673099][ T5842] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 181.676377][ T5842] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.680290][ T5842] usb 7-1: config 0 interface 0 has no altsetting 0 [ 181.684996][ T5842] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 181.688134][ T5842] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.691675][ T5842] usb 7-1: config 0 interface 0 has no altsetting 0 [ 181.695229][ T5842] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 181.698640][ T5842] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.702346][ T5842] usb 7-1: config 0 interface 0 has no altsetting 0 [ 181.707840][ T5842] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 181.711477][ T5842] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.715835][ T5842] usb 7-1: config 0 interface 0 has no altsetting 0 [ 181.720898][ T5842] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 181.723961][ T5842] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 181.726814][ T5842] usb 7-1: Product: syz [ 181.731682][ T5842] usb 7-1: Manufacturer: syz [ 181.733299][ T5842] usb 7-1: SerialNumber: syz [ 181.736340][ T5842] usb 7-1: config 0 descriptor?? [ 181.741266][ T5842] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 181.800140][ T7731] Bluetooth: MGMT ver 1.23 [ 181.951508][ T5842] usb 7-1: USB disconnect, device number 51 [ 181.960740][ T5842] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 182.366472][ T7725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.594331][ T7748] netlink: 'syz.2.404': attribute type 2 has an invalid length. [ 183.600487][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.404'. [ 184.816080][ T7776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.409'. [ 185.200801][ T7779] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 185.393163][ T7788] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.396973][ T7788] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.456289][ T7788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.463687][ T7788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.467869][ T5846] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 185.588730][ T5811] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.591611][ T5811] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.594311][ T5811] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.596992][ T5811] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.619420][ T5846] usb 7-1: Using ep0 maxpacket: 32 [ 185.623718][ T5846] usb 7-1: config 0 has no interfaces? [ 185.626916][ T5846] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 185.630877][ T5846] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 185.633473][ T5846] usb 7-1: Product: syz [ 185.634759][ T5846] usb 7-1: Manufacturer: syz [ 185.636189][ T5846] usb 7-1: SerialNumber: syz [ 185.645082][ T5846] usb 7-1: config 0 descriptor?? [ 185.914736][ T56] usb 7-1: USB disconnect, device number 52 [ 185.946350][ T7827] netlink: 260 bytes leftover after parsing attributes in process `syz.0.415'. [ 186.233412][ T7854] netlink: 16 bytes leftover after parsing attributes in process `syz.3.418'. [ 186.287882][ T5813] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 186.305176][ T7861] FAULT_INJECTION: forcing a failure. [ 186.305176][ T7861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.309875][ T7861] CPU: 3 UID: 0 PID: 7861 Comm: syz.3.420 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.309894][ T7861] Tainted: [L]=SOFTLOCKUP [ 186.309899][ T7861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.309905][ T7861] Call Trace: [ 186.309909][ T7861] [ 186.309914][ T7861] dump_stack_lvl+0x100/0x190 [ 186.309933][ T7861] should_fail_ex.cold+0x5/0xa [ 186.309947][ T7861] _copy_from_user+0x2e/0xd0 [ 186.309965][ T7861] bpf_test_init.isra.0+0xaf/0x100 [ 186.309986][ T7861] bpf_prog_test_run_skb+0x497/0x3540 [ 186.310001][ T7861] ? find_held_lock+0x2b/0x80 [ 186.310017][ T7861] ? __fget_files+0x191/0x3d0 [ 186.310032][ T7861] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 186.310046][ T7861] ? fput+0x79/0x100 [ 186.310061][ T7861] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 186.310073][ T7861] __sys_bpf+0x2a12/0x4e80 [ 186.310091][ T7861] ? __pfx___sys_bpf+0x10/0x10 [ 186.310103][ T7861] ? find_held_lock+0x2b/0x80 [ 186.310117][ T7861] ? get_pid_task+0xfc/0x250 [ 186.310132][ T7861] ? get_pid_task+0xfc/0x250 [ 186.310149][ T7861] ? proc_fail_nth_write+0x9f/0x220 [ 186.310167][ T7861] ? find_held_lock+0x2b/0x80 [ 186.310184][ T7861] ? rcu_read_lock_any_held+0x6a/0xa0 [ 186.310200][ T7861] ? find_held_lock+0x2b/0x80 [ 186.310213][ T7861] ? ksys_write+0x190/0x250 [ 186.310223][ T7861] ? ksys_write+0x190/0x250 [ 186.310243][ T7861] ? fput+0x79/0x100 [ 186.310258][ T7861] ? __ia32_sys_bpf+0xcc/0x170 [ 186.310270][ T7861] __ia32_sys_bpf+0xcc/0x170 [ 186.310282][ T7861] ? __do_fast_syscall_32+0x98/0x970 [ 186.310301][ T7861] __do_fast_syscall_32+0xe7/0x970 [ 186.310317][ T7861] ? lockdep_hardirqs_on+0x78/0x100 [ 186.310334][ T7861] do_fast_syscall_32+0x32/0x70 [ 186.310350][ T7861] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 186.310366][ T7861] RIP: 0023:0xf700efec [ 186.310379][ T7861] Code: Unable to access opcode bytes at 0xf700efc2. [ 186.310384][ T7861] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 186.310396][ T7861] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000080 [ 186.310403][ T7861] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 186.310409][ T7861] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 186.310416][ T7861] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 186.310423][ T7861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 186.310436][ T7861] [ 186.448146][ T5813] usb 6-1: Using ep0 maxpacket: 32 [ 186.454306][ T5813] usb 6-1: config 0 has no interfaces? [ 186.470929][ T5813] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 186.479351][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 186.488235][ T5813] usb 6-1: Product: syz [ 186.491870][ T5813] usb 6-1: Manufacturer: syz [ 186.493407][ T5813] usb 6-1: SerialNumber: syz [ 186.503153][ T5813] usb 6-1: config 0 descriptor?? [ 187.542143][ T5813] usb 6-1: USB disconnect, device number 33 [ 187.630908][ T7836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.806163][ T7880] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.809672][ T7880] IPv6: NLM_F_CREATE should be set when creating new route [ 189.004479][ T7880] bridge0: port 2(4ÿÿþÿÿÿþÿÿÿþÿÿ) entered disabled state [ 189.006854][ T7880] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.065450][ T7880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.070670][ T7880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.142475][ T7890] netlink: 16 bytes leftover after parsing attributes in process `syz.0.428'. [ 189.160110][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.163382][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.166495][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.174433][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.206123][ T7896] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 189.327882][ T55] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 189.478661][ T55] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 189.483111][ T55] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.493397][ T55] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.502350][ T55] usb 7-1: config 0 interface 0 has no altsetting 0 [ 189.510322][ T55] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.516986][ T55] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.526975][ T55] usb 7-1: config 0 interface 0 has no altsetting 0 [ 189.533156][ T55] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.536005][ T55] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.543883][ T55] usb 7-1: config 0 interface 0 has no altsetting 0 [ 189.549531][ T55] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.554188][ T55] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.563158][ T55] usb 7-1: config 0 interface 0 has no altsetting 0 [ 189.567846][ T55] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.571748][ T55] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.575178][ T55] usb 7-1: config 0 interface 0 has no altsetting 0 [ 189.581357][ T55] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.584826][ T55] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.588770][ T55] usb 7-1: config 0 interface 0 has no altsetting 0 [ 189.592102][ T55] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.595269][ T55] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.606337][ T55] usb 7-1: config 0 interface 0 has no altsetting 0 [ 189.611930][ T55] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.615046][ T55] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.621757][ T55] usb 7-1: config 0 interface 0 has no altsetting 0 [ 189.627957][ T55] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 189.631191][ T55] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 189.635018][ T55] usb 7-1: Product: syz [ 189.636581][ T55] usb 7-1: Manufacturer: syz [ 189.640152][ T55] usb 7-1: SerialNumber: syz [ 189.652147][ T55] usb 7-1: config 0 descriptor?? [ 189.666399][ T7923] netlink: 136 bytes leftover after parsing attributes in process `syz.3.427'. [ 189.669848][ T7923] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 189.722120][ T55] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 189.797774][ T5885] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 189.890222][ T55] usb 7-1: USB disconnect, device number 53 [ 189.896881][ T55] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 190.507799][ T5885] usb 6-1: Using ep0 maxpacket: 32 [ 190.794336][ T5885] usb 6-1: config 0 has no interfaces? [ 191.133345][ T5885] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 191.416810][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 191.419352][ T5885] usb 6-1: Product: syz [ 191.420672][ T5885] usb 6-1: Manufacturer: syz [ 191.422097][ T5885] usb 6-1: SerialNumber: syz [ 191.429414][ T5885] usb 6-1: config 0 descriptor?? [ 191.599660][ T7961] bochs-drm 0000:00:01.0: [drm] Unknown color mode 6; guessing buffer size. [ 191.603972][ T7962] jffs2: notice: (7962) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 191.730588][ T7969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.439'. [ 191.823413][ T7975] comedi comedi3: comedi_config --init_data is deprecated [ 191.830771][ T41] usb 6-1: USB disconnect, device number 34 [ 193.607949][ T55] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 193.768002][ T55] usb 8-1: Using ep0 maxpacket: 8 [ 193.784040][ T55] usb 8-1: config 0 has an invalid interface number: 143 but max is 0 [ 193.787805][ T55] usb 8-1: config 0 has no interface number 0 [ 193.789821][ T55] usb 8-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 193.803826][ T55] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.821299][ T55] usb 8-1: config 0 descriptor?? [ 193.838414][ T7998] fuse: Unknown parameter '>:Á0x0000000000000009' [ 193.861490][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.863620][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.942893][ T8000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.449'. [ 193.966039][ T55] viperboard 8-1:0.143: version 0.00 found at bus 008 address 048 [ 194.055471][ T7990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.072473][ T7990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.291000][ T55] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 194.298194][ T55] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5 [ 194.400279][ T55] usb 8-1: USB disconnect, device number 48 [ 195.140112][ T56] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 195.360810][ T8018] warning: `syz.2.451' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 195.369001][ T56] usb 6-1: Using ep0 maxpacket: 32 [ 195.373011][ T56] usb 6-1: config 0 has no interfaces? [ 195.374629][ T56] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 195.374645][ T56] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 195.374656][ T56] usb 6-1: Product: syz [ 195.374665][ T56] usb 6-1: Manufacturer: syz [ 195.374673][ T56] usb 6-1: SerialNumber: syz [ 195.375972][ T56] usb 6-1: config 0 descriptor?? [ 195.399985][ T5885] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 195.484761][ T8027] FAULT_INJECTION: forcing a failure. [ 195.484761][ T8027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.489045][ T8027] CPU: 1 UID: 0 PID: 8027 Comm: syz.0.455 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.489068][ T8027] Tainted: [L]=SOFTLOCKUP [ 195.489072][ T8027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.489079][ T8027] Call Trace: [ 195.489083][ T8027] [ 195.489088][ T8027] dump_stack_lvl+0x100/0x190 [ 195.489107][ T8027] should_fail_ex.cold+0x5/0xa [ 195.489122][ T8027] _copy_from_user+0x2e/0xd0 [ 195.489140][ T8027] get_compat_msghdr+0xb3/0x480 [ 195.489160][ T8027] ? __pfx_get_compat_msghdr+0x10/0x10 [ 195.489179][ T8027] ? rcu_is_watching+0x12/0xc0 [ 195.489193][ T8027] ? ___sys_sendmsg+0x19d/0x1e0 [ 195.489206][ T8027] ? kfree+0x1e5/0x6c0 [ 195.489217][ T8027] ? __pfx__kstrtoull+0x10/0x10 [ 195.489231][ T8027] ___sys_sendmsg+0x1b6/0x1e0 [ 195.489244][ T8027] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.489255][ T8027] ? __lock_acquire+0x49f/0x1a40 [ 195.489286][ T8027] ? __pfx___might_resched+0x10/0x10 [ 195.489307][ T8027] __sys_sendmmsg+0x309/0x440 [ 195.489325][ T8027] ? __pfx___sys_sendmmsg+0x10/0x10 [ 195.489340][ T8027] ? find_held_lock+0x2b/0x80 [ 195.489358][ T8027] ? __mutex_unlock_slowpath+0x35d/0x930 [ 195.489381][ T8027] ? fput+0x79/0x100 [ 195.489396][ T8027] ? ksys_write+0x1ac/0x250 [ 195.489408][ T8027] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 195.489426][ T8027] ? lockdep_hardirqs_on+0x78/0x100 [ 195.489442][ T8027] __do_fast_syscall_32+0xe7/0x970 [ 195.489458][ T8027] ? lockdep_hardirqs_on+0x78/0x100 [ 195.489475][ T8027] do_fast_syscall_32+0x32/0x70 [ 195.489492][ T8027] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.489506][ T8027] RIP: 0023:0xf7fa5fec [ 195.489520][ T8027] Code: Unable to access opcode bytes at 0xf7fa5fc2. [ 195.489525][ T8027] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 195.489537][ T8027] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080002340 [ 195.489543][ T8027] RDX: 0000000003fffff7 RSI: 0000000000000000 RDI: 0000000000000000 [ 195.489550][ T8027] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.489556][ T8027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.489562][ T8027] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.489575][ T8027] [ 195.567100][ T5885] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 195.570798][ T5885] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.573654][ T5885] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.577218][ T5885] usb 8-1: config 0 interface 0 has no altsetting 0 [ 195.580239][ T5885] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.583250][ T5885] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.586664][ T5885] usb 8-1: config 0 interface 0 has no altsetting 0 [ 195.589851][ T5885] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.592748][ T5885] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.596139][ T5885] usb 8-1: config 0 interface 0 has no altsetting 0 [ 195.599183][ T5885] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.602087][ T5885] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.605467][ T5885] usb 8-1: config 0 interface 0 has no altsetting 0 [ 195.608364][ T5885] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.611354][ T5885] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.614876][ T5885] usb 8-1: config 0 interface 0 has no altsetting 0 [ 195.617659][ T5885] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.623807][ T5885] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.627213][ T5885] usb 8-1: config 0 interface 0 has no altsetting 0 [ 195.630316][ T5885] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.633567][ T5885] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.636966][ T5885] usb 8-1: config 0 interface 0 has no altsetting 0 [ 195.640477][ T5885] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.643380][ T5885] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.646812][ T5885] usb 8-1: config 0 interface 0 has no altsetting 0 [ 195.650734][ T5885] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 195.653678][ T5885] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 195.656284][ T5885] usb 8-1: Product: syz [ 195.657563][ T5885] usb 8-1: Manufacturer: syz [ 195.659410][ T5885] usb 8-1: SerialNumber: syz [ 195.664128][ T5885] usb 8-1: config 0 descriptor?? [ 195.670552][ T5885] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 195.875295][ T5885] usb 8-1: USB disconnect, device number 49 [ 195.878760][ T5885] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 196.007528][ T5846] usb 6-1: USB disconnect, device number 35 [ 196.439083][ T8054] netlink: 16 bytes leftover after parsing attributes in process `syz.3.458'. [ 196.495219][ T42] audit: type=1326 audit(1786126875.071:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8055 comm="syz.3.459" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffe0000 [ 196.739010][ T8062] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 196.741448][ T8062] IPv6: NLM_F_CREATE should be set when creating new route [ 196.770782][ T8062] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.773270][ T8062] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.814918][ T8062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.821001][ T8062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.917945][ T5784] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.923198][ T5784] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.928114][ T5784] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.935400][ T5784] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.017934][ T34] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 197.132969][ T8069] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 197.137627][ T8069] overlayfs: failed to set xattr on upper [ 197.142154][ T8069] overlayfs: ...falling back to redirect_dir=nofollow. [ 197.144475][ T8069] overlayfs: ...falling back to index=off. [ 197.146329][ T8069] overlayfs: ...falling back to uuid=null. [ 197.151578][ T8069] evm: overlay not supported [ 197.178121][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 197.201520][ T34] usb 6-1: config 0 has no interfaces? [ 197.216924][ T34] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 197.233753][ T34] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 197.246738][ T34] usb 6-1: Product: syz [ 197.251434][ T34] usb 6-1: Manufacturer: syz [ 197.261974][ T34] usb 6-1: SerialNumber: syz [ 197.306640][ T34] usb 6-1: config 0 descriptor?? [ 197.427858][ T5813] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 197.485295][ T8073] netlink: 16 bytes leftover after parsing attributes in process `syz.3.467'. [ 197.534209][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.468'. [ 197.578301][ T5813] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 197.581684][ T5813] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.584609][ T5813] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.588329][ T5813] usb 7-1: config 0 interface 0 has no altsetting 0 [ 197.591767][ T5813] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.594986][ T5813] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.598622][ T5813] usb 7-1: config 0 interface 0 has no altsetting 0 [ 197.602361][ T5813] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.605269][ T5813] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.609192][ T5813] usb 7-1: config 0 interface 0 has no altsetting 0 [ 197.612541][ T5813] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.615445][ T5813] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.619026][ T5813] usb 7-1: config 0 interface 0 has no altsetting 0 [ 197.622074][ T5813] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.624871][ T5813] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.628567][ T5813] usb 7-1: config 0 interface 0 has no altsetting 0 [ 197.631983][ T5813] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.635393][ T5813] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.639087][ T5813] usb 7-1: config 0 interface 0 has no altsetting 0 [ 197.642366][ T5813] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.645209][ T5813] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.649062][ T5813] usb 7-1: config 0 interface 0 has no altsetting 0 [ 197.652516][ T5813] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.655626][ T5813] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.660240][ T5813] usb 7-1: config 0 interface 0 has no altsetting 0 [ 197.665096][ T5813] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 197.668502][ T5813] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 197.671440][ T5813] usb 7-1: Product: syz [ 197.672919][ T5813] usb 7-1: Manufacturer: syz [ 197.674709][ T5813] usb 7-1: SerialNumber: syz [ 197.678448][ T5813] usb 7-1: config 0 descriptor?? [ 197.688149][ T5813] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 197.891726][ T5846] usb 7-1: USB disconnect, device number 54 [ 197.899471][ T5846] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 198.116887][ T56] usb 6-1: USB disconnect, device number 36 [ 198.429635][ T8080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.471'. [ 198.433108][ T8080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.471'. [ 198.465620][ T8082] jffs2: notice: (8082) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 198.572120][ T8090] FAULT_INJECTION: forcing a failure. [ 198.572120][ T8090] name failslab, interval 1, probability 0, space 0, times 0 [ 198.576535][ T8090] CPU: 2 UID: 0 PID: 8090 Comm: syz.2.474 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.576553][ T8090] Tainted: [L]=SOFTLOCKUP [ 198.576558][ T8090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 198.576569][ T8090] Call Trace: [ 198.576574][ T8090] [ 198.576578][ T8090] dump_stack_lvl+0x100/0x190 [ 198.576597][ T8090] should_fail_ex.cold+0x5/0xa [ 198.576611][ T8090] should_failslab+0xc2/0x120 [ 198.576629][ T8090] kmem_cache_alloc_noprof+0x91/0x6a0 [ 198.576644][ T8090] ? stack_trace_save+0x8e/0xc0 [ 198.576661][ T8090] ? alloc_empty_file+0x5b/0x1c0 [ 198.576679][ T8090] alloc_empty_file+0x5b/0x1c0 [ 198.576694][ T8090] path_openat+0xe7/0x4280 [ 198.576706][ T8090] ? kasan_save_track+0x14/0x30 [ 198.576720][ T8090] ? __kasan_slab_alloc+0x89/0x90 [ 198.576747][ T8090] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 198.576762][ T8090] ? do_getname+0x35/0x390 [ 198.576775][ T8090] ? do_sys_openat2+0xc7/0x1e0 [ 198.576790][ T8090] ? __ia32_compat_sys_openat+0x12d/0x210 [ 198.576806][ T8090] ? __do_fast_syscall_32+0xe7/0x970 [ 198.576828][ T8090] ? __pfx_path_openat+0x10/0x10 [ 198.576843][ T8090] do_file_open+0x20e/0x430 [ 198.576854][ T8090] ? __lock_acquire+0x49f/0x1a40 [ 198.576874][ T8090] ? __pfx_do_file_open+0x10/0x10 [ 198.576895][ T8090] ? _raw_spin_unlock+0x28/0x50 [ 198.576909][ T8090] ? alloc_fd+0x471/0x7a0 [ 198.576924][ T8090] do_sys_openat2+0x10f/0x1e0 [ 198.576940][ T8090] ? __pfx_do_sys_openat2+0x10/0x10 [ 198.576957][ T8090] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 198.576976][ T8090] __ia32_compat_sys_openat+0x12d/0x210 [ 198.576993][ T8090] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 198.577014][ T8090] ? fput+0x79/0x100 [ 198.577032][ T8090] ? ksys_write+0x1ac/0x250 [ 198.577047][ T8090] ? __pfx_ksys_write+0x10/0x10 [ 198.577067][ T8090] __do_fast_syscall_32+0xe7/0x970 [ 198.577084][ T8090] ? lockdep_hardirqs_on+0x78/0x100 [ 198.577101][ T8090] do_fast_syscall_32+0x32/0x70 [ 198.577118][ T8090] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 198.577155][ T8090] RIP: 0023:0xf706efec [ 198.577173][ T8090] Code: Unable to access opcode bytes at 0xf706efc2. [ 198.577180][ T8090] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 198.577198][ T8090] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000280 [ 198.577209][ T8090] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 198.577218][ T8090] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 198.577227][ T8090] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 198.577236][ T8090] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 198.577250][ T8090] [ 198.794174][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.477'. [ 198.957867][ T34] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 199.109155][ T34] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.112514][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 199.116480][ T34] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 199.120128][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.124505][ T34] usb 7-1: config 0 descriptor?? [ 199.128114][ T34] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 199.167807][ T41] usb 8-1: new full-speed USB device number 50 using dummy_hcd [ 199.318605][ T41] usb 8-1: not running at top speed; connect to a high speed hub [ 199.321980][ T41] usb 8-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 199.325463][ T41] usb 8-1: config 1 interface 0 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 199.328850][ T41] usb 8-1: config 1 interface 0 has no altsetting 0 [ 199.332726][ T41] usb 8-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.40 [ 199.336165][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.338727][ T41] usb 8-1: Product: syz [ 199.340047][ T41] usb 8-1: Manufacturer: 疖䉀慨䩟墳䩉î—➀ì¯ë±á¬£èŠ Ö¼åœ…ପ鉔ã¦î²¸á¤±ØŽî´Žï®Šèª©ã…¹êž´îº“텙ᯊ犜컇㘠格퀯햌ⷤ⨜암ç—빶á‹ì’—㒮⣘ë–㢹ﷅ뾑‌âŽê¡é‚ˆá Ÿê™¡è©°ì¢è˜†ì…㤚싸é—鹉ト旀ꞗ뜘頵ä¢á”Žá”½ì½§ [ 199.347390][ T41] usb 8-1: SerialNumber: syz [ 199.349316][ T5813] usb 7-1: USB disconnect, device number 55 [ 199.358355][ T8101] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 199.361888][ T8101] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 199.633884][ T8108] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 199.635927][ T8108] dvmrp1: linktype set to 804 [ 199.649052][ T8108] input: syz0 as /devices/virtual/input/input11 [ 199.735545][ T8109] netlink: 'syz.1.480': attribute type 3 has an invalid length. [ 199.740012][ T5747] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 199.777804][ T5885] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 199.929437][ T5885] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.932721][ T5885] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 199.938681][ T5885] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 199.941821][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.944363][ T5885] usb 7-1: Product: syz [ 199.945689][ T5885] usb 7-1: Manufacturer: syz [ 199.947150][ T5885] usb 7-1: SerialNumber: syz [ 199.952899][ T5885] usbhid 7-1:1.0: couldn't find an input interrupt endpoint [ 200.158225][ T5813] usb 7-1: USB disconnect, device number 56 [ 201.088554][ T5813] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 201.268322][ T5813] usb 7-1: Using ep0 maxpacket: 32 [ 201.276093][ T5813] usb 7-1: config 0 has no interfaces? [ 201.288449][ T5813] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 201.291562][ T5813] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 201.294635][ T5813] usb 7-1: Product: syz [ 201.296173][ T5813] usb 7-1: Manufacturer: syz [ 201.297830][ T5813] usb 7-1: SerialNumber: syz [ 201.321212][ T5813] usb 7-1: config 0 descriptor?? [ 201.775254][ T41] usbhid 8-1:1.0: can't add hid device: -71 [ 201.784050][ T41] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 202.091192][ T41] usb 8-1: USB disconnect, device number 50 [ 202.721736][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.488'. [ 202.865252][ T8131] netlink: 16 bytes leftover after parsing attributes in process `syz.1.487'. [ 202.877789][ T41] usb 7-1: USB disconnect, device number 57 [ 203.446574][ T8136] input: syz1 as /devices/virtual/input/input12 [ 204.105531][ T8144] macsec1: entered promiscuous mode [ 204.108038][ T8144] batadv0: entered promiscuous mode [ 204.115476][ T8144] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 205.080274][ T8159] comedi comedi3: comedi_config --init_data is deprecated [ 205.164190][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'. [ 205.647821][ T5827] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 205.799630][ T5827] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 205.805524][ T5827] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.810247][ T5827] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.814991][ T5827] usb 8-1: config 0 interface 0 has no altsetting 0 [ 205.820573][ T5827] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.824359][ T5827] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.829014][ T5827] usb 8-1: config 0 interface 0 has no altsetting 0 [ 205.832744][ T5827] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.836607][ T5827] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.841254][ T5827] usb 8-1: config 0 interface 0 has no altsetting 0 [ 205.844655][ T5827] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.848185][ T5827] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.851716][ T5827] usb 8-1: config 0 interface 0 has no altsetting 0 [ 205.854960][ T5827] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.859034][ T5827] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.863666][ T5827] usb 8-1: config 0 interface 0 has no altsetting 0 [ 205.867261][ T5827] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.870639][ T5827] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.874095][ T5827] usb 8-1: config 0 interface 0 has no altsetting 0 [ 205.877476][ T5827] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.880753][ T5827] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.884225][ T5827] usb 8-1: config 0 interface 0 has no altsetting 0 [ 205.887975][ T5827] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.891032][ T5827] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.894527][ T5827] usb 8-1: config 0 interface 0 has no altsetting 0 [ 205.898347][ T5827] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 205.901525][ T5827] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 205.904156][ T5827] usb 8-1: Product: syz [ 205.905912][ T5827] usb 8-1: Manufacturer: syz [ 205.907521][ T5827] usb 8-1: SerialNumber: syz [ 205.911046][ T5827] usb 8-1: config 0 descriptor?? [ 205.916877][ T5827] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 206.123379][ T5827] usb 8-1: USB disconnect, device number 51 [ 206.132492][ T5827] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 206.143674][ T8183] FAULT_INJECTION: forcing a failure. [ 206.143674][ T8183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.149058][ T8183] CPU: 2 UID: 0 PID: 8183 Comm: syz.2.507 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.149078][ T8183] Tainted: [L]=SOFTLOCKUP [ 206.149082][ T8183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 206.149089][ T8183] Call Trace: [ 206.149093][ T8183] [ 206.149098][ T8183] dump_stack_lvl+0x100/0x190 [ 206.149117][ T8183] should_fail_ex.cold+0x5/0xa [ 206.149132][ T8183] _copy_to_iter+0x5a4/0x1720 [ 206.149153][ T8183] ? __pfx__copy_to_iter+0x10/0x10 [ 206.149171][ T8183] ? find_held_lock+0x2b/0x80 [ 206.149187][ T8183] ? ptype_seq_stop+0x31/0xb0 [ 206.149205][ T8183] ? ptype_seq_stop+0x31/0xb0 [ 206.149221][ T8183] ? __pfx_packet_rcv+0x10/0x10 [ 206.149239][ T8183] seq_read_iter+0xdab/0x1270 [ 206.149264][ T8183] seq_read+0x344/0x4d0 [ 206.149282][ T8183] ? __pfx_seq_read+0x10/0x10 [ 206.149302][ T8183] ? __lock_acquire+0x49f/0x1a40 [ 206.149319][ T8183] ? import_ubuf+0x1b6/0x220 [ 206.149339][ T8183] ? __pfx_seq_read+0x10/0x10 [ 206.149356][ T8183] proc_reg_read+0x240/0x330 [ 206.149370][ T8183] ? __pfx_proc_reg_read+0x10/0x10 [ 206.149382][ T8183] vfs_readv+0x5d8/0x8d0 [ 206.149402][ T8183] ? __pfx_vfs_readv+0x10/0x10 [ 206.149429][ T8183] ? __fget_files+0x21f/0x3d0 [ 206.149443][ T8183] ? do_preadv+0x1ac/0x270 [ 206.149459][ T8183] do_preadv+0x1ac/0x270 [ 206.149477][ T8183] ? __pfx_do_preadv+0x10/0x10 [ 206.149493][ T8183] ? ksys_write+0x1ac/0x250 [ 206.149503][ T8183] ? __pfx_ksys_write+0x10/0x10 [ 206.149517][ T8183] __do_fast_syscall_32+0xe7/0x970 [ 206.149534][ T8183] ? lockdep_hardirqs_on+0x78/0x100 [ 206.149551][ T8183] do_fast_syscall_32+0x32/0x70 [ 206.149572][ T8183] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 206.149587][ T8183] RIP: 0023:0xf706efec [ 206.149601][ T8183] Code: Unable to access opcode bytes at 0xf706efc2. [ 206.149606][ T8183] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 000000000000014d [ 206.149617][ T8183] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000640 [ 206.149624][ T8183] RDX: 0000000000000001 RSI: 000000000000004f RDI: 0000000000000000 [ 206.149640][ T8183] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 206.149647][ T8183] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 206.149653][ T8183] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 206.149667][ T8183] [ 206.288464][ T8191] FAULT_INJECTION: forcing a failure. [ 206.288464][ T8191] name failslab, interval 1, probability 0, space 0, times 0 [ 206.292285][ T8191] CPU: 3 UID: 0 PID: 8191 Comm: syz.2.511 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.292303][ T8191] Tainted: [L]=SOFTLOCKUP [ 206.292307][ T8191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 206.292315][ T8191] Call Trace: [ 206.292319][ T8191] [ 206.292324][ T8191] dump_stack_lvl+0x100/0x190 [ 206.292343][ T8191] should_fail_ex.cold+0x5/0xa [ 206.292357][ T8191] should_failslab+0xc2/0x120 [ 206.292376][ T8191] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 206.292392][ T8191] ? __alloc_skb+0x5b7/0x710 [ 206.292407][ T8191] ? __alloc_skb+0x140/0x710 [ 206.292424][ T8191] __alloc_skb+0x140/0x710 [ 206.292438][ T8191] ? __alloc_skb+0x5b7/0x710 [ 206.292451][ T8191] ? __pfx___alloc_skb+0x10/0x10 [ 206.292470][ T8191] netlink_alloc_large_skb+0x69/0x150 [ 206.292485][ T8191] netlink_sendmsg+0x680/0xda0 [ 206.292499][ T8191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.292514][ T8191] ? apparmor_socket_sendmsg+0x15b/0x270 [ 206.292529][ T8191] ____sys_sendmsg+0xa4d/0xbe0 [ 206.292540][ T8191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.292554][ T8191] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.292572][ T8191] ___sys_sendmsg+0x190/0x1e0 [ 206.292585][ T8191] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.292603][ T8191] ? find_held_lock+0x2b/0x80 [ 206.292626][ T8191] __sys_sendmsg+0x160/0x210 [ 206.292643][ T8191] ? __pfx___sys_sendmsg+0x10/0x10 [ 206.292662][ T8191] ? __pfx_ksys_write+0x10/0x10 [ 206.292676][ T8191] __do_fast_syscall_32+0xe7/0x970 [ 206.292693][ T8191] ? lockdep_hardirqs_on+0x78/0x100 [ 206.292710][ T8191] do_fast_syscall_32+0x32/0x70 [ 206.292727][ T8191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 206.292742][ T8191] RIP: 0023:0xf706efec [ 206.292754][ T8191] Code: Unable to access opcode bytes at 0xf706efc2. [ 206.292759][ T8191] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 206.292771][ T8191] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001200 [ 206.292778][ T8191] RDX: 0000000004048840 RSI: 0000000000000000 RDI: 0000000000000000 [ 206.292785][ T8191] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 206.292791][ T8191] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 206.292797][ T8191] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 206.292811][ T8191] [ 206.466452][ T8196] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.513'. [ 206.473456][ T8196] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 206.576129][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.515'. [ 206.654383][ T8202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.512'. [ 206.725729][ T8205] FAULT_INJECTION: forcing a failure. [ 206.725729][ T8205] name failslab, interval 1, probability 0, space 0, times 0 [ 206.733947][ T8205] CPU: 3 UID: 0 PID: 8205 Comm: syz.3.516 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.733978][ T8205] Tainted: [L]=SOFTLOCKUP [ 206.733985][ T8205] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 206.733995][ T8205] Call Trace: [ 206.734003][ T8205] [ 206.734009][ T8205] dump_stack_lvl+0x100/0x190 [ 206.734040][ T8205] should_fail_ex.cold+0x5/0xa [ 206.734060][ T8205] should_failslab+0xc2/0x120 [ 206.734089][ T8205] __kmalloc_noprof+0xfc/0x820 [ 206.734114][ T8205] ? rcu_is_watching+0x12/0xc0 [ 206.734138][ T8205] ? tomoyo_realpath_from_path+0xb6/0x690 [ 206.734171][ T8205] tomoyo_realpath_from_path+0xb6/0x690 [ 206.734205][ T8205] tomoyo_path_number_perm+0x23c/0x580 [ 206.734228][ T8205] ? tomoyo_path_number_perm+0x22e/0x580 [ 206.734253][ T8205] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 206.734277][ T8205] ? get_pid_task+0x106/0x250 [ 206.734325][ T8205] ? find_held_lock+0x2b/0x80 [ 206.734351][ T8205] ? __fget_files+0x215/0x3d0 [ 206.734369][ T8205] ? hook_file_ioctl_common+0x140/0x440 [ 206.734391][ T8205] ? __fget_files+0x215/0x3d0 [ 206.734412][ T8205] ? __fget_files+0x21f/0x3d0 [ 206.734435][ T8205] security_file_ioctl_compat+0xd3/0x230 [ 206.734461][ T8205] __ia32_compat_sys_ioctl+0xc2/0x360 [ 206.734498][ T8205] __do_fast_syscall_32+0xe7/0x970 [ 206.734541][ T8205] ? lockdep_hardirqs_on+0x78/0x100 [ 206.734568][ T8205] do_fast_syscall_32+0x32/0x70 [ 206.734595][ T8205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 206.734618][ T8205] RIP: 0023:0xf700efec [ 206.734640][ T8205] Code: Unable to access opcode bytes at 0xf700efc2. [ 206.734648][ T8205] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 206.734668][ T8205] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000890b [ 206.734679][ T8205] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 206.734689][ T8205] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 206.734701][ T8205] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 206.734711][ T8205] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 206.734735][ T8205] [ 206.734831][ T8205] ERROR: Out of memory at tomoyo_realpath_from_path. [ 207.174361][ T8217] syzkaller0: entered promiscuous mode [ 207.176273][ T8217] syzkaller0: entered allmulticast mode [ 207.588041][ T1486] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 207.748049][ T1486] usb 7-1: Using ep0 maxpacket: 16 [ 207.759376][ T1486] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.763933][ T1486] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 207.768385][ T1486] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 207.771395][ T1486] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.802100][ T1486] usb 7-1: config 0 descriptor?? [ 207.827873][ T56] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 208.555512][ T5747] Bluetooth: Wrong link type (-57) [ 208.563373][ T1486] usbhid 7-1:0.0: can't add hid device: -71 [ 208.565381][ T1486] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 208.570173][ T56] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 208.583158][ T1486] usb 7-1: USB disconnect, device number 58 [ 208.640088][ T56] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.642991][ T56] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.646326][ T56] usb 8-1: config 0 interface 0 has no altsetting 0 [ 208.650037][ T56] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.652928][ T56] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.656251][ T56] usb 8-1: config 0 interface 0 has no altsetting 0 [ 208.659135][ T56] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.661935][ T56] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.665307][ T56] usb 8-1: config 0 interface 0 has no altsetting 0 [ 208.668218][ T56] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.671036][ T56] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.674315][ T56] usb 8-1: config 0 interface 0 has no altsetting 0 [ 208.677160][ T56] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.680107][ T56] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.683415][ T56] usb 8-1: config 0 interface 0 has no altsetting 0 [ 208.686164][ T56] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.689085][ T56] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.692486][ T56] usb 8-1: config 0 interface 0 has no altsetting 0 [ 208.695228][ T56] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.698005][ T56] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.701289][ T56] usb 8-1: config 0 interface 0 has no altsetting 0 [ 208.704124][ T56] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.706899][ T56] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.710201][ T56] usb 8-1: config 0 interface 0 has no altsetting 0 [ 208.714085][ T56] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 208.716877][ T56] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 208.719386][ T56] usb 8-1: Product: syz [ 208.720688][ T56] usb 8-1: Manufacturer: syz [ 208.722092][ T56] usb 8-1: SerialNumber: syz [ 208.725440][ T56] usb 8-1: config 0 descriptor?? [ 208.730330][ T56] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 208.933025][ T5827] usb 8-1: USB disconnect, device number 52 [ 208.939691][ T5827] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 209.551902][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.533'. [ 209.643920][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'. [ 209.647650][ T8258] syzkaller0: entered promiscuous mode [ 209.649852][ T8258] syzkaller0: entered allmulticast mode [ 210.315988][ T8270] FAULT_INJECTION: forcing a failure. [ 210.315988][ T8270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.320844][ T8270] CPU: 2 UID: 0 PID: 8270 Comm: syz.2.538 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.320863][ T8270] Tainted: [L]=SOFTLOCKUP [ 210.320867][ T8270] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.320874][ T8270] Call Trace: [ 210.320879][ T8270] [ 210.320883][ T8270] dump_stack_lvl+0x100/0x190 [ 210.320903][ T8270] should_fail_ex.cold+0x5/0xa [ 210.320916][ T8270] _copy_from_iter+0x1f4/0x1690 [ 210.320936][ T8270] ? __asan_memset+0x23/0x50 [ 210.320950][ T8270] ? __pfx__copy_from_iter+0x10/0x10 [ 210.320967][ T8270] ? __pfx___alloc_skb+0x10/0x10 [ 210.320988][ T8270] netlink_sendmsg+0x808/0xda0 [ 210.321004][ T8270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.321018][ T8270] ? apparmor_socket_sendmsg+0x15b/0x270 [ 210.321033][ T8270] ____sys_sendmsg+0xa4d/0xbe0 [ 210.321044][ T8270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.321058][ T8270] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.321075][ T8270] ___sys_sendmsg+0x190/0x1e0 [ 210.321093][ T8270] ? __pfx____sys_sendmsg+0x10/0x10 [ 210.321112][ T8270] ? find_held_lock+0x2b/0x80 [ 210.321135][ T8270] __sys_sendmsg+0x160/0x210 [ 210.321151][ T8270] ? __pfx___sys_sendmsg+0x10/0x10 [ 210.321170][ T8270] ? __pfx_ksys_write+0x10/0x10 [ 210.321185][ T8270] __do_fast_syscall_32+0xe7/0x970 [ 210.321202][ T8270] ? lockdep_hardirqs_on+0x78/0x100 [ 210.321219][ T8270] do_fast_syscall_32+0x32/0x70 [ 210.321236][ T8270] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 210.321251][ T8270] RIP: 0023:0xf706efec [ 210.321264][ T8270] Code: Unable to access opcode bytes at 0xf706efc2. [ 210.321270][ T8270] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 210.321282][ T8270] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000800 [ 210.321289][ T8270] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 210.321295][ T8270] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 210.321302][ T8270] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 210.321308][ T8270] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 210.321321][ T8270] [ 210.440612][ T42] audit: type=1326 audit(1786126889.021:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8273 comm="syz.3.540" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700efec code=0x0 [ 210.499245][ T8279] zero sized request [ 210.968059][ T56] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 211.152981][ T56] usb 6-1: Using ep0 maxpacket: 32 [ 211.187176][ T56] usb 6-1: config 0 has no interfaces? [ 211.195574][ T56] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 211.207164][ T56] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 211.214755][ T56] usb 6-1: Product: syz [ 211.216943][ T56] usb 6-1: Manufacturer: syz [ 211.229072][ T56] usb 6-1: SerialNumber: syz [ 211.263804][ T56] usb 6-1: config 0 descriptor?? [ 211.651047][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.548'. [ 211.708692][ T8299] FAULT_INJECTION: forcing a failure. [ 211.708692][ T8299] name failslab, interval 1, probability 0, space 0, times 0 [ 211.713765][ T8299] CPU: 2 UID: 0 PID: 8299 Comm: syz.2.547 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.713793][ T8299] Tainted: [L]=SOFTLOCKUP [ 211.713799][ T8299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.713810][ T8299] Call Trace: [ 211.713818][ T8299] [ 211.713826][ T8299] dump_stack_lvl+0x100/0x190 [ 211.713855][ T8299] should_fail_ex.cold+0x5/0xa [ 211.713875][ T8299] should_failslab+0xc2/0x120 [ 211.713901][ T8299] kmem_cache_alloc_noprof+0x91/0x6a0 [ 211.713927][ T8299] ? anon_vma_clone+0x2ba/0xcd0 [ 211.713958][ T8299] anon_vma_clone+0x2ba/0xcd0 [ 211.713991][ T8299] __split_vma+0x51f/0xda0 [ 211.714014][ T8299] ? __pfx___split_vma+0x10/0x10 [ 211.714041][ T8299] ? up_write+0x2e5/0x5c0 [ 211.714064][ T8299] vms_gather_munmap_vmas+0x1d2/0x1720 [ 211.714089][ T8299] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 211.714113][ T8299] ? __lock_acquire+0x49f/0x1a40 [ 211.714145][ T8299] ? __lock_acquire+0x49f/0x1a40 [ 211.714174][ T8299] do_vmi_align_munmap+0x287/0x5f0 [ 211.714197][ T8299] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 211.714248][ T8299] do_vmi_munmap+0x1f8/0x3e0 [ 211.714272][ T8299] do_munmap+0xba/0x100 [ 211.714296][ T8299] ? __pfx_do_munmap+0x10/0x10 [ 211.714327][ T8299] ? __pfx_may_expand_vm+0x10/0x10 [ 211.714352][ T8299] ? __pfx_mtree_load+0x10/0x10 [ 211.714386][ T8299] mremap_to+0x2b3/0x4c0 [ 211.714407][ T8299] ? __pfx_mremap_to+0x10/0x10 [ 211.714424][ T8299] ? check_prep_vma+0x912/0xe60 [ 211.714446][ T8299] __do_sys_mremap+0xb3e/0x1850 [ 211.714469][ T8299] ? __pfx___do_sys_mremap+0x10/0x10 [ 211.714484][ T8299] ? find_held_lock+0x2b/0x80 [ 211.714502][ T8299] ? ksys_write+0x190/0x250 [ 211.714518][ T8299] ? ksys_write+0x190/0x250 [ 211.714538][ T8299] ? __mutex_unlock_slowpath+0x35d/0x930 [ 211.714564][ T8299] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 211.714588][ T8299] ? __fget_files+0x21f/0x3d0 [ 211.714614][ T8299] ? __pfx_ksys_write+0x10/0x10 [ 211.714635][ T8299] __do_fast_syscall_32+0xe7/0x970 [ 211.714660][ T8299] ? lockdep_hardirqs_on+0x78/0x100 [ 211.714683][ T8299] do_fast_syscall_32+0x32/0x70 [ 211.714708][ T8299] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.714728][ T8299] RIP: 0023:0xf706efec [ 211.714764][ T8299] Code: Unable to access opcode bytes at 0xf706efc2. [ 211.714773][ T8299] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000a3 [ 211.714805][ T8299] RAX: ffffffffffffffda RBX: 0000000080a96000 RCX: 0000000000001000 [ 211.714816][ T8299] RDX: 0000000000800000 RSI: 0000000000000003 RDI: 0000000080130000 [ 211.714827][ T8299] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 211.714837][ T8299] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 211.714847][ T8299] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.714870][ T8299] [ 212.071535][ T8305] input: syz1 as /devices/virtual/input/input13 [ 212.124647][ T5827] usb 6-1: USB disconnect, device number 37 [ 212.130997][ T8306] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 212.133535][ T8306] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 212.158440][ T8306] vhci_hcd vhci_hcd.0: Device attached [ 212.428232][ T56] usb 42-1: SetAddress Request (2) to port 0 [ 212.431343][ T56] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 212.706119][ T8307] vhci_hcd: connection reset by peer [ 212.719872][ T5784] vhci_hcd vhci_hcd.2: stop threads [ 212.724519][ T5784] vhci_hcd vhci_hcd.2: release socket [ 212.732329][ T5784] vhci_hcd vhci_hcd.2: disconnect device [ 213.692161][ T8349] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 213.697828][ T5827] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 213.806321][ T8360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.561'. [ 213.867825][ T5827] usb 6-1: Using ep0 maxpacket: 32 [ 213.870824][ T5827] usb 6-1: config 0 has no interfaces? [ 213.874221][ T5827] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 213.877136][ T5827] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 213.879916][ T5827] usb 6-1: Product: syz [ 213.881347][ T5827] usb 6-1: Manufacturer: syz [ 213.883131][ T5827] usb 6-1: SerialNumber: syz [ 213.886742][ T5827] usb 6-1: config 0 descriptor?? [ 214.240078][ T8370] FAULT_INJECTION: forcing a failure. [ 214.240078][ T8370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.245581][ T8370] CPU: 2 UID: 0 PID: 8370 Comm: syz.3.564 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.245611][ T8370] Tainted: [L]=SOFTLOCKUP [ 214.245616][ T8370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.245627][ T8370] Call Trace: [ 214.245634][ T8370] [ 214.245640][ T8370] dump_stack_lvl+0x100/0x190 [ 214.245659][ T8370] should_fail_ex.cold+0x5/0xa [ 214.245673][ T8370] _copy_to_user+0x32/0xd0 [ 214.245693][ T8370] simple_read_from_buffer+0xcb/0x170 [ 214.245714][ T8370] proc_fail_nth_read+0x1af/0x230 [ 214.245732][ T8370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 214.245749][ T8370] ? rw_verify_area+0xce/0x6d0 [ 214.245767][ T8370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 214.245783][ T8370] vfs_read+0x1e4/0xb40 [ 214.245796][ T8370] ? __pfx_vfs_read+0x10/0x10 [ 214.245805][ T8370] ? find_held_lock+0x2b/0x80 [ 214.245820][ T8370] ? __fget_files+0x215/0x3d0 [ 214.245841][ T8370] ? __fget_files+0x21f/0x3d0 [ 214.245863][ T8370] ksys_read+0x12a/0x250 [ 214.245879][ T8370] ? __pfx_ksys_read+0x10/0x10 [ 214.245899][ T8370] do_int80_emulation+0x14b/0x720 [ 214.245927][ T8370] asm_int80_emulation+0x1a/0x20 [ 214.245946][ T8370] RIP: 0023:0xf71474eb [ 214.245960][ T8370] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 214.245975][ T8370] RSP: 002b:00000000f53fd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 214.245993][ T8370] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53fd5d0 [ 214.246004][ T8370] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 214.246013][ T8370] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 214.246023][ T8370] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 214.246038][ T8370] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.246060][ T8370] [ 214.328320][ T41] usb 6-1: USB disconnect, device number 38 [ 214.375436][ T8372] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 214.380278][ T8372] udc usbip-vudc.0: failed to start g1: -19 [ 214.384615][ T8372] UDC core: g1: couldn't find an available UDC or it's busy [ 214.774646][ T8382] FAULT_INJECTION: forcing a failure. [ 214.774646][ T8382] name failslab, interval 1, probability 0, space 0, times 0 [ 214.778988][ T8382] CPU: 3 UID: 0 PID: 8382 Comm: syz.2.570 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.779017][ T8382] Tainted: [L]=SOFTLOCKUP [ 214.779023][ T8382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.779033][ T8382] Call Trace: [ 214.779040][ T8382] [ 214.779046][ T8382] dump_stack_lvl+0x100/0x190 [ 214.779074][ T8382] should_fail_ex.cold+0x5/0xa [ 214.779095][ T8382] should_failslab+0xc2/0x120 [ 214.779120][ T8382] __kmalloc_cache_noprof+0x91/0x6c0 [ 214.779141][ T8382] ? copy_mount_options+0x55/0x190 [ 214.779168][ T8382] copy_mount_options+0x55/0x190 [ 214.779194][ T8382] __ia32_sys_mount+0x1ab/0x310 [ 214.779214][ T8382] ? __pfx___ia32_sys_mount+0x10/0x10 [ 214.779232][ T8382] ? ksys_write+0x1ac/0x250 [ 214.779247][ T8382] ? __pfx_ksys_write+0x10/0x10 [ 214.779265][ T8382] __do_fast_syscall_32+0xe7/0x970 [ 214.779291][ T8382] ? lockdep_hardirqs_on+0x78/0x100 [ 214.779315][ T8382] do_fast_syscall_32+0x32/0x70 [ 214.779360][ T8382] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.779384][ T8382] RIP: 0023:0xf706efec [ 214.779406][ T8382] Code: Unable to access opcode bytes at 0xf706efc2. [ 214.779414][ T8382] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 214.779433][ T8382] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000100 [ 214.779444][ T8382] RDX: 00000000800001c0 RSI: 0000000000000008 RDI: 00000000800002c0 [ 214.779455][ T8382] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 214.779465][ T8382] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 214.779476][ T8382] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.779499][ T8382] [ 214.904868][ T8389] syzkaller0: entered promiscuous mode [ 214.907142][ T8389] syzkaller0: entered allmulticast mode [ 214.939565][ T42] audit: type=1800 audit(1786126893.521:4): pid=8393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.575" name="enable" dev="configfs" ino=21372 res=0 errno=0 [ 215.106721][ T8391] netlink: 6 bytes leftover after parsing attributes in process `syz.1.573'. [ 215.134557][ T8403] input: syz0 as /devices/virtual/input/input14 [ 215.145074][ T8405] FAULT_INJECTION: forcing a failure. [ 215.145074][ T8405] name failslab, interval 1, probability 0, space 0, times 0 [ 215.150955][ T8405] CPU: 1 UID: 0 PID: 8405 Comm: syz.3.577 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.150984][ T8405] Tainted: [L]=SOFTLOCKUP [ 215.150990][ T8405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 215.151000][ T8405] Call Trace: [ 215.151006][ T8405] [ 215.151014][ T8405] dump_stack_lvl+0x100/0x190 [ 215.151042][ T8405] should_fail_ex.cold+0x5/0xa [ 215.151064][ T8405] should_failslab+0xc2/0x120 [ 215.151089][ T8405] __kmalloc_cache_noprof+0x91/0x6c0 [ 215.151108][ T8405] ? cma_alloc_port+0x9b/0x5f0 [ 215.151133][ T8405] cma_alloc_port+0x9b/0x5f0 [ 215.151155][ T8405] rdma_bind_addr_dst+0x1b44/0x2c70 [ 215.151189][ T8405] cma_bind_addr+0x2be/0x300 [ 215.151210][ T8405] ? __pfx_cma_bind_addr+0x10/0x10 [ 215.151241][ T8405] ? mark_held_locks+0x40/0x70 [ 215.151267][ T8405] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 215.151293][ T8405] rdma_resolve_addr+0x142/0x20e0 [ 215.151315][ T8405] ? xa_load+0x153/0x2c0 [ 215.151330][ T8405] ? __pfx_xa_load+0x10/0x10 [ 215.151348][ T8405] ? ucma_get_ctx+0xc7/0x280 [ 215.151368][ T8405] ? __pfx_rdma_resolve_addr+0x10/0x10 [ 215.151389][ T8405] ? do_raw_spin_unlock+0x145/0x1e0 [ 215.151412][ T8405] ? __pfx_ucma_get_ctx+0x10/0x10 [ 215.151434][ T8405] ? ucma_resolve_addr+0x1ac/0x270 [ 215.151451][ T8405] ucma_resolve_addr+0x1ac/0x270 [ 215.151468][ T8405] ? __pfx_ucma_resolve_addr+0x10/0x10 [ 215.151511][ T8405] ? __pfx_ucma_resolve_addr+0x10/0x10 [ 215.151529][ T8405] ucma_write+0x1fb/0x330 [ 215.151545][ T8405] ? __pfx_ucma_write+0x10/0x10 [ 215.151561][ T8405] ? bpf_lsm_file_permission+0x9/0x10 [ 215.151583][ T8405] ? security_file_permission+0x76/0x210 [ 215.151607][ T8405] ? rw_verify_area+0xce/0x6d0 [ 215.151634][ T8405] vfs_write+0x2aa/0x1050 [ 215.151650][ T8405] ? __pfx_ucma_write+0x10/0x10 [ 215.151668][ T8405] ? __pfx_vfs_write+0x10/0x10 [ 215.151682][ T8405] ? find_held_lock+0x2b/0x80 [ 215.151728][ T8405] ? __fget_files+0x215/0x3d0 [ 215.151745][ T8405] ? __fget_files+0x215/0x3d0 [ 215.151765][ T8405] ? __fget_files+0x21f/0x3d0 [ 215.151787][ T8405] ksys_write+0x1f8/0x250 [ 215.151804][ T8405] ? __pfx_ksys_write+0x10/0x10 [ 215.151818][ T8405] ? ksys_write+0x1ac/0x250 [ 215.151832][ T8405] ? __pfx_ksys_write+0x10/0x10 [ 215.151854][ T8405] __do_fast_syscall_32+0xe7/0x970 [ 215.151877][ T8405] ? lockdep_hardirqs_on+0x78/0x100 [ 215.151902][ T8405] do_fast_syscall_32+0x32/0x70 [ 215.151926][ T8405] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 215.151947][ T8405] RIP: 0023:0xf700efec [ 215.151967][ T8405] Code: Unable to access opcode bytes at 0xf700efc2. [ 215.151974][ T8405] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 215.151992][ T8405] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 215.152002][ T8405] RDX: 0000000000000118 RSI: 0000000000000000 RDI: 0000000000000000 [ 215.152011][ T8405] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 215.152021][ T8405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.152031][ T8405] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 215.152053][ T8405] [ 216.698040][ T41] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 216.800306][ T8456] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 216.846159][ T8459] FAULT_INJECTION: forcing a failure. [ 216.846159][ T8459] name failslab, interval 1, probability 0, space 0, times 0 [ 216.852360][ T8459] CPU: 2 UID: 0 PID: 8459 Comm: syz.1.586 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.852390][ T8459] Tainted: [L]=SOFTLOCKUP [ 216.852396][ T8459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 216.852406][ T8459] Call Trace: [ 216.852413][ T8459] [ 216.852420][ T8459] dump_stack_lvl+0x100/0x190 [ 216.852448][ T8459] should_fail_ex.cold+0x5/0xa [ 216.852470][ T8459] should_failslab+0xc2/0x120 [ 216.852494][ T8459] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 216.852520][ T8459] ? gadget_dev_desc_UDC_store+0x51/0x2e0 [ 216.852556][ T8459] kstrdup+0x51/0xe0 [ 216.852578][ T8459] gadget_dev_desc_UDC_store+0x51/0x2e0 [ 216.852604][ T8459] configfs_write_iter+0x302/0x4e0 [ 216.852629][ T8459] vfs_write+0x6ac/0x1050 [ 216.852647][ T8459] ? __pfx_configfs_write_iter+0x10/0x10 [ 216.852666][ T8459] ? __pfx_vfs_write+0x10/0x10 [ 216.852681][ T8459] ? find_held_lock+0x2b/0x80 [ 216.852719][ T8459] ksys_write+0x12a/0x250 [ 216.852734][ T8459] ? __pfx_ksys_write+0x10/0x10 [ 216.852749][ T8459] ? ksys_write+0x1ac/0x250 [ 216.852764][ T8459] ? __pfx_ksys_write+0x10/0x10 [ 216.852785][ T8459] __do_fast_syscall_32+0xe7/0x970 [ 216.852809][ T8459] ? lockdep_hardirqs_on+0x78/0x100 [ 216.852834][ T8459] do_fast_syscall_32+0x32/0x70 [ 216.852858][ T8459] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 216.852879][ T8459] RIP: 0023:0xf701efec [ 216.852898][ T8459] Code: Unable to access opcode bytes at 0xf701efc2. [ 216.852906][ T8459] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 216.852924][ T8459] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002100 [ 216.852934][ T8459] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 216.852944][ T8459] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 216.852953][ T8459] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 216.852963][ T8459] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 216.852986][ T8459] [ 216.934142][ T41] usb 8-1: Using ep0 maxpacket: 32 [ 216.945570][ T41] usb 8-1: config 0 has no interfaces? [ 216.952370][ T41] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 216.956077][ T41] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 216.960117][ T41] usb 8-1: Product: syz [ 216.961664][ T41] usb 8-1: Manufacturer: syz [ 216.963238][ T41] usb 8-1: SerialNumber: syz [ 216.972700][ T41] usb 8-1: config 0 descriptor?? [ 217.457968][ T56] usb 42-1: device descriptor read/8, error -110 [ 217.563504][ T8468] FAULT_INJECTION: forcing a failure. [ 217.563504][ T8468] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 217.570829][ T8468] CPU: 3 UID: 0 PID: 8468 Comm: syz.2.589 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.570850][ T8468] Tainted: [L]=SOFTLOCKUP [ 217.570854][ T8468] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 217.570862][ T8468] Call Trace: [ 217.570867][ T8468] [ 217.570873][ T8468] dump_stack_lvl+0x100/0x190 [ 217.570892][ T8468] should_fail_ex.cold+0x5/0xa [ 217.570903][ T8468] ? prepare_alloc_pages+0x16d/0x5f0 [ 217.570922][ T8468] should_fail_alloc_page+0xeb/0x140 [ 217.570948][ T8468] prepare_alloc_pages+0x1f0/0x5f0 [ 217.570968][ T8468] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 217.570989][ T8468] ? is_bpf_text_address+0x8a/0x1a0 [ 217.571008][ T8468] ? is_bpf_text_address+0x8a/0x1a0 [ 217.571029][ T8468] ? bpf_ksym_find+0x124/0x1c0 [ 217.571046][ T8468] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 217.571068][ T8468] ? is_bpf_text_address+0x94/0x1a0 [ 217.571090][ T8468] ? kernel_text_address+0x8d/0x100 [ 217.571112][ T8468] ? __kernel_text_address+0xd/0x30 [ 217.571129][ T8468] ? unwind_get_return_address+0x59/0xa0 [ 217.571148][ T8468] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 217.571163][ T8468] ? __lock_acquire+0x49f/0x1a40 [ 217.571184][ T8468] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 217.571204][ T8468] ? register_lock_class+0x40/0x560 [ 217.571213][ T8468] ? find_held_lock+0x2b/0x80 [ 217.571227][ T8468] ? ima_match_policy+0x8c4/0x2350 [ 217.571243][ T8468] ? ima_match_policy+0x8c4/0x2350 [ 217.571259][ T8468] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 217.571278][ T8468] ? policy_nodemask+0xed/0x4f0 [ 217.571297][ T8468] alloc_pages_mpol+0x1fb/0x540 [ 217.571314][ T8468] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 217.571335][ T8468] folio_alloc_mpol_noprof+0x36/0x260 [ 217.571355][ T8468] vma_alloc_folio_noprof+0xed/0x1d0 [ 217.571366][ T8468] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 217.571381][ T8468] do_anonymous_page+0xb2b/0x2080 [ 217.571394][ T8468] ? rcu_read_unlock+0x2d/0xb0 [ 217.571410][ T8468] __handle_mm_fault+0x1d2c/0x2a00 [ 217.571424][ T8468] ? mt_find+0x45e/0x8e0 [ 217.571444][ T8468] ? __pfx___handle_mm_fault+0x10/0x10 [ 217.571454][ T8468] ? __pfx_mt_find+0x10/0x10 [ 217.571479][ T8468] ? find_vma+0xbf/0x140 [ 217.571493][ T8468] ? __pfx_find_vma+0x10/0x10 [ 217.571509][ T8468] handle_mm_fault+0x37b/0xa30 [ 217.571528][ T8468] do_user_addr_fault+0x74c/0x12f0 [ 217.571549][ T8468] exc_page_fault+0x6f/0xd0 [ 217.571583][ T8468] asm_exc_page_fault+0x26/0x30 [ 217.571595][ T8468] RIP: 0010:_copy_to_iter+0x38c/0x1720 [ 217.571613][ T8468] Code: 00 00 00 00 e9 4d ff ff ff e8 f0 a9 f0 fc 4c 8b 74 24 18 44 89 fe 4c 89 f7 e8 10 41 60 fd 0f 01 cb 4c 89 f9 48 89 df 4c 89 f6 a4 0f 1f 00 48 89 cb 0f 01 ca 4c 89 f8 48 29 c8 48 89 44 24 08 [ 217.571624][ T8468] RSP: 0018:ffffc9000625fad8 EFLAGS: 00050246 [ 217.571634][ T8468] RAX: 0000000000000001 RBX: 0000000080004000 RCX: 00000000000000aa [ 217.571641][ T8468] RDX: 0000000000000001 RSI: ffff88806caca000 RDI: 0000000080004000 [ 217.571648][ T8468] RBP: ffffc9000625fd68 R08: 0000000000000000 R09: ffffed100d959415 [ 217.571655][ T8468] R10: ffff88806caca0a9 R11: 0000000000000000 R12: 00000000800040aa [ 217.571662][ T8468] R13: 00007ffffffff000 R14: ffff88806caca000 R15: 00000000000000aa [ 217.571676][ T8468] ? _copy_to_iter+0x380/0x1720 [ 217.571722][ T8468] ? __mutex_unlock_slowpath+0x35d/0x930 [ 217.571740][ T8468] ? __pfx__copy_to_iter+0x10/0x10 [ 217.571757][ T8468] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 217.571777][ T8468] ? kernfs_put_active+0x93/0xe0 [ 217.571791][ T8468] seq_read_iter+0xdab/0x1270 [ 217.571817][ T8468] kernfs_fop_read_iter+0x46c/0x610 [ 217.571832][ T8468] ? rw_verify_area+0xce/0x6d0 [ 217.571849][ T8468] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 217.571865][ T8468] vfs_read+0x82e/0xb40 [ 217.571878][ T8468] ? __pfx_vfs_read+0x10/0x10 [ 217.571887][ T8468] ? find_held_lock+0x2b/0x80 [ 217.571910][ T8468] ksys_read+0x12a/0x250 [ 217.571920][ T8468] ? __pfx_ksys_read+0x10/0x10 [ 217.571930][ T8468] ? ksys_write+0x1ac/0x250 [ 217.571940][ T8468] ? __pfx_ksys_write+0x10/0x10 [ 217.571953][ T8468] __do_fast_syscall_32+0xe7/0x970 [ 217.571970][ T8468] ? lockdep_hardirqs_on+0x78/0x100 [ 217.571987][ T8468] do_fast_syscall_32+0x32/0x70 [ 217.572004][ T8468] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.572020][ T8468] RIP: 0023:0xf706efec [ 217.572034][ T8468] Code: Unable to access opcode bytes at 0xf706efc2. [ 217.572039][ T8468] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 217.572049][ T8468] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080004000 [ 217.572056][ T8468] RDX: 00000000ffffff64 RSI: 0000000000000000 RDI: 0000000000000000 [ 217.572062][ T8468] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.572069][ T8468] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 217.572075][ T8468] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.572089][ T8468] [ 217.850488][ T56] usb usb42-port1: attempt power cycle [ 217.936674][ T8470] syz.2.590 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 218.184633][ T5827] usb 8-1: USB disconnect, device number 53 [ 218.410505][ T56] usb usb42-port1: unable to enumerate USB device [ 218.806248][ T8482] jffs2: notice: (8482) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 218.869403][ T8485] FAULT_INJECTION: forcing a failure. [ 218.869403][ T8485] name failslab, interval 1, probability 0, space 0, times 0 [ 218.874705][ T8485] CPU: 2 UID: 0 PID: 8485 Comm: syz.3.596 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.874733][ T8485] Tainted: [L]=SOFTLOCKUP [ 218.874739][ T8485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 218.874750][ T8485] Call Trace: [ 218.874756][ T8485] [ 218.874763][ T8485] dump_stack_lvl+0x100/0x190 [ 218.874790][ T8485] should_fail_ex.cold+0x5/0xa [ 218.874810][ T8485] should_failslab+0xc2/0x120 [ 218.874834][ T8485] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 218.874857][ T8485] ? __alloc_skb+0x5b7/0x710 [ 218.874879][ T8485] ? __alloc_skb+0x140/0x710 [ 218.874902][ T8485] __alloc_skb+0x140/0x710 [ 218.874922][ T8485] ? __alloc_skb+0x5b7/0x710 [ 218.874942][ T8485] ? __pfx___alloc_skb+0x10/0x10 [ 218.874966][ T8485] netlink_alloc_large_skb+0x69/0x150 [ 218.874986][ T8485] netlink_sendmsg+0x680/0xda0 [ 218.875009][ T8485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.875036][ T8485] ? apparmor_socket_sendmsg+0x15b/0x270 [ 218.875059][ T8485] ____sys_sendmsg+0xa4d/0xbe0 [ 218.875075][ T8485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.875095][ T8485] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.875122][ T8485] ___sys_sendmsg+0x190/0x1e0 [ 218.875142][ T8485] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.875170][ T8485] ? find_held_lock+0x2b/0x80 [ 218.875206][ T8485] __sys_sendmsg+0x160/0x210 [ 218.875229][ T8485] ? __pfx___sys_sendmsg+0x10/0x10 [ 218.875257][ T8485] ? __pfx_ksys_write+0x10/0x10 [ 218.875280][ T8485] __do_fast_syscall_32+0xe7/0x970 [ 218.875305][ T8485] ? lockdep_hardirqs_on+0x78/0x100 [ 218.875329][ T8485] do_fast_syscall_32+0x32/0x70 [ 218.875352][ T8485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 218.875374][ T8485] RIP: 0023:0xf700efec [ 218.875393][ T8485] Code: Unable to access opcode bytes at 0xf700efc2. [ 218.875401][ T8485] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 218.875418][ T8485] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 218.875428][ T8485] RDX: 0000000024008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 218.875438][ T8485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 218.875447][ T8485] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 218.875457][ T8485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 218.875476][ T8485] [ 219.011767][ T8489] syzkaller0: entered promiscuous mode [ 219.014126][ T8489] syzkaller0: entered allmulticast mode [ 219.019307][ T8489] tipc: Started in network mode [ 219.022926][ T8489] tipc: Node identity 42b7fab7ac4f, cluster identity 4711 [ 219.029930][ T8489] tipc: Enabled bearer , priority 0 [ 219.037940][ T8488] tipc: Resetting bearer [ 219.050036][ T8488] tipc: Disabling bearer [ 219.152893][ T8493] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 219.154991][ T8493] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 219.158770][ T8493] vhci_hcd vhci_hcd.0: Device attached [ 219.163381][ T8494] vhci_hcd: connection closed [ 219.165065][ T5784] vhci_hcd vhci_hcd.1: stop threads [ 219.169324][ T5784] vhci_hcd vhci_hcd.1: release socket [ 219.171073][ T5784] vhci_hcd vhci_hcd.1: disconnect device [ 219.299711][ T56] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 219.467905][ T56] usb 7-1: Using ep0 maxpacket: 8 [ 219.477997][ T56] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 219.481969][ T56] usb 7-1: config 179 has no interface number 0 [ 219.485456][ T56] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 219.490004][ T56] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 219.494472][ T56] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 219.498879][ T56] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 219.503337][ T56] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 219.508615][ T56] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 219.512651][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.542434][ T8491] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 220.041388][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'. [ 220.268177][ T5739] Bluetooth: hci0: hardware error 0x06 [ 220.322949][ T8519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.604'. [ 220.667612][ T5885] usb 7-1: USB disconnect, device number 59 [ 220.667740][ C2] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 220.672442][ C2] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 220.675374][ C2] ================================================================== [ 220.677951][ C2] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23b/0x260 [ 220.680418][ C2] Read of size 4 at addr ffff88802455d85c by task syz.1.602/8511 [ 220.683041][ C2] [ 220.684767][ C2] CPU: 2 UID: 0 PID: 8511 Comm: syz.1.602 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.684787][ C2] Tainted: [L]=SOFTLOCKUP [ 220.684792][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.684799][ C2] Call Trace: [ 220.684804][ C2] [ 220.684810][ C2] dump_stack_lvl+0x100/0x190 [ 220.684840][ C2] print_report+0x13d/0x4b0 [ 220.684858][ C2] ? __virt_addr_valid+0x239/0x430 [ 220.684872][ C2] ? do_raw_spin_lock+0x23b/0x260 [ 220.684885][ C2] kasan_report+0xdf/0x1c0 [ 220.684902][ C2] ? do_raw_spin_lock+0x23b/0x260 [ 220.684916][ C2] do_raw_spin_lock+0x23b/0x260 [ 220.684929][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 220.684941][ C2] ? kcov_remote_stop+0x201/0x540 [ 220.684962][ C2] ? kcov_remote_stop+0x201/0x540 [ 220.684979][ C2] _raw_spin_lock_irqsave+0x42/0x60 [ 220.684994][ C2] ? __wake_up+0x1c/0x60 [ 220.685010][ C2] __wake_up+0x1c/0x60 [ 220.685025][ C2] usb_anchor_resume_wakeups+0xc7/0xf0 [ 220.685040][ C2] __usb_hcd_giveback_urb+0x3d6/0x610 [ 220.685059][ C2] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 220.685078][ C2] dummy_timer+0xdb2/0x36f0 [ 220.685090][ C2] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 220.685103][ C2] ? find_held_lock+0x2b/0x80 [ 220.685117][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 220.685136][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 220.685153][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 220.685167][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 220.685183][ C2] ? __pfx_debug_object_deactivate+0x10/0x10 [ 220.685201][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 220.685212][ C2] ? rcu_is_watching+0x12/0xc0 [ 220.685601][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 220.685616][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 220.685626][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 220.685644][ C2] hrtimer_run_softirq+0x17d/0x2c0 [ 220.685659][ C2] handle_softirqs+0x1ea/0x9b0 [ 220.685673][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 220.685686][ C2] ? _raw_spin_unlock+0x28/0x50 [ 220.685698][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 220.685713][ C2] __irq_exit_rcu+0x162/0x210 [ 220.685725][ C2] irq_exit_rcu+0x9/0x30 [ 220.685737][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 220.685753][ C2] [ 220.685757][ C2] [ 220.685760][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 220.685774][ C2] RIP: 0010:finish_task_switch.isra.0+0x2cd/0x10c0 [ 220.685788][ C2] Code: ab 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 e9 47 04 00 00 49 8d 7f 48 e8 60 6d e5 09 e8 4b 94 3c 00 fb 48 8d bb f8 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 220.685800][ C2] RSP: 0000:ffffc90002f57820 EFLAGS: 00000206 [ 220.685811][ C2] RAX: 0000000000045135 RBX: ffff888000f30000 RCX: 0000000000000000 [ 220.685820][ C2] RDX: 0000000000000000 RSI: ffffffff8e1a260e RDI: ffff888000f316f8 [ 220.685829][ C2] RBP: ffffc90002f57878 R08: 0000000000000001 R09: 0000000000000000 [ 220.685837][ C2] R10: 0000000000000001 R11: ffffffff81d5692c R12: ffff88802467a540 [ 220.685843][ C2] R13: 0000000000000001 R14: ffffffff9121eb84 R15: ffff88802b43b600 [ 220.685854][ C2] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 220.685870][ C2] __schedule+0x1264/0x6730 [ 220.685888][ C2] ? __pfx___schedule+0x10/0x10 [ 220.685900][ C2] ? find_held_lock+0x2b/0x80 [ 220.685914][ C2] ? schedule+0x225/0x2c0 [ 220.685927][ C2] schedule+0xdd/0x2c0 [ 220.685940][ C2] schedule_timeout+0x127/0x280 [ 220.685956][ C2] ? __pfx_schedule_timeout+0x10/0x10 [ 220.685968][ C2] ? __pfx_process_timeout+0x10/0x10 [ 220.685984][ C2] ? snd_rawmidi_write+0x488/0xc60 [ 220.685998][ C2] ? rcu_is_watching+0x12/0xc0 [ 220.686011][ C2] ? snd_rawmidi_write+0x44d/0xc60 [ 220.686023][ C2] snd_rawmidi_write+0x492/0xc60 [ 220.686038][ C2] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 220.686050][ C2] ? __pfx_default_wake_function+0x10/0x10 [ 220.686064][ C2] ? bpf_lsm_file_permission+0x9/0x10 [ 220.686076][ C2] ? security_file_permission+0x76/0x210 [ 220.686092][ C2] ? rw_verify_area+0xce/0x6d0 [ 220.686109][ C2] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 220.686122][ C2] vfs_writev+0x5ed/0xdd0 [ 220.686140][ C2] ? __pfx_vfs_writev+0x10/0x10 [ 220.686160][ C2] ? __fget_files+0x21f/0x3d0 [ 220.686173][ C2] ? do_writev+0x28a/0x340 [ 220.686188][ C2] do_writev+0x28a/0x340 [ 220.686205][ C2] ? __pfx_do_writev+0x10/0x10 [ 220.686223][ C2] __do_fast_syscall_32+0xe7/0x970 [ 220.686241][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 220.686256][ C2] do_fast_syscall_32+0x32/0x70 [ 220.686273][ C2] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 220.686288][ C2] RIP: 0023:0xf701efec [ 220.686302][ C2] Code: Unable to access opcode bytes at 0xf701efc2. [ 220.686307][ C2] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 220.686318][ C2] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000840 [ 220.686325][ C2] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 220.686332][ C2] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 220.686338][ C2] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 220.686345][ C2] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 220.686354][ C2] [ 220.686358][ C2] [ 220.850090][ C2] Allocated by task 56: [ 220.851429][ C2] kasan_save_stack+0x30/0x50 [ 220.852970][ C2] kasan_save_track+0x14/0x30 [ 220.854469][ C2] __kasan_kmalloc+0xaa/0xb0 [ 220.855972][ C2] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 220.857676][ C2] xpad_probe+0x28e/0x1f60 [ 220.859115][ C2] usb_probe_interface+0x303/0x8f0 [ 220.860785][ C2] really_probe+0x241/0xa60 [ 220.862246][ C2] __driver_probe_device+0x20e/0x450 [ 220.863964][ C2] driver_probe_device+0x4a/0x140 [ 220.865569][ C2] __device_attach_driver+0x1df/0x320 [ 220.867282][ C2] bus_for_each_drv+0x159/0x1e0 [ 220.868861][ C2] __device_attach+0x1e4/0x4d0 [ 220.870429][ C2] device_initial_probe+0xaf/0xd0 [ 220.872062][ C2] bus_probe_device+0x64/0x160 [ 220.873604][ C2] device_add+0x121d/0x1970 [ 220.875074][ C2] usb_set_configuration+0xd97/0x1c60 [ 220.876780][ C2] usb_generic_driver_probe+0xa1/0xe0 [ 220.878509][ C2] usb_probe_device+0xef/0x400 [ 220.880060][ C2] really_probe+0x241/0xa60 [ 220.881548][ C2] __driver_probe_device+0x20e/0x450 [ 220.883238][ C2] driver_probe_device+0x4a/0x140 [ 220.884867][ C2] __device_attach_driver+0x1df/0x320 [ 220.886588][ C2] bus_for_each_drv+0x159/0x1e0 [ 220.888163][ C2] __device_attach+0x1e4/0x4d0 [ 220.889716][ C2] device_initial_probe+0xaf/0xd0 [ 220.891335][ C2] bus_probe_device+0x64/0x160 [ 220.892894][ C2] device_add+0x121d/0x1970 [ 220.894377][ C2] usb_new_device.cold+0x685/0x115c [ 220.896117][ C2] hub_event+0x30a3/0x4a60 [ 220.897582][ C2] process_one_work+0xa23/0x1940 [ 220.899194][ C2] worker_thread+0x5ef/0xe50 [ 220.900639][ C2] kthread+0x370/0x450 [ 220.901863][ C2] ret_from_fork+0x72b/0xd50 [ 220.903375][ C2] ret_from_fork_asm+0x1a/0x30 [ 220.904931][ C2] [ 220.905721][ C2] Freed by task 5885: [ 220.907001][ C2] kasan_save_stack+0x30/0x50 [ 220.908520][ C2] kasan_save_track+0x14/0x30 [ 220.910072][ C2] kasan_save_free_info+0x3b/0x70 [ 220.911704][ C2] __kasan_slab_free+0x5f/0x80 [ 220.913274][ C2] kfree+0x22b/0x6c0 [ 220.914548][ C2] xpad_disconnect+0x1cf/0x530 [ 220.916113][ C2] usb_unbind_interface+0x1dd/0x9e0 [ 220.917781][ C2] device_remove+0x12a/0x180 [ 220.919294][ C2] device_release_driver_internal+0x44e/0x620 [ 220.921281][ C2] bus_remove_device+0x2bc/0x560 [ 220.922888][ C2] device_del+0x376/0x9b0 [ 220.924326][ C2] usb_disable_device+0x367/0x810 [ 220.925939][ C2] usb_disconnect+0x2e2/0x9a0 [ 220.927462][ C2] hub_event+0x1c4f/0x4a60 [ 220.928943][ C2] process_one_work+0xa23/0x1940 [ 220.930733][ C2] worker_thread+0x5ef/0xe50 [ 220.932242][ C2] kthread+0x370/0x450 [ 220.933630][ C2] ret_from_fork+0x72b/0xd50 [ 220.935153][ C2] ret_from_fork_asm+0x1a/0x30 [ 220.936720][ C2] [ 220.937495][ C2] The buggy address belongs to the object at ffff88802455d800 [ 220.937495][ C2] which belongs to the cache kmalloc-1k of size 1024 [ 220.941966][ C2] The buggy address is located 92 bytes inside of [ 220.941966][ C2] freed 1024-byte region [ffff88802455d800, ffff88802455dc00) [ 220.946338][ C2] [ 220.947124][ C2] The buggy address belongs to the physical page: [ 220.949168][ C2] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24558 [ 220.951986][ C2] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 220.954713][ C2] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 220.957136][ C2] page_type: f5(slab) [ 220.958425][ C2] raw: 00fff00000000040 ffff88801bc42dc0 dead000000000100 dead000000000122 [ 220.960891][ C2] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 220.963620][ C2] head: 00fff00000000040 ffff88801bc42dc0 dead000000000100 dead000000000122 [ 220.966371][ C2] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 220.969085][ C2] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 220.971864][ C2] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 220.974581][ C2] page dumped because: kasan: bad access detected [ 220.976584][ C2] page_owner tracks the page as allocated [ 220.978290][ C2] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 223, tgid 223 (kworker/u33:7), ts 49852941576, free_ts 49768540756 [ 220.984320][ C2] post_alloc_hook+0xfd/0x120 [ 220.985803][ C2] get_page_from_freelist+0xf48/0x3530 [ 220.987566][ C2] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 220.989408][ C2] new_slab+0xa2/0x640 [ 220.990799][ C2] refill_objects+0xe3/0x410 [ 220.992289][ C2] __pcs_replace_empty_main+0x376/0x680 [ 220.994100][ C2] __kmalloc_node_track_caller_noprof+0x679/0x830 [ 220.996277][ C2] kmalloc_reserve+0xe8/0x350 [ 220.997867][ C2] __alloc_skb+0x185/0x710 [ 220.999335][ C2] br_info_notify+0x10f/0x2e0 [ 221.000923][ C2] br_make_forwarding+0x137/0x260 [ 221.002551][ C2] br_port_state_selection+0x4c3/0x640 [ 221.004441][ C2] br_stp_enable_port+0x34/0x50 [ 221.005965][ C2] br_port_carrier_check+0x26f/0x4d0 [ 221.007659][ C2] br_device_event+0x821/0xa00 [ 221.009232][ C2] notifier_call_chain+0x99/0x3f0 [ 221.010803][ C2] page last free pid 5827 tgid 5827 stack trace: [ 221.012794][ C2] __free_frozen_pages+0x79f/0x1090 [ 221.014365][ C2] qlist_free_all+0x47/0xf0 [ 221.015752][ C2] kasan_quarantine_reduce+0x1a0/0x1f0 [ 221.017558][ C2] __kasan_slab_alloc+0x69/0x90 [ 221.019095][ C2] kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 221.020937][ C2] __alloc_skb+0x140/0x710 [ 221.022309][ C2] mld_newpack.isra.0+0x18e/0xa20 [ 221.023888][ C2] add_grhead+0x299/0x340 [ 221.025211][ C2] add_grec+0x1389/0x1930 [ 221.026581][ C2] mld_ifc_work+0x3c5/0xc10 [ 221.027964][ C2] process_one_work+0xa23/0x1940 [ 221.029550][ C2] worker_thread+0x5ef/0xe50 [ 221.030959][ C2] kthread+0x370/0x450 [ 221.032207][ C2] ret_from_fork+0x72b/0xd50 [ 221.033652][ C2] ret_from_fork_asm+0x1a/0x30 [ 221.035109][ C2] [ 221.035888][ C2] Memory state around the buggy address: [ 221.037602][ C2] ffff88802455d700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 221.039868][ C2] ffff88802455d780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 221.042311][ C2] >ffff88802455d800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 221.044808][ C2] ^ [ 221.046938][ C2] ffff88802455d880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 221.049467][ C2] ffff88802455d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 221.051937][ C2] ================================================================== [ 221.054351][ C2] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 221.056611][ C2] CPU: 2 UID: 0 PID: 8511 Comm: syz.1.602 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.059849][ C2] Tainted: [L]=SOFTLOCKUP [ 221.061211][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 221.064294][ C2] Call Trace: [ 221.065380][ C2] [ 221.066366][ C2] dump_stack_lvl+0x100/0x190 [ 221.067894][ C2] vpanic+0x552/0x970 [ 221.069198][ C2] ? __pfx_vpanic+0x10/0x10 [ 221.070649][ C2] ? __pfx_vprintk_emit+0x10/0x10 [ 221.072272][ C2] ? do_raw_spin_lock+0x23b/0x260 [ 221.073872][ C2] panic+0xd1/0xe0 [ 221.075039][ C2] ? __pfx_panic+0x10/0x10 [ 221.076478][ C2] ? end_report.part.0+0x23/0x90 [ 221.078072][ C2] ? rcu_is_watching+0x12/0xc0 [ 221.079619][ C2] ? end_report.part.0+0x23/0x90 [ 221.081241][ C2] ? check_panic_on_warn+0x1f/0x90 [ 221.082897][ C2] check_panic_on_warn.cold+0x19/0x34 [ 221.084682][ C2] end_report.part.0+0x3a/0x90 [ 221.086225][ C2] kasan_report.cold+0xe/0x18 [ 221.087748][ C2] ? do_raw_spin_lock+0x23b/0x260 [ 221.089357][ C2] do_raw_spin_lock+0x23b/0x260 [ 221.090888][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 221.092596][ C2] ? kcov_remote_stop+0x201/0x540 [ 221.094206][ C2] ? kcov_remote_stop+0x201/0x540 [ 221.095802][ C2] _raw_spin_lock_irqsave+0x42/0x60 [ 221.097442][ C2] ? __wake_up+0x1c/0x60 [ 221.098807][ C2] __wake_up+0x1c/0x60 [ 221.100173][ C2] usb_anchor_resume_wakeups+0xc7/0xf0 [ 221.101819][ C2] __usb_hcd_giveback_urb+0x3d6/0x610 [ 221.103549][ C2] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 221.105169][ C2] dummy_timer+0xdb2/0x36f0 [ 221.106541][ C2] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 221.108305][ C2] ? find_held_lock+0x2b/0x80 [ 221.109837][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 221.111512][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 221.113306][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 221.115119][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 221.116889][ C2] ? __pfx_debug_object_deactivate+0x10/0x10 [ 221.118741][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 221.120264][ C2] ? rcu_is_watching+0x12/0xc0 [ 221.121711][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 221.123616][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 221.125123][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 221.126690][ C2] hrtimer_run_softirq+0x17d/0x2c0 [ 221.128252][ C2] handle_softirqs+0x1ea/0x9b0 [ 221.129760][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 221.131381][ C2] ? _raw_spin_unlock+0x28/0x50 [ 221.132909][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 221.134658][ C2] __irq_exit_rcu+0x162/0x210 [ 221.136076][ C2] irq_exit_rcu+0x9/0x30 [ 221.137428][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 221.139223][ C2] [ 221.140179][ C2] [ 221.141140][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 221.142993][ C2] RIP: 0010:finish_task_switch.isra.0+0x2cd/0x10c0 [ 221.144953][ C2] Code: ab 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 e9 47 04 00 00 49 8d 7f 48 e8 60 6d e5 09 e8 4b 94 3c 00 fb 48 8d bb f8 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 221.150997][ C2] RSP: 0000:ffffc90002f57820 EFLAGS: 00000206 [ 221.152917][ C2] RAX: 0000000000045135 RBX: ffff888000f30000 RCX: 0000000000000000 [ 221.155379][ C2] RDX: 0000000000000000 RSI: ffffffff8e1a260e RDI: ffff888000f316f8 [ 221.157853][ C2] RBP: ffffc90002f57878 R08: 0000000000000001 R09: 0000000000000000 [ 221.160367][ C2] R10: 0000000000000001 R11: ffffffff81d5692c R12: ffff88802467a540 [ 221.162914][ C2] R13: 0000000000000001 R14: ffffffff9121eb84 R15: ffff88802b43b600 [ 221.165406][ C2] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 221.167298][ C2] __schedule+0x1264/0x6730 [ 221.168765][ C2] ? __pfx___schedule+0x10/0x10 [ 221.170356][ C2] ? find_held_lock+0x2b/0x80 [ 221.171901][ C2] ? schedule+0x225/0x2c0 [ 221.173306][ C2] schedule+0xdd/0x2c0 [ 221.174627][ C2] schedule_timeout+0x127/0x280 [ 221.176199][ C2] ? __pfx_schedule_timeout+0x10/0x10 [ 221.177902][ C2] ? __pfx_process_timeout+0x10/0x10 [ 221.179604][ C2] ? snd_rawmidi_write+0x488/0xc60 [ 221.181281][ C2] ? rcu_is_watching+0x12/0xc0 [ 221.182827][ C2] ? snd_rawmidi_write+0x44d/0xc60 [ 221.184488][ C2] snd_rawmidi_write+0x492/0xc60 [ 221.186067][ C2] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 221.187821][ C2] ? __pfx_default_wake_function+0x10/0x10 [ 221.189678][ C2] ? bpf_lsm_file_permission+0x9/0x10 [ 221.191396][ C2] ? security_file_permission+0x76/0x210 [ 221.193186][ C2] ? rw_verify_area+0xce/0x6d0 [ 221.194749][ C2] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 221.196507][ C2] vfs_writev+0x5ed/0xdd0 [ 221.197861][ C2] ? __pfx_vfs_writev+0x10/0x10 [ 221.199393][ C2] ? __fget_files+0x21f/0x3d0 [ 221.200916][ C2] ? do_writev+0x28a/0x340 [ 221.202357][ C2] do_writev+0x28a/0x340 [ 221.203728][ C2] ? __pfx_do_writev+0x10/0x10 [ 221.205200][ C2] __do_fast_syscall_32+0xe7/0x970 [ 221.206733][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 221.208374][ C2] do_fast_syscall_32+0x32/0x70 [ 221.209940][ C2] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 221.211887][ C2] RIP: 0023:0xf701efec [ 221.213219][ C2] Code: Unable to access opcode bytes at 0xf701efc2. [ 221.215321][ C2] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 221.217980][ C2] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000840 [ 221.220495][ C2] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 221.222997][ C2] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 221.225530][ C2] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 221.228028][ C2] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 221.230566][ C2] [ 221.232294][ C2] Kernel Offset: disabled [ 221.233725][ C2] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:21:39 Registers: info registers vcpu 0 CPU#0 RAX=0000000080000000 RBX=ffff8880261477c0 RCX=ffffffff8981eba4 RDX=ffff888026002540 RSI=ffffffff8a5b779c RDI=ffff8880261477c0 RBP=1ffff92000597f10 RSP=ffffc90002cbf868 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff8880261477c0 R13=0000000000000000 R14=ffff8880261477c0 R15=ffff88805257adc0 RIP=ffffffff8209b10b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fccfebc8880 ffffffff 00c00000 GS =0000 ffff888096bf4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5200008 CR3=00000000260e0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000f010e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000000c400 Opmask01=0000000000000000 Opmask02=00000000ffff7fdf Opmask03=0000000008000010 Opmask04=00000000ffffefff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055cd50594dd0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccfe5f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccfe5f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccfe552c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312d372f37627375 2f322e6463685f79 6d6d75642f6d726f 6674616c702f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 95755a86cc0ed19b 000055c80c8d8474 0000000000000261 00000035362e3937 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616c702f73656369 7665642f7379732f 0000000000000061 0000003170696863 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000692bc9 RBX=ffff88801c742540 RCX=ffffffff8bb7f335 RDX=0000000000000000 RSI=ffffffff8e1a260e RDI=ffffffff8c3fe580 RBP=ffffed10038e84a8 RSP=ffffc9000046fe00 R8 =0000000000000001 R9 =ffffed100566678d R10=ffff88802b333c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000 RIP=ffffffff8bb7d8ff RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cf4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f71c8b50 CR3=000000005072e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffffff81e61e10 RCX=ffffffff81fd912a RDX=ffffffff81e61e10 RSI=ffffffff81edce91 RDI=ffff888000f30000 RBP=000000000000b600 RSP=ffffc90000537e38 R8 =0000000000000006 R9 =ffffffff81edce91 R10=ffffffff81e61e10 R11=000000000006cd02 R12=000000000000bf95 R13=ffffffff81edce91 R14=000000000000b600 R15=dffffc0000000000 RIP=ffffffff8209b100 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096df4000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080001eae CR3=000000005fc39000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88805ca12078 RCX=ffffc90002f67974 RDX=0000000000000005 RSI=0000000000000000 RDI=ffff88805ca120f8 RBP=0000000000000000 RSP=ffffc90002f679a8 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000 R12=ffff88805ca120f8 R13=ffff88805ca10000 R14=0000000000000002 R15=0000000080000000 RIP=ffffffff81ed0720 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ef4000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f71d8b50 CR3=000000005fc39000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000