last executing test programs: 1m14.5134981s ago: executing program 0 (id=112): capset(&(0x7f0000000000)={0x19980330}, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r0, 0x40045431, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) write(r2, &(0x7f0000000080)='/dev/mapper/control', 0x13) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020300091800000000000000000000000400030000000000000000000000000000000000000000000000000000000000050006003c0000000a0000000000fffffc0100000000000000000000000000000000000000000000010004"], 0xc0}}, 0x0) lseek(r2, 0x0, 0x0) read(r2, &(0x7f0000000100), 0x14) openat(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r5, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x12}, @void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6gretap0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x37a5ba0f6d162953) fsopen(&(0x7f00000000c0)='tracefs\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) getpid() r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r6, &(0x7f0000000340)=""/19, 0x13, 0x0) 1m14.441808749s ago: executing program 0 (id=113): socket$netlink(0x10, 0x3, 0x8) mount(0x0, &(0x7f0000000b00)='./sys\x00', &(0x7f0000000b10)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/class/iscsi_transport/iser/handle\x00', 0x0, 0x0) read(r0, &(0x7f0000000700), 0x64) 1m14.373012231s ago: executing program 0 (id=114): syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x835e, 0x40, 0x0, {0x1}}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffa, 0x9, 0x0, 0x0) 1m14.372626321s ago: executing program 0 (id=115): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x3f, 0x9, 0x0) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0xffffffffffffff24, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e23, 0x1, @remote, 0x5}, @in={0x2, 0x4e21, @multicast2}}}, 0x118) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000041}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000005c0)="a0", 0x0, 0x5, 0x1000000}, 0x4c) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 1m14.299514967s ago: executing program 0 (id=117): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 1m14.043430353s ago: executing program 0 (id=119): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4004743b, &(0x7f0000001200)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r5) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044051}, 0x40810) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc8", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x7f, 0x2d7, 0x7d, 0x8000000000000000, 0x5, 0x0, 0x9, 0x4b0c, 0x2, 0x2, 0x8d], 0xeeee8000, 0x201e87}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x30c, 0x148, 0x111, 0x4b4, 0x0, 0x700, 0x244, 0x278, 0x278, 0x244, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [0xfe000100, 0xff, 0xff000000, 0xff], 'vlan0\x00', 'vlan1\x00', {}, {}, 0x88, 0x0, 0x0, 0x1a}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x4, [0xfffd, 0x0, 0x0, 0x0, 0x0, 0x4e23, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x4e23], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfd, 0x0, 0x0, 0x0, 0x1], 0x1}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x2, 0x5}, {0xffffffffffffffff, 0x2, 0x1}, 0x0, 0x9}}}, {{@uncond, 0x0, 0xdc, 0xfc, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0xfffffffc}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x368) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003ac0)={&(0x7f0000000380)={0x5c, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x6a}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x98}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x402}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x488}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x810}]}, @CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008484}, 0x40010) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1m13.955170789s ago: executing program 32 (id=119): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4004743b, &(0x7f0000001200)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r5) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044051}, 0x40810) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc8", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x7f, 0x2d7, 0x7d, 0x8000000000000000, 0x5, 0x0, 0x9, 0x4b0c, 0x2, 0x2, 0x8d], 0xeeee8000, 0x201e87}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x30c, 0x148, 0x111, 0x4b4, 0x0, 0x700, 0x244, 0x278, 0x278, 0x244, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [0xfe000100, 0xff, 0xff000000, 0xff], 'vlan0\x00', 'vlan1\x00', {}, {}, 0x88, 0x0, 0x0, 0x1a}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x4, [0xfffd, 0x0, 0x0, 0x0, 0x0, 0x4e23, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x4e23], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfd, 0x0, 0x0, 0x0, 0x1], 0x1}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x2, 0x5}, {0xffffffffffffffff, 0x2, 0x1}, 0x0, 0x9}}}, {{@uncond, 0x0, 0xdc, 0xfc, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0xfffffffc}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x368) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003ac0)={&(0x7f0000000380)={0x5c, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x6a}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x98}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x402}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x488}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x810}]}, @CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008484}, 0x40010) ioctl$KVM_RUN(r8, 0xae80, 0x0) 5.04120729s ago: executing program 2 (id=575): socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) socket(0x2b, 0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000c80)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r1, 0x1) close(0x4) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x4fed0) socket$inet_sctp(0x2, 0x4, 0x84) lseek(r0, 0x2d33, 0x3) 4.834102795s ago: executing program 2 (id=576): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d000000000000000000000008510000006", @ANYRES32, @ANYBLOB="00000000000000007608000000c00000"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x44, r4, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 4.370910548s ago: executing program 2 (id=580): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) bind$packet(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x70e, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f00000049c0)=[{&(0x7f0000003980)="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", 0x1000}, {&(0x7f0000004980)}], 0x2, &(0x7f0000004a00)=[@rthdrdstopts={{0x34, 0x29, 0x37, {0x62, 0x3, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}}}, @rthdr={{0x74, 0x29, 0x39, {0x3a, 0xc, 0x1, 0x7, 0x0, [@empty, @dev={0xfe, 0x80, '\x00', 0x24}, @remote, @private2, @loopback, @private0]}}}, @hopopts_2292={{0xbc, 0x29, 0x36, {0x3, 0x14, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @ra={0x5, 0x2, 0xe1}, @generic={0x4, 0x35, "35da77d4bd9a33857d5d9edf98e2d81994430eaa761e6abd479087ccc4e0f8fbe76417c9dfd9fa8ae6d32f1f55704d32a51de137ea"}, @enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x28, {0x3, 0x8, 0xc, 0xb7, [0x1ff, 0x4, 0x8001, 0xffff]}}]}}}, @dstopts={{0x24, 0x29, 0x37, {0x62, 0x1, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@loopback, r1}}}, @hoplimit={{0x10, 0x29, 0x34, 0x6}}, @rthdrdstopts={{0x2c, 0x29, 0x37, {0x3b, 0x2, '\x00', [@pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x14}}]}}}], 0x1e4}}, {{&(0x7f0000004c00)={0xa, 0x4e23, 0x2, @private0, 0x8}, 0x1c, &(0x7f0000004d00)=[{&(0x7f0000004c40)="6822690d9483dd23e99e070eed10df700ae3ad102fc9839aa37b2788c3f0992ebe5516dbaa0eee891010a17774c5f9ae2b64a280442ee45b8178d14b876ad45966148155627068fc79a749492dcfa14c77106fcb6c2013c6260a57eae914c7767fbf9610a8352890a02e001266748b06ffdf35c1993227842cb4b9ea73f846d1116baaff1c22255480446614b540c52a0c9564109f774472796a12beea7c43f6af470748", 0xa4}], 0x1, &(0x7f0000004d40)=[@flowinfo={{0x10, 0x29, 0xb, 0x6}}, @dstopts={{0x1c, 0x29, 0x37, {0x2, 0x0, '\x00', [@pad1]}}}, @hoplimit={{0x10, 0x29, 0x34, 0xabe9}}], 0x3c}}, {{&(0x7f0000004d80)={0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffca}, 0x1c, &(0x7f0000005140)=[{&(0x7f0000004dc0)="b8aa93bcd12713ce28adc4bc7578a41280295bd42fd30412163bb84d87664f0cae9d67562b7ff9466f6a1c5474396ccc8bb77b2d1c83a71eaf0356e045", 0x3d}, {&(0x7f0000004e00)="dae5cfd15a6e6db2e5874877e73694f234666a0c1684d54dc5d58dfeafb0b33cde27f4cc02950c4dc704d4c0288e881eb0ea4bf27350d6cf1ea6c0be69702033b9a0e6f16bcbb22eb789bad3fd50d49c5daee4f3999fc9494affde0702cd8e86c17a91d05445c6c7a184e9257c1ec7bd2275b1919f27d22fa998b2a1da03a0655338fbd21a5ecadba7a2a8a4f6ced4e57de1bfac0c4a1413abf2e3834d2d4fe5770eb27ce558bbd68eb6b1e2921919be0cbf32a80c3ee6363e02b87f641716b74e567d1a7154ce2ecce3a6cfb9b031126d791f751184ed", 0xd7}, {&(0x7f0000004f00)="a1ad3fb9546c080fca4e1a518d2a9bd9093ff0b08020dc39530e3f512027ea89ea2ce0666e18b819014b752499c9a4edb789352c78e70fe6afcd96e8631d1e6a7cb00608f7fd17fbf43c", 0x4a}, {&(0x7f0000004f80)="6207c61c0a730c8a187ede298cba76e9add5beb2106590b0f12b446e29165deedede0bb69f2f7354ce43e86a6a8c0e46dab67b795302bba5eb7808bcd27caaaf6ac0bfc5d7b62e31310706a8762bd5be981328eebe7ee233491285e5198d18ce1c78d76754ee52140f31c0590f98406921c590b76f1b758e6bf52517e73cad79152512666f894d0c84a71041da00110c75c101aef8b4a384c4be28e157fc8c824c4af4437daa71ac7ac7eecdc18deabfe0ecb660eac668f8385a45c8cf579fb281e2bd00ec240a9b1f10da7e049f33", 0xcf}, {&(0x7f0000005080)="b1a74261b4d5db3bba66b9faebaa4fb04b9890f56510a6b39ba0be538e5440fac9892e2ca1693091a3a280f5a9b78bcae226f128aa1a772773cf24100e12e59dc013a470c31938b6e634540cb4bc5817f112274a", 0x54}, {&(0x7f0000005100)="a9a6728aadbd7b9ee135ebfcbd764b2eb313bac5d8f9c12b61fff3618a96adda52e215d25652f775404dbd7488696a1058fbd2ab0b3823859ce7e917", 0x3c}], 0x6, &(0x7f0000005180)=[@flowinfo={{0x10, 0x29, 0xb, 0xa2}}], 0x10}}], 0x3, 0x4004000) recvfrom$inet6(r2, 0x0, 0x0, 0x2020, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000003880)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001500)=""/39, 0x27}, 0x1}, {{&(0x7f0000001540)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000001640)=[{&(0x7f00000015c0)=""/74, 0x4a}], 0x1, &(0x7f0000001680)=""/131, 0x83}}, {{&(0x7f0000001740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000002900)=[{&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/246, 0xf6}, {&(0x7f00000028c0)=""/36, 0x24}], 0x3, &(0x7f0000002940)=""/98, 0x62}, 0x2ad74f20}, {{&(0x7f00000029c0)=@rc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a40)=""/253, 0xfd}], 0x1, &(0x7f0000002b80)}, 0x6}, {{&(0x7f0000002bc0)=@tipc, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002c40)=""/248, 0xf8}, {&(0x7f0000002d40)=""/246, 0xf6}, {&(0x7f0000002e40)=""/47, 0x2f}], 0x3, &(0x7f0000002ec0)=""/187, 0xbb}, 0x6}, {{&(0x7f0000002f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000003240)=[{&(0x7f0000003000)=""/30, 0x1e}, {&(0x7f0000003040)=""/50, 0x32}, {&(0x7f0000003080)}, {&(0x7f00000030c0)=""/189, 0xbd}, {&(0x7f0000003180)=""/152, 0x98}], 0x5, &(0x7f0000003280)=""/203, 0xcb}, 0x5}, {{&(0x7f0000003380)=@caif=@util, 0x80, &(0x7f0000003580)=[{&(0x7f0000003400)=""/20, 0x14}, {&(0x7f0000003440)=""/48, 0x30}, {&(0x7f0000003480)=""/201, 0xc9}], 0x3, &(0x7f00000035c0)=""/39, 0x27}, 0x5}, {{&(0x7f0000003600)=@pppoe, 0x80, &(0x7f0000003740)=[{&(0x7f0000003680)=""/140, 0x8c}], 0x1, &(0x7f0000003780)=""/212, 0xd4}, 0x7}], 0x8, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000280)) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0xf, 0xd0, 0x2, 0x5, 0x100, 0x3, 0x20000000, 0x8, 0xb, 0x0, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x0, 0x8, 0xfe9, 0x401, 0x7, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a77, 0x5, 0x7, 0x8]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="be888735871e946ae0aa91ec27f2a36abf74a823a75abbaecd3a7c2e2ef88c9d816fe707df9dc4dea59a4d8ae4a2cddb8cc6448b524579780b3f2eb4c8509e36f1f9ddbd609ff72f8ea9d423c4ed7d0383bc4ec353af5c630b5c3d87267330c837d972869dec96d5454f16dc5b7481ac496de252762051bf8a8cd4e4564fd75aab57ee5d82ac472f22ea88d74d0c46d318ea90370000", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r5], 0x50) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x401, r6, 0x0, 0xa002a0}, 0x38) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000a0000000900020073797a31000000000500010007000000050005000a0010001400078008001240fffffffa08000b4000000401050004000000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x8800) 3.810190153s ago: executing program 3 (id=585): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x6, 0x2, 0x2, 0x7}, {0x9, 0x8, 0xf, 0xfffffffc}, {0x7, 0x4, 0x2}]}) (async) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$vga_arbiter(r3, &(0x7f0000000600)=@other={'unlock', ' ', 'none'}, 0xc) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='0000:00:1d.0', 0xc) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, 0x0, 0x8400) (async) close(r4) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/uhci_hcd/bind\x00', 0x1, 0x0) (async) fchdir(r4) write(r6, &(0x7f00000001c0)='0000:00:1d.0', 0xc) (async) close(r6) (async) preadv(r1, &(0x7f0000001d40)=[{&(0x7f0000000280)=""/161, 0xa1}, {&(0x7f0000000340)=""/230, 0xe6}, {&(0x7f0000000440)=""/205, 0xcd}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/58, 0x3a}, {&(0x7f0000001c40)=""/171, 0xab}, {&(0x7f0000001d00)=""/48, 0x30}], 0x7, 0x4f5f, 0x8000) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007800800050000000000080006000000000008000600db"], 0xd0}, 0x1, 0x0, 0x0, 0xb51fe8ad78ecd414}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061196400000000009501000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) 3.12200621s ago: executing program 2 (id=588): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d000000000000000000000008510000006", @ANYRES32, @ANYBLOB="00000000000000007608000000c00000"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x44, r4, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 2.704992805s ago: executing program 1 (id=589): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000003600)={0x0, 0x0, &(0x7f0000002540)="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", &(0x7f0000003540), 0x200, r0}, 0x38) 2.641099689s ago: executing program 1 (id=590): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x0, 0xfffe, 0x2, 0x0, 0x0, 0x32}}, [@migrate={0x50, 0x11, [{@in6=@loopback, @in=@multicast2, @in=@private=0xa0100ff, @in6=@local, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.640092214s ago: executing program 3 (id=592): syz_open_dev$ttys(0xc, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = socket$rxrpc(0x21, 0x2, 0xa) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000007c0)=[{&(0x7f0000001a00)="ce", 0x1}], 0x1, 0x1) splice(r1, 0x0, r0, 0x0, 0x100000066, 0x5) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r3, &(0x7f0000000700)='\x00'/27, 0x1b) 2.639456604s ago: executing program 2 (id=593): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x540b, 0x2) write$khugepaged_scan(r0, &(0x7f0000000040), 0x8) syz_ublk_setup_io_uring(0x6c34, &(0x7f0000000480)={0x0, 0x99ed, 0x8, 0x2, 0x26c}, &(0x7f0000000500), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x879d, 0x1000, 0x3, 0x11c}, &(0x7f00000006c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3757, 0x8, 0x0, 0x339}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1eac, 0x100, 0x2, 0xd3}, 0xffffffffffffffff, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf71f, 0x4, 0xffff, 0x2fe}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2f5f, 0x200, 0x0, 0x1df}}], 0x4, &(0x7f0000001940)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xfff}, 0x0, 0x0, '\x00', {0x3, 0xa6d, 0x0, &(0x7f0000000940)=@buf_max_buf="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"}}, &(0x7f00000019c0)) r4 = openat$nci(0xffffff9c, &(0x7f0000001a00), 0x2, 0x0) syz_io_uring_submit(0x0, r2, r3, &(0x7f0000001d80)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x4000, @fd=r4, 0x2, &(0x7f0000001c80)=[{&(0x7f0000001a40)="cb04c89aaadddf8539a294708541ed11f1272311bbc69b388cfd9a57274e31f7711321f4534c1e5c8ba736fe849ddda395a098e7d162e6b92bb913b1d7eab47189b828fd242b173c2e99531fccf89f87adc4f786631d5a2de5c6daf19224a19789823c3b6964b3b63ee48d7af777d88f0b0f24587bdae5c7350b4eda40ee8f199c8e4f944cc1f146dc0e4f94aa1b92ba8acf19de2aac72e676f4cd0a82f04776e3a903c9e779132c0ea4d86870843784b5acda1490a9457acbf21f2091b2a2", 0xbf}, {&(0x7f0000001b00)="55d1d2deaab563c11a8630c6177af679ee9d841929018dd63987b175cc1d24dd8c44118f3a72b4490e01b3fa9d5198d4cd432f206c3925948ec901f06becce8f57689d32c63d2f8fab183a2f62cf447598801f3430372d722ea15f8f0d3697a5f5103e181bb7aee358c9ea5403d0a814867d6c9091782415c967f4c12631b9736865b27cb8c64545359ff5d91745b83a7aa23bc2d9c362ad722ff726ff", 0x9d}, {&(0x7f0000001bc0)="083b83e6983f69088ce2cb46d4dd97028b5a65a7a62e3861b66cf480f48f1f4913f3c1560efe1e8af0e9c246063a01d1be313517ed60e2dfa6ffa1fccbe8869ede0fff999c235025cc0f9848902526f64a065055170c3e9ad61e748125ec6dc6265c85b1929f78a3019afa68c9a265b491ea5778cdf83f97078a1d8821356d7130fa2fae7bcdad199d31027070c950274d16e3b2123ffc534a144dd8492fd58dbed490f9fd886837b9ca5ff5171c3e", 0xaf}], 0x3, 0x5, 0x0, {0x3, 0x0, 0x78, '\x00', &(0x7f0000001d40)={0x5, 0xd, 0x56, &(0x7f0000001cc0)="df54394b257489391729fb4cb91d5251dc30ee37eb286698e34981d425801b471266f71ef871e538f01667c0c4021e1f253d0460b430fc3e45f0b9f6dfa6830332d56e5f3b09d2248a30b730e455a8103ab7313cc8d4", 0x7}, 0x7}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x2000090, &(0x7f00000006c0)=ANY=[]) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) mount$fuse(0x0, 0x0, 0x0, 0x820810, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r8, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) 2.555723206s ago: executing program 3 (id=594): open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) r0 = openat$fb1(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x280, 0x78, 0x3f, 0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x200, 0x3}) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000010029078ac1e0001e000000111009078e0000001144a1ba2"], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r2, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) keyctl$dh_compute(0x17, &(0x7f0000005a00), 0x0, 0x0, &(0x7f0000005b40)={0x0, &(0x7f0000005ac0)="d6a3b6a74051d6cb0fc7563c6c8345c044f9b3eeba0ae82752b732becc025f5cb4a2e5c8f9b477d549734c9e135368ff1937512cccd2f59e1a274543f16e0e972a", 0x41}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) 2.552490505s ago: executing program 1 (id=602): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x0, 0xfffe, 0x2, 0x0, 0x0, 0x32}}, [@migrate={0x50, 0x11, [{@in6=@loopback, @in=@multicast2, @in=@private=0xa0100ff, @in6=@local, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.040780394s ago: executing program 1 (id=595): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xb5001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/machinecheck/machinecheck0/bank1\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req={0x5, 0x200, 0x7ff, 0xb}, 0x5f) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0x20000, 0x100) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x471, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x1, 0x158}, &(0x7f0000000780), &(0x7f0000000280), 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r2, 0x2007ffb) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) 1.177411431s ago: executing program 1 (id=596): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x8, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xfff2, 0xffff}, {0xffe0, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000805}, 0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r3, 0x4b47, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@deltfilter={0x60, 0x2d, 0x20, 0x70bd2f, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff3, 0x1}, {0x1, 0x1}, {0xf, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @local}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x3}}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6f, 0x81}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x4000840) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRES64=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x1000, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRESDEC=r6], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xf, &(0x7f0000000140)={0xc, 0x8e}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r8, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r8, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) unshare(0x22020400) fcntl$lock(r8, 0x5, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @tid=r7}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000003c0)={0x0, 0x0, 0x60d3, 0x5, r7}) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r9 = socket(0x25, 0x800, 0xfffffffe) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x4e20, 0x800006, @loopback, 0x4}, 0x1c) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 1.123140814s ago: executing program 2 (id=597): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x1f, &(0x7f00000005c0)=""/4096, &(0x7f0000000180)=0x1000) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r5, r5, 0xd, 0x7, &(0x7f0000000400)="c20b1e67cf6f74", 0xb, 0x1, 0x10cf, 0x5505, 0x8b, 0x1, 0x9, 'syz1\x00'}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000)) syz_usbip_server_init(0x6) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) 1.11446594s ago: executing program 3 (id=598): socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x7}, @nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x909801}, @isdn={0x22, 0x2, 0x7, 0x2}, 0xa55c, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='nicvf0\x00', 0x7, 0x4, 0x3}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = open(0x0, 0x14927e, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$apparmor_thread_current(0xffffff9c, &(0x7f00000004c0), 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r4, 0x107, 0x16, 0x0, 0x0) write$apparmor_current(r3, &(0x7f0000000280)=@hat={'permhat ', 0x0, 0x5e, ['+\x00']}, 0x1d) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xe}, @l2cap_cid_le_signaling={{0xa}, @l2cap_ecred_reconf_req={{0x19, 0x3, 0x6}, {0xffbd, 0xff46, [0x7]}}}}, 0x13) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001a00010026bd70000400000002000000000000000000000014000500fc01000000000000000000000000000053d6ca62a5a769c1b0b42f46081004a56e7d08047061646ba9c86da395c242677aca"], 0x30}}, 0x0) copy_file_range(r1, 0x0, r1, 0x0, 0x1, 0x0) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x4, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000004dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000001e40)="cfc3e5565974f4c8ee8a6f23849be222abca290f9f6dfad35e65fb33340f419288622c431de4990ad9a9a9307e4f25786c4ba9638cbf28c7289a4ce5361db86d68cf406ed5ae8249fdda70317e1b4cb2b6ff3ad5fbf65c9c745a54bdab69c1ed3d54e14ebc9f11ebb939f75d21fba6d70957758217b07357cae1d6c90e7753c6e25111e7aa8e0c59beaee611f337a24f3138fda9745d583dff4e3e4a43", 0x9d}, {0x0}], 0x2}}], 0x2, 0x240048c4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './config\x00'}) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000140)={0x2f20, 0x320, 0x0, 0xa0, 0x81, 0x6e7f, 0xf, 0x0, {0x4, 0x6}, {0x7fff, 0xa, 0x1}, {0x3, 0x5}, {0x5, 0x2, 0x1}, 0x2, 0x0, 0x300000, 0x40, 0x0, 0x8, 0x9, 0xff, 0xb, 0xc, 0xfffffffb, 0x101, 0x8, 0x300, 0x2, 0x5}) openat2(r6, &(0x7f00000000c0)='./config\x00', &(0x7f0000000240)={0x40, 0x23, 0x4}, 0x18) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r8, 0x6, 0x21, 0x0, &(0x7f0000000100)) write(r7, &(0x7f0000001600)='dummy_udc.0', 0xb) 1.112889038s ago: executing program 4 (id=605): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='secret\x00', &(0x7f0000000100)='AqAAAAAAAAAAAAAAABAAA+AAAAAAAAAACAAAAA==\x00', 0x0) 1.052389165s ago: executing program 4 (id=599): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000003600)={0x0, 0x0, &(0x7f0000002540)="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", &(0x7f0000003540), 0x200, r0}, 0x38) 936.289889ms ago: executing program 3 (id=600): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x500}}], 0x40000cf, 0x0) 929.782718ms ago: executing program 4 (id=610): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="3400000043000701fefffffffcdbdf25027c0000180045801400040007000000000000001f000000000000aa080001"], 0x34}}, 0x2004c000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x0, 0xfffe, 0x2, 0x0, 0x0, 0x32}}, [@migrate={0x50, 0x11, [{@in6=@loopback, @in=@multicast2, @in=@private=0xa0100ff, @in6=@local, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 874.106199ms ago: executing program 3 (id=601): open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) r0 = openat$fb1(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x280, 0x78, 0x3f, 0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x200, 0x3}) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000010029078ac1e0001e000000111009078e0000001144a1ba2"], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r2, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) keyctl$dh_compute(0x17, &(0x7f0000005a00), 0x0, 0x0, &(0x7f0000005b40)={0x0, &(0x7f0000005ac0)="d6a3b6a74051d6cb0fc7563c6c8345c044f9b3eeba0ae82752b732becc025f5cb4a2e5c8f9b477d549734c9e135368ff1937512cccd2f59e1a274543f16e0e972a", 0x41}) shutdown(r2, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) 801.917708ms ago: executing program 4 (id=603): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0x3}, @mss={0x2, 0x4, 0x6}, @generic={0x22, 0x8, "d58838000391"}]}}}}}}, 0x46) io_uring_enter(0xffffffffffffffff, 0xfffffd, 0x7068, 0x45, 0x0, 0x0) 517.426286ms ago: executing program 4 (id=604): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000440)="000000000000b4abd804b2800b0000000000000000007fffffff000000000000577b", 0x22) 222.065362ms ago: executing program 4 (id=606): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xb5001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/machinecheck/machinecheck0/bank1\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req={0x5, 0x200, 0x7ff, 0xb}, 0x5f) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0x20000, 0x100) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2f, 0x0, 0x0, 0x0, 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x4c) syz_open_dev$MSR(&(0x7f00000000c0), 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x471, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x1, 0x158}, &(0x7f0000000780), &(0x7f0000000280), 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r3, 0x2007ffb) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) 0s ago: executing program 1 (id=607): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x81, 0xffffffff}) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) (async) syz_clone(0x2200011, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xf) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000700)=[{&(0x7f00000003c0)="fa6081b70d9b179e14c961c5cb", 0xd}, {&(0x7f0000000400)="0fec6e06837da96b6ac64f37aecdc7355f1d2797ad065cd49a61cea507b025337846e1694899fd1d847e81ffcf3689", 0x2f}, {&(0x7f0000000480)="cd3f94b91fe3709875499c48c53f5afb979a5554063b2c202682733926085419f8", 0x21}, {&(0x7f0000000600)="275940c0abd2d1c75f064411f0671bb5c7085f4108444cfe0cf019dbd696e598b5cc9f467741c862f2e72009f04353d9a59b8feb707492e205a00ca46c1490e873d5963bff395150d403a599752e6eb8c7a951291153592ac8fa52c658e0c0ee52d86674", 0x64}, {&(0x7f0000000680)="a6be53ab26a0a9fb5bb7c28f20b3aa661bc4116e24297bdc2b49d9a2fbd34d744a0ad260", 0x24}], 0x5) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) (async) socket$nl_route(0x10, 0x3, 0x0) (async) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mkdirat(r2, &(0x7f00000006c0)='./file2\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) mount$9p_rdma(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x84, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYRES64=r2, @ANYRES32=0x0, @ANYRES32=r0], 0x30}}, 0x40040) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in={{0x2, 0x4e24, @multicast2}}, 0x2, 0x2, 0x3, 0xffffffff, 0x5, 0x8, 0x4}, 0x9c) (async) socket(0x10, 0x803, 0x0) kernel console output (not intermixed with test programs): Product=0, SerialNumber=0 [ 53.557281][ T9] usb 7-1: config 0 descriptor?? [ 53.836527][ T5928] bond1: Removing last ns target with arp_interval on [ 53.892738][ T9] ath6kl: Failed to submit usb control message: -71 [ 53.903368][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 53.907966][ T9] ath6kl: Unable to send get target info: -71 [ 53.914574][ T9] ath6kl: Failed to init ath6kl core: -71 [ 53.919356][ T9] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 53.935844][ T9] usb 7-1: USB disconnect, device number 2 [ 54.166653][ T5759] Bluetooth: hci2: command tx timeout [ 54.166897][ T5753] Bluetooth: hci0: command tx timeout [ 54.177569][ T5753] Bluetooth: hci3: command tx timeout [ 54.177634][ T5759] Bluetooth: hci1: command tx timeout [ 54.757112][ T5957] input: syz0 as /devices/virtual/input/input5 [ 55.680900][ T5965] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 55.683094][ T5965] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 55.688765][ T5965] vhci_hcd vhci_hcd.0: Device attached [ 56.246213][ T5753] Bluetooth: hci3: command tx timeout [ 56.248417][ T5753] Bluetooth: hci1: command tx timeout [ 56.250668][ T5753] Bluetooth: hci0: command tx timeout [ 56.252833][ T5753] Bluetooth: hci2: command tx timeout [ 57.141305][ T42] audit: type=1326 audit(1785965607.332:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.1.22" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 57.150312][ T42] audit: type=1326 audit(1785965607.332:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.1.22" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 57.158190][ T42] audit: type=1326 audit(1785965607.342:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.1.22" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 57.168646][ T42] audit: type=1326 audit(1785965607.342:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.1.22" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 57.175316][ T42] audit: type=1326 audit(1785965607.342:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.1.22" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 57.183205][ T42] audit: type=1326 audit(1785965607.342:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.1.22" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 57.190020][ T42] audit: type=1326 audit(1785965607.342:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.1.22" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 57.197863][ T42] audit: type=1326 audit(1785965607.352:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.1.22" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 57.216591][ T42] audit: type=1326 audit(1785965607.352:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.1.22" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 57.228735][ T42] audit: type=1326 audit(1785965607.352:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.1.22" exe="/syz-executor" sig=0 arch=40000003 syscall=57 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 57.372242][ T5986] comedi comedi0: no devices specified [ 57.615286][ T5987] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 57.617570][ T5987] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 57.647755][ T5987] vhci_hcd vhci_hcd.0: Device attached [ 57.936581][ T5830] usb 42-1: SetAddress Request (2) to port 0 [ 57.942993][ T5830] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 58.149619][ T5987] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 58.250016][ T6007] binder: BINDER_SET_CONTEXT_MGR already set [ 58.255253][ T6007] binder: 6005:6007 ioctl 4018620d 80004a80 returned -16 [ 58.265851][ T6007] binder: 6005:6007 ioctl c0306201 80004a40 returned -22 [ 58.326212][ T5102] Bluetooth: hci2: command 0x0405 tx timeout [ 58.426694][ T34] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 58.485726][ T5993] vhci_hcd: connection reset by peer [ 58.489281][ T5800] vhci_hcd vhci_hcd.2: stop threads [ 58.491011][ T5800] vhci_hcd vhci_hcd.2: release socket [ 58.492788][ T5800] vhci_hcd vhci_hcd.2: disconnect device [ 58.577780][ T34] usb 6-1: config 0 has no interfaces? [ 58.579318][ T6013] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 58.581431][ T34] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 58.587813][ T34] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 58.591692][ T34] usb 6-1: Product: syz [ 58.593118][ T34] usb 6-1: Manufacturer: syz [ 58.595943][ T34] usb 6-1: SerialNumber: syz [ 58.603157][ T34] usb 6-1: config 0 descriptor?? [ 58.822348][ T34] usb 6-1: USB disconnect, device number 2 [ 59.033689][ T5967] vhci_hcd: connection reset by peer [ 59.037350][ T5800] vhci_hcd vhci_hcd.0: stop threads [ 59.039709][ T5800] vhci_hcd vhci_hcd.0: release socket [ 59.042716][ T5750] usb 38-1: device descriptor read/8, error -110 [ 59.043483][ T5800] vhci_hcd vhci_hcd.0: disconnect device [ 59.157672][ T6030] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 59.159774][ T6030] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 59.176296][ T6030] vhci_hcd vhci_hcd.0: Device attached [ 59.281908][ T6035] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 59.282005][ T6035] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 59.296186][ T6035] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 59.302337][ T6035] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 59.302375][ T6035] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 59.303031][ T6035] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 59.304629][ T6035] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 59.304780][ T6035] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 59.305436][ T6035] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 59.307215][ T6035] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 59.307247][ T6035] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 59.310339][ T6035] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 59.436723][ T5750] usb usb38-port1: attempt power cycle [ 59.456756][ T5947] usb 44-1: SetAddress Request (2) to port 0 [ 59.456807][ T5947] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 59.504654][ T6044] syzkaller0: entered promiscuous mode [ 59.504680][ T6044] syzkaller0: entered allmulticast mode [ 59.682082][ T6048] bridge_slave_0: default FDB implementation only supports local addresses [ 60.007347][ T5750] usb usb38-port1: unable to enumerate USB device [ 60.077277][ T6031] vhci_hcd: connection reset by peer [ 60.079854][ T13] vhci_hcd vhci_hcd.3: stop threads [ 60.081587][ T13] vhci_hcd vhci_hcd.3: release socket [ 60.083451][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 60.216315][ T6057] binder: 6056:6057 ioctl c0306201 0 returned -14 [ 60.236984][ T6057] binder: 6056:6057 ioctl c0306201 80004a40 returned -22 [ 61.296209][ T5759] Bluetooth: hci0: command 0x0c1a tx timeout [ 61.376668][ T5753] Bluetooth: hci3: command 0x0c1a tx timeout [ 61.379355][ T5753] Bluetooth: hci1: command 0x0c1a tx timeout [ 61.382118][ T5759] Bluetooth: hci2: command 0x0405 tx timeout [ 61.383739][ T6069] netlink: 92 bytes leftover after parsing attributes in process `syz.1.45'. [ 62.024653][ T6078] syz_tun: entered allmulticast mode [ 62.036414][ T6083] netlink: 352 bytes leftover after parsing attributes in process `syz.1.50'. [ 62.082543][ T6085] binder: 6084:6085 ioctl c0306201 0 returned -14 [ 62.089056][ T6085] binder: 6084:6085 ioctl c0306201 80004a40 returned -22 [ 62.125908][ T6089] netlink: 3 bytes leftover after parsing attributes in process `syz.1.53'. [ 62.147732][ T6079] syz_tun: left allmulticast mode [ 62.259138][ T6098] Zero length message leads to an empty skb [ 62.485615][ T6106] program syz.1.59 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.494686][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 62.494699][ T42] audit: type=1400 audit(1785965612.682:26): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6092 comm="syz.0.54" [ 62.622560][ T6111] binder: 6110:6111 ioctl c0306201 0 returned -14 [ 62.624587][ T6111] binder: 6110:6111 ioctl c0306201 80004a40 returned -22 [ 62.658076][ T6113] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 62.664122][ T6113] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 62.668846][ T6113] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 63.366215][ T5102] Bluetooth: hci0: command 0x0c1a tx timeout [ 63.447339][ T5102] Bluetooth: hci2: command 0x0405 tx timeout [ 63.449335][ T5102] Bluetooth: hci1: command 0x0c1a tx timeout [ 63.451248][ T5759] Bluetooth: hci3: command 0x0c1a tx timeout [ 63.621039][ T5830] usb 42-1: device descriptor read/8, error -110 [ 63.944274][ T6142] binder: BINDER_SET_CONTEXT_MGR already set [ 63.946617][ T6142] binder: 6140:6142 ioctl 4018620d 80004a80 returned -16 [ 63.952656][ T6142] binder: 6140:6142 ioctl c0306201 80004a40 returned -22 [ 64.174986][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.72'. [ 64.237863][ T5830] usb usb42-port1: attempt power cycle [ 64.351243][ T6152] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.367744][ T6152] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.376215][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 64.496269][ T5947] usb 44-1: device descriptor read/8, error -110 [ 64.526325][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 64.530627][ T9] usb 7-1: config 0 has an invalid descriptor of length 103, skipping remainder of the config [ 64.534811][ T9] usb 7-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 64.547042][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 64.549273][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 64.553222][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.559541][ T9] usb 7-1: config 0 descriptor?? [ 64.579765][ T9] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 64.817915][ T5830] usb usb42-port1: unable to enumerate USB device [ 64.918793][ T5947] usb usb44-port1: attempt power cycle [ 64.947712][ T6169] binder: 6168:6169 ioctl c0306201 80000040 returned -14 [ 64.952410][ T6169] ======================================================= [ 64.952410][ T6169] WARNING: The mand mount option has been deprecated and [ 64.952410][ T6169] and is ignored by this kernel. Remove the mand [ 64.952410][ T6169] option from the mount to silence this warning. [ 64.952410][ T6169] ======================================================= [ 65.005426][ T6174] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 65.007533][ T6174] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 65.011565][ T6174] vhci_hcd vhci_hcd.0: Device attached [ 65.033393][ T6174] netlink: 'syz.1.83': attribute type 49 has an invalid length. [ 65.094523][ T6174] ip6gretap0: entered promiscuous mode [ 65.096657][ T6174] ip6gretap0: entered allmulticast mode [ 65.109356][ T6176] vhci_hcd: connection closed [ 65.110288][ T5800] vhci_hcd vhci_hcd.1: stop threads [ 65.114308][ T5800] vhci_hcd vhci_hcd.1: release socket [ 65.116543][ T5800] vhci_hcd vhci_hcd.1: disconnect device [ 65.460642][ T5102] Bluetooth: hci0: command 0x0c1a tx timeout [ 65.487469][ T5947] usb usb44-port1: unable to enumerate USB device [ 65.526595][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 65.529187][ T5102] Bluetooth: hci1: command 0x0c1a tx timeout [ 65.529604][ T64] Bluetooth: hci2: command 0x0405 tx timeout [ 65.677642][ T6203] cgroup: subsys name conflicts with all [ 65.706270][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 65.803228][ T6211] netlink: 60 bytes leftover after parsing attributes in process `syz.0.87'. [ 65.863573][ T6216] capability: warning: `syz.1.88' uses 32-bit capabilities (legacy support in use) [ 65.863583][ T9] usb 8-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 65.870754][ T6214] random: crng reseeded on system resumption [ 65.874238][ T9] usb 8-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 65.874262][ T9] usb 8-1: Product: syz [ 65.874275][ T9] usb 8-1: Manufacturer: syz [ 65.921207][ T9] usb 8-1: config 0 descriptor?? [ 65.928837][ T9] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 65.935456][ T9] ftdi_sio ttyUSB0: unknown device type: 0xa446 [ 66.140495][ T64] Bluetooth: hci0: Malformed LE Event: 0x0d [ 66.330620][ T9] usb 8-1: USB disconnect, device number 2 [ 66.344278][ T9] ftdi_sio 8-1:0.0: device disconnected [ 67.074842][ T6242] 9p: Bad value for 'wfdno' [ 67.117191][ T6244] netlink: 24 bytes leftover after parsing attributes in process `syz.3.95'. [ 67.278683][ T5851] usb 7-1: USB disconnect, device number 3 [ 67.458130][ T34] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 67.542493][ T6255] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 67.546181][ T41] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 67.614197][ T64] Bluetooth: hci2: command 0x0405 tx timeout [ 67.629290][ T34] usb 8-1: device descriptor read/64, error -71 [ 67.886685][ T34] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 68.046295][ T34] usb 8-1: device descriptor read/64, error -71 [ 68.125091][ T6245] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 68.162142][ T6245] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 68.165149][ T6245] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 68.169211][ T6245] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 68.175136][ T6245] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 68.176676][ T34] usb usb8-port1: attempt power cycle [ 68.198637][ T6245] pci 0000:00:01.0: Adding to iommu group 1 [ 68.209826][ T6245] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 68.212875][ T6245] pci 0000:00:01.0: vgaarb: bridge control possible [ 68.215471][ T6245] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 68.244423][ T6245] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 68.268001][ T6245] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 68.273586][ T6245] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 68.294063][ T6245] [drm] Found bochs VGA, ID 0xb0c5. [ 68.296922][ T6245] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 68.316480][ T6245] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 68.356447][ T41] usb 6-1: Using ep0 maxpacket: 32 [ 68.388464][ T41] usb 6-1: unable to get BOS descriptor or descriptor too short [ 68.394501][ T41] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 68.399182][ T6245] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 68.404959][ T41] usb 6-1: can't read configurations, error -71 [ 68.504437][ T6266] netlink: 'syz.0.101': attribute type 3 has an invalid length. [ 68.526246][ T34] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 68.546664][ T34] usb 8-1: device descriptor read/8, error -71 [ 68.866204][ T34] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 68.887047][ T34] usb 8-1: device descriptor read/8, error -71 [ 68.895346][ T6277] vcan0: tx drop: invalid da for name 0x00feffffffffffff [ 68.996525][ T34] usb usb8-port1: unable to enumerate USB device [ 69.032105][ T6283] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 69.036688][ T6283] block device autoloading is deprecated and will be removed. [ 69.112166][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 69.233440][ T6291] warning: `syz.2.111' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 69.479551][ T41] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 69.602366][ T6304] overlayfs: failed to decode file handle (len=9, type=248, flags=0, err=-22) [ 69.647368][ T41] usb 6-1: Using ep0 maxpacket: 8 [ 69.654397][ T41] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 69.657597][ T41] usb 6-1: config 0 has no interface number 0 [ 69.659687][ T41] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 69.662954][ T41] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 69.668318][ T41] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 69.671705][ T41] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 69.678103][ T41] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 69.681021][ T41] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 69.683459][ T41] usb 6-1: Manufacturer: syz [ 69.687181][ T41] usb 6-1: config 0 descriptor?? [ 69.695756][ T41] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 69.871878][ T5800] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.926385][ T5830] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 69.962468][ T5800] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.053156][ T5102] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.062211][ T5102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.063789][ T5800] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.067031][ T5102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.073459][ T5102] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.076657][ T5830] usb 7-1: Using ep0 maxpacket: 8 [ 70.081569][ T5102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.084979][ T5830] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 70.088669][ T5830] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 70.092833][ T5830] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 70.096986][ T5830] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 70.101038][ T5830] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.106340][ T5830] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 70.110043][ T5830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.148485][ T5800] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.170834][ T5947] usb 6-1: USB disconnect, device number 4 [ 70.182946][ T5947] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 70.294222][ T5800] bridge_slave_1: left allmulticast mode [ 70.297694][ T5800] bridge_slave_1: left promiscuous mode [ 70.301956][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.311908][ T5800] bridge_slave_0: left allmulticast mode [ 70.314367][ T5800] bridge_slave_0: left promiscuous mode [ 70.318353][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.322476][ T5830] usb 7-1: usb_control_msg returned -32 [ 70.324827][ T5830] usbtmc 7-1:16.0: can't read capabilities [ 70.449421][ T5800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.456662][ T5800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.460899][ T5800] bond0 (unregistering): Released all slaves [ 70.703717][ T5453] 8021q: adding VLAN 0 to HW filter on device eth2 [ 70.750033][ T6310] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.754551][ T6310] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.758767][ T6310] bridge_slave_0: entered allmulticast mode [ 70.763679][ T6310] bridge_slave_0: entered promiscuous mode [ 70.777379][ T6310] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.779912][ T6310] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.782911][ T6310] bridge_slave_1: entered allmulticast mode [ 70.788294][ T6310] bridge_slave_1: entered promiscuous mode [ 70.792311][ T64] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 70.845521][ T6310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.850338][ T6310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.867667][ T6310] team0: Port device team_slave_0 added [ 70.872139][ T6310] team0: Port device team_slave_1 added [ 70.886180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 70.892028][ T6310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.894178][ T6310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.902715][ T6310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.907592][ T6310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.910009][ T6310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.924744][ T6310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.004987][ T5800] hsr_slave_0: left promiscuous mode [ 71.009427][ T5800] hsr_slave_1: left promiscuous mode [ 71.013162][ T5800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.016463][ T5800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.020901][ T5800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.023509][ T5800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.034538][ T6367] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 71.036673][ T6367] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 71.043105][ T6367] vhci_hcd vhci_hcd.0: Device attached [ 71.045896][ T5800] veth1_macvtap: left promiscuous mode [ 71.048509][ T5800] veth0_macvtap: left promiscuous mode [ 71.051025][ T5800] veth1_vlan: left promiscuous mode [ 71.053070][ T5800] veth0_vlan: left promiscuous mode [ 71.199817][ T5800] team0 (unregistering): Port device team_slave_1 removed [ 71.208562][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.212086][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.215208][ T5800] team0 (unregistering): Port device team_slave_0 removed [ 71.287176][ T6310] hsr_slave_0: entered promiscuous mode [ 71.290755][ T6310] hsr_slave_1: entered promiscuous mode [ 71.293147][ T6310] debugfs: 'hsr0' already exists in 'hsr' [ 71.295401][ T6310] Cannot create hsr debugfs directory [ 71.301010][ T5453] 8021q: adding VLAN 0 to HW filter on device eth3 [ 71.326188][ T61] usb 40-1: SetAddress Request (2) to port 0 [ 71.328221][ T61] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 71.639907][ T5453] 8021q: adding VLAN 0 to HW filter on device eth4 [ 71.651684][ T6368] vhci_hcd: connection reset by peer [ 71.652862][ T6310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.653796][ T12] vhci_hcd vhci_hcd.1: stop threads [ 71.658793][ T12] vhci_hcd vhci_hcd.1: release socket [ 71.660669][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 71.661629][ T6310] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.665716][ T6310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.673463][ T6310] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.679299][ T6310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.690691][ T6310] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.697638][ T6310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.703964][ T6310] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.778201][ T6310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.792217][ T6310] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.802210][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.804704][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.818243][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.820693][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.908980][ T5453] 8021q: adding VLAN 0 to HW filter on device eth5 [ 72.167805][ T64] Bluetooth: hci2: command tx timeout [ 72.213033][ T6310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.290407][ T6424] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 73.421511][ T6310] veth0_vlan: entered promiscuous mode [ 73.431926][ T6310] veth1_vlan: entered promiscuous mode [ 73.454594][ T6310] veth0_macvtap: entered promiscuous mode [ 73.465403][ T6310] veth1_macvtap: entered promiscuous mode [ 73.477274][ T6310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.489096][ T6310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.517056][ T5823] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.517138][ T5823] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.517164][ T5823] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.517183][ T5823] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.560444][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.563413][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.580821][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.583440][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.256455][ T5102] Bluetooth: hci2: command tx timeout [ 75.105265][ T42] audit: type=1400 audit(1785965625.292:27): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6468 comm="syz.1.146" [ 75.114018][ T5102] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 75.114092][ T6469] netlink: 'syz.1.146': attribute type 5 has an invalid length. [ 75.408198][ T6482] syzkaller1: entered promiscuous mode [ 75.410700][ T6482] syzkaller1: entered allmulticast mode [ 75.506215][ T6443] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 75.617327][ T6306] usbtmc 7-1:16.0: usb_control_msg returned -110 [ 75.634926][ T5892] usb 7-1: USB disconnect, device number 4 [ 75.636830][ T6487] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 75.636860][ T6487] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 75.637084][ T6487] vhci_hcd vhci_hcd.0: Device attached [ 75.665912][ T6487] netlink: 40 bytes leftover after parsing attributes in process `syz.3.153'. [ 75.675417][ T6487] netlink: 'syz.3.153': attribute type 12 has an invalid length. [ 75.676391][ T6443] usb 6-1: Using ep0 maxpacket: 8 [ 75.688828][ T6443] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.694395][ T6443] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 75.699457][ T6443] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 75.702899][ T6443] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 75.706743][ T6443] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 75.709710][ T6443] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.717847][ T6443] hub 6-1:1.0: bad descriptor, ignoring hub [ 75.723665][ T6443] hub 6-1:1.0: probe with driver hub failed with error -5 [ 75.737894][ T6443] cdc_wdm 6-1:1.0: skipping garbage [ 75.743279][ T6443] cdc_wdm 6-1:1.0: skipping garbage [ 75.758271][ T6443] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 75.762908][ T6443] cdc_wdm 6-1:1.0: Unknown control protocol [ 75.815474][ T6493] binder: 6492:6493 ioctl 4018620d 0 returned -22 [ 75.824430][ T6493] binder: 6492:6493 ioctl c0306201 80004a40 returned -22 [ 75.956790][ T41] usb 44-1: SetAddress Request (6) to port 0 [ 75.959706][ T41] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 76.326539][ T5102] Bluetooth: hci2: command 0x040f tx timeout [ 76.374086][ T6495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.384850][ T6495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.403613][ T6488] vhci_hcd: connection reset by peer [ 76.407379][ T13] vhci_hcd vhci_hcd.3: stop threads [ 76.411157][ T13] vhci_hcd vhci_hcd.3: release socket [ 76.415646][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 76.418708][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 76.419993][ T61] usb 40-1: device descriptor read/8, error -110 [ 76.421586][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 76.424484][ T5830] usb 6-1: USB disconnect, device number 5 [ 76.426567][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 76.828020][ T61] usb usb40-port1: attempt power cycle [ 77.220403][ T6520] raw_sendmsg: syz.3.162 forgot to set AF_INET. Fix it! [ 77.397113][ T61] usb usb40-port1: unable to enumerate USB device [ 77.410121][ T6525] syzkaller1: entered promiscuous mode [ 77.421733][ T6525] syzkaller1: entered allmulticast mode [ 77.859551][ T6543] jffs2: notice: (6543) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 78.191251][ T6552] FAULT_INJECTION: forcing a failure. [ 78.191251][ T6552] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 78.205329][ T6552] CPU: 2 UID: 0 PID: 6552 Comm: syz.3.173 Not tainted syzkaller #0 PREEMPT(full) [ 78.205357][ T6552] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.205366][ T6552] Call Trace: [ 78.205389][ T6552] [ 78.205397][ T6552] dump_stack_lvl+0x100/0x190 [ 78.205493][ T6552] should_fail_ex.cold+0x5/0xa [ 78.205514][ T6552] _copy_from_iter+0x1f4/0x1690 [ 78.205571][ T6552] ? __pfx__copy_from_iter+0x10/0x10 [ 78.205597][ T6552] ? rcu_is_watching+0x12/0xc0 [ 78.205618][ T6552] ? trace_kmem_cache_alloc+0xdd/0x100 [ 78.205640][ T6552] ? __kasan_slab_alloc+0x89/0x90 [ 78.205663][ T6552] ? kmem_cache_alloc_node_noprof+0x2e6/0x6b0 [ 78.205684][ T6552] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 78.205712][ T6552] copy_page_from_iter+0x238/0x300 [ 78.205741][ T6552] skb_copy_datagram_from_iter+0x399/0x720 [ 78.205800][ T6552] skb_copy_datagram_from_iter_full+0xf6/0x190 [ 78.205823][ T6552] ? __pfx_skb_copy_datagram_from_iter_full+0x10/0x10 [ 78.205855][ T6552] virtio_transport_alloc_skb+0x8c2/0x13c0 [ 78.205892][ T6552] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 78.205917][ T6552] virtio_transport_send_pkt_info+0x595/0x10d0 [ 78.205942][ T6552] virtio_transport_seqpacket_enqueue+0x1a0/0x230 [ 78.205963][ T6552] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 78.205990][ T6552] ? mark_held_locks+0x40/0x70 [ 78.206016][ T6552] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 78.206050][ T6552] vsock_connectible_sendmsg+0x1006/0x12b0 [ 78.206077][ T6552] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 78.206119][ T6552] ? __pfx_woken_wake_function+0x10/0x10 [ 78.206141][ T6552] ? apparmor_socket_sendmsg+0x15b/0x270 [ 78.206165][ T6552] ____sys_sendmsg+0xa4d/0xbe0 [ 78.206190][ T6552] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 78.206211][ T6552] ? __pfx_____sys_sendmsg+0x10/0x10 [ 78.206235][ T6552] ? _kstrtoull+0x13c/0x1f0 [ 78.206254][ T6552] ? __pfx__kstrtoull+0x10/0x10 [ 78.206276][ T6552] ___sys_sendmsg+0x190/0x1e0 [ 78.206298][ T6552] ? __pfx____sys_sendmsg+0x10/0x10 [ 78.206315][ T6552] ? __lock_acquire+0x49f/0x1a40 [ 78.206368][ T6552] __sys_sendmmsg+0x309/0x440 [ 78.206396][ T6552] ? __pfx___sys_sendmmsg+0x10/0x10 [ 78.206425][ T6552] ? find_held_lock+0x2b/0x80 [ 78.206449][ T6552] ? __mutex_unlock_slowpath+0x35d/0x930 [ 78.206486][ T6552] ? fput+0x79/0x100 [ 78.206507][ T6552] ? ksys_write+0x1ac/0x250 [ 78.206527][ T6552] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 78.206554][ T6552] ? lockdep_hardirqs_on+0x78/0x100 [ 78.206575][ T6552] __do_fast_syscall_32+0xe7/0x970 [ 78.206605][ T6552] ? lockdep_hardirqs_on+0x78/0x100 [ 78.206629][ T6552] do_fast_syscall_32+0x32/0x70 [ 78.206653][ T6552] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 78.206674][ T6552] RIP: 0023:0xf70befec [ 78.206695][ T6552] Code: Unable to access opcode bytes at 0xf70befc2. [ 78.206719][ T6552] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 78.206737][ T6552] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 78.206748][ T6552] RDX: 0000000000000051 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.206758][ T6552] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.206791][ T6552] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 78.206802][ T6552] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.206825][ T6552] [ 78.408434][ T5102] Bluetooth: hci2: command 0x040f tx timeout [ 78.877633][ T5893] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 79.027958][ T5893] usb 7-1: Using ep0 maxpacket: 16 [ 79.034856][ T5893] usb 7-1: config 0 has no interfaces? [ 79.042379][ T5893] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 79.047063][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.050255][ T5893] usb 7-1: Product: syz [ 79.051911][ T5893] usb 7-1: Manufacturer: syz [ 79.053754][ T5893] usb 7-1: SerialNumber: syz [ 79.060616][ T5893] usb 7-1: config 0 descriptor?? [ 79.556401][ T5893] usb 7-1: USB disconnect, device number 5 [ 80.426639][ T42] audit: type=1326 audit(1785965630.562:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz.2.193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 80.438439][ T42] audit: type=1326 audit(1785965630.562:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz.2.193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 80.449633][ T42] audit: type=1326 audit(1785965630.562:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz.2.193" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 80.458305][ T42] audit: type=1326 audit(1785965630.562:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz.2.193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 80.467444][ T42] audit: type=1326 audit(1785965630.562:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz.2.193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 80.487783][ T5102] Bluetooth: hci2: command 0x040f tx timeout [ 80.501753][ T42] audit: type=1326 audit(1785965630.562:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz.2.193" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 80.511111][ T42] audit: type=1326 audit(1785965630.562:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz.2.193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 80.518291][ T42] audit: type=1326 audit(1785965630.562:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz.2.193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 80.525325][ T42] audit: type=1326 audit(1785965630.562:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz.2.193" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 80.534753][ T42] audit: type=1326 audit(1785965630.572:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz.2.193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 80.919570][ T6637] netlink: 'syz.4.198': attribute type 1 has an invalid length. [ 80.923108][ T6637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.198'. [ 80.968176][ T6639] netlink: 24 bytes leftover after parsing attributes in process `syz.4.199'. [ 81.015593][ T6641] CacheFiles: Failed to register: -95 [ 81.046436][ T41] usb 44-1: device descriptor read/8, error -110 [ 81.467220][ T41] usb usb44-port1: attempt power cycle [ 81.479342][ T2319] cfg80211: failed to load regulatory.db [ 81.656262][ T5893] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 81.808112][ T5893] usb 7-1: config 150 has an invalid interface number: 204 but max is 2 [ 81.815378][ T5893] usb 7-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 81.824238][ T5893] usb 7-1: config 150 has no interface number 0 [ 81.828889][ T5893] usb 7-1: config 150 interface 204 has no altsetting 0 [ 81.833595][ T5893] usb 7-1: config 150 interface 1 has no altsetting 0 [ 81.840113][ T5893] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 81.844762][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.850978][ T5893] usb 7-1: Product: syz [ 81.852385][ T5893] usb 7-1: Manufacturer: syz [ 81.858480][ T5893] usb 7-1: SerialNumber: syz [ 82.027420][ T41] usb usb44-port1: unable to enumerate USB device [ 82.200650][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'. [ 83.260736][ T6690] libceph: Failed to parse secret: -22 [ 83.505067][ T6698] bond1: option primary: mode dependency failed, not supported in mode broadcast(3) [ 83.521994][ T6698] bond1 (unregistering): Released all slaves [ 83.756891][ T6705] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 83.759104][ T6705] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 83.762476][ T6705] vhci_hcd vhci_hcd.0: Device attached [ 83.824747][ T6705] netlink: 'syz.1.218': attribute type 12 has an invalid length. [ 84.046212][ T2319] usb 40-1: SetAddress Request (6) to port 0 [ 84.049037][ T2319] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 84.293013][ T5893] xr_serial 7-1:150.204: skipping garbage [ 84.303436][ T5893] xr_serial 7-1:150.204: xr_serial converter detected [ 84.330301][ T5893] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 84.336449][ T5893] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 84.358522][ T5893] usb 7-1: USB disconnect, device number 6 [ 84.379261][ T5893] xr_serial 7-1:150.204: device disconnected [ 84.558819][ T6709] vhci_hcd: connection reset by peer [ 84.560865][ T13] vhci_hcd vhci_hcd.1: stop threads [ 84.562968][ T13] vhci_hcd vhci_hcd.1: release socket [ 84.571352][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 84.646870][ T6731] syz.3.221 (6731): drop_caches: 0 [ 85.269917][ T6745] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 85.576399][ T6748] netlink: 20 bytes leftover after parsing attributes in process `syz.3.228'. [ 85.581176][ T6749] FAULT_INJECTION: forcing a failure. [ 85.581176][ T6749] name failslab, interval 1, probability 0, space 0, times 1 [ 85.590701][ T6749] CPU: 3 UID: 0 PID: 6749 Comm: syz.4.227 Not tainted syzkaller #0 PREEMPT(full) [ 85.590727][ T6749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.590760][ T6749] Call Trace: [ 85.590766][ T6749] [ 85.590773][ T6749] dump_stack_lvl+0x100/0x190 [ 85.590799][ T6749] should_fail_ex.cold+0x5/0xa [ 85.590818][ T6749] should_failslab+0xc2/0x120 [ 85.590842][ T6749] __kmalloc_noprof+0xfc/0x820 [ 85.590862][ T6749] ? rcu_is_watching+0x12/0xc0 [ 85.590883][ T6749] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 85.590932][ T6749] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 85.590960][ T6749] genl_family_rcv_msg_doit+0xc7/0x300 [ 85.590985][ T6749] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 85.591006][ T6749] ? genl_get_cmd+0x3e7/0x760 [ 85.591029][ T6749] ? bpf_lsm_capable+0x9/0x10 [ 85.591043][ T6749] ? security_capable+0x80/0x260 [ 85.591055][ T6749] ? ns_capable+0xd2/0xf0 [ 85.591068][ T6749] genl_rcv_msg+0x560/0x800 [ 85.591085][ T6749] ? __pfx_genl_rcv_msg+0x10/0x10 [ 85.591099][ T6749] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 85.591123][ T6749] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 85.591133][ T6749] ? __pfx_nl80211_post_doit+0x10/0x10 [ 85.591154][ T6749] netlink_rcv_skb+0x159/0x420 [ 85.591167][ T6749] ? __pfx_genl_rcv_msg+0x10/0x10 [ 85.591182][ T6749] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 85.591200][ T6749] ? netlink_deliver_tap+0x1ae/0xcc0 [ 85.591214][ T6749] genl_rcv+0x28/0x40 [ 85.591227][ T6749] netlink_unicast+0x585/0x850 [ 85.591241][ T6749] ? __pfx_netlink_unicast+0x10/0x10 [ 85.591258][ T6749] netlink_sendmsg+0x8b0/0xda0 [ 85.591273][ T6749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.591288][ T6749] ? apparmor_socket_sendmsg+0x15b/0x270 [ 85.591302][ T6749] ____sys_sendmsg+0xa4d/0xbe0 [ 85.591314][ T6749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.591328][ T6749] ? __pfx_____sys_sendmsg+0x10/0x10 [ 85.591346][ T6749] ___sys_sendmsg+0x190/0x1e0 [ 85.591360][ T6749] ? __pfx____sys_sendmsg+0x10/0x10 [ 85.591379][ T6749] ? find_held_lock+0x2b/0x80 [ 85.591401][ T6749] __sys_sendmsg+0x160/0x210 [ 85.591420][ T6749] ? __pfx___sys_sendmsg+0x10/0x10 [ 85.591439][ T6749] ? __pfx_ksys_write+0x10/0x10 [ 85.591453][ T6749] __do_fast_syscall_32+0xe7/0x970 [ 85.591470][ T6749] ? lockdep_hardirqs_on+0x78/0x100 [ 85.591486][ T6749] do_fast_syscall_32+0x32/0x70 [ 85.591501][ T6749] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.591515][ T6749] RIP: 0023:0xf7f14fec [ 85.591530][ T6749] Code: Unable to access opcode bytes at 0xf7f14fc2. [ 85.591535][ T6749] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 85.591547][ T6749] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 85.591553][ T6749] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.591559][ T6749] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.591565][ T6749] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 85.591572][ T6749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.591585][ T6749] [ 85.725465][ T6748] team0 (unregistering): Port device team_slave_0 removed [ 85.821057][ T6748] team0 (unregistering): Port device team_slave_1 removed [ 85.824201][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.228'. [ 86.076080][ T6765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.233'. [ 86.937368][ T6774] syz.4.234 (6774) used greatest stack depth: 19104 bytes left [ 87.135598][ T6785] netlink: 44 bytes leftover after parsing attributes in process `syz.4.237'. [ 87.144039][ T6785] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.798686][ T6810] Bluetooth: MGMT ver 1.23 [ 87.877217][ T42] kauditd_printk_skb: 49 callbacks suppressed [ 87.877237][ T42] audit: type=1326 audit(1785965638.072:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.4.245" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 87.901386][ T42] audit: type=1326 audit(1785965638.082:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.4.245" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 87.914801][ T42] audit: type=1326 audit(1785965638.082:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.4.245" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 87.929558][ T42] audit: type=1326 audit(1785965638.082:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.4.245" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 87.946655][ T42] audit: type=1326 audit(1785965638.082:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.4.245" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 87.961314][ T42] audit: type=1326 audit(1785965638.082:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.4.245" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 87.988711][ T42] audit: type=1326 audit(1785965638.082:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.4.245" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 88.016208][ T42] audit: type=1326 audit(1785965638.082:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.4.245" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 88.027192][ T42] audit: type=1326 audit(1785965638.082:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.4.245" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 89.136365][ T2319] usb 40-1: device descriptor read/8, error -110 [ 89.263162][ T6851] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 89.265844][ T6851] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 89.270272][ T6851] vhci_hcd vhci_hcd.0: Device attached [ 89.328166][ T6851] netlink: 40 bytes leftover after parsing attributes in process `syz.2.260'. [ 89.340131][ T6851] netlink: 'syz.2.260': attribute type 12 has an invalid length. [ 89.576292][ T5821] usb 42-1: SetAddress Request (6) to port 0 [ 89.579115][ T5821] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 89.737122][ T2319] usb usb40-port1: attempt power cycle [ 90.016890][ T6853] vhci_hcd: connection reset by peer [ 90.023581][ T13] vhci_hcd vhci_hcd.2: stop threads [ 90.033112][ T13] vhci_hcd vhci_hcd.2: release socket [ 90.042548][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 90.319477][ T2319] usb usb40-port1: unable to enumerate USB device [ 90.944107][ T42] audit: type=1326 audit(1785965641.112:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.1.264" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 91.188515][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.269'. [ 91.188641][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 91.835727][ T6912] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 92.788132][ T5892] kernel read not supported for file /vga_arbiter (pid: 5892 comm: kworker/0:3) [ 92.811359][ C0] Unknown status report in ack skb [ 93.059372][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.284'. [ 93.088114][ T2319] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 93.296224][ T2319] usb 9-1: Using ep0 maxpacket: 16 [ 93.316421][ T2319] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 93.319498][ T2319] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 93.321935][ T2319] usb 9-1: Product: syz [ 93.323359][ T2319] usb 9-1: Manufacturer: syz [ 93.324806][ T2319] usb 9-1: SerialNumber: syz [ 93.328811][ T2319] usb 9-1: config 0 descriptor?? [ 93.429475][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 93.429489][ T42] audit: type=1326 audit(1785965643.622:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.282" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 93.439386][ T42] audit: type=1326 audit(1785965643.622:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.282" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 93.447615][ T42] audit: type=1326 audit(1785965643.622:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.282" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 93.455734][ T42] audit: type=1326 audit(1785965643.622:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.282" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 93.464829][ T42] audit: type=1326 audit(1785965643.622:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.282" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70befec code=0x7ffc0000 [ 93.473075][ T42] audit: type=1326 audit(1785965643.622:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.282" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 93.481140][ T42] audit: type=1326 audit(1785965643.622:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.282" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 93.489334][ T42] audit: type=1326 audit(1785965643.622:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.282" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf70befec code=0x7ffc0000 [ 93.497553][ T42] audit: type=1326 audit(1785965643.622:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.282" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf70befec code=0x7ffc0000 [ 93.542490][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.281'. [ 93.546328][ T5892] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 93.555300][ T2319] usb 9-1: USB disconnect, device number 2 [ 93.707634][ T5892] usb 6-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 93.714660][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 93.721697][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24620, setting to 1024 [ 93.725526][ T5892] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.730300][ T5892] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.733513][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.739904][ T5892] usb 6-1: config 0 descriptor?? [ 93.797761][ T6950] tipc: Started in network mode [ 93.799319][ T6950] tipc: Node identity e0000001, cluster identity 4711 [ 93.801841][ T6950] tipc: Enabling of bearer rejected, failed to enable media [ 93.863550][ T6953] tmpfs: Unknown parameter 'nr_inod' [ 93.869134][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.289'. [ 94.111713][ T6958] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 94.114323][ T6958] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 94.118483][ T6958] vhci_hcd vhci_hcd.0: Device attached [ 94.167228][ T6958] tipc: Cannot configure node identity twice [ 94.427800][ T5892] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 94.431305][ T5892] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 94.434348][ T5892] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 94.443740][ T5892] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 94.529560][ T5892] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 94.593876][ T5892] usb 6-1: USB disconnect, device number 6 [ 94.931027][ T6959] vhci_hcd: connection reset by peer [ 94.975868][ T13] vhci_hcd vhci_hcd.2: stop threads [ 95.025726][ T13] vhci_hcd vhci_hcd.2: release socket [ 95.044895][ T5821] usb 42-1: device descriptor read/8, error -110 [ 95.046210][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 95.816386][ T42] audit: type=1400 audit(1785965646.002:115): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 95.986761][ T5821] usb usb42-port1: attempt power cycle [ 96.100190][ T2319] usb 6-1: Using ep0 maxpacket: 8 [ 96.106250][ T2319] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 96.110222][ T2319] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.114601][ T2319] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 96.120211][ T2319] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.124215][ T2319] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.130247][ T2319] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 96.133900][ T2319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.280418][ T6986] input: syz1 as /devices/virtual/input/input9 [ 96.342824][ T2319] usb 6-1: usb_control_msg returned -32 [ 96.344577][ T2319] usbtmc 6-1:16.0: can't read capabilities [ 96.556926][ T5821] usb usb42-port1: unable to enumerate USB device [ 96.901808][ T9] usb 6-1: USB disconnect, device number 7 [ 96.952463][ T6995] syz.2.302 (6995): drop_caches: 2 [ 97.036323][ T13] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 97.042172][ T13] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 97.046271][ T13] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 97.049814][ T13] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 97.266330][ T41] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 97.398338][ T7013] netlink: 16 bytes leftover after parsing attributes in process `syz.4.307'. [ 97.418017][ T41] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 97.421296][ T41] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 97.425880][ T41] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 97.430464][ T41] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 97.434326][ T41] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 97.438423][ T41] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 97.442969][ T41] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 97.450048][ T41] usb 7-1: config 168 interface 0 has no altsetting 0 [ 97.455560][ T41] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 97.459076][ T41] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 97.463529][ T41] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 97.468082][ T41] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 97.472390][ T41] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 97.476857][ T41] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 97.480508][ T41] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 97.485078][ T41] usb 7-1: config 168 interface 0 has no altsetting 0 [ 97.488782][ T41] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 97.491323][ T41] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 97.494737][ T41] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 97.498883][ T41] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 97.500159][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.308'. [ 97.503461][ T41] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 97.511728][ T41] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 97.515269][ T41] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 97.519650][ T41] usb 7-1: config 168 interface 0 has no altsetting 0 [ 97.524371][ T41] usb 7-1: string descriptor 0 read error: -22 [ 97.526872][ T41] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 97.530158][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.605900][ T41] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 97.953306][ T41] usb 7-1: USB disconnect, device number 7 [ 98.362666][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'. [ 98.463838][ T7020] gfs2: error -5 reading superblock [ 98.470979][ T7020] fuse: Bad value for 'user_id' [ 98.473183][ T7020] fuse: Bad value for 'user_id' [ 98.768485][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 98.768498][ T42] audit: type=1326 audit(1785965648.962:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.1.313" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 98.780788][ T42] audit: type=1326 audit(1785965648.962:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.1.313" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 98.788876][ T42] audit: type=1326 audit(1785965648.972:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.1.313" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 98.797209][ T42] audit: type=1326 audit(1785965648.972:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.1.313" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 98.805908][ T42] audit: type=1326 audit(1785965648.972:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.1.313" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 98.816155][ T42] audit: type=1326 audit(1785965648.972:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.1.313" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 98.827720][ T42] audit: type=1326 audit(1785965648.972:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.1.313" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 98.848032][ T42] audit: type=1326 audit(1785965648.972:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.1.313" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 98.866199][ T42] audit: type=1326 audit(1785965648.972:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.1.313" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 98.878177][ T42] audit: type=1326 audit(1785965648.972:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.1.313" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 99.015728][ T7042] fuse: Bad value for 'group_id' [ 99.018082][ T7042] fuse: Bad value for 'group_id' [ 99.247500][ T7047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.317'. [ 99.251747][ T7047] hsr_slave_0: left promiscuous mode [ 99.254662][ T7047] hsr_slave_1: left promiscuous mode [ 100.004530][ T7055] bond1: entered promiscuous mode [ 100.011409][ T7055] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.115360][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.319'. [ 100.256841][ T7055] bond1: (slave ip6gre1): refused to change device type [ 100.361641][ T7083] netlink: 'syz.1.322': attribute type 1 has an invalid length. [ 100.364988][ T7083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.322'. [ 100.491603][ T7104] netlink: 44 bytes leftover after parsing attributes in process `syz.3.328'. [ 100.628627][ T7109] binder: 7108:7109 ioctl c0306201 80004a40 returned -22 [ 100.925623][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.040681][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.161775][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 101.170851][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 101.175971][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 101.183825][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 101.187783][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 101.197777][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.414589][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.562887][ T7153] jffs2: notice: (7153) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 101.701844][ T13] bridge_slave_1: left allmulticast mode [ 101.703788][ T13] bridge_slave_1: left promiscuous mode [ 101.706201][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.711491][ T13] bridge_slave_0: left allmulticast mode [ 101.713331][ T13] bridge_slave_0: left promiscuous mode [ 101.715787][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.933317][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 101.964126][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.971307][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.975810][ T13] bond0 (unregistering): Released all slaves [ 101.982018][ T13] bond1 (unregistering): Released all slaves [ 102.262928][ T7124] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.265346][ T7124] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.267991][ T7124] bridge_slave_0: entered allmulticast mode [ 102.271228][ T7124] bridge_slave_0: entered promiscuous mode [ 102.275510][ T7124] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.278405][ T7124] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.281206][ T7124] bridge_slave_1: entered allmulticast mode [ 102.284642][ T7124] bridge_slave_1: entered promiscuous mode [ 102.308709][ T7124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.314648][ T7124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.352221][ T7124] team0: Port device team_slave_0 added [ 102.355479][ T7124] team0: Port device team_slave_1 added [ 102.357504][ T7190] random: crng reseeded on system resumption [ 102.383179][ T7191] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 102.387858][ T7191] CPU: 1 UID: 0 PID: 7191 Comm: syz.4.342 Not tainted syzkaller #0 PREEMPT(full) [ 102.387875][ T7191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.387881][ T7191] Call Trace: [ 102.387885][ T7191] [ 102.387890][ T7191] dump_stack_lvl+0x100/0x190 [ 102.387907][ T7191] sysfs_warn_dup.cold+0x1c/0x28 [ 102.387924][ T7191] sysfs_create_dir_ns+0x24b/0x2b0 [ 102.387941][ T7191] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 102.387957][ T7191] ? find_held_lock+0x2b/0x80 [ 102.387971][ T7191] ? kobject_add_internal+0x25f/0x930 [ 102.387983][ T7191] ? kobject_add_internal+0x25f/0x930 [ 102.387995][ T7191] ? class_dir_child_ns_type+0xd/0x60 [ 102.388008][ T7191] kobject_add_internal+0x2c8/0x930 [ 102.388021][ T7191] kobject_add+0x16a/0x1e0 [ 102.388032][ T7191] ? __pfx_kobject_add+0x10/0x10 [ 102.388044][ T7191] ? get_device_parent+0x1b3/0x4c0 [ 102.388061][ T7191] ? kobject_put+0xb9/0x640 [ 102.388072][ T7191] ? device_add+0xc4d/0x1970 [ 102.388084][ T7191] device_add+0x294/0x1970 [ 102.388094][ T7191] ? lockdep_init_map_type+0x5c/0x250 [ 102.388105][ T7191] ? __pfx_device_add+0x10/0x10 [ 102.388115][ T7191] ? lockdep_init_map_type+0x5c/0x250 [ 102.388126][ T7191] ? __init_waitqueue_head+0xca/0x150 [ 102.388141][ T7191] tty_register_device_attr+0x388/0x7f0 [ 102.388158][ T7191] ? lockdep_init_map_type+0x5c/0x250 [ 102.388168][ T7191] ? __pfx_tty_register_device_attr+0x10/0x10 [ 102.388187][ T7191] ? tty_port_init+0x156/0x1c0 [ 102.388205][ T7191] gsm_activate_mux+0x155/0x2a0 [ 102.388223][ T7191] gsmld_ioctl+0xbbc/0x15c0 [ 102.388237][ T7191] ? __pfx_gsmld_ioctl+0x10/0x10 [ 102.388257][ T7191] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.388277][ T7191] ? __pfx_gsmld_ioctl+0x10/0x10 [ 102.388287][ T7191] tty_compat_ioctl+0x396/0x420 [ 102.388302][ T7191] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 102.388319][ T7191] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 102.388337][ T7191] __do_fast_syscall_32+0xe7/0x970 [ 102.388356][ T7191] do_fast_syscall_32+0x32/0x70 [ 102.388372][ T7191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.388387][ T7191] RIP: 0023:0xf7f14fec [ 102.388402][ T7191] Code: Unable to access opcode bytes at 0xf7f14fc2. [ 102.388407][ T7191] RSP: 002b:00000000f53b550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 102.388419][ T7191] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000404c4701 [ 102.388426][ T7191] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.388432][ T7191] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.388438][ T7191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.388444][ T7191] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.388457][ T7191] [ 102.388470][ T7191] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 102.389002][ T7124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.500975][ T7124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.510744][ T7124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.516694][ T5453] 8021q: adding VLAN 0 to HW filter on device eth6 [ 102.521146][ T7124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.524354][ T7124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.535196][ T7124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.573980][ T7195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.343'. [ 102.581649][ T7124] hsr_slave_0: entered promiscuous mode [ 102.584620][ T7124] hsr_slave_1: entered promiscuous mode [ 102.587542][ T7124] debugfs: 'hsr0' already exists in 'hsr' [ 102.589814][ T7124] Cannot create hsr debugfs directory [ 102.989691][ T5453] 8021q: adding VLAN 0 to HW filter on device eth7 [ 103.119440][ T13] hsr_slave_0: left promiscuous mode [ 103.128438][ T13] hsr_slave_1: left promiscuous mode [ 103.135808][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.145123][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.152776][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.161531][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.217169][ T5821] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 103.297297][ T5102] Bluetooth: hci3: command tx timeout [ 103.307603][ T13] veth1_macvtap: left promiscuous mode [ 103.309454][ T13] veth0_macvtap: left promiscuous mode [ 103.311424][ T13] veth1_vlan: left promiscuous mode [ 103.313200][ T13] veth0_vlan: left promiscuous mode [ 103.460960][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.347'. [ 103.705013][ T13] team0 (unregistering): Port device team_slave_1 removed [ 103.723530][ T13] team0 (unregistering): Port device team_slave_0 removed [ 103.837564][ T5821] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 103.840816][ T5821] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 103.843897][ T5821] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 103.848197][ T5821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.867048][ T5821] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 103.876968][ T5821] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 103.886023][ T7217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.903704][ T7217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.363243][ T7235] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 104.366873][ T7235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.350'. [ 104.371300][ T7124] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.371404][ T7235] sctp: [Deprecated]: syz.4.350 (pid 7235) Use of int in max_burst socket option deprecated. [ 104.371404][ T7235] Use struct sctp_assoc_value instead [ 104.381993][ T7124] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.384975][ T7124] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.390826][ T7124] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.393739][ T7124] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.402518][ T7124] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.405522][ T7124] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.423316][ T7124] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.469805][ T7124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.495222][ T7124] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.514536][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.516917][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.564418][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.567212][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.617410][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.351'. [ 104.911873][ T7283] program syz.4.355 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.967092][ T7124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.003668][ T7124] veth0_vlan: entered promiscuous mode [ 105.011514][ T7124] veth1_vlan: entered promiscuous mode [ 105.092305][ T7124] veth0_macvtap: entered promiscuous mode [ 105.098335][ T7124] veth1_macvtap: entered promiscuous mode [ 105.108114][ T7124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.124936][ T7124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.139929][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.236516][ T5800] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.299850][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.302459][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.325709][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.329871][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.336731][ T5800] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.340473][ T5800] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.366525][ T5102] Bluetooth: hci3: command tx timeout [ 105.556371][ T2319] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 105.708282][ T2319] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 105.712051][ T2319] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 105.716187][ T5893] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 105.716561][ T2319] usb 8-1: config 0 interface 0 has no altsetting 0 [ 105.722465][ T2319] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 105.726503][ T2319] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 105.729783][ T2319] usb 8-1: Product: syz [ 105.731409][ T2319] usb 8-1: Manufacturer: syz [ 105.732999][ T2319] usb 8-1: SerialNumber: syz [ 105.737600][ T2319] usb 8-1: config 0 descriptor?? [ 105.742267][ T2319] hub 8-1:0.0: bad descriptor, ignoring hub [ 105.744890][ T2319] hub 8-1:0.0: probe with driver hub failed with error -5 [ 105.751982][ T2319] usb 8-1: selecting invalid altsetting 0 [ 105.835324][ T6443] usb 7-1: USB disconnect, device number 8 [ 105.851365][ T6443] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 105.854205][ T6443] spcp8x5 7-1:1.0: device disconnected [ 105.867025][ T5893] usb 6-1: Using ep0 maxpacket: 32 [ 105.872404][ T5893] usb 6-1: config 0 has no interfaces? [ 105.877818][ T7309] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 105.877886][ T5893] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 105.884157][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.889262][ T5893] usb 6-1: Product: syz [ 105.892047][ T5893] usb 6-1: Manufacturer: syz [ 105.893679][ T5893] usb 6-1: SerialNumber: syz [ 105.897069][ T5893] usb 6-1: config 0 descriptor?? [ 105.918876][ T42] kauditd_printk_skb: 81 callbacks suppressed [ 105.918894][ T42] audit: type=1326 audit(1785965656.112:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.2.361" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 105.932754][ T42] audit: type=1326 audit(1785965656.112:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.2.361" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 105.943687][ T42] audit: type=1326 audit(1785965656.112:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.2.361" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 105.953255][ T42] audit: type=1326 audit(1785965656.112:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.2.361" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 105.962588][ T42] audit: type=1326 audit(1785965656.112:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.2.361" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 105.972240][ T42] audit: type=1326 audit(1785965656.112:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.2.361" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 105.979458][ T7301] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 105.981711][ T42] audit: type=1326 audit(1785965656.112:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.2.361" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 105.989944][ T7301] netlink: 28 bytes leftover after parsing attributes in process `syz.3.358'. [ 106.130180][ T2319] usb 6-1: USB disconnect, device number 8 [ 106.697489][ T7301] usb 8-1: reset high-speed USB device number 7 using dummy_hcd [ 106.824022][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.366'. [ 107.046939][ T9] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 107.148444][ T7301] usb 8-1: failed to restore interface 0 altsetting 251 (error=-71) [ 107.153556][ T6443] usb 8-1: USB disconnect, device number 7 [ 107.199416][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 107.203296][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 107.208812][ T9] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 107.211757][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.214297][ T9] usb 6-1: Product: syz [ 107.215833][ T9] usb 6-1: Manufacturer: syz [ 107.218811][ T9] usb 6-1: SerialNumber: syz [ 107.222021][ T9] usb 6-1: config 0 descriptor?? [ 107.225147][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 107.227986][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 107.231978][ T9] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input10 [ 107.276529][ T7342] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 107.277893][ T7342] netlink: 'syz.2.370': attribute type 1 has an invalid length. [ 107.283175][ T7342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.370'. [ 107.447210][ T5102] Bluetooth: hci3: command tx timeout [ 107.503269][ T7343] pim6reg1: entered promiscuous mode [ 107.505511][ T7343] pim6reg1: entered allmulticast mode [ 107.571727][ T6443] IPVS: starting estimator thread 0... [ 107.666344][ T7348] IPVS: using max 28 ests per chain, 67200 per kthread [ 107.826318][ T5830] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 107.986257][ T5830] usb 9-1: Using ep0 maxpacket: 8 [ 107.990583][ T5830] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.995064][ T5830] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 107.999588][ T5830] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 108.004160][ T5830] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 108.009277][ T5830] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 108.013163][ T5830] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.029550][ T5830] hub 9-1:1.0: bad descriptor, ignoring hub [ 108.036180][ T5830] hub 9-1:1.0: probe with driver hub failed with error -5 [ 108.042341][ T5830] cdc_wdm 9-1:1.0: skipping garbage [ 108.047310][ T5830] cdc_wdm 9-1:1.0: skipping garbage [ 108.064682][ T5830] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 108.067303][ T5830] cdc_wdm 9-1:1.0: Unknown control protocol [ 108.107626][ T7363] netlink: 'syz.2.377': attribute type 64 has an invalid length. [ 108.112592][ T7363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'. [ 108.116912][ T7363] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.439258][ T7350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.451052][ T7350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.303329][ T7383] netlink: 9 bytes leftover after parsing attributes in process `syz.2.382'. [ 109.526910][ T5102] Bluetooth: hci3: command tx timeout [ 109.901795][ T7390] netlink: 'syz.2.385': attribute type 1 has an invalid length. [ 109.906592][ T7390] netlink: 756 bytes leftover after parsing attributes in process `syz.2.385'. [ 110.026573][ T5821] usb 6-1: USB disconnect, device number 9 [ 110.372349][ T7411] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 110.378376][ T7411] overlay: Bad value for 'redirect_dir' [ 111.171915][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'. [ 111.220260][ T7418] ubi16: attaching mtd0 [ 111.225735][ T7418] ubi16: scanning is finished [ 111.228152][ T7418] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 111.245089][ T7414] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.271652][ T7421] program syz.3.393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.405641][ T7414] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.572658][ T7418] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 111.577412][ T7414] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.587761][ T2319] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 111.702555][ T7436] netlink: 'syz.3.396': attribute type 2 has an invalid length. [ 111.705157][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.396'. [ 111.719228][ T7414] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.749822][ T2319] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 111.753028][ T2319] usb 6-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 111.755960][ T2319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.782091][ T7423] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 111.796549][ T2319] opticon 6-1:1.0: opticon converter detected [ 111.835978][ T7350] cdc_wdm 9-1:1.0: Error autopm - -16 [ 111.841801][ T2319] usb 6-1: opticon converter now attached to ttyUSB0 [ 111.850472][ T5830] usb 9-1: USB disconnect, device number 3 [ 112.022331][ T5800] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.687529][ T5800] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.704466][ T5800] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.819704][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 112.984819][ T5800] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.063360][ T7455] tipc: Enabling of bearer rejected, failed to enable media [ 113.068142][ T7455] IPVS: length: 196 != 8 [ 113.325634][ T7463] netlink: 'syz.4.406': attribute type 1 has an invalid length. [ 113.491817][ T7468] tipc: Started in network mode [ 113.493877][ T7468] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 113.497465][ T7468] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 113.500177][ T7468] tipc: Enabled bearer , priority 10 [ 114.451317][ T7490] FAULT_INJECTION: forcing a failure. [ 114.451317][ T7490] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 114.459354][ T7490] CPU: 2 UID: 0 PID: 7490 Comm: syz.4.416 Not tainted syzkaller #0 PREEMPT(full) [ 114.459371][ T7490] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.459378][ T7490] Call Trace: [ 114.459382][ T7490] [ 114.459387][ T7490] dump_stack_lvl+0x100/0x190 [ 114.459405][ T7490] should_fail_ex.cold+0x5/0xa [ 114.459416][ T7490] ? prepare_alloc_pages+0x16d/0x5f0 [ 114.459434][ T7490] should_fail_alloc_page+0xeb/0x140 [ 114.459451][ T7490] prepare_alloc_pages+0x1f0/0x5f0 [ 114.459467][ T7490] ? find_held_lock+0x2b/0x80 [ 114.459482][ T7490] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 114.459497][ T7490] ? register_lock_class+0x40/0x560 [ 114.459507][ T7490] ? stack_depot_save_flags+0x479/0x9d0 [ 114.459529][ T7490] ? __lock_acquire+0x49f/0x1a40 [ 114.459546][ T7490] ? binder_alloc_new_buf+0x1bb/0x3050 [ 114.459569][ T7490] ? binder_transaction+0x1ebc/0x9bb0 [ 114.459587][ T7490] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 114.459600][ T7490] ? __ia32_compat_sys_ioctl+0x2cf/0x360 [ 114.459617][ T7490] ? do_fast_syscall_32+0x32/0x70 [ 114.459636][ T7490] ? lock_acquire+0x1b9/0x370 [ 114.459657][ T7490] ? __mutex_lock+0x26d/0x1bd0 [ 114.459673][ T7490] ? binder_alloc_new_buf+0x1d8/0x3050 [ 114.459684][ T7490] ? find_held_lock+0x2b/0x80 [ 114.459697][ T7490] ? binder_alloc_new_buf+0x16a0/0x3050 [ 114.459708][ T7490] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 114.459730][ T7490] ? policy_nodemask+0xed/0x4f0 [ 114.459753][ T7490] alloc_pages_mpol+0x1fb/0x540 [ 114.459776][ T7490] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 114.459800][ T7490] ? binder_alloc_new_buf+0x1575/0x3050 [ 114.459816][ T7490] ? rcu_is_watching+0x12/0xc0 [ 114.459834][ T7490] ? binder_alloc_new_buf+0x1575/0x3050 [ 114.459853][ T7490] alloc_pages_noprof+0x1a/0x160 [ 114.459878][ T7490] binder_alloc_new_buf+0x18ec/0x3050 [ 114.459897][ T7490] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 114.459912][ T7490] binder_transaction+0x1ebc/0x9bb0 [ 114.459946][ T7490] ? __lock_acquire+0x49f/0x1a40 [ 114.459973][ T7490] ? __pfx_binder_transaction+0x10/0x10 [ 114.459998][ T7490] ? __lock_acquire+0x49f/0x1a40 [ 114.460034][ T7490] ? __lock_acquire+0x49f/0x1a40 [ 114.460076][ T7490] ? __lock_acquire+0x49f/0x1a40 [ 114.460104][ T7490] ? __lock_acquire+0x49f/0x1a40 [ 114.460131][ T7490] ? __pfx_widen_string+0x10/0x10 [ 114.460156][ T7490] ? find_held_lock+0x2b/0x80 [ 114.460177][ T7490] ? __might_fault+0xc5/0x140 [ 114.460195][ T7490] ? __might_fault+0xc5/0x140 [ 114.460223][ T7490] binder_thread_write+0x9c7/0x4db0 [ 114.460253][ T7490] ? kasan_save_track+0x14/0x30 [ 114.460275][ T7490] ? kasan_save_free_info+0x3b/0x70 [ 114.460298][ T7490] ? __pfx_binder_thread_write+0x10/0x10 [ 114.460327][ T7490] ? binder_debug+0xe0/0x190 [ 114.460351][ T7490] ? __pfx_binder_debug+0x10/0x10 [ 114.460382][ T7490] ? __might_fault+0xc5/0x140 [ 114.460409][ T7490] ? __pfx_binder_ioctl+0x10/0x10 [ 114.460435][ T7490] binder_ioctl+0x28ca/0x74a0 [ 114.460466][ T7490] ? tomoyo_path_number_perm+0x28f/0x580 [ 114.460489][ T7490] ? tomoyo_path_number_perm+0x28f/0x580 [ 114.460516][ T7490] ? tomoyo_path_number_perm+0x188/0x580 [ 114.460541][ T7490] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 114.460565][ T7490] ? __pfx_binder_ioctl+0x10/0x10 [ 114.460598][ T7490] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 114.460625][ T7490] ? do_vfs_ioctl+0x226/0x13e0 [ 114.460652][ T7490] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 114.460683][ T7490] ? find_held_lock+0x2b/0x80 [ 114.460704][ T7490] ? __fget_files+0x215/0x3d0 [ 114.460719][ T7490] ? hook_file_ioctl_common+0x140/0x440 [ 114.460749][ T7490] ? __fget_files+0x21f/0x3d0 [ 114.460769][ T7490] ? __pfx_binder_ioctl+0x10/0x10 [ 114.460796][ T7490] compat_ptr_ioctl+0x6e/0xa0 [ 114.460819][ T7490] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 114.460842][ T7490] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 114.460876][ T7490] __do_fast_syscall_32+0xe7/0x970 [ 114.460900][ T7490] ? lockdep_hardirqs_on+0x78/0x100 [ 114.460925][ T7490] do_fast_syscall_32+0x32/0x70 [ 114.460950][ T7490] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.460973][ T7490] RIP: 0023:0xf7f14fec [ 114.460995][ T7490] Code: Unable to access opcode bytes at 0xf7f14fc2. [ 114.461003][ T7490] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 114.461022][ T7490] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0306201 [ 114.461033][ T7490] RDX: 0000000080004a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.461043][ T7490] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.461053][ T7490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.461063][ T7490] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.461086][ T7490] [ 114.499624][ T6443] tipc: Node number set to 1 [ 114.867746][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.418'. [ 115.574879][ T5453] veth1_vlan: left promiscuous mode [ 115.742757][ T7527] overlayfs: statfs failed on './file0' [ 115.765069][ T5453] veth1_vlan: entered promiscuous mode [ 115.826203][ T61] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 115.978124][ T61] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.981800][ T61] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 115.984975][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.993738][ T61] usb 7-1: config 0 descriptor?? [ 116.147362][ T7555] netlink: 32 bytes leftover after parsing attributes in process `syz.3.431'. [ 116.206681][ T61] usbhid 7-1:0.0: can't add hid device: -71 [ 116.208832][ T61] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 116.216173][ T61] usb 7-1: USB disconnect, device number 9 [ 116.254145][ T7555] binder_alloc: 7554: pid 7554 spamming oneway? 1 buffers allocated for a total size of 4096 [ 116.326458][ T5830] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 116.478221][ T5830] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 116.481215][ T5830] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 116.485166][ T5830] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 116.488842][ T5830] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 116.498260][ T5830] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 116.502762][ T5830] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 116.508181][ T5830] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 116.515153][ T5830] usb 9-1: config 168 interface 0 has no altsetting 0 [ 116.518784][ T5830] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 116.521185][ T5830] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 116.524720][ T5830] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 116.529098][ T5830] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 116.533672][ T5830] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 116.537333][ T5830] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 116.540897][ T5830] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 116.545119][ T5830] usb 9-1: config 168 interface 0 has no altsetting 0 [ 116.548787][ T5830] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 116.551430][ T5830] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 116.555296][ T5830] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 116.558816][ T5830] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 116.562617][ T5830] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 116.566817][ T5830] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 116.570381][ T5830] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 116.574617][ T5830] usb 9-1: config 168 interface 0 has no altsetting 0 [ 116.580413][ T5830] usb 9-1: string descriptor 0 read error: -22 [ 116.583183][ T5830] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 116.586072][ T5830] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.607700][ T5830] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 116.912353][ T5893] usb 9-1: USB disconnect, device number 4 [ 117.153524][ T7563] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 117.160513][ T7563] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 117.162498][ T7563] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 117.164479][ T7563] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 117.172711][ T7563] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 117.177158][ T7563] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 117.179620][ T7563] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 117.183298][ T7563] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 117.200178][ T5102] Bluetooth: hci4: sending frame failed (-49) [ 117.206841][ T64] Bluetooth: hci4: Entering manufacturer mode failed (-49) [ 117.238475][ T5830] usb 6-1: USB disconnect, device number 10 [ 117.261644][ T5830] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 117.276494][ T5830] opticon 6-1:1.0: device disconnected [ 117.307000][ T7574] jffs2: notice: (7574) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 117.309092][ T7576] loop0: detected capacity change from 0 to 8 [ 117.319145][ T7574] FAULT_INJECTION: forcing a failure. [ 117.319145][ T7574] name failslab, interval 1, probability 0, space 0, times 0 [ 117.335106][ T7576] block2mtd: erasesize must be a divisor of device size [ 117.339470][ T7574] CPU: 3 UID: 0 PID: 7574 Comm: syz.2.434 Not tainted syzkaller #0 PREEMPT(full) [ 117.339487][ T7574] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.339495][ T7574] Call Trace: [ 117.339500][ T7574] [ 117.339505][ T7574] dump_stack_lvl+0x100/0x190 [ 117.339524][ T7574] should_fail_ex.cold+0x5/0xa [ 117.339537][ T7574] should_failslab+0xc2/0x120 [ 117.339553][ T7574] __kmalloc_noprof+0xfc/0x820 [ 117.339568][ T7574] ? tomoyo_encode2+0xfb/0x3c0 [ 117.339588][ T7574] tomoyo_encode2+0xfb/0x3c0 [ 117.339607][ T7574] tomoyo_encode+0x29/0x50 [ 117.339623][ T7574] tomoyo_realpath_from_path+0x18c/0x690 [ 117.339650][ T7574] tomoyo_path_number_perm+0x23c/0x580 [ 117.339670][ T7574] ? tomoyo_path_number_perm+0x22e/0x580 [ 117.339689][ T7574] ? print_kernel_ident+0x10/0x40 [ 117.339710][ T7574] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 117.339739][ T7574] ? __lock_acquire+0x49f/0x1a40 [ 117.339773][ T7574] ? current_check_access_path+0x269/0x430 [ 117.339798][ T7574] ? __pfx_current_check_access_path+0x10/0x10 [ 117.339823][ T7574] ? d_alloc_parallel+0x9ed/0x14b0 [ 117.339851][ T7574] tomoyo_path_mknod+0x164/0x190 [ 117.339869][ T7574] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 117.339886][ T7574] ? __d_lookup+0x25c/0x4a0 [ 117.339906][ T7574] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 117.339932][ T7574] security_path_mknod+0x161/0x300 [ 117.339958][ T7574] may_o_create+0x30/0x3a0 [ 117.339983][ T7574] path_openat+0x2e42/0x4280 [ 117.340010][ T7574] ? __pfx_path_openat+0x10/0x10 [ 117.340032][ T7574] do_file_open+0x20e/0x430 [ 117.340047][ T7574] ? __lock_acquire+0x49f/0x1a40 [ 117.340072][ T7574] ? __pfx_do_file_open+0x10/0x10 [ 117.340122][ T7574] ? _raw_spin_unlock+0x28/0x50 [ 117.340141][ T7574] ? alloc_fd+0x471/0x7a0 [ 117.340162][ T7574] do_sys_openat2+0x10f/0x1e0 [ 117.340183][ T7574] ? __pfx_do_sys_openat2+0x10/0x10 [ 117.340207][ T7574] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 117.340234][ T7574] __ia32_compat_sys_openat+0x12d/0x210 [ 117.340257][ T7574] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 117.340277][ T7574] ? fput+0x79/0x100 [ 117.340295][ T7574] ? ksys_write+0x1ac/0x250 [ 117.340309][ T7574] ? __pfx_ksys_write+0x10/0x10 [ 117.340328][ T7574] __do_fast_syscall_32+0xe7/0x970 [ 117.340350][ T7574] ? lockdep_hardirqs_on+0x78/0x100 [ 117.340373][ T7574] do_fast_syscall_32+0x32/0x70 [ 117.340395][ T7574] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.340419][ T7574] RIP: 0023:0xf6fcefec [ 117.340439][ T7574] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 117.340446][ T7574] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 117.340463][ T7574] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000600 [ 117.340473][ T7574] RDX: 0000000000000042 RSI: 00000000000001ff RDI: 0000000000000000 [ 117.340483][ T7574] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.340491][ T7574] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 117.340500][ T7574] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.340522][ T7574] [ 117.356216][ T7574] ERROR: Out of memory at tomoyo_realpath_from_path. [ 117.914845][ T7601] jffs2: notice: (7601) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 118.056191][ T5830] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 118.406204][ T5102] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.629406][ T5830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.633031][ T5830] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 118.635894][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.643432][ T5830] usb 6-1: config 0 descriptor?? [ 118.869310][ T7620] syzkaller0: entered promiscuous mode [ 118.871744][ T7620] syzkaller0: entered allmulticast mode [ 119.207320][ T5102] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.207376][ T5753] Bluetooth: hci2: command 0x040f tx timeout [ 119.211450][ T5753] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.303432][ T5830] usbhid 6-1:0.0: can't add hid device: -71 [ 119.305396][ T5830] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 119.313718][ T5830] usb 6-1: USB disconnect, device number 11 [ 119.413716][ T7633] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 120.652100][ T7653] MTD: Couldn't look up './dev/mtdblock0': -2 [ 120.749136][ T7658] xt_CT: No such helper "pptp" [ 120.812818][ T7667] e1000e 0000:00:02.0 eth1: removed PHC [ 120.834058][ T42] audit: type=1800 audit(1785965671.022:224): pid=7669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.462" name="control" dev="configfs" ino=19883 res=0 errno=0 [ 121.100241][ T7667] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 121.211260][ T7686] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 121.213850][ T7686] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 121.228035][ T7686] vhci_hcd vhci_hcd.0: Device attached [ 121.288950][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 121.289096][ T5102] Bluetooth: hci2: command 0x040f tx timeout [ 121.410039][ T7686] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 121.526487][ T5830] usb 46-1: SetAddress Request (2) to port 0 [ 121.528500][ T5830] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 121.714481][ T7687] vhci_hcd: connection reset by peer [ 121.716523][ T5800] vhci_hcd vhci_hcd.4: stop threads [ 121.718435][ T5800] vhci_hcd vhci_hcd.4: release socket [ 121.721206][ T5800] vhci_hcd vhci_hcd.4: disconnect device [ 121.759020][ T7673] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 122.029594][ T7719] syzkaller0: entered promiscuous mode [ 122.035363][ T7719] syzkaller0: entered allmulticast mode [ 122.286249][ T5821] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 122.437527][ T5821] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 122.441299][ T5821] usb 6-1: config 0 interface 0 has no altsetting 0 [ 122.445135][ T5821] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 122.448382][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 122.451101][ T5821] usb 6-1: Product: syz [ 122.452459][ T5821] usb 6-1: Manufacturer: syz [ 122.454069][ T5821] usb 6-1: SerialNumber: syz [ 122.458265][ T5821] usb 6-1: config 0 descriptor?? [ 122.468604][ T5821] usb 6-1: selecting invalid altsetting 0 [ 123.367563][ T5102] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.376265][ T5102] Bluetooth: hci2: command 0x040f tx timeout [ 124.763758][ T7821] random: crng reseeded on system resumption [ 124.955220][ T55] usb 6-1: USB disconnect, device number 12 [ 124.991689][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.486'. [ 124.994879][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.486'. [ 125.043580][ T7828] netlink: 92 bytes leftover after parsing attributes in process `syz.4.488'. [ 125.446310][ T5102] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.453606][ T7852] overlayfs: overlapping lowerdir path [ 125.646488][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 125.808060][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.811729][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 125.815017][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.821359][ T10] usb 6-1: config 0 descriptor?? [ 125.822992][ T7869] loop6: detected capacity change from 0 to 2640 [ 125.835159][ T7869] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.840585][ T7869] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.844665][ T7869] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.850460][ T7869] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.853771][ T7869] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.857333][ T7869] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.860620][ T7869] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.863827][ T7869] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.868569][ T7869] ldm_validate_partition_table(): Disk read failed. [ 125.871366][ T7869] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.876761][ T7869] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.879994][ T7869] Dev loop6: unable to read RDB block 0 [ 125.883458][ T7869] loop6: unable to read partition table [ 125.885881][ T7869] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 125.928961][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.504'. [ 125.986823][ T7871] loop6: detected capacity change from 2640 to 524288000 [ 126.038018][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 126.040067][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 126.054725][ T10] usb 6-1: USB disconnect, device number 13 [ 126.065668][ T7865] netlink: 16 bytes leftover after parsing attributes in process `syz.2.502'. [ 126.069504][ T7865] netlink: 20 bytes leftover after parsing attributes in process `syz.2.502'. [ 126.093932][ T7878] capability: warning: `syz.4.506' uses deprecated v2 capabilities in a way that may be insecure [ 126.145903][ T7883] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 126.157136][ T7883] CIFS mount error: No usable UNC path provided in device string! [ 126.157136][ T7883] [ 126.161927][ T7883] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 126.167193][ T7883] netlink: 24 bytes leftover after parsing attributes in process `syz.4.507'. [ 126.270566][ T7885] amd5536udc-pci 0000:00:02.0: Synopsys USB Device Controller [ 126.275471][ T7885] amd5536udc-pci 0000:00:02.0: DMA mode (PPBNDU) [ 126.400622][ T42] audit: type=1326 audit(1785965676.592:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 126.413152][ T42] audit: type=1326 audit(1785965676.592:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.509" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70befec code=0x7ffc0000 [ 126.420488][ T42] audit: type=1326 audit(1785965676.592:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 126.429289][ T42] audit: type=1326 audit(1785965676.592:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.509" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70befec code=0x7ffc0000 [ 126.442096][ T42] audit: type=1326 audit(1785965676.592:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 126.457277][ T42] audit: type=1326 audit(1785965676.592:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.509" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf70befec code=0x7ffc0000 [ 126.476340][ T42] audit: type=1326 audit(1785965676.592:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 126.485770][ T42] audit: type=1326 audit(1785965676.592:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 126.486209][ T41] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 126.495555][ T42] audit: type=1326 audit(1785965676.592:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.509" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf70befec code=0x7ffc0000 [ 126.505764][ T42] audit: type=1326 audit(1785965676.592:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 126.566695][ T5830] usb 46-1: device descriptor read/8, error -110 [ 126.636413][ T41] usb 6-1: device descriptor read/64, error -71 [ 126.760056][ T5844] IPVS: starting estimator thread 0... [ 126.856292][ T7917] IPVS: using max 42 ests per chain, 100800 per kthread [ 126.876496][ T41] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 126.883479][ T7920] Cannot find set identified by id 2 to match [ 126.911889][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 126.915772][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 126.919615][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 126.922157][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 126.956663][ T5830] usb usb46-port1: attempt power cycle [ 127.006305][ T41] usb 6-1: device descriptor read/64, error -71 [ 127.118225][ T41] usb usb6-port1: attempt power cycle [ 127.177855][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 127.179908][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 127.455007][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.515'. [ 127.526790][ T41] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 127.556904][ T41] usb 6-1: device descriptor read/8, error -71 [ 127.558165][ T5830] usb usb46-port1: unable to enumerate USB device [ 127.623331][ T7920] ceph: No mds server is up or the cluster is laggy [ 127.696838][ T55] libceph: connect (1)[c::]:6789 error -101 [ 127.702436][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 127.719216][ T7940] netlink: 'syz.4.519': attribute type 64 has an invalid length. [ 127.721937][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.519'. [ 127.725187][ T7940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.816320][ T41] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 127.838206][ T41] usb 6-1: device descriptor read/8, error -71 [ 127.947195][ T41] usb usb6-port1: unable to enumerate USB device [ 128.138389][ T7951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'. [ 128.931006][ T7965] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.937356][ T7965] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.022763][ T7993] binder: 7992:7993 ioctl c0306201 80000040 returned -14 [ 131.351413][ T8000] jffs2: notice: (8000) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 131.516231][ T8006] netlink: 'syz.3.528': attribute type 1 has an invalid length. [ 131.518804][ T8006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.528'. [ 132.611173][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'. [ 132.667155][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.512498][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.541'. [ 133.518882][ T8033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.541'. [ 133.522593][ T8033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.541'. [ 133.556225][ T8037] comedi comedi0: comedi_config --init_data is deprecated [ 133.560666][ T8035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.540'. [ 133.576344][ T8035] bridge_slave_1: left allmulticast mode [ 133.578800][ T8035] bridge_slave_1: left promiscuous mode [ 133.583846][ T8035] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.621543][ T8035] bridge_slave_0: left allmulticast mode [ 133.625900][ T8035] bridge_slave_0: left promiscuous mode [ 133.631806][ T8035] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.787029][ T8043] option changes via remount are deprecated (pid=8038 comm=syz.4.543) [ 133.968290][ T61] hid-generic 000A:FFFFFF1D:0002.0003: unknown main item tag 0x0 [ 133.983495][ T61] hid-generic 000A:FFFFFF1D:0002.0003: unknown main item tag 0x0 [ 133.995150][ T61] hid-generic 000A:FFFFFF1D:0002.0003: unknown main item tag 0x0 [ 134.005376][ T61] hid-generic 000A:FFFFFF1D:0002.0003: unknown main item tag 0x0 [ 134.014971][ T61] hid-generic 000A:FFFFFF1D:0002.0003: unknown main item tag 0x0 [ 134.018553][ T8046] efs: cannot read volume header [ 134.034501][ T61] hid-generic 000A:FFFFFF1D:0002.0003: unknown main item tag 0x0 [ 134.062009][ T61] hid-generic 000A:FFFFFF1D:0002.0003: unknown main item tag 0x0 [ 134.075462][ T61] hid-generic 000A:FFFFFF1D:0002.0003: unknown main item tag 0x0 [ 134.094099][ T61] hid-generic 000A:FFFFFF1D:0002.0003: unknown main item tag 0x0 [ 134.109940][ T61] hid-generic 000A:FFFFFF1D:0002.0003: unknown main item tag 0x0 [ 134.272539][ T61] hid-generic 000A:FFFFFF1D:0002.0003: hidraw1: HID v0.04 Device [syz0] on syz1 [ 134.787166][ T8056] 9p: Bad value for 'wfdno' [ 135.036182][ T8050] fido_id[8050]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 135.544719][ T8066] netlink: 'syz.3.547': attribute type 64 has an invalid length. [ 135.559173][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.547'. [ 135.573088][ T8066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.672829][ T8071] netlink: 'syz.4.550': attribute type 1 has an invalid length. [ 135.768099][ T8057] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 135.837969][ T8057] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 135.853322][ T8057] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 135.861930][ T8057] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 135.865543][ T8057] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 135.881496][ T8057] pci 0000:00:01.0: Adding to iommu group 1 [ 135.890753][ T8057] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 135.893573][ T8057] pci 0000:00:01.0: vgaarb: bridge control possible [ 135.896235][ T8057] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 135.920491][ T8057] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 135.923882][ T8057] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 135.929677][ T8057] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 135.945531][ T8057] [drm] Found bochs VGA, ID 0xb0c5. [ 135.947862][ T8057] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 135.954361][ T8057] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 136.591246][ T8087] syzkaller0: entered promiscuous mode [ 136.602101][ T8087] syzkaller0: entered allmulticast mode [ 136.639653][ T8087] netlink: 24 bytes leftover after parsing attributes in process `syz.2.555'. [ 136.651657][ T8087] netlink: 24 bytes leftover after parsing attributes in process `syz.2.555'. [ 136.679813][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 136.679831][ T42] audit: type=1800 audit(1785965684.872:255): pid=8087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.555" name="is_nonrot" dev="configfs" ino=23678 res=0 errno=0 [ 137.187060][ T8102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.560'. [ 137.319533][ C0] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000001) at rIP: 0xffffffff81b177ba (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 137.325899][ C0] Call Trace: [ 137.327355][ C0] [ 137.328596][ C0] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 137.331377][ C0] ? sched_clock_cpu+0x6c/0x570 [ 137.333459][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 137.335669][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 137.337878][ C0] mce_cpu_restart+0xd5/0x1f0 [ 137.339870][ C0] __flush_smp_call_function_queue+0x281/0x960 [ 137.342402][ C0] __sysvec_call_function+0x81/0x420 [ 137.344606][ C0] sysvec_call_function+0x9e/0xc0 [ 137.346741][ C0] [ 137.347964][ C0] [ 137.349213][ C0] asm_sysvec_call_function+0x1a/0x20 [ 137.351367][ C0] RIP: 0010:queue_delayed_work_on+0x87/0x1e0 [ 137.353874][ C0] Code: 57 3a 00 40 84 ed 74 38 e8 b6 5d 3a 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 44 58 3a 00 48 85 db 0f 85 32 01 00 00 31 ed 94 5d 3a 00 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc [ 137.361575][ C0] RSP: 0018:ffffc90003e9fc10 EFLAGS: 00000293 [ 137.364140][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81cf5414 [ 137.367376][ C0] RDX: ffff88802a868000 RSI: ffffffff81cf5422 RDI: ffff88802a868000 [ 137.370625][ C0] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 137.373895][ C0] R10: 0000000000000000 R11: 000000000000756b R12: 0000000000000008 [ 137.377171][ C0] R13: ffff88801bcc6400 R14: 0000000000000000 R15: 0000000000000000 [ 137.380413][ C0] ? queue_delayed_work_on+0x134/0x1e0 [ 137.382715][ C0] ? queue_delayed_work_on+0x142/0x1e0 [ 137.384983][ C0] process_one_work+0xa23/0x1940 [ 137.387023][ C0] ? __pfx_process_one_work+0x10/0x10 [ 137.389266][ C0] ? __pfx_process_srcu+0x10/0x10 [ 137.391402][ C0] worker_thread+0x5ef/0xe50 [ 137.393381][ C0] ? __pfx_worker_thread+0x10/0x10 [ 137.395487][ C0] ? kthread+0x13a/0x450 [ 137.397249][ C0] ? __pfx_worker_thread+0x10/0x10 [ 137.399373][ C0] kthread+0x370/0x450 [ 137.401110][ C0] ? __pfx_kthread+0x10/0x10 [ 137.403110][ C0] ret_from_fork+0x72b/0xd50 [ 137.405030][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 137.407121][ C0] ? __switch_to+0x800/0x10f0 [ 137.409073][ C0] ? __pfx_kthread+0x10/0x10 [ 137.410939][ C0] ret_from_fork_asm+0x1a/0x30 [ 137.412976][ C0] [ 137.667668][ T8126] binder: 8118:8126 ioctl c010640b 80000000 returned -22 [ 137.668040][ T8127] netlink: 'syz.2.567': attribute type 64 has an invalid length. [ 137.673630][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.567'. [ 137.677884][ T8127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.353168][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.576'. [ 139.424341][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 139.440229][ T8164] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 139.873944][ T8177] netlink: 'syz.1.582': attribute type 64 has an invalid length. [ 139.878077][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.582'. [ 139.889416][ T8179] jffs2: notice: (8179) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 139.892126][ T8177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.897958][ T8179] FAULT_INJECTION: forcing a failure. [ 139.897958][ T8179] name failslab, interval 1, probability 0, space 0, times 0 [ 139.912831][ T8179] CPU: 1 UID: 0 PID: 8179 Comm: syz.3.584 Not tainted syzkaller #0 PREEMPT(full) [ 139.912857][ T8179] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.912867][ T8179] Call Trace: [ 139.912874][ T8179] [ 139.912881][ T8179] dump_stack_lvl+0x100/0x190 [ 139.912907][ T8179] should_fail_ex.cold+0x5/0xa [ 139.912926][ T8179] should_failslab+0xc2/0x120 [ 139.912950][ T8179] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 139.912971][ T8179] ? jffs2_alloc_inode+0x25/0x50 [ 139.913036][ T8179] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 139.913053][ T8179] jffs2_alloc_inode+0x25/0x50 [ 139.913068][ T8179] alloc_inode+0x68/0x250 [ 139.913091][ T8179] iget_locked+0x1d9/0x6d0 [ 139.913113][ T8179] ? __pfx_iget_locked+0x10/0x10 [ 139.913134][ T8179] ? __mutex_lock+0x26d/0x1bd0 [ 139.913157][ T8179] ? jffs2_lookup+0xd8/0x410 [ 139.913177][ T8179] jffs2_iget+0xb5/0xe30 [ 139.913202][ T8179] ? __pfx_jffs2_iget+0x10/0x10 [ 139.913231][ T8179] ? __pfx_d_alloc_parallel+0x10/0x10 [ 139.913260][ T8179] jffs2_lookup+0x353/0x410 [ 139.913283][ T8179] __lookup_slow+0x155/0x320 [ 139.913307][ T8179] lookup_slow+0x50/0x70 [ 139.913329][ T8179] path_lookupat+0x5e8/0xc40 [ 139.913358][ T8179] ? __do_fast_syscall_32+0xe7/0x970 [ 139.913391][ T8179] ? do_fast_syscall_32+0x32/0x70 [ 139.913415][ T8179] filename_lookup+0x202/0x590 [ 139.913444][ T8179] ? __pfx_filename_lookup+0x10/0x10 [ 139.913486][ T8179] ? find_held_lock+0x2b/0x80 [ 139.913506][ T8179] ? __might_fault+0xc5/0x140 [ 139.913522][ T8179] ? __might_fault+0xc5/0x140 [ 139.913544][ T8179] filename_setxattr+0xa1/0x1d0 [ 139.913563][ T8179] ? __pfx_filename_setxattr+0x10/0x10 [ 139.913584][ T8179] ? do_getname+0x191/0x390 [ 139.913607][ T8179] path_setxattrat+0x1ff/0x3b0 [ 139.913626][ T8179] ? __pfx_path_setxattrat+0x10/0x10 [ 139.913647][ T8179] ? rcu_read_lock_any_held+0x6a/0xa0 [ 139.913669][ T8179] ? find_held_lock+0x2b/0x80 [ 139.913707][ T8179] ? fput+0x79/0x100 [ 139.913742][ T8179] ? ksys_write+0x1ac/0x250 [ 139.913761][ T8179] __ia32_sys_lsetxattr+0xc7/0x140 [ 139.913779][ T8179] ? __do_fast_syscall_32+0x98/0x970 [ 139.913801][ T8179] ? lockdep_hardirqs_on+0x78/0x100 [ 139.913822][ T8179] __do_fast_syscall_32+0xe7/0x970 [ 139.913843][ T8179] ? lockdep_hardirqs_on+0x78/0x100 [ 139.913865][ T8179] do_fast_syscall_32+0x32/0x70 [ 139.913888][ T8179] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.913909][ T8179] RIP: 0023:0xf70befec [ 139.913930][ T8179] Code: Unable to access opcode bytes at 0xf70befc2. [ 139.913937][ T8179] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 00000000000000e3 [ 139.913955][ T8179] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 00000000800001c0 [ 139.913966][ T8179] RDX: 0000000080000240 RSI: 000000000000000c RDI: 0000000000000000 [ 139.913976][ T8179] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.913985][ T8179] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 139.913996][ T8179] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.914017][ T8179] [ 139.915145][ T8179] jffs2: iget() failed for ino #2 [ 140.126478][ T8188] netlink: 128 bytes leftover after parsing attributes in process `syz.3.585'. [ 140.130971][ T8186] uhci_hcd 0000:00:1d.0: remove, state 4 [ 140.133189][ T8186] usb usb2: USB disconnect, device number 1 [ 140.298064][ T8186] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 140.697258][ T8187] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 140.723675][ T8187] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2 [ 140.727185][ T8187] uhci_hcd 0000:00:1d.0: detected 2 ports [ 140.730186][ T8187] uhci_hcd 0000:00:1d.0: irq 16, io port 0x0000c0e0 [ 140.750007][ T8187] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 140.754060][ T8187] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 140.757801][ T8187] usb usb2: Product: UHCI Host Controller [ 140.760405][ T8187] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 140.763187][ T8187] usb usb2: SerialNumber: 0000:00:1d.0 [ 140.819485][ T8187] hub 2-0:1.0: USB hub found [ 140.832110][ T8187] hub 2-0:1.0: 2 ports detected [ 141.067195][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'. [ 141.336403][ T8207] jffs2: notice: (8207) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 141.614733][ T8219] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.668583][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.671068][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.755468][ T7193] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 141.779950][ T10] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 141.782296][ T7193] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 142.406447][ T10] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 142.697609][ T61] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 142.759483][ T5102] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 142.768186][ T8225] netlink: 'syz.3.598': attribute type 5 has an invalid length. [ 142.780666][ T42] audit: type=1400 audit(1785965690.952:256): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8224 comm="syz.3.598" [ 143.022666][ T8242] netlink: 3 bytes leftover after parsing attributes in process `syz.4.610'. [ 143.057488][ T41] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 143.124787][ T8245] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 143.127735][ T8245] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 143.133933][ T8245] vhci_hcd vhci_hcd.0: Device attached [ 143.307573][ T8251] syzkaller1: entered promiscuous mode [ 143.310215][ T8251] syzkaller1: entered allmulticast mode [ 143.360002][ T41] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.406422][ T5830] usb 42-1: SetAddress Request (10) to port 0 [ 143.409042][ T5830] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 143.615091][ T8253] jffs2: notice: (8253) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 143.657010][ T8246] vhci_hcd: connection reset by peer [ 143.659849][ T7193] vhci_hcd vhci_hcd.2: stop threads [ 143.662299][ T7193] vhci_hcd vhci_hcd.2: release socket [ 143.664701][ T7193] vhci_hcd vhci_hcd.2: disconnect device [ 143.934570][ T41] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 143.947391][ T41] usb 5-1: Dual-Role OTG device on HNP port [ 143.957937][ T41] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 143.965423][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.976852][ C2] ------------[ cut here ]------------ [ 143.979124][ C2] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 143.981186][ C2] WARNING: drivers/usb/gadget/udc/core.c:124 at usb_ep_enable+0x3e6/0x490, CPU#2: swapper/2/0 [ 143.985001][ C2] Modules linked in: [ 143.986818][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) [ 143.989636][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.992864][ C2] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 143.994569][ C2] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d aa 86 63 09 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 80 91 b7 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 20 84 b7 8c [ 144.000547][ C2] RSP: 0018:ffffc90000538a10 EFLAGS: 00010046 [ 144.002516][ C2] RAX: dffffc0000000000 RBX: ffff8880223c40e0 RCX: ffffffff8cb7c820 [ 144.004984][ C2] RDX: 0000000000000081 RSI: ffffffff8cb79180 RDI: ffffffff91306790 [ 144.007484][ C2] RBP: 0000000000000081 R08: ffffffff8cb78460 R09: 0000000000000000 [ 144.009970][ C2] R10: 0000000000000000 R11: 0000000000000002 R12: ffffffff8cb78460 [ 144.012424][ C2] R13: 0000000000000000 R14: ffff8880223c40e0 R15: ffff888024f7fba0 [ 144.014895][ C2] FS: 0000000000000000(0000) GS:ffff888096ddf000(0000) knlGS:0000000000000000 [ 144.017671][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.019720][ C2] CR2: 0000000080007000 CR3: 0000000056297000 CR4: 0000000000352ef0 [ 144.022200][ C2] Call Trace: [ 144.023304][ C2] [ 144.024227][ C2] hidg_set_alt+0x190/0xa10 [ 144.025693][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 144.027340][ C2] ? rcu_is_watching+0x12/0xc0 [ 144.028859][ C2] composite_setup+0x2ccf/0x9290 [ 144.030426][ C2] ? __pfx_composite_setup+0x10/0x10 [ 144.032097][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 144.033803][ C2] ? do_raw_spin_lock+0x128/0x260 [ 144.035396][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 144.037093][ C2] ? configfs_composite_setup+0xfb/0x130 [ 144.038850][ C2] configfs_composite_setup+0xfb/0x130 [ 144.040554][ C2] dummy_timer+0x2045/0x36f0 [ 144.042037][ C2] ? do_raw_spin_lock+0x128/0x260 [ 144.043667][ C2] ? find_held_lock+0x2b/0x80 [ 144.045134][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 144.046922][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 144.048718][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 144.050573][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 144.052348][ C2] ? __pfx_debug_object_deactivate+0x10/0x10 [ 144.054252][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 144.055831][ C2] ? rcu_is_watching+0x12/0xc0 [ 144.057343][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 144.059182][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 144.060737][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 144.062386][ C2] hrtimer_run_softirq+0x17d/0x2c0 [ 144.064054][ C2] handle_softirqs+0x1ea/0x9b0 [ 144.065564][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 144.067271][ C2] ? _raw_spin_unlock+0x28/0x50 [ 144.068826][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 144.070602][ C2] __irq_exit_rcu+0x162/0x210 [ 144.072100][ C2] irq_exit_rcu+0x9/0x30 [ 144.073472][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 144.075245][ C2] [ 144.076185][ C2] [ 144.077130][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 144.079019][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 144.080779][ C2] Code: 76 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 03 0e 13 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 144.086784][ C2] RSP: 0018:ffffc9000047fe00 EFLAGS: 00000202 [ 144.088661][ C2] RAX: 000000000020125d RBX: ffff88801c3fca80 RCX: ffffffff8bb892d5 [ 144.091087][ C2] RDX: 0000000000000000 RSI: ffffffff8e1a9b0a RDI: ffffffff8c400a80 [ 144.093581][ C2] RBP: ffffed100387f950 R08: 0000000000000001 R09: ffffed100568678d [ 144.096059][ C2] R10: ffff88802b433c6b R11: 0000000000000000 R12: 0000000000000000 [ 144.098527][ C2] R13: 0000000000000000 R14: 1ffff9200008ffc4 R15: dffffc0000000000 [ 144.100985][ C2] ? ct_kernel_exit+0x125/0x180 [ 144.102556][ C2] default_idle+0x9/0x10 [ 144.103908][ C2] default_idle_call+0x6c/0xb0 [ 144.105418][ C2] do_idle+0x3a7/0x5b0 [ 144.106723][ C2] ? __pfx_do_idle+0x10/0x10 [ 144.108185][ C2] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 144.110045][ C2] cpu_startup_entry+0x4f/0x60 [ 144.111532][ C2] start_secondary+0x21d/0x2d0 [ 144.113067][ C2] ? __pfx_start_secondary+0x10/0x10 [ 144.114718][ C2] common_startup_64+0x13e/0x158 [ 144.116261][ C2] [ 144.117228][ C2] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 144.119492][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) [ 144.122238][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 144.125296][ C2] Call Trace: [ 144.126339][ C2] [ 144.127266][ C2] dump_stack_lvl+0x100/0x190 [ 144.128717][ C2] vpanic+0x552/0x970 [ 144.129949][ C2] ? __pfx_vpanic+0x10/0x10 [ 144.131358][ C2] panic+0xd1/0xe0 [ 144.132544][ C2] ? __pfx_panic+0x10/0x10 [ 144.133895][ C2] ? check_panic_on_warn+0x1f/0x90 [ 144.135402][ C2] check_panic_on_warn.cold+0x19/0x34 [ 144.136957][ C2] ? usb_ep_enable+0x3e6/0x490 [ 144.138339][ C2] __warn.cold+0x191/0x318 [ 144.139740][ C2] __report_bug+0x30f/0x440 [ 144.141187][ C2] ? usb_ep_enable+0x3e6/0x490 [ 144.142750][ C2] ? __pfx___report_bug+0x10/0x10 [ 144.144347][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 144.146174][ C2] ? __pfx_try_to_wake_up+0x10/0x10 [ 144.147816][ C2] report_bug_entry+0xe1/0x290 [ 144.149336][ C2] ? usb_ep_enable+0x3f8/0x490 [ 144.150859][ C2] handle_bug+0x1cd/0x2a0 [ 144.152235][ C2] exc_invalid_op+0x17/0x50 [ 144.153711][ C2] asm_exc_invalid_op+0x1a/0x20 [ 144.155195][ C2] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 144.156778][ C2] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d aa 86 63 09 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 80 91 b7 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 20 84 b7 8c [ 144.163663][ C2] RSP: 0018:ffffc90000538a10 EFLAGS: 00010046 [ 144.166118][ C2] RAX: dffffc0000000000 RBX: ffff8880223c40e0 RCX: ffffffff8cb7c820 [ 144.169116][ C2] RDX: 0000000000000081 RSI: ffffffff8cb79180 RDI: ffffffff91306790 [ 144.171871][ C2] RBP: 0000000000000081 R08: ffffffff8cb78460 R09: 0000000000000000 [ 144.174822][ C2] R10: 0000000000000000 R11: 0000000000000002 R12: ffffffff8cb78460 [ 144.177886][ C2] R13: 0000000000000000 R14: ffff8880223c40e0 R15: ffff888024f7fba0 [ 144.181067][ C2] hidg_set_alt+0x190/0xa10 [ 144.182972][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 144.184864][ C2] ? rcu_is_watching+0x12/0xc0 [ 144.186451][ C2] composite_setup+0x2ccf/0x9290 [ 144.188521][ C2] ? __pfx_composite_setup+0x10/0x10 [ 144.190614][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 144.192791][ C2] ? do_raw_spin_lock+0x128/0x260 [ 144.194805][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 144.196970][ C2] ? configfs_composite_setup+0xfb/0x130 [ 144.199017][ C2] configfs_composite_setup+0xfb/0x130 [ 144.201053][ C2] dummy_timer+0x2045/0x36f0 [ 144.202985][ C2] ? do_raw_spin_lock+0x128/0x260 [ 144.205033][ C2] ? find_held_lock+0x2b/0x80 [ 144.206938][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 144.209216][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 144.211490][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 144.213429][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 144.215693][ C2] ? __pfx_debug_object_deactivate+0x10/0x10 [ 144.218105][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 144.220110][ C2] ? rcu_is_watching+0x12/0xc0 [ 144.222046][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 144.224405][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 144.226093][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 144.228093][ C2] hrtimer_run_softirq+0x17d/0x2c0 [ 144.230136][ C2] handle_softirqs+0x1ea/0x9b0 [ 144.232116][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 144.234284][ C2] ? _raw_spin_unlock+0x28/0x50 [ 144.236247][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 144.238199][ C2] __irq_exit_rcu+0x162/0x210 [ 144.239695][ C2] irq_exit_rcu+0x9/0x30 [ 144.241038][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 144.242871][ C2] [ 144.243815][ C2] [ 144.244756][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 144.246716][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 144.248671][ C2] Code: 76 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 03 0e 13 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 144.254680][ C2] RSP: 0018:ffffc9000047fe00 EFLAGS: 00000202 [ 144.256440][ C2] RAX: 000000000020125d RBX: ffff88801c3fca80 RCX: ffffffff8bb892d5 [ 144.258895][ C2] RDX: 0000000000000000 RSI: ffffffff8e1a9b0a RDI: ffffffff8c400a80 [ 144.261599][ C2] RBP: ffffed100387f950 R08: 0000000000000001 R09: ffffed100568678d [ 144.264086][ C2] R10: ffff88802b433c6b R11: 0000000000000000 R12: 0000000000000000 [ 144.266415][ C2] R13: 0000000000000000 R14: 1ffff9200008ffc4 R15: dffffc0000000000 [ 144.268879][ C2] ? ct_kernel_exit+0x125/0x180 [ 144.270417][ C2] default_idle+0x9/0x10 [ 144.271774][ C2] default_idle_call+0x6c/0xb0 [ 144.273357][ C2] do_idle+0x3a7/0x5b0 [ 144.274657][ C2] ? __pfx_do_idle+0x10/0x10 [ 144.276109][ C2] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 144.277976][ C2] cpu_startup_entry+0x4f/0x60 [ 144.279498][ C2] start_secondary+0x21d/0x2d0 [ 144.281009][ C2] ? __pfx_start_secondary+0x10/0x10 [ 144.282705][ C2] common_startup_64+0x13e/0x158 [ 144.284272][ C2] [ 144.285908][ C2] Kernel Offset: disabled [ 144.287275][ C2] Rebooting in 86400 seconds..