last executing test programs: 7.389758012s ago: executing program 3 (id=3923): socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/snmp\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000480)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x4000, 0x1000000, 0x2033f, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x3, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x0, 0x2, 0x9d}}], 0x1, 0x0, 0x0) 7.068852326s ago: executing program 3 (id=3926): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r2 = dup3(r0, r1, 0x0) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) sendmsg$xdp(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000800}, 0x8010) 6.489309243s ago: executing program 1 (id=3929): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xff070000, 0x2}, 0x50) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0xffffffffffffffff, 0x0, 0x94ffb58ffa608d95) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x48}}, 0x80) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'syztnl2\x00', r5, 0x80, 0x80, 0x7f, 0x9, {{0x12, 0x4, 0x0, 0x7, 0x48, 0x65, 0x0, 0x3, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x2a}, {[@timestamp_addr={0x44, 0x34, 0x89, 0x1, 0xd, [{@multicast1, 0x4dfb}, {@loopback, 0x7}, {@private=0xa010102, 0x4}, {@broadcast, 0xb8}, {@multicast1, 0x8}, {@multicast1, 0x6}]}]}}}}}) splice(r1, 0x0, r4, 0x0, 0x10d00, 0xf) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x2, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80008000}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xffff7fff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_GET_SPEED(r7, 0x551f) r8 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write$tun(r8, &(0x7f0000000640)={@val={0x0, 0x88fb}, @void, @ipv4=@tcp={{0x5, 0x4, 0x1, 0x28, 0x28, 0x64, 0x0, 0x80, 0x6, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1b}}, {{0x4e21, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x9, 0x0, 0x6}}}}, 0x2c) 6.289463763s ago: executing program 1 (id=3930): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e000000000000000900", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000bdb036199122bd7242b23cd71ba0c521ba608220da7460f8021686de3882227cbb7314eab187b7d8ec1d2fa0d8a7bd6eb377fa6d0008c0925c2af5e0f4410af6d2fb0df1302894ed1e1b726e9d75c6cbf8be002a0bcaea476464fa96985e83450b6e1002000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x9f, r2, 0x4}, 0x38) dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000154000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800002b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="ae1ab42a83945264b1eba9e2a7274d9a86197a663b5dc0c78b5539fa3115cc2e56095d923d8e2634d9a53a0711cf638a8fe0778ca53e689d5766cd9710477a"], 0xff2e) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x80000000}) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x0, 0x13, "00170000ff000000fe645ea200"}) syz_open_pts(r3, 0x8182) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000540), 0x3c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4040) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r6, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x2}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 6.134160932s ago: executing program 3 (id=3931): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 3.887778737s ago: executing program 0 (id=3945): pipe(&(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000140)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x35) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="050000800000000071112400000000008510000002000000850000000e0000009500000000616106db53c7bfd0bc78e7d2003e86cd49a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1f, &(0x7f0000000540)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x71, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000780)={@fallback=r7, r7, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 3.490288346s ago: executing program 3 (id=3949): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x3e6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240), 0x0, 0x4000880) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x40}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r4, 0x4) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x20, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, 0xff}, [@ldst={0x0, 0x0, 0x3, 0x0, 0x8, 0xffffffffffffffc0, 0x5}, @func]}, &(0x7f0000000040)='syzkaller\x00', 0xffffff93, 0x83, &(0x7f0000000200)=""/131, 0x41000, 0x0, '\x00', r1, @netfilter=0x2d, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x3, 0xb, 0x0, 0x7fffffff}, 0x10, r4, r5, 0x3, 0x0, &(0x7f00000003c0)=[{0x1, 0x2, 0xb, 0x3}, {0x3, 0x4, 0x6, 0x7}, {0x3, 0x1, 0x8}], 0x10, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000009594ef1e2e000000005ee07ea0300664e19151463687b06a"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0xfffffffffffffceb, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xa1b, 0x0, 0x9, 0x0, &(0x7f00000006c0)="ccf95f497eb30b9d5b", 0x0}, 0x50) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r7, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) mount$cgroup(0x0, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.1/mass_storage.usb0\x00', &(0x7f0000000600), 0x200000, &(0x7f0000000640)={[{@xattr}, {@nofavordynmods}, {@name}], [{@permit_directio}, {@smackfsroot={'smackfsroot', 0x3d, '-))!@{j'}}]}) write$P9_RMKNOD(r7, &(0x7f0000000080)={0x14, 0x13, 0x2, {0x40, 0x0, 0x2}}, 0x14) symlinkat(&(0x7f0000000a00)='./config\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/configs/c.1/mass_storage.usb0\x00') 3.295352202s ago: executing program 2 (id=3951): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x800) write$char_usb(r3, &(0x7f0000000140)="3ce73218913e5ba6eafab9ba9babf666090c6da692582b44b4cf72997cdd9d3b34efe793f172e62112722a6fdc316dd520f941aef498aecfe7fbf6ded68fa95543737622a2c7e3b734ea9d5a7fc28dda615331368bee16061a6ea12f9af421f6b2f59a1875569c31976ff28e415667384f8248b569a73d37562a66f36a2d3d1a6b091f90241807f0caff496b34ceac1a6e7bf1cbd3965894407e99367e7686c7966324ffce0a0ef2d2c13b9a7afe21f5b19a0aaded74c726c6accaad00852008653261dea4ecff9289830b013f107340060874bdaa36172cd8c8baebaec40ce364ea8b5bae0f51e61b937b7796360759", 0xf0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, 0x0, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000000)={0x4c58, 0x7ffd, 0x200}) sendfile(r1, r1, 0x0, 0x200000) 3.228011074s ago: executing program 0 (id=3952): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) 3.123838843s ago: executing program 0 (id=3953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x1c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.123174306s ago: executing program 0 (id=3954): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x800) write$char_usb(r3, &(0x7f0000000140)="3ce73218913e5ba6eafab9ba9babf666090c6da692582b44b4cf72997cdd9d3b34efe793f172e62112722a6fdc316dd520f941aef498aecfe7fbf6ded68fa95543737622a2c7e3b734ea9d5a7fc28dda615331368bee16061a6ea12f9af421f6b2f59a1875569c31976ff28e415667384f8248b569a73d37562a66f36a2d3d1a6b091f90241807f0caff496b34ceac1a6e7bf1cbd3965894407e99367e7686c7966324ffce0a0ef2d2c13b9a7afe21f5b19a0aaded74c726c6accaad00852008653261dea4ecff9289830b013f107340060874bdaa36172cd8c8baebaec40ce364ea8b5bae0f51e61b937b7796360759", 0xf0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, 0x0, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000000)={0x4c58, 0x7ffd, 0x200}) sendfile(r1, r1, 0x0, 0x200000) 3.049059023s ago: executing program 1 (id=3955): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) ioctl$BSG_IO(r0, 0x2285, &(0x7f0000000200)={0x51, 0x0, 0x0, 0x1, &(0x7f0000000040)='$', 0x0, 0x0, 0x1, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x20, 0x0, 0xeb}) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='rd_pages=8', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000c00)='1', 0x1) close(r2) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') 3.038495826s ago: executing program 2 (id=3956): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x114) write(r0, &(0x7f0000000640)='3', 0x1) 2.978726018s ago: executing program 3 (id=3957): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2.976086933s ago: executing program 1 (id=3958): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4104aec6, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14}}, 0x6c}}, 0x10) 2.945132313s ago: executing program 2 (id=3959): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000008a000/0x3000)=nil, 0x3000, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0xec776000) poll(0x0, 0x0, 0x7a0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r1, &(0x7f0000001e80), 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xe, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001"], 0xd4}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x6a040000) mmap(&(0x7f00005f7000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r3 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) pwrite64(r3, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000040)='1\x00', 0x2) ioctl$BLKRRPART(r3, 0x125f, 0x1f) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x1, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x1, 0x723, 0x400, 0x2, 0x3562bc0d, 0x100, 0xffffffa7, 0x5, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0x4aa14, 0x1, 0x4, 0x0, 0x6, 0xf58, 0x1]}) syz_emit_ethernet(0x11a, &(0x7f00000000c0)={@random="a5050f0000b5", @random="0000009000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x10c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}, @local}, @dest_unreach={0x3, 0xa, 0x0, 0x0, 0x4, 0x2, {0x3b, 0x4, 0x1, 0x18, 0x7bc1, 0x68, 0x3, 0x9, 0x32, 0x8, @rand_addr=0x64010100, @local, {[@end, @timestamp_prespec={0x44, 0x4c, 0x3d, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x29}, 0xfffffffd}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0xa}, 0xe06}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@broadcast, 0xc3}, {@multicast1, 0x1}, {@remote, 0x3}, {@local, 0xd}]}, @ssrr={0x89, 0x27, 0x27, [@broadcast, @multicast1, @local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @loopback, @private=0xa010101, @private=0xa010102]}, @lsrr={0x83, 0x7, 0x96, [@private=0xa010101]}, @cipso={0x86, 0x5a, 0x3, [{0x0, 0x10, "5cf9969e5cbf178d284fea9260a9"}, {0x6, 0x11, "f04a7584f0b8d033a1a3254e80b8a0"}, {0x7, 0xd, "005570308ea77d641edd98"}, {0x6, 0xb, "7e7d71ca568dbfbeee"}, {0x0, 0x12, "75b55fef75ceeb3a811ba2cbc389fd81"}, {0xad733046013cbbce, 0x9, "5aefa4447b73c8"}]}]}}, "aeea48f9"}}}}}, 0x0) 2.875837153s ago: executing program 0 (id=3960): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/trace\x00', 0x80000, 0x80) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r2, 0x0, 0xc00, 0x4000, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) read$FUSE(r0, &(0x7f00000027c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000006d00)={0x2020}, 0x2020) 2.803565289s ago: executing program 1 (id=3961): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000340)=ANY=[@ANYBLOB="3120000010f4eccb36e168d5608ddf08a7a0ac463369e1db387e5311aa1a9f0500000000000000b90ee3be1516464a527b397488050d38485a0aabca7d6c67a5d9b6b8ee53815fe24565ce74e41d5b7c880278fd3750386fd2bd132a1f804d648fde3adaa541aa9bd2462ebab9ef3ce6709eadd89e65dae7150b0d1736f6cc965fce97c19a818659837bf6b0ae0000", @ANYRES16=r1, @ANYBLOB="130a26bd7000fcdbdf2509000000050013000e0000000800140010000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x4040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(xtea)\x00'}, 0x58) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b05, &(0x7f0000000880)={'wlan0\x00'}) ioctl$SYNC_IOC_FILE_INFO(r3, 0xc0383e04, &(0x7f0000000240)={""/32, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000140)=[{}, {}, {}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x94) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') pread64(r8, &(0x7f0000000280)=""/172, 0xac, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r9}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r11 = socket(0x10, 0x2, 0x0) unlink(&(0x7f0000000400)='./file0\x00') ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xda, 0x0, 0x2a, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x10, 0x0, 0x802, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)={[{@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@dont_hash}], 0x2f}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) 2.803120222s ago: executing program 0 (id=3962): syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f71d00250001000000010902220001010080000904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./mydev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mydev/swradio24\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 2.655884069s ago: executing program 1 (id=3963): syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f71d00250001000000010902220001010080000904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./mydev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mydev/swradio24\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) (fail_nth: 1) 2.002011852s ago: executing program 3 (id=3964): syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f71d00250001000000010902220001010080000904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./mydev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat$ndctl0(0xffffff9c, &(0x7f0000000040), 0x100, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mydev/swradio24\x00', 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002480), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 1.904032681s ago: executing program 2 (id=3965): mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$hidraw(0x0, 0x82, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25ffdbfc, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x8) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r6) socket$key(0xf, 0x3, 0x2) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) syz_emit_ethernet(0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6000000000383a00fe880000000000000000000000000001ff020000000000000000000000000001010f9078000000006000b29500003a00fe80000000000000000000000000001d20010000400000000000000000000001caa7c1b7f4c336aff9afa6dc2023a692"], 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, 0x0, 0x0) 953.978762ms ago: executing program 2 (id=3966): socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x8042) fchdir(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x77b4352cf7752835, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r2 = syz_open_procfs(0x0, 0x0) syz_open_dev$usbfs(0x0, 0x13, 0x8041) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000040)={0x9, 0x9, 0x9, 0x1, 0x800}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x1, 0x0, &(0x7f00000000c0)) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x0, 0x3c9}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_BIND=@ipv6={0x38, 0x0, 0x0, r8, 0x0, 0x0}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 0s ago: executing program 2 (id=3967): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): d=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3494" name="bus" dev="ramfs" ino=98596 res=0 errno=0 [ 967.638824][ T5829] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 967.790331][ T5829] usb 7-1: config 0 has no interfaces? [ 967.795124][ T5829] usb 7-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 967.802702][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.808811][ T5829] usb 7-1: Product: syz [ 967.812346][ T5829] usb 7-1: Manufacturer: syz [ 967.815388][ T5829] usb 7-1: SerialNumber: syz [ 967.823652][ T5829] usb 7-1: config 0 descriptor?? [ 967.949092][T15987] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 968.045706][ T5829] usb 7-1: USB disconnect, device number 52 [ 968.101048][T15987] usb 5-1: Using ep0 maxpacket: 8 [ 968.108513][T15987] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 968.116859][T15987] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 968.129124][T15987] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 968.132346][T15987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.137825][T15987] usb 5-1: Product: syz [ 968.139651][T15987] usb 5-1: Manufacturer: syz [ 968.141514][T15987] usb 5-1: SerialNumber: syz [ 968.147036][T15987] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 968.229940][T15987] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 968.232883][T15987] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 968.406292][ T5894] usb 5-1: USB disconnect, device number 56 [ 968.748669][ T1041] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 968.898844][ T1041] usb 6-1: Using ep0 maxpacket: 8 [ 968.903558][ T1041] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 968.907187][ T1041] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 968.913862][ T1041] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 968.917195][ T1041] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.921384][ T1041] usb 6-1: Product: syz [ 968.922784][ T1041] usb 6-1: Manufacturer: syz [ 968.924291][ T1041] usb 6-1: SerialNumber: syz [ 968.939718][ T1041] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 968.944998][ T1041] cdc_acm 6-1:1.0: This needs exactly 3 endpoints [ 968.948955][ T1041] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 968.978853][ T5894] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 969.143003][T21517] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 969.158889][ T5894] usb 7-1: Using ep0 maxpacket: 8 [ 969.162294][T21517] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 969.164991][T21517] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 969.167432][T21517] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 969.170826][T21517] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 969.174658][ T5894] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 969.181911][ T5894] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 969.185290][T21517] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 14248 usecs [ 969.193789][ T5894] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 969.199944][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.212316][ T5894] usb 7-1: Product: syz [ 969.213342][T21517] pci 0000:00:01.0: Adding to iommu group 1 [ 969.216313][ T5894] usb 7-1: Manufacturer: syz [ 969.219131][ T5894] usb 7-1: SerialNumber: syz [ 969.228258][T21517] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 969.230637][T21517] pci 0000:00:01.0: vgaarb: bridge control possible [ 969.232642][T21517] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 969.241294][ T5894] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 969.249800][ T5894] cdc_acm 7-1:1.0: This needs exactly 3 endpoints [ 969.256292][ T5894] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22 [ 969.259044][T21517] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 969.264269][T21517] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 969.272772][T21517] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 969.302076][T21517] [drm] Found bochs VGA, ID 0xb0c5. [ 969.307119][T21517] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 969.333229][T21517] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 969.457876][T21517] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 969.494771][ T5894] usb 7-1: USB disconnect, device number 53 [ 969.542798][ T1041] usb 6-1: USB disconnect, device number 46 [ 971.423902][ T42] audit: type=1800 audit(1785549704.913:298): pid=21533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3505" name="bus" dev="ramfs" ino=97839 res=0 errno=0 [ 971.509413][ T42] audit: type=1800 audit(1785549705.003:299): pid=21549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3506" name="bus" dev="ramfs" ino=98686 res=0 errno=0 [ 971.578733][ T1041] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 971.581195][ T42] audit: type=1800 audit(1785549705.073:300): pid=21547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3507" name="bus" dev="ramfs" ino=97858 res=0 errno=0 [ 971.738959][ T1041] usb 6-1: Using ep0 maxpacket: 8 [ 971.745049][ T1041] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 971.749854][ T1041] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 971.760362][ T1041] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 971.765519][ T1041] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.768362][ T1041] usb 6-1: Product: syz [ 971.770121][ T1041] usb 6-1: Manufacturer: syz [ 971.771637][ T1041] usb 6-1: SerialNumber: syz [ 971.777672][ T1041] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 971.781807][ T1041] cdc_acm 6-1:1.0: This needs exactly 3 endpoints [ 971.784335][ T1041] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 971.948927][T17451] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 971.998803][ T5829] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 972.010330][T21552] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 972.032714][T21552] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 972.035953][T21552] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 972.038498][T21552] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 972.042062][T21552] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 972.050688][T21552] pci 0000:00:01.0: Adding to iommu group 1 [ 972.056448][T21552] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 972.058779][T21552] pci 0000:00:01.0: vgaarb: bridge control possible [ 972.060869][T21552] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 972.070333][T21552] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 972.073223][T21552] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 972.080901][T21552] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 972.088701][T15987] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 972.093161][T21552] [drm] Found bochs VGA, ID 0xb0c5. [ 972.094876][T21552] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 972.098864][T17451] usb 5-1: Using ep0 maxpacket: 8 [ 972.102114][T17451] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 972.105396][T17451] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 972.106069][T21552] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 972.116368][T17451] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 972.120390][T17451] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.123560][T17451] usb 5-1: Product: syz [ 972.125323][T17451] usb 5-1: Manufacturer: syz [ 972.127540][T17451] usb 5-1: SerialNumber: syz [ 972.142319][T17451] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 972.145707][T17451] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 972.148535][T17451] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 972.148683][ T5829] usb 8-1: Using ep0 maxpacket: 8 [ 972.156686][ T5829] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 972.160683][ T5829] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 972.171017][ T5829] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 972.174013][ T5829] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.183002][ T5829] usb 8-1: Product: syz [ 972.184907][ T5829] usb 8-1: Manufacturer: syz [ 972.186594][ T5829] usb 8-1: SerialNumber: syz [ 972.191161][ T5829] cdc_acm 8-1:1.0: Control and data interfaces are not separated! [ 972.195262][ T5829] cdc_acm 8-1:1.0: This needs exactly 3 endpoints [ 972.198797][ T5829] cdc_acm 8-1:1.0: probe with driver cdc_acm failed with error -22 [ 972.202507][T21552] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 972.238703][T15987] usb 7-1: Using ep0 maxpacket: 8 [ 972.241259][T17451] usb 6-1: USB disconnect, device number 47 [ 972.241634][T15987] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 972.247870][T15987] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 972.255184][T15987] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 972.258278][T15987] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.260971][T15987] usb 7-1: Product: syz [ 972.262330][T15987] usb 7-1: Manufacturer: syz [ 972.263985][T15987] usb 7-1: SerialNumber: syz [ 972.268858][T15987] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 972.271260][T15987] cdc_acm 7-1:1.0: This needs exactly 3 endpoints [ 972.273164][T15987] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22 [ 972.351025][T15987] usb 5-1: USB disconnect, device number 57 [ 972.401255][ T1041] usb 8-1: USB disconnect, device number 45 [ 972.478782][ T5829] usb 7-1: USB disconnect, device number 54 [ 973.378706][ T1041] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 973.528678][ T1041] usb 8-1: Using ep0 maxpacket: 8 [ 973.534693][ T1041] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 973.541754][ T1041] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 973.553469][ T1041] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 973.557774][ T1041] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.563959][ T1041] usb 8-1: Product: syz [ 973.568657][ T1041] usb 8-1: Manufacturer: syz [ 973.570939][ T1041] usb 8-1: SerialNumber: syz [ 973.578446][ T1041] cdc_acm 8-1:1.0: Control and data interfaces are not separated! [ 973.593318][ T1041] cdc_acm 8-1:1.0: This needs exactly 3 endpoints [ 973.597098][ T1041] cdc_acm 8-1:1.0: probe with driver cdc_acm failed with error -22 [ 973.649138][T17451] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 973.798686][T17451] usb 7-1: Using ep0 maxpacket: 8 [ 973.816507][T17451] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 973.822336][T17451] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 973.842872][T17451] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 973.854844][T17451] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.872578][T17451] usb 7-1: Product: syz [ 973.882816][T17451] usb 7-1: Manufacturer: syz [ 973.905279][T17451] usb 7-1: SerialNumber: syz [ 973.917460][T21568] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 973.941494][T17451] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 973.942078][T21568] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 973.946785][T17451] cdc_acm 7-1:1.0: This needs exactly 3 endpoints [ 973.950226][T17451] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22 [ 973.959787][T21568] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 973.962683][T21568] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 973.966358][T21568] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 973.985171][T21568] pci 0000:00:01.0: Adding to iommu group 1 [ 973.995558][T21568] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 973.998338][T21568] pci 0000:00:01.0: vgaarb: bridge control possible [ 974.000942][T21568] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 974.015803][T21568] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 974.019145][T21568] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 974.023703][T21568] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 974.035833][T21568] [drm] Found bochs VGA, ID 0xb0c5. [ 974.038014][T21568] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 974.053778][T21568] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 974.114175][T21568] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 974.118885][T15987] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 974.164573][T17451] usb 8-1: USB disconnect, device number 46 [ 974.180304][ T61] usb 7-1: USB disconnect, device number 55 [ 974.298692][T15987] usb 6-1: Using ep0 maxpacket: 8 [ 974.301930][T15987] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 974.305254][T15987] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 974.311544][T15987] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 974.314410][T15987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.317056][T15987] usb 6-1: Product: syz [ 974.318449][T15987] usb 6-1: Manufacturer: syz [ 974.320302][T15987] usb 6-1: SerialNumber: syz [ 974.326328][T15987] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 974.329304][T15987] cdc_acm 6-1:1.0: This needs exactly 3 endpoints [ 974.331379][T15987] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 974.518765][ T5829] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 974.530484][T21581] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 974.545060][T21581] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 974.547643][T21581] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 974.550572][T21581] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 974.553522][T21581] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 974.562819][T21581] pci 0000:00:01.0: Adding to iommu group 1 [ 974.568952][T21581] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 974.571251][T21581] pci 0000:00:01.0: vgaarb: bridge control possible [ 974.573459][T21581] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 974.582191][T21581] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 974.585675][T21581] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 974.590333][T21581] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 974.599309][T21581] [drm] Found bochs VGA, ID 0xb0c5. [ 974.601117][T21581] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 974.610138][T21581] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 974.648928][T21581] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 974.668704][ T5829] usb 5-1: Using ep0 maxpacket: 8 [ 974.674835][ T5829] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 974.684209][ T5829] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 974.691668][ T5829] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 974.700823][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.704044][T17451] usb 6-1: USB disconnect, device number 48 [ 974.718784][ T5829] usb 5-1: Product: syz [ 974.720224][ T5829] usb 5-1: Manufacturer: syz [ 974.738820][ T5829] usb 5-1: SerialNumber: syz [ 974.757415][ T5829] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 974.771201][ T5829] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 974.777886][ T5829] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 974.825202][T21590] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 974.828409][T21590] block device autoloading is deprecated and will be removed. [ 974.966821][T21584] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 974.987592][T21584] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 975.005228][T21584] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 975.013789][T21584] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 975.017530][T21584] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 975.031759][T21584] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 14058 usecs [ 975.054956][T21584] pci 0000:00:01.0: Adding to iommu group 1 [ 975.061193][T21584] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 975.063254][T21584] pci 0000:00:01.0: vgaarb: bridge control possible [ 975.065190][T21584] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 975.076343][T21584] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 975.080246][T21584] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 975.083628][T21584] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 975.092741][T21584] [drm] Found bochs VGA, ID 0xb0c5. [ 975.094511][T21584] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 975.106375][T21584] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 975.148855][ T5894] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 975.166376][T21584] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 975.205060][T15987] usb 5-1: USB disconnect, device number 58 [ 975.318748][ T5894] usb 7-1: Using ep0 maxpacket: 8 [ 975.325367][ T5894] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 975.332323][ T5894] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 975.341980][ T5894] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 975.347516][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.353179][ T5894] usb 7-1: Product: syz [ 975.356255][ T5894] usb 7-1: Manufacturer: syz [ 975.359213][ T5894] usb 7-1: SerialNumber: syz [ 975.368378][ T5894] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 975.375353][ T5894] cdc_acm 7-1:1.0: This needs exactly 3 endpoints [ 975.379757][ T5894] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22 [ 975.587300][T15987] usb 7-1: USB disconnect, device number 56 [ 976.221956][T21608] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3526'. [ 976.638844][ T1041] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 976.810027][ T1041] usb 7-1: Using ep0 maxpacket: 8 [ 976.813848][ T1041] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 976.819491][ T1041] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 976.830530][ T1041] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 976.834322][ T1041] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.840491][ T1041] usb 7-1: Product: syz [ 976.841836][ T1041] usb 7-1: Manufacturer: syz [ 976.847020][ T1041] usb 7-1: SerialNumber: syz [ 976.853182][ T1041] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 976.862914][ T1041] cdc_acm 7-1:1.0: This needs exactly 3 endpoints [ 976.867910][ T1041] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22 [ 977.108726][T21610] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 977.142632][T21610] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 977.145115][T21610] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 977.147401][T21610] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 977.159283][T21610] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 977.166589][T21610] pci 0000:00:01.0: Adding to iommu group 1 [ 977.175776][T21610] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 977.177969][T21610] pci 0000:00:01.0: vgaarb: bridge control possible [ 977.180049][T21610] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 977.199959][T21610] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 977.204281][T21610] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 977.208810][ T1041] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 977.216262][T21610] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 977.235410][T21610] [drm] Found bochs VGA, ID 0xb0c5. [ 977.237133][T21610] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 977.254333][T21610] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 977.351376][T21610] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 977.360435][ T1041] usb 5-1: Using ep0 maxpacket: 8 [ 977.365779][ T1041] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 977.371178][ T1041] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 977.394512][ T1041] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 977.398644][ T1041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.405443][ T1041] usb 5-1: Product: syz [ 977.410804][ T1041] usb 5-1: Manufacturer: syz [ 977.417455][ T1041] usb 5-1: SerialNumber: syz [ 977.425990][ T1041] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 977.434045][ T1041] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 977.438757][ T1041] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 977.478132][ T1041] usb 7-1: USB disconnect, device number 57 [ 977.641891][T17451] usb 5-1: USB disconnect, device number 59 [ 979.041589][ T42] audit: type=1800 audit(1785549712.533:301): pid=21627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3532" name="bus" dev="ramfs" ino=99029 res=0 errno=0 [ 979.276135][T21646] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3537'. [ 979.499008][ T42] audit: type=1800 audit(1785549712.983:302): pid=21642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3535" name="bus" dev="ramfs" ino=98022 res=0 errno=0 [ 979.719567][T15987] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 979.948661][T15987] usb 6-1: Using ep0 maxpacket: 8 [ 979.953649][T15987] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 979.958704][T15987] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 979.970177][T15987] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 979.973880][T15987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.980297][T15987] usb 6-1: Product: syz [ 979.981673][T15987] usb 6-1: Manufacturer: syz [ 979.987416][T15987] usb 6-1: SerialNumber: syz [ 980.000687][T15987] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 980.007186][T15987] cdc_acm 6-1:1.0: This needs exactly 3 endpoints [ 980.012641][T15987] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 980.285268][T21650] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 980.336147][T21650] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 980.338706][T21650] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 980.341488][T21650] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 980.344429][T21650] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 980.355973][T21650] pci 0000:00:01.0: Adding to iommu group 1 [ 980.364654][T21650] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 980.366803][T21650] pci 0000:00:01.0: vgaarb: bridge control possible [ 980.368888][T21650] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 980.379592][T21650] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 980.382346][T21650] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 980.388285][T21650] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 980.416000][T21650] [drm] Found bochs VGA, ID 0xb0c5. [ 980.422935][T21650] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 980.474775][T21650] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 980.524567][T21650] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 980.660522][ T5829] usb 6-1: USB disconnect, device number 49 [ 982.008676][ T1041] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 982.161472][ T1041] usb 5-1: Using ep0 maxpacket: 8 [ 982.166411][ T42] audit: type=1800 audit(1785549715.653:303): pid=21674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3541" name="bus" dev="ramfs" ino=98062 res=0 errno=0 [ 982.172750][ T1041] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 982.178794][ T1041] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 982.196808][ T1041] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 982.206453][ T1041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.209833][T17451] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 982.219180][ T1041] usb 5-1: Product: syz [ 982.223046][ T1041] usb 5-1: Manufacturer: syz [ 982.226454][ T1041] usb 5-1: SerialNumber: syz [ 982.237250][ T1041] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 982.246703][ T1041] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 982.253464][ T1041] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 982.370434][T17451] usb 8-1: Using ep0 maxpacket: 8 [ 982.376289][T17451] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 982.383665][T17451] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 982.400422][T17451] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 982.404085][T17451] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.412278][T17451] usb 8-1: Product: syz [ 982.417245][T17451] usb 8-1: Manufacturer: syz [ 982.426171][T17451] usb 8-1: SerialNumber: syz [ 982.444335][T17451] cdc_acm 8-1:1.0: Control and data interfaces are not separated! [ 982.456131][T17451] cdc_acm 8-1:1.0: This needs exactly 3 endpoints [ 982.462931][T17451] cdc_acm 8-1:1.0: probe with driver cdc_acm failed with error -22 [ 982.506402][T21682] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 982.528179][T21682] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 982.530816][T21682] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 982.533603][T21682] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 982.536887][T21682] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 982.548195][T21682] pci 0000:00:01.0: Adding to iommu group 1 [ 982.553818][T21682] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 982.555996][T21682] pci 0000:00:01.0: vgaarb: bridge control possible [ 982.558124][T21682] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 982.567147][T21682] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 982.569831][T21682] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 982.574048][T21682] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 982.583319][T21682] [drm] Found bochs VGA, ID 0xb0c5. [ 982.585115][T21682] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 982.595085][T21682] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 982.628874][T21682] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 982.660354][ T24] usb 8-1: USB disconnect, device number 47 [ 982.666138][T17451] usb 5-1: USB disconnect, device number 60 [ 982.719017][ T5829] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 982.721506][T15987] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 982.878771][ T5829] usb 6-1: Using ep0 maxpacket: 8 [ 982.880605][T15987] usb 7-1: Using ep0 maxpacket: 8 [ 982.884161][ T5829] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 982.887694][ T5829] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 982.892551][T15987] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 982.896247][T15987] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 982.901797][ T5829] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 982.904932][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.907681][ T5829] usb 6-1: Product: syz [ 982.909350][ T5829] usb 6-1: Manufacturer: syz [ 982.909484][T15987] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 982.914056][ T5829] usb 6-1: SerialNumber: syz [ 982.915563][T15987] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.919242][T15987] usb 7-1: Product: syz [ 982.924134][T15987] usb 7-1: Manufacturer: syz [ 982.926697][ T5829] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 982.929426][T15987] usb 7-1: SerialNumber: syz [ 982.931770][ T5829] cdc_acm 6-1:1.0: This needs exactly 3 endpoints [ 982.939520][ T5829] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 982.946086][T15987] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 982.948757][T15987] cdc_acm 7-1:1.0: This needs exactly 3 endpoints [ 982.950964][T15987] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22 [ 983.136125][T15987] usb 6-1: USB disconnect, device number 50 [ 983.159934][ T5829] usb 7-1: USB disconnect, device number 58 [ 984.158706][ T5829] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 984.290059][ T1041] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 984.318743][ T5829] usb 6-1: Using ep0 maxpacket: 8 [ 984.323449][ T5829] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 984.328847][ T5829] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 984.344428][ T5829] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 984.350523][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.355517][ T5829] usb 6-1: Product: syz [ 984.356909][ T5829] usb 6-1: Manufacturer: syz [ 984.361198][ T5829] usb 6-1: SerialNumber: syz [ 984.373702][ T5829] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 984.377427][ T5829] cdc_acm 6-1:1.0: This needs exactly 3 endpoints [ 984.381993][ T5829] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 984.450411][ T1041] usb 7-1: Using ep0 maxpacket: 8 [ 984.455809][ T1041] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 984.467535][ T1041] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 984.484552][ T1041] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 984.493244][ T1041] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.499665][ T1041] usb 7-1: Product: syz [ 984.502983][ T1041] usb 7-1: Manufacturer: syz [ 984.505995][ T1041] usb 7-1: SerialNumber: syz [ 984.515514][ T1041] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 984.521105][ T1041] cdc_acm 7-1:1.0: This needs exactly 3 endpoints [ 984.525707][ T1041] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22 [ 984.582247][T21709] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 984.588295][ T42] audit: type=1800 audit(1785549718.073:304): pid=21703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3548" name="bus" dev="ramfs" ino=99172 res=0 errno=0 [ 984.634231][T21709] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 984.649904][T21709] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 984.652888][T21709] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 984.660281][T21709] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 984.691796][T21709] pci 0000:00:01.0: Adding to iommu group 1 [ 984.714976][T21709] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 984.717759][T21709] pci 0000:00:01.0: vgaarb: bridge control possible [ 984.720394][T21709] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 984.757180][T21709] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 984.764509][T21709] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 984.774367][T21709] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 984.805337][T21709] [drm] Found bochs VGA, ID 0xb0c5. [ 984.810677][T21709] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 984.835809][T21709] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 984.936080][T21709] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 984.973360][ T1041] usb 7-1: USB disconnect, device number 59 [ 985.094031][ T5894] usb 6-1: USB disconnect, device number 51 [ 985.358769][T15987] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 985.508775][T15987] usb 8-1: Using ep0 maxpacket: 8 [ 985.513650][T15987] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 985.517025][T15987] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 985.522985][T15987] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 985.525921][T15987] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.530286][T15987] usb 8-1: Product: syz [ 985.531714][T15987] usb 8-1: Manufacturer: syz [ 985.533223][T15987] usb 8-1: SerialNumber: syz [ 985.540092][T15987] cdc_acm 8-1:1.0: Control and data interfaces are not separated! [ 985.543334][T15987] cdc_acm 8-1:1.0: This needs exactly 3 endpoints [ 985.545431][T15987] cdc_acm 8-1:1.0: probe with driver cdc_acm failed with error -22 [ 985.601286][ T1041] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 985.748684][ T1041] usb 5-1: Using ep0 maxpacket: 8 [ 985.774325][ T1041] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 985.790231][ T1041] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 985.818411][ T1041] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 985.838189][ T1041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.850127][ T1041] usb 5-1: Product: syz [ 985.853613][ T1041] usb 5-1: Manufacturer: syz [ 985.857100][ T1041] usb 5-1: SerialNumber: syz [ 985.862499][ T1041] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 985.867225][ T1041] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 985.870895][ T1041] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 985.874078][T21722] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 985.915686][T21722] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 985.925225][T21722] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 985.930289][T21722] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 985.934480][T21722] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 985.939008][ T5894] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 985.957491][T21722] pci 0000:00:01.0: Adding to iommu group 1 [ 985.971209][T21722] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 985.973341][T21722] pci 0000:00:01.0: vgaarb: bridge control possible [ 985.975635][T21722] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 986.002653][T21722] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 986.007928][T21722] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 986.014988][T21722] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 986.036687][T21722] [drm] Found bochs VGA, ID 0xb0c5. [ 986.040731][T21722] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 986.108734][ T5894] usb 6-1: Using ep0 maxpacket: 8 [ 986.112513][ T5894] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 986.112776][T21722] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 986.119150][ T5894] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 986.136971][ T5894] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 986.140687][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.145540][ T5894] usb 6-1: Product: syz [ 986.148225][ T5894] usb 6-1: Manufacturer: syz [ 986.150885][ T5894] usb 6-1: SerialNumber: syz [ 986.166030][ T5894] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 986.171007][ T5894] cdc_acm 6-1:1.0: This needs exactly 3 endpoints [ 986.174492][ T5894] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 986.191443][T21722] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 986.213688][ T5894] usb 5-1: USB disconnect, device number 61 [ 986.247753][ T1041] usb 8-1: USB disconnect, device number 48 [ 986.376867][T15987] usb 6-1: USB disconnect, device number 52 [ 987.028775][ T1041] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 987.193726][ T1041] usb 8-1: config 0 has no interfaces? [ 987.199450][ T1041] usb 8-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 987.208823][ T1041] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.215387][ T1041] usb 8-1: Product: syz [ 987.221319][ T1041] usb 8-1: Manufacturer: syz [ 987.226593][ T1041] usb 8-1: SerialNumber: syz [ 987.239626][ T1041] usb 8-1: config 0 descriptor?? [ 987.470945][ T1041] usb 8-1: USB disconnect, device number 49 [ 988.653934][T17451] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 988.667977][ T42] audit: type=1800 audit(1785549722.153:305): pid=21756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3563" name="bus" dev="ramfs" ino=99264 res=0 errno=0 [ 988.808674][T17451] usb 5-1: Using ep0 maxpacket: 8 [ 988.813471][T17451] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 988.820856][T17451] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 988.837479][T17451] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 988.847500][T17451] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.856813][T17451] usb 5-1: Product: syz [ 988.864855][T17451] usb 5-1: Manufacturer: syz [ 988.871347][T17451] usb 5-1: SerialNumber: syz [ 988.912210][T17451] cdc_acm 5-1:1.0: Zero length descriptor references [ 988.918746][T17451] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 989.273261][T21762] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 989.349774][T21762] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 989.360130][T21762] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 989.368947][T21762] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 989.373723][T21762] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 989.397503][T21762] pci 0000:00:01.0: Adding to iommu group 1 [ 989.420389][T21762] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 989.422468][T21762] pci 0000:00:01.0: vgaarb: bridge control possible [ 989.424467][T21762] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 989.448217][T21762] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 989.455136][T21762] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 989.463492][T21762] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 989.481680][T21762] [drm] Found bochs VGA, ID 0xb0c5. [ 989.486529][T21762] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 989.543134][T21762] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 989.665209][T21762] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 989.747963][T15987] usb 5-1: USB disconnect, device number 62 [ 989.987173][ T42] audit: type=1800 audit(1785549723.473:306): pid=21775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3564" name="bus" dev="ramfs" ino=99278 res=0 errno=0 [ 992.142869][T21808] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 992.201280][T21808] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 992.209177][T21808] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 992.215182][T21808] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 992.228884][T21808] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 992.270727][T21808] pci 0000:00:01.0: Adding to iommu group 1 [ 992.301250][T21808] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 992.303996][T21808] pci 0000:00:01.0: vgaarb: bridge control possible [ 992.306573][T21808] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 992.359205][T21808] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 992.366210][T21808] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 992.378770][T21808] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 992.412385][T21808] [drm] Found bochs VGA, ID 0xb0c5. [ 992.415141][T21808] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 992.432750][T21808] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 992.491864][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.494013][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.511101][T21808] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 992.662046][T21816] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 992.702456][T21816] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 992.708897][T21816] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 992.714579][T21816] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 992.721657][T21816] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 992.745359][T21816] pci 0000:00:01.0: Adding to iommu group 1 [ 992.756684][T21816] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 992.758879][T21816] pci 0000:00:01.0: vgaarb: bridge control possible [ 992.760915][T21816] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 992.785265][T21816] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 992.790794][T21816] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 992.803395][T21816] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 992.821650][T21816] [drm] Found bochs VGA, ID 0xb0c5. [ 992.825580][T21816] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 992.850632][T21816] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 992.896963][T21816] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 992.945133][ T42] audit: type=1800 audit(1785549726.433:307): pid=21811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3574" name="bus" dev="ramfs" ino=98295 res=0 errno=0 [ 993.570530][T15987] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 993.758731][T15987] usb 8-1: Using ep0 maxpacket: 8 [ 993.766851][T15987] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 993.781805][T15987] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 993.806426][T15987] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 993.813320][T15987] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.823465][T15987] usb 8-1: Product: syz [ 993.824819][T15987] usb 8-1: Manufacturer: syz [ 993.831128][T15987] usb 8-1: SerialNumber: syz [ 993.847335][T15987] cdc_acm 8-1:1.0: Zero length descriptor references [ 993.858005][T15987] cdc_acm 8-1:1.0: probe with driver cdc_acm failed with error -22 [ 994.161780][T21822] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 994.221049][T21822] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 994.225970][T21822] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 994.229936][T21822] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 994.234461][T21822] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 994.252856][T21822] pci 0000:00:01.0: Adding to iommu group 1 [ 994.262830][T21822] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 994.265017][T21822] pci 0000:00:01.0: vgaarb: bridge control possible [ 994.267080][T21822] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 994.283967][T21822] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 994.288824][T21822] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 994.294158][T21822] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 994.313909][T21822] [drm] Found bochs VGA, ID 0xb0c5. [ 994.316641][T21822] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 994.333780][T21822] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 994.396874][T21822] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 994.398729][ T1041] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 994.456915][ T61] usb 8-1: USB disconnect, device number 50 [ 994.578659][ T1041] usb 5-1: Using ep0 maxpacket: 8 [ 994.585211][ T1041] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 994.594870][ T1041] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 994.609040][ T1041] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 994.614301][ T1041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.618493][ T1041] usb 5-1: Product: syz [ 994.621742][ T1041] usb 5-1: Manufacturer: syz [ 994.625623][ T1041] usb 5-1: SerialNumber: syz [ 994.668760][ T42] audit: type=1800 audit(1785549728.153:308): pid=21827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3578" name="bus" dev="ramfs" ino=100396 res=0 errno=0 [ 994.858651][ T1041] usb 5-1: USB disconnect, device number 63 [ 995.289217][T15987] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 995.310979][ T42] audit: type=1800 audit(1785549728.803:309): pid=21837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3583" name="bus" dev="ramfs" ino=100428 res=0 errno=0 [ 995.438813][T15987] usb 7-1: Using ep0 maxpacket: 8 [ 995.443315][T15987] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 995.452876][T15987] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 995.456249][T15987] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.462384][T15987] usb 7-1: Product: syz [ 995.465346][T15987] usb 7-1: Manufacturer: syz [ 995.466814][T15987] usb 7-1: SerialNumber: syz [ 995.524182][T21850] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3588'. [ 995.668708][ T5894] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 995.711849][T21841] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 995.745946][T21841] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 995.750739][T21841] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 995.760122][T21841] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 995.771220][T21841] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 995.784391][T21841] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 13102 usecs [ 995.805198][T21841] pci 0000:00:01.0: Adding to iommu group 1 [ 995.819064][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 995.822660][ T5894] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 995.823752][T21841] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 995.826010][ T5894] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 995.828093][T21841] pci 0000:00:01.0: vgaarb: bridge control possible [ 995.828111][T21841] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 995.839807][ T5894] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 995.842905][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.848285][ T5894] usb 5-1: Product: syz [ 995.852912][ T5894] usb 5-1: Manufacturer: syz [ 995.857877][ T5894] usb 5-1: SerialNumber: syz [ 995.861426][T21841] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 995.862600][T21841] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 995.876714][T21841] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 995.880460][ T5894] cdc_acm 5-1:1.0: skipping garbage [ 995.898961][T21841] [drm] Found bochs VGA, ID 0xb0c5. [ 995.900649][T21841] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 995.930803][T21841] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 996.014286][T21841] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 996.071433][T15987] usb 7-1: USB disconnect, device number 60 [ 996.087497][ T42] audit: type=1800 audit(1785549729.573:310): pid=21846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3586" name="bus" dev="ramfs" ino=100447 res=0 errno=0 [ 996.103783][ T5829] usb 5-1: USB disconnect, device number 64 [ 997.228678][ T5894] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 997.388669][ T5894] usb 6-1: Using ep0 maxpacket: 8 [ 997.391668][ T5894] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 997.394853][ T5894] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 997.400999][ T5894] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 997.403946][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.406471][ T5894] usb 6-1: Product: syz [ 997.407810][ T5894] usb 6-1: Manufacturer: syz [ 997.412223][ T5894] usb 6-1: SerialNumber: syz [ 997.420281][ T5894] cdc_acm 6-1:1.0: skipping garbage [ 997.482629][ T42] audit: type=1800 audit(1785549730.973:311): pid=21860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3590" name="bus" dev="ramfs" ino=100493 res=0 errno=0 [ 997.677890][T21862] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 997.710919][T21862] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 997.714962][T21862] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 997.719037][T21862] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 997.723958][T21862] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 997.746141][T21862] pci 0000:00:01.0: Adding to iommu group 1 [ 997.753970][T21862] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 997.756045][T21862] pci 0000:00:01.0: vgaarb: bridge control possible [ 997.758155][T21862] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 997.781385][T21862] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 997.785896][T21862] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 997.793290][T21862] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 997.811746][T21862] [drm] Found bochs VGA, ID 0xb0c5. [ 997.815010][T21862] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 997.830376][T21862] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 997.909288][T21862] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 997.982432][ T5894] usb 6-1: USB disconnect, device number 53 [ 998.050306][ T42] audit: type=1800 audit(1785549731.543:312): pid=21874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3591" name="bus" dev="ramfs" ino=99412 res=0 errno=0 [ 998.447264][T21888] lo speed is unknown, defaulting to 1000 [ 998.660379][ T5894] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 998.804239][ T42] audit: type=1800 audit(1785549732.293:313): pid=21884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3596" name="bus" dev="ramfs" ino=100538 res=0 errno=0 [ 998.818890][ T5894] usb 7-1: Using ep0 maxpacket: 8 [ 998.821959][ T5894] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 998.829627][ T5894] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 998.833226][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.839521][ T5894] usb 7-1: Product: syz [ 998.840902][ T5894] usb 7-1: Manufacturer: syz [ 998.848633][ T5894] usb 7-1: SerialNumber: syz [ 999.156194][T21890] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 999.224850][T21890] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 999.228833][T21890] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 999.233658][T21890] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 999.239614][T21890] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 999.254345][T21890] pci 0000:00:01.0: Adding to iommu group 1 [ 999.265742][T21890] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 999.267926][T21890] pci 0000:00:01.0: vgaarb: bridge control possible [ 999.270211][T21890] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 999.294484][T21890] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 999.299666][T21890] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 999.311726][T21890] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 999.331122][T21890] [drm] Found bochs VGA, ID 0xb0c5. [ 999.336518][T21890] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 999.349965][T21890] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 999.410182][T21890] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 999.462507][T15987] usb 7-1: USB disconnect, device number 61 [ 999.985784][T21907] lo speed is unknown, defaulting to 1000 [ 1000.088122][T21910] lo speed is unknown, defaulting to 1000 [ 1000.690282][T17451] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1000.860359][T17451] usb 7-1: Using ep0 maxpacket: 8 [ 1000.865032][T17451] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.875691][T17451] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 1000.883473][T17451] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.889250][T17451] usb 7-1: Product: syz [ 1000.890639][T17451] usb 7-1: Manufacturer: syz [ 1000.897165][T17451] usb 7-1: SerialNumber: syz [ 1001.202455][T21913] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1001.222250][T21913] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1001.224738][T21913] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1001.227359][T21913] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1001.231287][T21913] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1001.254591][T21913] pci 0000:00:01.0: Adding to iommu group 1 [ 1001.261817][T21913] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1001.264006][T21913] pci 0000:00:01.0: vgaarb: bridge control possible [ 1001.266054][T21913] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1001.282442][T21913] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1001.285608][T21913] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1001.291126][T21913] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1001.302681][T21913] [drm] Found bochs VGA, ID 0xb0c5. [ 1001.307126][T21913] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1001.327088][T21913] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1001.426763][T21913] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 1001.520260][T17451] usb 7-1: USB disconnect, device number 62 [ 1001.911942][ T42] audit: type=1800 audit(1785549735.403:314): pid=21924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3604" name="bus" dev="ramfs" ino=100618 res=0 errno=0 [ 1002.038730][T21928] lo speed is unknown, defaulting to 1000 [ 1002.723941][T21942] lo speed is unknown, defaulting to 1000 [ 1003.329482][ T42] audit: type=1800 audit(1785549736.823:315): pid=21945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3608" name="bus" dev="ramfs" ino=100642 res=0 errno=0 [ 1003.602895][ T42] audit: type=1800 audit(1785549737.093:316): pid=21941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3607" name="bus" dev="ramfs" ino=99635 res=0 errno=0 [ 1004.283245][ T42] audit: type=1800 audit(1785549737.773:317): pid=21956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3610" name="bus" dev="ramfs" ino=100660 res=0 errno=0 [ 1005.037479][ T42] audit: type=1800 audit(1785549738.523:318): pid=21959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3611" name="bus" dev="ramfs" ino=100667 res=0 errno=0 [ 1005.178518][T21973] lo speed is unknown, defaulting to 1000 [ 1006.139833][ T42] audit: type=1800 audit(1785549739.623:319): pid=21978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3614" name="bus" dev="ramfs" ino=99710 res=0 errno=0 [ 1006.368701][ T42] audit: type=1800 audit(1785549739.853:320): pid=21982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3615" name="bus" dev="ramfs" ino=100714 res=0 errno=0 [ 1006.460088][T21992] lo speed is unknown, defaulting to 1000 [ 1006.489906][T17451] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1006.658994][T17451] usb 8-1: Using ep0 maxpacket: 8 [ 1006.662040][T17451] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.671998][T17451] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1006.688266][T17451] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 1006.698176][T17451] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.705932][T17451] usb 8-1: Product: syz [ 1006.709816][T17451] usb 8-1: Manufacturer: syz [ 1006.715155][T17451] usb 8-1: SerialNumber: syz [ 1006.995525][T21989] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1007.042478][T21989] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1007.045246][T21989] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1007.058457][T21989] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1007.063413][T21989] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1007.089449][T21989] pci 0000:00:01.0: Adding to iommu group 1 [ 1007.102078][T21989] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1007.104395][T21989] pci 0000:00:01.0: vgaarb: bridge control possible [ 1007.106815][T21989] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1007.140170][T21989] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1007.146942][T21989] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1007.154716][T21989] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1007.179515][T21989] [drm] Found bochs VGA, ID 0xb0c5. [ 1007.184419][T21989] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1007.212031][T21989] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1007.318876][T21989] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 1007.393888][T17451] usb 8-1: USB disconnect, device number 51 [ 1007.884625][ T42] audit: type=1800 audit(1785549741.373:321): pid=22000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3618" name="bus" dev="ramfs" ino=99749 res=0 errno=0 [ 1008.436578][ T42] audit: type=1800 audit(1785549741.923:322): pid=22008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3620" name="bus" dev="ramfs" ino=100771 res=0 errno=0 [ 1008.612765][ T42] audit: type=1800 audit(1785549742.103:323): pid=22010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3621" name="bus" dev="ramfs" ino=99776 res=0 errno=0 [ 1008.760874][T22019] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3624'. [ 1009.349467][ T42] audit: type=1800 audit(1785549742.843:324): pid=22016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3622" name="bus" dev="ramfs" ino=99790 res=0 errno=0 [ 1009.432934][ T42] audit: type=1800 audit(1785549742.923:325): pid=22020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3623" name="bus" dev="ramfs" ino=100782 res=0 errno=0 [ 1009.582275][T22028] lo speed is unknown, defaulting to 1000 [ 1009.948830][ T5829] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1010.034796][ T42] audit: type=1800 audit(1785549743.513:326): pid=22030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3625" name="bus" dev="ramfs" ino=99808 res=0 errno=0 [ 1010.100149][ T5829] usb 8-1: config 0 has no interfaces? [ 1010.103705][ T5829] usb 8-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 1010.106602][ T5829] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.110463][ T5829] usb 8-1: Product: syz [ 1010.111861][ T5829] usb 8-1: Manufacturer: syz [ 1010.113471][ T5829] usb 8-1: SerialNumber: syz [ 1010.116888][ T5829] usb 8-1: config 0 descriptor?? [ 1010.370913][T22044] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3630'. [ 1010.392577][T17451] usb 8-1: USB disconnect, device number 52 [ 1011.074947][T22057] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3633'. [ 1011.127354][ T42] audit: type=1800 audit(1785549744.613:327): pid=22039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3628" name="bus" dev="ramfs" ino=99817 res=0 errno=0 [ 1011.851592][ T42] audit: type=1800 audit(1785549745.343:328): pid=22048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3629" name="bus" dev="ramfs" ino=100864 res=0 errno=0 [ 1012.107439][T22071] lo speed is unknown, defaulting to 1000 [ 1012.481220][ T42] audit: type=1800 audit(1785549745.973:329): pid=22070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3635" name="bus" dev="ramfs" ino=100907 res=0 errno=0 [ 1013.532580][T22091] lo speed is unknown, defaulting to 1000 [ 1013.587708][T22092] lo speed is unknown, defaulting to 1000 [ 1013.743407][ T42] audit: type=1800 audit(1785549747.233:330): pid=22078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3637" name="bus" dev="ramfs" ino=99843 res=0 errno=0 [ 1014.298691][ T5894] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1014.446217][T22103] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3642'. [ 1014.460343][ T5894] usb 7-1: config 0 has no interfaces? [ 1014.463921][ T5894] usb 7-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 1014.475149][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.484020][ T5894] usb 7-1: Product: syz [ 1014.485401][ T5894] usb 7-1: Manufacturer: syz [ 1014.494821][ T5894] usb 7-1: SerialNumber: syz [ 1014.506712][ T5894] usb 7-1: config 0 descriptor?? [ 1014.820446][ T5829] usb 7-1: USB disconnect, device number 63 [ 1016.141360][ T42] audit: type=1800 audit(1785549749.633:331): pid=22114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3644" name="bus" dev="ramfs" ino=100970 res=0 errno=0 [ 1016.166471][ T42] audit: type=1800 audit(1785549749.643:332): pid=22113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3645" name="bus" dev="ramfs" ino=100968 res=0 errno=0 [ 1016.603601][ T42] audit: type=1800 audit(1785549750.093:333): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3643" name="bus" dev="ramfs" ino=100972 res=0 errno=0 [ 1016.815305][ T42] audit: type=1800 audit(1785549750.303:334): pid=22120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3646" name="bus" dev="ramfs" ino=100981 res=0 errno=0 [ 1017.290940][T22134] lo speed is unknown, defaulting to 1000 [ 1017.968466][T22142] lo speed is unknown, defaulting to 1000 [ 1018.547618][ T42] audit: type=1800 audit(1785549752.033:335): pid=22140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3651" name="bus" dev="ramfs" ino=101038 res=0 errno=0 [ 1018.558509][ T42] audit: type=1800 audit(1785549752.043:336): pid=22138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3649" name="bus" dev="ramfs" ino=101033 res=0 errno=0 [ 1018.856201][T22148] lo speed is unknown, defaulting to 1000 [ 1020.228640][ T42] audit: type=1800 audit(1785549753.713:337): pid=22161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3655" name="bus" dev="ramfs" ino=100022 res=0 errno=0 [ 1020.281019][ T42] audit: type=1800 audit(1785549753.773:338): pid=22160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3653" name="bus" dev="ramfs" ino=101125 res=0 errno=0 [ 1020.336505][ T42] audit: type=1800 audit(1785549753.823:339): pid=22153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3654" name="bus" dev="ramfs" ino=101127 res=0 errno=0 [ 1020.798710][ T42] audit: type=1800 audit(1785549754.283:340): pid=22165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3656" name="bus" dev="ramfs" ino=101134 res=0 errno=0 [ 1021.682190][ T42] audit: type=1800 audit(1785549755.173:341): pid=22176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3657" name="bus" dev="ramfs" ino=100106 res=0 errno=0 [ 1021.950276][ T42] audit: type=1800 audit(1785549755.443:342): pid=22178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3660" name="bus" dev="ramfs" ino=101159 res=0 errno=0 [ 1022.812916][T22196] lo speed is unknown, defaulting to 1000 [ 1023.759282][ T42] audit: type=1800 audit(1785549757.253:343): pid=22201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3665" name="bus" dev="ramfs" ino=100143 res=0 errno=0 [ 1024.092683][ T42] audit: type=1800 audit(1785549757.583:344): pid=22204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3666" name="bus" dev="ramfs" ino=100146 res=0 errno=0 [ 1024.925057][T22220] lo speed is unknown, defaulting to 1000 [ 1024.928198][ T42] audit: type=1800 audit(1785549758.413:345): pid=22208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3667" name="bus" dev="ramfs" ino=100151 res=0 errno=0 [ 1027.018776][ T5894] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1027.181284][ T5894] usb 5-1: config 0 has no interfaces? [ 1027.188526][ T5894] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 1027.196808][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.205580][ T5894] usb 5-1: Product: syz [ 1027.208893][ T5894] usb 5-1: Manufacturer: syz [ 1027.214065][ T5894] usb 5-1: SerialNumber: syz [ 1027.225893][ T5894] usb 5-1: config 0 descriptor?? [ 1027.246693][ T42] audit: type=1800 audit(1785549760.733:346): pid=22238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3674" name="bus" dev="ramfs" ino=100201 res=0 errno=0 [ 1027.408003][ T42] audit: type=1800 audit(1785549760.893:347): pid=22242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3675" name="bus" dev="ramfs" ino=100204 res=0 errno=0 [ 1027.443601][ T5894] usb 5-1: USB disconnect, device number 65 [ 1027.735201][T22250] lo speed is unknown, defaulting to 1000 [ 1028.907449][T22275] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3686'. [ 1029.278834][ T5894] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1029.372010][ T42] audit: type=1800 audit(1785549762.863:348): pid=22266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3681" name="bus" dev="ramfs" ino=100254 res=0 errno=0 [ 1029.440392][ T5894] usb 8-1: config 0 has no interfaces? [ 1029.443874][ T5894] usb 8-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 1029.447537][ T5894] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.451290][ T5894] usb 8-1: Product: syz [ 1029.452794][ T5894] usb 8-1: Manufacturer: syz [ 1029.454395][ T5894] usb 8-1: SerialNumber: syz [ 1029.458523][ T5894] usb 8-1: config 0 descriptor?? [ 1029.666989][ T5894] usb 8-1: USB disconnect, device number 53 [ 1030.985094][T22305] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3695'. [ 1031.341013][ T42] audit: type=1800 audit(1785549764.833:349): pid=22298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3692" name="bus" dev="ramfs" ino=101402 res=0 errno=0 [ 1032.024258][T22315] lo speed is unknown, defaulting to 1000 [ 1033.537658][ T42] audit: type=1800 audit(1785549767.023:350): pid=22320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3699" name="bus" dev="ramfs" ino=102411 res=0 errno=0 [ 1034.082959][T22339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3705'. [ 1034.297851][ T42] audit: type=1800 audit(1785549767.783:351): pid=22329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3701" name="bus" dev="ramfs" ino=101439 res=0 errno=0 [ 1034.479425][ T42] audit: type=1800 audit(1785549767.973:352): pid=22333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3703" name="bus" dev="ramfs" ino=102442 res=0 errno=0 [ 1035.377636][T22353] lo speed is unknown, defaulting to 1000 [ 1035.864562][ T42] audit: type=1800 audit(1785549769.353:353): pid=22354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3709" name="bus" dev="ramfs" ino=102454 res=0 errno=0 [ 1037.645349][T22398] lo speed is unknown, defaulting to 1000 [ 1037.776546][ T42] audit: type=1800 audit(1785549771.263:354): pid=22382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3719" name="bus" dev="ramfs" ino=101542 res=0 errno=0 [ 1037.937843][ T42] audit: type=1800 audit(1785549771.423:355): pid=22393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3721" name="bus" dev="ramfs" ino=101565 res=0 errno=0 [ 1039.334417][T22425] lo speed is unknown, defaulting to 1000 [ 1039.763446][ T42] audit: type=1800 audit(1785549773.253:356): pid=22420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3730" name="bus" dev="ramfs" ino=102572 res=0 errno=0 [ 1040.924315][ T42] audit: type=1800 audit(1785549774.413:357): pid=22434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3734" name="bus" dev="ramfs" ino=101667 res=0 errno=0 [ 1040.953340][T22440] lo speed is unknown, defaulting to 1000 [ 1041.178853][T22448] lo speed is unknown, defaulting to 1000 [ 1041.655729][T22457] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3740'. [ 1041.774491][T22454] lo speed is unknown, defaulting to 1000 [ 1042.640509][T22475] lo speed is unknown, defaulting to 1000 2#nL>ՂxL KYާӎ?:>vǬQM[ 1042.861791][ T42] audit: type=1800 audit(1785549776.353:358): pid=22470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3741" name="bus" dev="ramfs" ino=102712 res=0 errno=0 [ 1043.797512][T22491] lo speed is unknown, defaulting to 1000 [ 1044.526701][T22499] lo speed is unknown, defaulting to 1000 [ 1045.138695][T17451] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1045.298643][T17451] usb 7-1: Using ep0 maxpacket: 8 [ 1045.306157][T17451] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1045.311893][T17451] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1045.319316][T17451] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1045.326856][T17451] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1045.334687][T17451] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1045.345597][T17451] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1045.353225][T17451] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.455024][T22520] lo speed is unknown, defaulting to 1000 [ 1045.577277][T17451] usb 7-1: usb_control_msg returned -32 [ 1045.581777][T17451] usbtmc 7-1:16.0: can't read capabilities [ 1045.737339][T22524] lo speed is unknown, defaulting to 1000 [ 1045.926945][ T42] audit: type=1800 audit(1785549779.413:359): pid=22523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3753" name="bus" dev="ramfs" ino=102842 res=0 errno=0 [ 1045.939091][T22529] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 1045.943557][T17451] usb 7-1: USB disconnect, device number 64 [ 1046.498718][T15987] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1046.728068][T15987] usb 5-1: Using ep0 maxpacket: 8 [ 1046.732882][T15987] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1046.735985][T15987] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1046.739513][T15987] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1046.742464][T15987] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1046.745644][T15987] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1046.750143][T15987] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1046.753007][T15987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.979696][T15987] usb 5-1: usb_control_msg returned -32 [ 1046.984422][T15987] usbtmc 5-1:16.0: can't read capabilities [ 1047.617079][ T42] audit: type=1800 audit(1785549781.103:360): pid=22549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3760" name="bus" dev="ramfs" ino=102915 res=0 errno=0 [ 1047.751138][ T42] audit: type=1800 audit(1785549781.243:361): pid=22547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3758" name="bus" dev="ramfs" ino=102912 res=0 errno=0 [ 1048.748398][T22570] lo speed is unknown, defaulting to 1000 [ 1049.171644][T22576] lo speed is unknown, defaulting to 1000 [ 1049.298348][T15987] usb 5-1: USB disconnect, device number 66 [ 1050.977574][T22609] lo speed is unknown, defaulting to 1000 [ 1051.559749][T22608] lo speed is unknown, defaulting to 1000 [ 1051.581329][T22613] lo speed is unknown, defaulting to 1000 [ 1051.593552][T22614] lo speed is unknown, defaulting to 1000 [ 1052.036672][ T42] audit: type=1800 audit(1785549785.523:362): pid=22624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3776" name="p_srate" dev="configfs" ino=103102 res=0 errno=0 [ 1053.379934][T22647] lo speed is unknown, defaulting to 1000 [ 1053.537919][T22642] lo speed is unknown, defaulting to 1000 [ 1053.788272][T22648] lo speed is unknown, defaulting to 1000 [ 1053.941845][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.944048][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.241683][T22669] lo speed is unknown, defaulting to 1000 [ 1056.031027][T22681] lo speed is unknown, defaulting to 1000 [ 1056.170553][T22686] lo speed is unknown, defaulting to 1000 [ 1057.065610][T22698] lo speed is unknown, defaulting to 1000 [ 1057.380737][T22723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3802'. [ 1057.718930][ T5894] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1057.837768][T22735] lo speed is unknown, defaulting to 1000 [ 1057.890083][ T5894] usb 7-1: config 0 has no interfaces? [ 1057.894898][ T5894] usb 7-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 1057.901188][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.905921][ T5894] usb 7-1: Product: syz [ 1057.908862][ T5894] usb 7-1: Manufacturer: syz [ 1057.912590][ T5894] usb 7-1: SerialNumber: syz [ 1057.917311][ T5894] usb 7-1: config 0 descriptor?? [ 1058.146255][ T1041] usb 7-1: USB disconnect, device number 65 [ 1058.381315][T22741] lo speed is unknown, defaulting to 1000 [ 1058.946866][T22760] lo speed is unknown, defaulting to 1000 [ 1059.520278][T22770] lo speed is unknown, defaulting to 1000 [ 1059.920806][T22784] FAULT_INJECTION: forcing a failure. [ 1059.920806][T22784] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1059.927009][T22784] CPU: 2 UID: 0 PID: 22784 Comm: syz.1.3817 Tainted: G L syzkaller #0 PREEMPT(full) [ 1059.927034][T22784] Tainted: [L]=SOFTLOCKUP [ 1059.927039][T22784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1059.927054][T22784] Call Trace: [ 1059.927061][T22784] [ 1059.927067][T22784] dump_stack_lvl+0x100/0x190 [ 1059.927170][T22784] should_fail_ex.cold+0x5/0xa [ 1059.927194][T22784] _copy_from_user+0x2e/0xd0 [ 1059.927255][T22784] get_compat_msghdr+0xb3/0x480 [ 1059.927331][T22784] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1059.927359][T22784] ___sys_sendmsg+0x1b6/0x1e0 [ 1059.927376][T22784] ? __pfx____sys_sendmsg+0x10/0x10 [ 1059.927399][T22784] ? find_held_lock+0x2b/0x80 [ 1059.927437][T22784] __sys_sendmsg+0x160/0x210 [ 1059.927458][T22784] ? __pfx___sys_sendmsg+0x10/0x10 [ 1059.927482][T22784] ? __pfx_ksys_write+0x10/0x10 [ 1059.927507][T22784] __do_fast_syscall_32+0xe7/0x970 [ 1059.927561][T22784] ? lockdep_hardirqs_on+0x78/0x100 [ 1059.927579][T22784] do_fast_syscall_32+0x32/0x70 [ 1059.927599][T22784] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1059.927617][T22784] RIP: 0023:0xf6ffefec [ 1059.927635][T22784] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 1059.927641][T22784] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1059.927656][T22784] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 1059.927665][T22784] RDX: 0000000000040040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1059.927673][T22784] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1059.927681][T22784] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1059.927689][T22784] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1059.927706][T22784] [ 1059.927990][T22775] lo speed is unknown, defaulting to 1000 [ 1060.256678][T22790] lo speed is unknown, defaulting to 1000 [ 1060.360502][T15987] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1060.521660][T15987] usb 6-1: config 0 has no interfaces? [ 1060.525176][T15987] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 1060.538901][T15987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.562298][T15987] usb 6-1: Product: syz [ 1060.563815][T15987] usb 6-1: Manufacturer: syz [ 1060.577857][T15987] usb 6-1: SerialNumber: syz [ 1060.589239][T15987] usb 6-1: config 0 descriptor?? [ 1060.871429][T17451] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1060.884484][ T5844] usb 6-1: USB disconnect, device number 54 [ 1061.030585][T17451] usb 7-1: config 0 has no interfaces? [ 1061.034148][T17451] usb 7-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 1061.037130][T17451] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.039767][T17451] usb 7-1: Product: syz [ 1061.041123][T17451] usb 7-1: Manufacturer: syz [ 1061.042517][T17451] usb 7-1: SerialNumber: syz [ 1061.045985][T17451] usb 7-1: config 0 descriptor?? [ 1061.168729][T15987] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1061.320858][ T5829] usb 7-1: USB disconnect, device number 66 [ 1061.323524][T15987] usb 5-1: config 0 has no interfaces? [ 1061.332678][T15987] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 1061.335435][T15987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.338063][T15987] usb 5-1: Product: syz [ 1061.339506][T15987] usb 5-1: Manufacturer: syz [ 1061.340987][T15987] usb 5-1: SerialNumber: syz [ 1061.344775][T15987] usb 5-1: config 0 descriptor?? [ 1061.511350][T22811] lo speed is unknown, defaulting to 1000 [ 1061.513273][T22815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3825'. [ 1061.560381][T17451] usb 5-1: USB disconnect, device number 67 [ 1061.972195][T22826] lo speed is unknown, defaulting to 1000 [ 1062.148664][ T5844] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1062.409998][ T5844] usb 7-1: config 0 has no interfaces? [ 1062.413296][ T5844] usb 7-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 1062.416559][ T5844] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.419526][ T5844] usb 7-1: Product: syz [ 1062.421021][ T5844] usb 7-1: Manufacturer: syz [ 1062.422626][ T5844] usb 7-1: SerialNumber: syz [ 1062.426006][ T5844] usb 7-1: config 0 descriptor?? [ 1062.589364][T15987] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1062.711576][T17451] usb 7-1: USB disconnect, device number 67 [ 1062.739920][T15987] usb 5-1: config 0 has no interfaces? [ 1062.743612][T15987] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 1062.747363][T15987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.750794][T15987] usb 5-1: Product: syz [ 1062.752302][T15987] usb 5-1: Manufacturer: syz [ 1062.753931][T15987] usb 5-1: SerialNumber: syz [ 1062.756912][T15987] usb 5-1: config 0 descriptor?? [ 1063.050176][T15987] usb 5-1: USB disconnect, device number 68 [ 1063.340064][ T24] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1063.500541][ T24] usb 6-1: config 0 has no interfaces? [ 1063.504722][ T24] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 1063.509052][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.514266][ T24] usb 6-1: Product: syz [ 1063.515671][ T24] usb 6-1: Manufacturer: syz [ 1063.518463][ T24] usb 6-1: SerialNumber: syz [ 1063.523924][ T24] usb 6-1: config 0 descriptor?? [ 1063.742280][T22866] FAULT_INJECTION: forcing a failure. [ 1063.742280][T22866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1063.749012][T22866] CPU: 2 UID: 0 PID: 22866 Comm: syz.0.3840 Tainted: G L syzkaller #0 PREEMPT(full) [ 1063.749032][T22866] Tainted: [L]=SOFTLOCKUP [ 1063.749037][T22866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1063.749043][T22866] Call Trace: [ 1063.749047][T22866] [ 1063.749052][T22866] dump_stack_lvl+0x100/0x190 [ 1063.749069][T22866] should_fail_ex.cold+0x5/0xa [ 1063.749083][T22866] _copy_from_user+0x2e/0xd0 [ 1063.749102][T22866] __sys_bpf+0x2f5/0x4e80 [ 1063.749133][T22866] ? __pfx___sys_bpf+0x10/0x10 [ 1063.749146][T22866] ? find_held_lock+0x2b/0x80 [ 1063.749159][T22866] ? get_pid_task+0xfc/0x250 [ 1063.749184][T22866] ? get_pid_task+0xfc/0x250 [ 1063.749201][T22866] ? proc_fail_nth_write+0x9f/0x220 [ 1063.749217][T22866] ? find_held_lock+0x2b/0x80 [ 1063.749234][T22866] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1063.749249][T22866] ? find_held_lock+0x2b/0x80 [ 1063.749262][T22866] ? ksys_write+0x190/0x250 [ 1063.749273][T22866] ? ksys_write+0x190/0x250 [ 1063.749292][T22866] ? fput+0x79/0x100 [ 1063.749307][T22866] ? __ia32_sys_bpf+0xcc/0x170 [ 1063.749319][T22866] __ia32_sys_bpf+0xcc/0x170 [ 1063.749331][T22866] ? __do_fast_syscall_32+0x98/0x970 [ 1063.749348][T22866] __do_fast_syscall_32+0xe7/0x970 [ 1063.749362][T22866] ? lockdep_hardirqs_on+0x78/0x100 [ 1063.749378][T22866] do_fast_syscall_32+0x32/0x70 [ 1063.749394][T22866] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1063.749409][T22866] RIP: 0023:0xf701efec [ 1063.749421][T22866] Code: Unable to access opcode bytes at 0xf701efc2. [ 1063.749426][T22866] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 1063.749451][T22866] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080 [ 1063.749458][T22866] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 1063.749465][T22866] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1063.749471][T22866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1063.749477][T22866] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1063.749491][T22866] [ 1063.753136][ T24] usb 6-1: USB disconnect, device number 55 [ 1064.308077][T22879] capability: warning: `syz.3.3844' uses 32-bit capabilities (legacy support in use) [ 1064.513765][T22884] FAULT_INJECTION: forcing a failure. [ 1064.513765][T22884] name failslab, interval 1, probability 0, space 0, times 1 [ 1064.528898][T22884] CPU: 0 UID: 0 PID: 22884 Comm: syz.2.3847 Tainted: G L syzkaller #0 PREEMPT(full) [ 1064.528932][T22884] Tainted: [L]=SOFTLOCKUP [ 1064.528937][T22884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1064.528945][T22884] Call Trace: [ 1064.528949][T22884] [ 1064.528954][T22884] dump_stack_lvl+0x100/0x190 [ 1064.528972][T22884] should_fail_ex.cold+0x5/0xa [ 1064.528986][T22884] should_failslab+0xc2/0x120 [ 1064.529015][T22884] __kmalloc_noprof+0xfc/0x820 [ 1064.529035][T22884] ? rcu_is_watching+0x12/0xc0 [ 1064.529054][T22884] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1064.529075][T22884] tomoyo_realpath_from_path+0xb6/0x690 [ 1064.529097][T22884] tomoyo_path_number_perm+0x23c/0x580 [ 1064.529111][T22884] ? tomoyo_path_number_perm+0x22e/0x580 [ 1064.529127][T22884] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1064.529142][T22884] ? get_pid_task+0x106/0x250 [ 1064.529168][T22884] ? find_held_lock+0x2b/0x80 [ 1064.529182][T22884] ? __fget_files+0x215/0x3d0 [ 1064.529191][T22884] ? hook_file_ioctl_common+0x140/0x440 [ 1064.529206][T22884] ? __fget_files+0x215/0x3d0 [ 1064.529219][T22884] ? __fget_files+0x21f/0x3d0 [ 1064.529242][T22884] security_file_ioctl_compat+0xd3/0x230 [ 1064.529260][T22884] __ia32_compat_sys_ioctl+0xc2/0x360 [ 1064.529280][T22884] __do_fast_syscall_32+0xe7/0x970 [ 1064.529295][T22884] ? lockdep_hardirqs_on+0x78/0x100 [ 1064.529310][T22884] do_fast_syscall_32+0x32/0x70 [ 1064.529325][T22884] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1064.529340][T22884] RIP: 0023:0xf7f43fec [ 1064.529354][T22884] Code: Unable to access opcode bytes at 0xf7f43fc2. [ 1064.529359][T22884] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1064.529372][T22884] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080046f46 [ 1064.529379][T22884] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1064.529385][T22884] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1064.529392][T22884] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1064.529399][T22884] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1064.529412][T22884] [ 1064.529531][T22884] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1064.565003][T22886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3846'. [ 1064.611921][T22881] netlink: 23 bytes leftover after parsing attributes in process `syz.3.3845'. [ 1064.778378][T22891] netlink: 'syz.1.3849': attribute type 1 has an invalid length. [ 1064.794489][T22891] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3849'. [ 1064.833534][T22891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3849'. [ 1064.918532][T22891] macsec1: entered promiscuous mode [ 1064.927036][T22891] batadv0: entered promiscuous mode [ 1064.936039][T22891] macsec1: entered allmulticast mode [ 1064.943664][T22891] batadv0: entered allmulticast mode [ 1064.975259][T22891] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1064.998724][T22891] batadv0: left allmulticast mode [ 1065.008862][T22891] batadv0: left promiscuous mode [ 1065.193978][T22900] FAULT_INJECTION: forcing a failure. [ 1065.193978][T22900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1065.198221][T22900] CPU: 0 UID: 0 PID: 22900 Comm: syz.3.3851 Tainted: G L syzkaller #0 PREEMPT(full) [ 1065.198251][T22900] Tainted: [L]=SOFTLOCKUP [ 1065.198255][T22900] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1065.198262][T22900] Call Trace: [ 1065.198267][T22900] [ 1065.198272][T22900] dump_stack_lvl+0x100/0x190 [ 1065.198289][T22900] should_fail_ex.cold+0x5/0xa [ 1065.198302][T22900] _copy_from_user+0x2e/0xd0 [ 1065.198320][T22900] io_uring_setup+0xc0/0x160 [ 1065.198332][T22900] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1065.198347][T22900] ? find_held_lock+0x2b/0x80 [ 1065.198361][T22900] ? __pfx_io_uring_setup+0x10/0x10 [ 1065.198371][T22900] ? ksys_write+0x190/0x250 [ 1065.198387][T22900] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1065.198410][T22900] ? fput+0x79/0x100 [ 1065.198423][T22900] ? ksys_write+0x1ac/0x250 [ 1065.198433][T22900] ? __pfx_ksys_write+0x10/0x10 [ 1065.198444][T22900] __ia32_sys_io_uring_setup+0xc2/0x170 [ 1065.198457][T22900] __do_fast_syscall_32+0xe7/0x970 [ 1065.198472][T22900] ? lockdep_hardirqs_on+0x78/0x100 [ 1065.198487][T22900] do_fast_syscall_32+0x32/0x70 [ 1065.198502][T22900] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1065.198517][T22900] RIP: 0023:0xf708efec [ 1065.198530][T22900] Code: Unable to access opcode bytes at 0xf708efc2. [ 1065.198536][T22900] RSP: 002b:00000000f547d43c EFLAGS: 00000286 ORIG_RAX: 00000000000001a9 [ 1065.198549][T22900] RAX: ffffffffffffffda RBX: 0000000000000e26 RCX: 0000000080000808 [ 1065.198578][T22900] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1065.198585][T22900] RBP: 00000000f547d4fc R08: 0000000000000000 R09: 0000000000000000 [ 1065.198592][T22900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1065.198598][T22900] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1065.198612][T22900] [ 1065.374406][T22908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3853'. [ 1065.644612][T22916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3855'. [ 1065.777928][T22922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3856'. [ 1066.072553][T22928] lo speed is unknown, defaulting to 1000 [ 1066.664738][T22942] lo speed is unknown, defaulting to 1000 [ 1066.895970][T22946] FAULT_INJECTION: forcing a failure. [ 1066.895970][T22946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1066.904554][T22946] CPU: 2 UID: 0 PID: 22946 Comm: syz.2.3862 Tainted: G L syzkaller #0 PREEMPT(full) [ 1066.904588][T22946] Tainted: [L]=SOFTLOCKUP [ 1066.904593][T22946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1066.904599][T22946] Call Trace: [ 1066.904604][T22946] [ 1066.904609][T22946] dump_stack_lvl+0x100/0x190 [ 1066.904639][T22946] should_fail_ex.cold+0x5/0xa [ 1066.904653][T22946] _copy_from_user+0x2e/0xd0 [ 1066.904672][T22946] io_uring_setup+0xc0/0x160 [ 1066.904685][T22946] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1066.904700][T22946] ? find_held_lock+0x2b/0x80 [ 1066.904714][T22946] ? __pfx_io_uring_setup+0x10/0x10 [ 1066.904725][T22946] ? ksys_write+0x190/0x250 [ 1066.904738][T22946] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1066.904761][T22946] ? fput+0x79/0x100 [ 1066.904774][T22946] ? ksys_write+0x1ac/0x250 [ 1066.904784][T22946] ? __pfx_ksys_write+0x10/0x10 [ 1066.904796][T22946] __ia32_sys_io_uring_setup+0xc2/0x170 [ 1066.904808][T22946] __do_fast_syscall_32+0xe7/0x970 [ 1066.904824][T22946] ? lockdep_hardirqs_on+0x78/0x100 [ 1066.904839][T22946] do_fast_syscall_32+0x32/0x70 [ 1066.904854][T22946] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1066.904868][T22946] RIP: 0023:0xf7f43fec [ 1066.904881][T22946] Code: Unable to access opcode bytes at 0xf7f43fc2. [ 1066.904891][T22946] RSP: 002b:00000000f53e543c EFLAGS: 00000286 ORIG_RAX: 00000000000001a9 [ 1066.904903][T22946] RAX: ffffffffffffffda RBX: 0000000000000e26 RCX: 0000000080000808 [ 1066.904909][T22946] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1066.904916][T22946] RBP: 00000000f53e54fc R08: 0000000000000000 R09: 0000000000000000 [ 1066.904922][T22946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1066.904929][T22946] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1066.904943][T22946] [ 1067.113483][T22952] warning: `syz.0.3864' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1067.426747][T22958] FAULT_INJECTION: forcing a failure. [ 1067.426747][T22958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1067.431313][T22958] CPU: 0 UID: 0 PID: 22958 Comm: syz.1.3866 Tainted: G L syzkaller #0 PREEMPT(full) [ 1067.431333][T22958] Tainted: [L]=SOFTLOCKUP [ 1067.431337][T22958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1067.431344][T22958] Call Trace: [ 1067.431348][T22958] [ 1067.431353][T22958] dump_stack_lvl+0x100/0x190 [ 1067.431370][T22958] should_fail_ex.cold+0x5/0xa [ 1067.431383][T22958] _copy_from_user+0x2e/0xd0 [ 1067.431401][T22958] get_compat_msghdr+0xb3/0x480 [ 1067.431418][T22958] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1067.431441][T22958] ___sys_sendmsg+0x1b6/0x1e0 [ 1067.431455][T22958] ? __pfx____sys_sendmsg+0x10/0x10 [ 1067.431473][T22958] ? find_held_lock+0x2b/0x80 [ 1067.431496][T22958] __sys_sendmsg+0x160/0x210 [ 1067.431511][T22958] ? __pfx___sys_sendmsg+0x10/0x10 [ 1067.431530][T22958] ? __pfx_ksys_write+0x10/0x10 [ 1067.431544][T22958] __do_fast_syscall_32+0xe7/0x970 [ 1067.431561][T22958] ? lockdep_hardirqs_on+0x78/0x100 [ 1067.431576][T22958] do_fast_syscall_32+0x32/0x70 [ 1067.431591][T22958] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1067.431606][T22958] RIP: 0023:0xf6ffefec [ 1067.431620][T22958] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 1067.431625][T22958] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1067.431637][T22958] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000580 [ 1067.431644][T22958] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1067.431650][T22958] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1067.431656][T22958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1067.431663][T22958] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1067.431676][T22958] [ 1067.629777][T22963] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1068.980576][T22990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3876'. [ 1069.310593][T22992] For dev_enable ops, only valid value is "1" [ 1069.426655][T23005] FAULT_INJECTION: forcing a failure. [ 1069.426655][T23005] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.431906][T23005] CPU: 2 UID: 0 PID: 23005 Comm: syz.0.3882 Tainted: G L syzkaller #0 PREEMPT(full) [ 1069.431926][T23005] Tainted: [L]=SOFTLOCKUP [ 1069.431930][T23005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1069.431937][T23005] Call Trace: [ 1069.431943][T23005] [ 1069.431948][T23005] dump_stack_lvl+0x100/0x190 [ 1069.431973][T23005] should_fail_ex.cold+0x5/0xa [ 1069.431987][T23005] should_failslab+0xc2/0x120 [ 1069.432004][T23005] __kvmalloc_node_noprof+0x116/0x970 [ 1069.432019][T23005] ? seq_read_iter+0x819/0x1270 [ 1069.432039][T23005] seq_read_iter+0x819/0x1270 [ 1069.432057][T23005] ? aa_file_perm+0x7f3/0x14d0 [ 1069.432079][T23005] seq_read+0x344/0x4d0 [ 1069.432096][T23005] ? __pfx_seq_read+0x10/0x10 [ 1069.432116][T23005] ? lock_acquire+0x1b9/0x370 [ 1069.432138][T23005] ? __pfx_seq_read+0x10/0x10 [ 1069.432155][T23005] proc_reg_read+0x240/0x330 [ 1069.432166][T23005] ? __pfx_proc_reg_read+0x10/0x10 [ 1069.432177][T23005] vfs_read+0x1e4/0xb40 [ 1069.432190][T23005] ? __pfx_vfs_read+0x10/0x10 [ 1069.432198][T23005] ? find_held_lock+0x2b/0x80 [ 1069.432212][T23005] ? __fget_files+0x215/0x3d0 [ 1069.432225][T23005] ? __fget_files+0x21f/0x3d0 [ 1069.432239][T23005] ksys_read+0x12a/0x250 [ 1069.432249][T23005] ? __pfx_ksys_read+0x10/0x10 [ 1069.432258][T23005] ? ksys_write+0x1ac/0x250 [ 1069.432268][T23005] ? __pfx_ksys_write+0x10/0x10 [ 1069.432281][T23005] __do_fast_syscall_32+0xe7/0x970 [ 1069.432297][T23005] ? lockdep_hardirqs_on+0x78/0x100 [ 1069.432312][T23005] do_fast_syscall_32+0x32/0x70 [ 1069.432327][T23005] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1069.432341][T23005] RIP: 0023:0xf701efec [ 1069.432355][T23005] Code: Unable to access opcode bytes at 0xf701efc2. [ 1069.432360][T23005] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 1069.432372][T23005] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000cc0 [ 1069.432379][T23005] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 1069.432385][T23005] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1069.432392][T23005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1069.432398][T23005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1069.432412][T23005] [ 1069.552482][T23007] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1069.556859][T23007] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1069.560368][T23007] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1069.563886][T23007] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1069.568213][T23007] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1069.571841][T23007] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1069.575377][T23007] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1069.580056][T23007] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1069.583939][T23007] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1069.587758][T23007] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1069.820486][T23020] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3885'. [ 1069.826832][T23019] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3885'. [ 1070.702989][T23037] FAULT_INJECTION: forcing a failure. [ 1070.702989][T23037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1070.707172][T23037] CPU: 0 UID: 0 PID: 23037 Comm: syz.0.3889 Tainted: G L syzkaller #0 PREEMPT(full) [ 1070.707203][T23037] Tainted: [L]=SOFTLOCKUP [ 1070.707207][T23037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1070.707214][T23037] Call Trace: [ 1070.707219][T23037] [ 1070.707224][T23037] dump_stack_lvl+0x100/0x190 [ 1070.707241][T23037] should_fail_ex.cold+0x5/0xa [ 1070.707255][T23037] _copy_from_user+0x2e/0xd0 [ 1070.707274][T23037] get_compat_msghdr+0xb3/0x480 [ 1070.707293][T23037] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1070.707316][T23037] ___sys_sendmsg+0x1b6/0x1e0 [ 1070.707330][T23037] ? __pfx____sys_sendmsg+0x10/0x10 [ 1070.707349][T23037] ? find_held_lock+0x2b/0x80 [ 1070.707372][T23037] __sys_sendmsg+0x160/0x210 [ 1070.707388][T23037] ? __pfx___sys_sendmsg+0x10/0x10 [ 1070.707408][T23037] ? __pfx_ksys_write+0x10/0x10 [ 1070.707422][T23037] __do_fast_syscall_32+0xe7/0x970 [ 1070.707438][T23037] ? lockdep_hardirqs_on+0x78/0x100 [ 1070.707453][T23037] do_fast_syscall_32+0x32/0x70 [ 1070.707469][T23037] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1070.707483][T23037] RIP: 0023:0xf701efec [ 1070.707498][T23037] Code: Unable to access opcode bytes at 0xf701efc2. [ 1070.707503][T23037] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1070.707515][T23037] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 1070.707522][T23037] RDX: 0000000004044000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1070.707529][T23037] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1070.707536][T23037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1070.707543][T23037] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1070.707556][T23037] [ 1071.016517][T23040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3890'. [ 1071.116630][T23044] FAULT_INJECTION: forcing a failure. [ 1071.116630][T23044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1071.121807][T23035] lo speed is unknown, defaulting to 1000 [ 1071.133847][T23044] CPU: 0 UID: 0 PID: 23044 Comm: syz.0.3891 Tainted: G L syzkaller #0 PREEMPT(full) [ 1071.133868][T23044] Tainted: [L]=SOFTLOCKUP [ 1071.133884][T23044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1071.133892][T23044] Call Trace: [ 1071.133896][T23044] [ 1071.133902][T23044] dump_stack_lvl+0x100/0x190 [ 1071.133920][T23044] should_fail_ex.cold+0x5/0xa [ 1071.133933][T23044] _copy_to_user+0x32/0xd0 [ 1071.133956][T23044] simple_read_from_buffer+0xcb/0x170 [ 1071.133976][T23044] proc_fail_nth_read+0x1af/0x230 [ 1071.133992][T23044] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1071.134009][T23044] ? rw_verify_area+0xce/0x6d0 [ 1071.134025][T23044] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1071.134040][T23044] vfs_read+0x1e4/0xb40 [ 1071.134066][T23044] ? __pfx_vfs_read+0x10/0x10 [ 1071.134076][T23044] ? find_held_lock+0x2b/0x80 [ 1071.134090][T23044] ? __fget_files+0x215/0x3d0 [ 1071.134104][T23044] ? __fget_files+0x21f/0x3d0 [ 1071.134118][T23044] ksys_read+0x12a/0x250 [ 1071.134128][T23044] ? __pfx_ksys_read+0x10/0x10 [ 1071.134143][T23044] do_int80_emulation+0x14b/0x720 [ 1071.134161][T23044] asm_int80_emulation+0x1a/0x20 [ 1071.134173][T23044] RIP: 0023:0xf71573eb [ 1071.134183][T23044] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1071.134194][T23044] RSP: 002b:00000000f53ec4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1071.134206][T23044] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f53ec5d0 [ 1071.134213][T23044] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1071.134220][T23044] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1071.134226][T23044] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1071.134233][T23044] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1071.134247][T23044] [ 1071.389416][T23048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3893'. [ 1071.444561][T23053] netlink: 'syz.2.3894': attribute type 2 has an invalid length. [ 1071.447958][T23053] netlink: 'syz.2.3894': attribute type 2 has an invalid length. [ 1071.552749][T23056] nbd0: detected capacity change from 0 to 8 [ 1071.573185][T23063] block nbd0: shutting down sockets [ 1071.600505][ C2] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1071.603721][ C2] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1071.610728][T23064] FAULT_INJECTION: forcing a failure. [ 1071.610728][T23064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1071.617551][T17386] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1071.622472][T17386] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1071.627658][T17386] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1071.630970][T17386] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1071.633924][T17386] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1071.637249][T17386] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1071.642286][T23064] CPU: 0 UID: 0 PID: 23064 Comm: syz.2.3897 Tainted: G L syzkaller #0 PREEMPT(full) [ 1071.642306][T23064] Tainted: [L]=SOFTLOCKUP [ 1071.642311][T23064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1071.642318][T23064] Call Trace: [ 1071.642322][T23064] [ 1071.642328][T23064] dump_stack_lvl+0x100/0x190 [ 1071.642345][T23064] should_fail_ex.cold+0x5/0xa [ 1071.642359][T23064] _copy_to_user+0x32/0xd0 [ 1071.642378][T23064] simple_read_from_buffer+0xcb/0x170 [ 1071.642398][T23064] proc_fail_nth_read+0x1af/0x230 [ 1071.642415][T23064] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1071.642431][T23064] ? rw_verify_area+0xce/0x6d0 [ 1071.642448][T23064] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1071.642463][T23064] vfs_read+0x1e4/0xb40 [ 1071.642475][T23064] ? __pfx_vfs_read+0x10/0x10 [ 1071.642485][T23064] ? find_held_lock+0x2b/0x80 [ 1071.642500][T23064] ? __fget_files+0x215/0x3d0 [ 1071.642513][T23064] ? __fget_files+0x21f/0x3d0 [ 1071.642527][T23064] ksys_read+0x12a/0x250 [ 1071.642537][T23064] ? __pfx_ksys_read+0x10/0x10 [ 1071.642552][T23064] do_int80_emulation+0x14b/0x720 [ 1071.642571][T23064] asm_int80_emulation+0x1a/0x20 [ 1071.642583][T23064] RIP: 0023:0xf71473eb [ 1071.642593][T23064] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1071.642605][T23064] RSP: 002b:00000000f53c44bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1071.642617][T23064] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53c45d0 [ 1071.642624][T23064] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1071.642631][T23064] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1071.642638][T23064] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1071.642644][T23064] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1071.642658][T23064] [ 1071.644693][T17386] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1071.712532][T17386] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1071.715608][T17386] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1071.718723][T17386] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1071.784009][T23070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3899'. [ 1071.802928][T18898] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1071.806008][T18898] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1071.810222][T18898] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1071.813205][T18898] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1071.815597][ T5748] ldm_validate_partition_table(): Disk read failed. [ 1071.820341][T18898] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1071.823327][T18898] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1071.824956][T23072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3901'. [ 1071.825687][T18898] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1071.831626][T18898] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1071.834649][ T5748] Dev nbd0: unable to read RDB block 0 [ 1071.836519][ T5748] nbd0: unable to read partition table [ 1071.838332][ T5748] nbd0: partition table beyond EOD, truncated [ 1071.842054][ T5748] ldm_validate_partition_table(): Disk read failed. [ 1071.847363][ T5748] Dev nbd0: unable to read RDB block 0 [ 1071.850813][ T5748] nbd0: unable to read partition table [ 1071.852677][ T5748] nbd0: partition table beyond EOD, truncated [ 1071.865583][T23075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3900'. [ 1071.963225][T23079] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1071.988942][T23085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3905'. [ 1072.414348][T15987] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1072.594393][T15987] usb 8-1: config 0 has no interfaces? [ 1072.604010][T15987] usb 8-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 1072.615620][T15987] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.627924][T15987] usb 8-1: Product: syz [ 1072.631751][T15987] usb 8-1: Manufacturer: syz [ 1072.633180][T15987] usb 8-1: SerialNumber: syz [ 1072.644320][T15987] usb 8-1: config 0 descriptor?? [ 1072.664021][T23097] lo speed is unknown, defaulting to 1000 [ 1072.666342][T23110] syzkaller0: entered promiscuous mode [ 1072.670652][T23110] syzkaller0: entered allmulticast mode [ 1072.797758][T23116] syzkaller1: entered promiscuous mode [ 1072.801157][T23116] syzkaller1: entered allmulticast mode [ 1072.931066][ T5844] usb 8-1: USB disconnect, device number 54 [ 1073.031155][T23123] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1073.033374][T23123] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1073.041780][T23123] vhci_hcd vhci_hcd.0: Device attached [ 1073.135686][T23129] loop6: detected capacity change from 0 to 524287999 [ 1073.144313][T23129] ldm_validate_partition_table(): Disk read failed. [ 1073.146792][T23129] Dev loop6: unable to read RDB block 0 [ 1073.148876][T23129] loop6: unable to read partition table [ 1073.151892][T23129] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 1073.369167][T15987] usb 42-1: SetAddress Request (2) to port 0 [ 1073.373569][T15987] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1073.660147][T23125] vhci_hcd: connection reset by peer [ 1073.667869][T11189] vhci_hcd vhci_hcd.2: stop threads [ 1073.672282][T11189] vhci_hcd vhci_hcd.2: release socket [ 1073.679643][T11189] vhci_hcd vhci_hcd.2: disconnect device [ 1074.360931][T23157] ======================================================= [ 1074.360931][T23157] WARNING: The mand mount option has been deprecated and [ 1074.360931][T23157] and is ignored by this kernel. Remove the mand [ 1074.360931][T23157] option from the mount to silence this warning. [ 1074.360931][T23157] ======================================================= [ 1074.464359][T23158] lo speed is unknown, defaulting to 1000 [ 1074.518539][T23160] netlink: 'syz.1.3929': attribute type 5 has an invalid length. [ 1074.527613][T23160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3929'. [ 1074.532437][T23160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3929'. [ 1074.537114][T23160] netlink: 'syz.1.3929': attribute type 18 has an invalid length. [ 1074.560760][T23160] For dev_enable ops, only valid value is "1" [ 1074.913687][T23171] input: syz1 as /devices/virtual/input/input34 [ 1074.930532][ T24] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1075.100935][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 1075.108078][ T24] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1075.117188][ T24] usb 6-1: config 0 has no interface number 0 [ 1075.122813][ T24] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1075.129965][ T24] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1075.133751][ T24] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1075.138471][ T24] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1075.143303][ T24] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1075.146343][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.152611][ T24] usb 6-1: config 0 descriptor?? [ 1075.162535][ T24] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1075.218022][T23175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3935'. [ 1075.258287][T23179] (syz.0.3936,23179,2):ocfs2_get_sector:1713 ERROR: status = -5 [ 1075.264769][T23179] (syz.0.3936,23179,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 1075.267983][T23179] (syz.0.3936,23179,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1075.271322][T23179] (syz.0.3936,23179,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 1075.299714][T23179] syzkaller0: entered promiscuous mode [ 1075.301546][T23179] syzkaller0: entered allmulticast mode [ 1075.360769][T23181] FAULT_INJECTION: forcing a failure. [ 1075.360769][T23181] name failslab, interval 1, probability 0, space 0, times 0 [ 1075.365857][T23181] CPU: 2 UID: 0 PID: 23181 Comm: syz.2.3937 Tainted: G L syzkaller #0 PREEMPT(full) [ 1075.365878][T23181] Tainted: [L]=SOFTLOCKUP [ 1075.365893][T23181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1075.365901][T23181] Call Trace: [ 1075.365907][T23181] [ 1075.365912][T23181] dump_stack_lvl+0x100/0x190 [ 1075.365930][T23181] should_fail_ex.cold+0x5/0xa [ 1075.365944][T23181] should_failslab+0xc2/0x120 [ 1075.365961][T23181] __kmalloc_noprof+0xfc/0x820 [ 1075.365977][T23181] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 1075.365994][T23181] kernfs_fop_write_iter+0x26a/0x5f0 [ 1075.366009][T23181] vfs_write+0x6ac/0x1050 [ 1075.366021][T23181] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1075.366036][T23181] ? __pfx_vfs_write+0x10/0x10 [ 1075.366045][T23181] ? find_held_lock+0x2b/0x80 [ 1075.366068][T23181] ksys_write+0x12a/0x250 [ 1075.366079][T23181] ? __pfx_ksys_write+0x10/0x10 [ 1075.366089][T23181] ? ksys_write+0x1ac/0x250 [ 1075.366099][T23181] ? __pfx_ksys_write+0x10/0x10 [ 1075.366112][T23181] __do_fast_syscall_32+0xe7/0x970 [ 1075.366129][T23181] ? lockdep_hardirqs_on+0x78/0x100 [ 1075.366144][T23181] do_fast_syscall_32+0x32/0x70 [ 1075.366159][T23181] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1075.366174][T23181] RIP: 0023:0xf7f43fec [ 1075.366188][T23181] Code: Unable to access opcode bytes at 0xf7f43fc2. [ 1075.366194][T23181] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1075.366205][T23181] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 1075.366212][T23181] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1075.366219][T23181] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1075.366226][T23181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1075.366232][T23181] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1075.366246][T23181] [ 1075.740190][T23184] Invalid ELF header magic: != ELF [ 1075.931929][T23193] pim6reg: entered allmulticast mode [ 1075.961539][T23191] pim6reg: left allmulticast mode [ 1076.656405][T23196] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3940'. [ 1076.973429][T23203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3944'. [ 1077.021078][T23206] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1077.023492][T23206] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1077.026392][T23206] vhci_hcd vhci_hcd.0: Device attached [ 1077.033733][ T1072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1077.040123][ T1072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1077.107501][T23207] vhci_hcd: connection closed [ 1077.109999][T11189] vhci_hcd vhci_hcd.0: stop threads [ 1077.113860][T11189] vhci_hcd vhci_hcd.0: release socket [ 1077.116152][T11189] vhci_hcd vhci_hcd.0: disconnect device [ 1077.165097][T23219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3947'. [ 1077.184152][T23216] netlink: 'syz.2.3947': attribute type 10 has an invalid length. [ 1077.192025][T23216] 8021q: adding VLAN 0 to HW filter on device team0 [ 1077.198448][T23216] bond0: (slave team0): Enslaving as an active interface with an up link [ 1077.432169][T23227] ubi16: attaching mtd0 [ 1077.441490][T23227] ubi16: scanning is finished [ 1077.443404][T23227] ubi16: empty MTD device detected [ 1077.696492][T16933] usb 6-1: USB disconnect, device number 56 [ 1077.701619][T16933] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1077.737031][T23238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3953'. [ 1077.776122][T23227] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1077.785819][T23227] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1077.789206][T23227] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1077.791745][T23227] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 1077.799232][T23227] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1077.804146][T23227] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1077.808297][T23227] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2808831785 [ 1077.825388][T23227] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1077.850336][T23239] ubi16: background thread "ubi_bgt16d" started, PID 23239 [ 1077.879825][T23243] se_dev->se_dev_ptr already set for storage object [ 1077.911027][T23245] usbip-vudc usbip-vudc.0: gadget not bound [ 1077.976265][T23250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3958'. [ 1078.202731][T23258] overlayfs: failed to resolve 'dont_hash': -2 [ 1078.349619][ T5894] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1078.408943][T15987] usb 42-1: device descriptor read/8, error -110 [ 1078.499327][T16933] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1078.499907][ T5894] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.505311][ T5894] usb 5-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00 [ 1078.510283][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.524426][T23269] lo speed is unknown, defaulting to 1000 [ 1078.630665][ T5894] msi2500 5-1:1.0: Registered as swradio24 [ 1078.635291][ T5894] msi2500 5-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 1078.670831][T16933] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.679123][T16933] usb 6-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00 [ 1078.686829][T16933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.752783][T16933] videodev: could not get a free minor [ 1078.756672][T16933] msi2500 6-1:1.0: Failed to register as video device (-23) [ 1078.768360][T16933] msi2500 6-1:1.0: probe with driver msi2500 failed with error -23 [ 1078.819290][T15987] usb usb42-port1: attempt power cycle [ 1079.108714][ T5894] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1079.389669][T15987] usb usb42-port1: unable to enumerate USB device [ 1079.960430][ T5894] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.963714][ T5894] usb 8-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00 [ 1079.966666][ T5894] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.025734][ T5894] videodev: could not get a free minor [ 1080.029875][ T5894] msi2500 8-1:1.0: Failed to register as video device (-23) [ 1080.037340][ T5894] msi2500 8-1:1.0: probe with driver msi2500 failed with error -23 [ 1080.811197][T23259] msi2500 5-1:1.0: failed -110, cmd 41, data 0e09 [ 1080.814228][T23259] spi_master spi0: failed to transfer one message from queue [ 1080.816716][T23259] spi_master spi0: noqueue transfer failed [ 1080.822270][T23259] msi2500 5-1:1.0: failed -32, cmd 41, data 608008 [ 1080.828931][ T5894] usb 5-1: USB disconnect, device number 69 [ 1080.871531][T23266] FAULT_INJECTION: forcing a failure. [ 1080.871531][T23266] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.882314][T23266] CPU: 2 UID: 0 PID: 23266 Comm: syz.1.3963 Tainted: G L syzkaller #0 PREEMPT(full) [ 1080.882335][T23266] Tainted: [L]=SOFTLOCKUP [ 1080.882339][T23266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1080.882346][T23266] Call Trace: [ 1080.882351][T23266] [ 1080.882356][T23266] dump_stack_lvl+0x100/0x190 [ 1080.882374][T23266] should_fail_ex.cold+0x5/0xa [ 1080.882387][T23266] should_failslab+0xc2/0x120 [ 1080.882405][T23266] __kmalloc_cache_noprof+0x91/0x6c0 [ 1080.882417][T23266] ? mark_held_locks+0x40/0x70 [ 1080.882435][T23266] ? __vb2_init_fileio+0x18f/0x1000 [ 1080.882470][T23266] __vb2_init_fileio+0x18f/0x1000 [ 1080.882482][T23266] ? vb2_fop_read+0xe5/0x520 [ 1080.882504][T23266] __vb2_perform_fileio+0x9ba/0x1380 [ 1080.882520][T23266] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 1080.882532][T23266] ? __pfx___might_resched+0x10/0x10 [ 1080.882556][T23266] ? get_pid_task+0xfc/0x250 [ 1080.882571][T23266] ? get_pid_task+0xfc/0x250 [ 1080.882588][T23266] vb2_fop_read+0x211/0x520 [ 1080.882609][T23266] v4l2_read+0x229/0x2c0 [ 1080.882641][T23266] ? __pfx_v4l2_read+0x10/0x10 [ 1080.882658][T23266] vfs_read+0x1e4/0xb40 [ 1080.882671][T23266] ? __pfx_vfs_read+0x10/0x10 [ 1080.882681][T23266] ? find_held_lock+0x2b/0x80 [ 1080.882694][T23266] ? __fget_files+0x215/0x3d0 [ 1080.882705][T23266] ? __fget_files+0x215/0x3d0 [ 1080.882717][T23266] ? __fget_files+0x21f/0x3d0 [ 1080.882732][T23266] ksys_read+0x12a/0x250 [ 1080.882742][T23266] ? __pfx_ksys_read+0x10/0x10 [ 1080.882752][T23266] ? ksys_write+0x1ac/0x250 [ 1080.882762][T23266] ? __pfx_ksys_write+0x10/0x10 [ 1080.882776][T23266] __do_fast_syscall_32+0xe7/0x970 [ 1080.882792][T23266] ? lockdep_hardirqs_on+0x78/0x100 [ 1080.882807][T23266] do_fast_syscall_32+0x32/0x70 [ 1080.882822][T23266] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1080.882837][T23266] RIP: 0023:0xf6ffefec [ 1080.882852][T23266] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 1080.882857][T23266] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 1080.882870][T23266] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002c00 [ 1080.882877][T23266] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 1080.882884][T23266] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1080.882891][T23266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1080.882898][T23266] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1080.882912][T23266] [ 1080.884343][T23279] ------------[ cut here ]------------ [ 1080.966520][T23279] !list_empty(&q->done_list) [ 1080.966532][T23279] WARNING: drivers/media/common/videobuf2/videobuf2-core.c:1821 at vb2_start_streaming+0x247/0x570, CPU#2: syz.3.3964/23279 [ 1080.972051][T23279] Modules linked in: [ 1080.975168][T23279] CPU: 2 UID: 0 PID: 23279 Comm: syz.3.3964 Tainted: G L syzkaller #0 PREEMPT(full) [ 1080.978649][T23279] Tainted: [L]=SOFTLOCKUP [ 1080.980042][T23279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1080.983168][T23279] RIP: 0010:vb2_start_streaming+0x247/0x570 [ 1080.984950][T23279] Code: 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 80 3c 02 00 0f 85 b5 02 00 00 48 8b 83 68 01 00 00 49 39 c4 74 0d e8 9a 35 e2 f9 90 <0f> 0b 90 eb 02 31 ed e8 8d 35 e2 f9 89 e8 48 83 c4 30 5b 5d 41 5c [ 1080.990857][T23279] RSP: 0000:ffffc90002e4fa50 EFLAGS: 00010283 [ 1080.992771][T23279] RAX: 00000000000027ef RBX: ffff88806deda770 RCX: ffffc90007779000 [ 1080.995232][T23279] RDX: 0000000000080000 RSI: ffffffff88277866 RDI: ffff8880282c2540 [ 1080.997737][T23279] RBP: 00000000ffffffed R08: 0000000000000005 R09: 0000000000000000 [ 1081.000269][T23279] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88806deda8d8 [ 1081.002738][T23279] R13: 0000000000000000 R14: ffff88806deda7d0 R15: ffff88806deda7a0 [ 1081.005195][T23279] FS: 0000000000000000(0000) GS:ffff888096de1000(0063) knlGS:00000000f547db40 [ 1081.008025][T23279] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1081.010169][T23279] CR2: 00000000f6fff000 CR3: 00000000739b9000 CR4: 0000000000352ef0 [ 1081.012619][T23279] Call Trace: [ 1081.013683][T23279] [ 1081.014622][T23279] ? __bitmap_weight+0xd7/0x110 [ 1081.016161][T23279] vb2_core_streamon+0x26a/0x3c0 [ 1081.017657][T23279] __vb2_init_fileio+0xcb7/0x1000 [ 1081.019677][T23279] ? __pfx_vb2_vmalloc_vaddr+0x10/0x10 [ 1081.021457][T23279] __vb2_perform_fileio+0x9ba/0x1380 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1081.023165][T23279] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 1081.025682][T23279] ? __pfx___might_resched+0x10/0x10 [ 1081.027436][T23279] vb2_fop_read+0x211/0x520 [ 1081.028996][T23279] v4l2_read+0x229/0x2c0 [ 1081.030346][T23279] ? __pfx_v4l2_read+0x10/0x10 [ 1081.031874][T23279] vfs_read+0x1e4/0xb40 [ 1081.033139][T23279] ? __pfx_vfs_read+0x10/0x10 [ 1081.034552][T23279] ? find_held_lock+0x2b/0x80 [ 1081.035991][T23279] ? __fget_files+0x215/0x3d0 [ 1081.037428][T23279] ? __fget_files+0x215/0x3d0 [ 1081.038995][T23279] ? __fget_files+0x21f/0x3d0 [ 1081.040534][T23279] ksys_read+0x12a/0x250 [ 1081.041876][T23279] ? __pfx_ksys_read+0x10/0x10 [ 1081.043505][T23279] __do_fast_syscall_32+0xe7/0x970 [ 1081.045132][T23279] ? lockdep_hardirqs_on+0x78/0x100 [ 1081.046781][T23279] do_fast_syscall_32+0x32/0x70 [ 1081.048355][T23279] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1081.050510][T23279] RIP: 0023:0xf708efec [ 1081.051767][T23279] Code: Unable to access opcode bytes at 0xf708efc2. [ 1081.053791][T23279] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 1081.056303][T23279] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080002c00 [ 1081.058855][T23279] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 1081.061324][T23279] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1081.063787][T23279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1081.066171][T23279] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1081.068643][T23279] [ 1081.070510][T23279] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1081.072790][T23279] CPU: 2 UID: 0 PID: 23279 Comm: syz.3.3964 Tainted: G L syzkaller #0 PREEMPT(full) [ 1081.076172][T23279] Tainted: [L]=SOFTLOCKUP [ 1081.077838][T23279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1081.081109][T23279] Call Trace: [ 1081.082171][T23279] [ 1081.083111][T23279] dump_stack_lvl+0x100/0x190 [ 1081.084613][T23279] vpanic+0x552/0x970 [ 1081.085882][T23279] ? __pfx_vpanic+0x10/0x10 [ 1081.087345][T23279] panic+0xd1/0xe0 [ 1081.088569][T23279] ? __pfx_panic+0x10/0x10 [ 1081.090158][T23279] check_panic_on_warn.cold+0x19/0x34 [ 1081.091854][T23279] ? vb2_start_streaming+0x247/0x570 [ 1081.093507][T23279] __warn.cold+0x191/0x318 [ 1081.094910][T23279] __report_bug+0x30f/0x440 [ 1081.096351][T23279] ? vb2_start_streaming+0x247/0x570 [ 1081.098036][T23279] ? __pfx___report_bug+0x10/0x10 [ 1081.099614][T23279] ? do_raw_spin_lock+0x128/0x260 [ 1081.101215][T23279] ? do_raw_spin_lock+0x128/0x260 [ 1081.102804][T23279] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1081.104496][T23279] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1081.106319][T23279] ? vb2_start_streaming+0x247/0x570 [ 1081.108002][T23279] report_bug+0xb2/0x220 [ 1081.109340][T23279] ? vb2_start_streaming+0x247/0x570 [ 1081.110992][T23279] handle_bug+0x16a/0x2a0 [ 1081.112302][T23279] exc_invalid_op+0x17/0x50 [ 1081.113697][T23279] asm_exc_invalid_op+0x1a/0x20 [ 1081.115235][T23279] RIP: 0010:vb2_start_streaming+0x247/0x570 [ 1081.117114][T23279] Code: 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 80 3c 02 00 0f 85 b5 02 00 00 48 8b 83 68 01 00 00 49 39 c4 74 0d e8 9a 35 e2 f9 90 <0f> 0b 90 eb 02 31 ed e8 8d 35 e2 f9 89 e8 48 83 c4 30 5b 5d 41 5c [ 1081.123088][T23279] RSP: 0000:ffffc90002e4fa50 EFLAGS: 00010283 [ 1081.124990][T23279] RAX: 00000000000027ef RBX: ffff88806deda770 RCX: ffffc90007779000 [ 1081.127429][T23279] RDX: 0000000000080000 RSI: ffffffff88277866 RDI: ffff8880282c2540 [ 1081.129852][T23279] RBP: 00000000ffffffed R08: 0000000000000005 R09: 0000000000000000 [ 1081.132340][T23279] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88806deda8d8 [ 1081.134807][T23279] R13: 0000000000000000 R14: ffff88806deda7d0 R15: ffff88806deda7a0 [ 1081.137291][T23279] ? vb2_start_streaming+0x246/0x570 [ 1081.138974][T23279] ? __bitmap_weight+0xd7/0x110 [ 1081.140417][T23279] vb2_core_streamon+0x26a/0x3c0 [ 1081.141882][T23279] __vb2_init_fileio+0xcb7/0x1000 [ 1081.143470][T23279] ? __pfx_vb2_vmalloc_vaddr+0x10/0x10 [ 1081.145204][T23279] __vb2_perform_fileio+0x9ba/0x1380 [ 1081.146888][T23279] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 1081.148616][T23279] ? __pfx___might_resched+0x10/0x10 [ 1081.150279][T23279] vb2_fop_read+0x211/0x520 [ 1081.151723][T23279] v4l2_read+0x229/0x2c0 [ 1081.153064][T23279] ? __pfx_v4l2_read+0x10/0x10 [ 1081.154562][T23279] vfs_read+0x1e4/0xb40 [ 1081.155887][T23279] ? __pfx_vfs_read+0x10/0x10 [ 1081.157450][T23279] ? find_held_lock+0x2b/0x80 [ 1081.158948][T23279] ? __fget_files+0x215/0x3d0 [ 1081.160415][T23279] ? __fget_files+0x215/0x3d0 [ 1081.161896][T23279] ? __fget_files+0x21f/0x3d0 [ 1081.163379][T23279] ksys_read+0x12a/0x250 [ 1081.164720][T23279] ? __pfx_ksys_read+0x10/0x10 [ 1081.166227][T23279] __do_fast_syscall_32+0xe7/0x970 [ 1081.167774][T23279] ? lockdep_hardirqs_on+0x78/0x100 [ 1081.169340][T23279] do_fast_syscall_32+0x32/0x70 [ 1081.170870][T23279] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1081.172849][T23279] RIP: 0023:0xf708efec [ 1081.174144][T23279] Code: Unable to access opcode bytes at 0xf708efc2. [ 1081.176208][T23279] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 1081.178841][T23279] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080002c00 [ 1081.181315][T23279] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 1081.183772][T23279] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1081.186219][T23279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1081.188604][T23279] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1081.191029][T23279] [ 1081.192618][T23279] Kernel Offset: disabled [ 1081.193974][T23279] Rebooting in 86400 seconds..