last executing test programs: 1m10.346951567s ago: executing program 0 (id=1233): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0x4bd, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1m10.278837158s ago: executing program 0 (id=1236): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x1011c0, 0x80) write(r0, &(0x7f0000000180)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000040)='./file2\x00', 0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1db) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1m10.207430242s ago: executing program 0 (id=1238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x8, 0x80000001, 0x7}, 0x7c}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003004024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) 1m10.041473291s ago: executing program 0 (id=1243): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) socket(0x10, 0x803, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, 0x0, 0x1, 0x0, 0x3, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x14000, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000aa00)=ANY=[@ANYBLOB="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", @ANYBLOB="dc70b75fa4b0", @ANYBLOB="001500430024273a5c5cd12b2d7b4028292d2d5e2800000000b45038e4ea0707c6efdf45717fd4c7aafd317ee88a629b425976e48913e14894f214ba5cbc9819098d36f00947a00e7dec9b7e9845388acd27107800000087234b808016e56eb9e01589bb3f82b802c966dc4dad641770ee243a02fdd4ad0d567262a3da499ccf6591f41119c284d165599e9120791efc566340dcb19cd8f4b756032d6fcc6ce3e5ce22fc7b12e15e6583b417e258312505ddf4898109b53937b5a0bbb2050ded5887132ca81768507bade0bd8ce0a20f911586775c"], 0x50d8}}, 0xc000) 1m9.875975872s ago: executing program 0 (id=1246): r0 = socket$nl_route(0x10, 0x3, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r2, &(0x7f0000000000)=""/219, 0xdb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) tkill(r1, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[]) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)={r0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x8, 0x6e}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1m8.136360199s ago: executing program 0 (id=1250): mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5258c3, 0x109) write(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000001800000004000000", 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) r2 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x3, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 58.813824884s ago: executing program 32 (id=1250): mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5258c3, 0x109) write(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000001800000004000000", 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) r2 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x3, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 3.457362674s ago: executing program 4 (id=1600): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd0d, &(0x7f0000000100)="0400000000000000000000003801") 3.369631137s ago: executing program 4 (id=1594): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) readv(r0, &(0x7f00000024c0)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) 2.797379307s ago: executing program 3 (id=1608): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$kcm(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="6afee202621b03cdf44dca4235103c6c537360b6a43336c8e6be22b8f22b5dcd5e251e330ae250ffd9452c89d3cf10c2d7e8b6a0f5177ade", 0x38}], 0x1}, 0x3cc7f48442995795) close(r0) 2.509963812s ago: executing program 4 (id=1609): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x1, 0xf0]) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000000c0)=[0x80000000, 0x8]) 2.41632977s ago: executing program 2 (id=1610): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80, r2}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r2}) 2.348999814s ago: executing program 2 (id=1611): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c) listen(r0, 0x7be) syz_emit_ethernet(0x8a, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x7c, 0x4000, 0x0, 0x1d, 0x6, 0x0, @empty, @empty}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1a, 0xf5b439e5fa041319, 0xc3, 0x0, 0x0, {[@nop, @md5sig={0x13, 0x12, "1d8bd072288170b48f838afeb2336625"}, @mss={0x2, 0x4, 0x7}, @fastopen={0x22, 0xa, 'l+L?ATM\x00'}, @mptcp=@syn={0x1e, 0xc, 0xd, 0x1, 0x8, 0x4, 0x8000}, @md5sig={0x13, 0x12, "61b11c98bba34d8141343c248a5cc509"}, @md5sig={0x13, 0x12, "7de9e2c79e59a69d0733b7396a4e1baa"}]}}}}}}}, 0x0) 2.348765523s ago: executing program 2 (id=1612): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x2c, r1, 0x211, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800) 2.240091382s ago: executing program 2 (id=1613): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000080ffffff00000000000000008500000036000000850000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000cc0)={@remote, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x2, 0x58, 0x67, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xb}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x2, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x79}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x2, {{0x8, 0x2, 0x9, 0x0, 0x1, 0x2, 0x0, 0xca}, 0x2, {0xe, 0x0, 0x1, 0x12, 0x1, 0x0, 0x1, 0x1}}}}}}}}}, 0x0) 2.239830461s ago: executing program 2 (id=1614): r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) getsockopt$sock_timeval(r7, 0x1, 0x43, 0x0, &(0x7f0000000180)) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0x0, 0x0, 0x2, 0x4, 0x101], [0x20000000, 0x500, 0x4, 0x0, 0x0, 0x0, 0xf4e], [0x40, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000]], '\x00', [{0x1, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xe}, {0x5}, {0x1, 0x2}, {0x0, 0x3}, {}, {}, {0xfffffffc, 0xab9}, {0x82}, {0x400}, {0x6}], '\x00', 0x4b4}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) r8 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd28, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004091}, 0x808) 1.858728503s ago: executing program 3 (id=1616): r0 = io_uring_setup(0x3eaa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a3}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000003d40)=[{0xffffffffffffff5c, 0x0, 0x0}], 0x1) 1.363261671s ago: executing program 1 (id=1622): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) r0 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000080)={0x5, "1f7f67491b5a90eeaddb94a4031a82687063ba6e44f7b91d902d0008424ad04b9634bef178be4ba64223a1d6da6d232b4ea6a453724e5a9c45a204ec36715596"}) close(r0) 1.259818882s ago: executing program 4 (id=1623): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r0) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}}, 0x0) 1.132503612s ago: executing program 1 (id=1624): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) fcntl$notify(0xffffffffffffffff, 0x402, 0x5) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xc8, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xff, 0x3e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x80, 0x33, @data_frame={@msdu=@type01={{0x0, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x9e}, @device_a, @random="1ed794399360", @device_a, {0x1}, "", @void, @value=@ver_80211n={0x0, 0x66, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_b, @device_b, 0x50, "c51dd946ea6fc2d0477e9dcf52448e550a3a366b6083e8e4d997e82121da255923fa1d615f09650bf61f3cd0201e3dc623f683d4be7584d7cc55164d05b71009101337d7f641add040907f911a1f4017"}]}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x8}, @device_a, @from_mac}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="93fc85ff30d2", @random="2ecafcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}, "f439992d"}}}}}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') renameat(r2, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000002c0)={0x81, 0x4, 0x0, 0xb9ff, 0x9}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffe}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece) read$FUSE(r5, &(0x7f0000000c80)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000000080)=0x3) write$FUSE_DIRENT(r7, &(0x7f0000000340)=ANY=[], 0x128) read(r7, &(0x7f0000000100), 0x26) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 1.131471755s ago: executing program 4 (id=1632): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) unshare(0x2040400) 998.150757ms ago: executing program 3 (id=1625): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd27, 0x25dfdbfe, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x44000) 994.681927ms ago: executing program 3 (id=1626): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="5e80", 0x2}], 0x1}}], 0x1, 0x6081) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fe8000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000010c0)=""/4107, 0x100b, 0x0, 0x0}, &(0x7f0000000340)=0x40) 840.391802ms ago: executing program 1 (id=1627): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 759.992005ms ago: executing program 1 (id=1628): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0x7, 0xb}, {0xffe0}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xad43, 0x3, 0x2, 0x80}, 0x100, 0x1, 0x1, 0x5, 0x1000, 0xb, 0xc, 0x19, 0x3, 0x10001, {0x9, 0x7ff, 0x101, 0x6, 0x4, 0xfd}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40448f4}, 0x20000010) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000140), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 669.81298ms ago: executing program 4 (id=1629): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f0000000680)=[{0x9, 0x2801, 0x0, 0x0}], 0x1}) 599.926819ms ago: executing program 1 (id=1630): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vcsa(0x0, 0x7b95b611, 0x802) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 599.567976ms ago: executing program 1 (id=1631): r0 = openat$sndtimer(0xffffff9c, 0x0, 0x101000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, &(0x7f0000000080)=[0x7a, 0x5]) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0x1}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08000100ac1414aa08"], 0x50}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0), 0x0, 0x2, 0x1}}, 0x40) r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r6, 0x0) close_range(r4, r4, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c081}, 0x4004080) r7 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x1) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r8) r9 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r9, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x800) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f00000003c0)='GPL\x00'}, 0x94) 508.750813ms ago: executing program 2 (id=1633): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) preadv(r1, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/207, 0xcf}], 0x1, 0x4, 0xabc) 69.683433ms ago: executing program 3 (id=1634): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) write$cgroup_freezer_state(r1, &(0x7f0000000080)='FROZEN\x00', 0x7) 0s ago: executing program 3 (id=1635): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r2, 0x4}, &(0x7f00000001c0)=0x8) kernel console output (not intermixed with test programs): s 16 unknown bytes. [ 212.207907][ T9878] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 212.217254][ T9878] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 212.217934][ T9878] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 212.218684][ T9878] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 212.221880][ T9878] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 212.308545][ T9878] pci 0000:00:01.0: Adding to iommu group 1 [ 212.329574][ T9878] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 212.329603][ T9878] pci 0000:00:01.0: vgaarb: bridge control possible [ 212.329612][ T9878] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 212.337586][ T9878] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 212.337792][ T9878] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 212.340976][ T9878] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 212.391951][ T9878] [drm] Found bochs VGA, ID 0xb0c5. [ 212.393969][ T9878] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 212.428400][ T9878] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 212.713717][ T9878] Console: switching to colour frame buffer device 160x50 [ 212.739776][ T9878] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 212.815016][ T9886] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 213.507421][ T9892] syz.2.1071 (9892) used greatest stack depth: 18904 bytes left [ 214.129265][ T9904] FAULT_INJECTION: forcing a failure. [ 214.129265][ T9904] name failslab, interval 1, probability 0, space 0, times 0 [ 214.129323][ T9904] CPU: 2 UID: 0 PID: 9904 Comm: syz.3.1075 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.129352][ T9904] Tainted: [L]=SOFTLOCKUP [ 214.129357][ T9904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.129365][ T9904] Call Trace: [ 214.129370][ T9904] [ 214.129375][ T9904] dump_stack_lvl+0x100/0x190 [ 214.129445][ T9904] should_fail_ex.cold+0x5/0xa [ 214.129461][ T9904] should_failslab+0xc2/0x120 [ 214.129496][ T9904] __kmalloc_cache_noprof+0x91/0x6d0 [ 214.129513][ T9904] ? lockdep_init_map_type+0x5c/0x250 [ 214.129530][ T9904] ? nci_hci_allocate+0x45/0x330 [ 214.129566][ T9904] nci_hci_allocate+0x45/0x330 [ 214.129580][ T9904] nci_allocate_device+0x26f/0x410 [ 214.129593][ T9904] virtual_ncidev_open+0x6f/0x220 [ 214.129611][ T9904] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 214.129627][ T9904] misc_open+0x26d/0x450 [ 214.129658][ T9904] ? __pfx_misc_open+0x10/0x10 [ 214.129672][ T9904] chrdev_open+0x234/0x6a0 [ 214.129686][ T9904] ? __pfx_apparmor_file_open+0x10/0x10 [ 214.129704][ T9904] ? __pfx_chrdev_open+0x10/0x10 [ 214.129719][ T9904] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 214.129737][ T9904] do_dentry_open+0x6ab/0x14d0 [ 214.129749][ T9904] ? __pfx_chrdev_open+0x10/0x10 [ 214.129764][ T9904] vfs_open+0x82/0x3f0 [ 214.129780][ T9904] path_openat+0x19fa/0x2440 [ 214.129795][ T9904] ? __pfx_path_openat+0x10/0x10 [ 214.129812][ T9904] do_file_open+0x20e/0x430 [ 214.129828][ T9904] ? __pfx_do_file_open+0x10/0x10 [ 214.129851][ T9904] ? _raw_spin_unlock+0x28/0x50 [ 214.129862][ T9904] ? alloc_fd+0x471/0x7a0 [ 214.129878][ T9904] do_sys_openat2+0x10f/0x1e0 [ 214.129893][ T9904] ? __pfx_do_sys_openat2+0x10/0x10 [ 214.129909][ T9904] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 214.129927][ T9904] __ia32_compat_sys_openat+0x12d/0x210 [ 214.129943][ T9904] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 214.129959][ T9904] ? ksys_write+0x1ac/0x250 [ 214.129974][ T9904] __do_fast_syscall_32+0x13a/0x8b0 [ 214.129992][ T9904] do_fast_syscall_32+0x32/0x70 [ 214.130007][ T9904] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.130021][ T9904] RIP: 0023:0xf703efec [ 214.130035][ T9904] Code: Unable to access opcode bytes at 0xf703efc2. [ 214.130040][ T9904] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 214.130051][ T9904] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000240 [ 214.130058][ T9904] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 214.130065][ T9904] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 214.130071][ T9904] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 214.130078][ T9904] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.130092][ T9904] [ 214.229937][ T9906] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.230218][ T9906] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.277531][ T9906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.282299][ T9906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.374763][ T5784] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.374833][ T5784] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.374852][ T5784] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.374869][ T5784] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.443439][ T9915] __nla_validate_parse: 5 callbacks suppressed [ 214.443520][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1079'. [ 214.449334][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1079'. [ 214.450011][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1079'. [ 214.450451][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1079'. [ 214.455119][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1079'. [ 214.487591][ T9917] devpts: Invalid uid '0x00000000ffffffff' [ 214.496378][ T9917] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 214.498509][ T9917] i2c i2c-0: delete_device: Can't find device in list [ 215.522367][ T9938] Console: switching to colour dummy device 80x25 [ 215.632103][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1082'. [ 215.632822][ T9928] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1082'. [ 215.633016][ T9928] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 215.644675][ T5746] Bluetooth: hci3: command 0x0406 tx timeout [ 215.797469][ T9945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1088'. [ 215.981459][ T9941] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 215.987833][ T9941] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 215.990533][ T9941] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 215.993469][ T9941] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 216.013409][ T9941] pci 0000:00:01.0: Adding to iommu group 1 [ 216.024351][ T9941] pci 0000:00:01.0: vgaarb: bridge control possible [ 216.024376][ T9941] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=none,locks=none [ 216.038532][ T9941] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 216.039034][ T9941] pci 0000:00:01.0: ROM [mem 0x81000000-0x8100ffff pref]: assigned [ 216.039324][ T9941] pci 0000:00:01.0: BAR 2 [mem 0x81010000-0x81010fff]: assigned [ 216.045714][ T9941] bochs-drm 0000:00:01.0: enabling device (0100 -> 0102) [ 216.070876][ T9941] [drm] Found bochs VGA, ID 0xb0c5. [ 216.073326][ T9941] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81010000. [ 216.132669][ T9941] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 216.187255][ T9959] syzkaller0: entered promiscuous mode [ 216.187311][ T9959] syzkaller0: entered allmulticast mode [ 216.191557][ T9959] tipc: Started in network mode [ 216.191573][ T9959] tipc: Node identity 76d8188ad649, cluster identity 4711 [ 216.193186][ T9959] tipc: Enabled bearer , priority 0 [ 216.197874][ T9958] tipc: Resetting bearer [ 216.212384][ T9958] tipc: Disabling bearer [ 216.435110][ T1036] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 216.586259][ T1036] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 216.587462][ T1036] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 216.587487][ T1036] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 216.587508][ T1036] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 216.589739][ T1036] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.589758][ T1036] usb 6-1: Product: syz [ 216.589769][ T1036] usb 6-1: Manufacturer: syz [ 216.589781][ T1036] usb 6-1: SerialNumber: syz [ 216.599165][ T9961] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 216.599399][ T9961] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 216.605474][ T1036] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 216.605495][ T1036] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 216.605534][ T1036] usbserial_generic 6-1:1.0: generic converter detected [ 216.609676][ T1036] usb 6-1: generic converter now attached to ttyUSB0 [ 216.641219][ T9941] Console: switching to colour frame buffer device 160x50 [ 216.691010][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1096'. [ 216.729353][ T9941] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 216.755075][ T9970] syzkaller0: entered promiscuous mode [ 216.755124][ T9970] syzkaller0: entered allmulticast mode [ 216.809460][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 216.809790][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 216.809822][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 216.809968][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 216.809997][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 216.810146][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 216.810165][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 216.812380][ T1036] usb 6-1: USB disconnect, device number 14 [ 216.818201][ T1036] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 216.818499][ T1036] usbserial_generic 6-1:1.0: device disconnected [ 216.982966][ T9975] syzkaller0: entered promiscuous mode [ 216.983035][ T9975] syzkaller0: entered allmulticast mode [ 217.211399][ T9982] loop0: detected capacity change from 0 to 3904 [ 217.266530][ T9982] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 217.266587][ T9982] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 217.268980][ T9982] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 217.269021][ T9982] loop0: [ 217.400987][ T9988] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1103'. [ 217.900342][T10001] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 217.925457][T10007] Console: switching to colour dummy device 80x25 [ 218.014670][ T30] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 218.150492][T10017] devpts: Invalid uid '0x00000000ffffffff' [ 218.153474][T10017] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 218.155125][T10017] i2c i2c-0: delete_device: Can't find device in list [ 218.207651][ T30] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 218.214185][ T30] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 218.214664][ T30] usb 7-1: config 0 interface 0 has no altsetting 0 [ 218.233961][ T30] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 218.234108][ T30] usb 7-1: Product: syz [ 218.234178][ T30] usb 7-1: Manufacturer: syz [ 218.234229][ T30] usb 7-1: SerialNumber: syz [ 218.269845][ T30] usb 7-1: config 0 descriptor?? [ 218.331143][ T30] usb 7-1: selecting invalid altsetting 0 [ 218.357814][T10009] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 218.372224][T10009] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 218.372501][T10009] pci 0000:00:01.0: BAR 2 [mem 0x81010000-0x81010fff] [ 218.372780][T10009] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 218.384058][T10009] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 218.384129][T10009] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 10710 usecs [ 218.402325][T10009] pci 0000:00:01.0: Adding to iommu group 1 [ 218.410098][T10009] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 218.410136][T10009] pci 0000:00:01.0: vgaarb: bridge control possible [ 218.410151][T10009] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=mem,locks=none [ 218.421241][T10009] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 218.430212][T10009] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 218.436638][T10009] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 218.446138][T10009] [drm] Found bochs VGA, ID 0xb0c5. [ 218.446208][T10009] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 218.456016][T10009] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 218.547273][ T10] usb 7-1: USB disconnect, device number 9 [ 218.610887][T10009] Console: switching to colour frame buffer device 160x50 [ 218.646683][T10009] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 218.824034][T10026] Console: switching to colour dummy device 80x25 [ 219.058398][T10027] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 219.067811][T10027] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 219.068036][T10027] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 219.068314][T10027] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 219.070533][T10027] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 219.116398][T10027] pci 0000:00:01.0: Adding to iommu group 1 [ 219.128227][T10027] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 219.128253][T10027] pci 0000:00:01.0: vgaarb: bridge control possible [ 219.128262][T10027] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=mem,locks=none [ 219.147717][T10027] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 219.151440][T10027] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 219.152485][T10027] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 219.192726][T10027] [drm] Found bochs VGA, ID 0xb0c5. [ 219.192799][T10027] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 219.210013][T10027] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 219.339192][T10041] binder: 10040:10041 unknown command 0 [ 219.339263][T10041] binder: 10040:10041 ioctl c0306201 800001c0 returned -22 [ 219.342729][T10027] Console: switching to colour frame buffer device 160x50 [ 219.358865][T10027] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 219.462923][T10046] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 219.463552][T10046] i2c i2c-0: delete_device: Can't find device in list [ 219.857021][T10050] __nla_validate_parse: 3 callbacks suppressed [ 219.857264][T10050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1123'. [ 220.061301][T10053] syzkaller0: entered promiscuous mode [ 220.410533][T10065] devpts: Invalid uid '0x00000000ffffffff' [ 220.415853][T10065] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 220.419829][T10065] i2c i2c-0: delete_device: Can't find device in list [ 220.865534][ T30] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 220.924573][T10070] binder_alloc: 10069: pid 10069 spamming oneway? 1 buffers allocated for a total size of 4096 [ 221.034528][ T30] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 221.038227][ T30] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 221.038281][ T30] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 221.038309][ T30] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 221.047434][T10075] FAULT_INJECTION: forcing a failure. [ 221.047434][T10075] name fail_futex, interval 1, probability 0, space 0, times 1 [ 221.047473][T10075] CPU: 3 UID: 0 PID: 10075 Comm: syz.0.1131 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.047497][T10075] Tainted: [L]=SOFTLOCKUP [ 221.047504][T10075] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 221.047514][T10075] Call Trace: [ 221.047521][T10075] [ 221.047526][T10075] dump_stack_lvl+0x100/0x190 [ 221.047609][T10075] should_fail_ex.cold+0x5/0xa [ 221.047626][T10075] get_futex_key+0x1d0/0x14f0 [ 221.047647][T10075] ? __pfx_get_futex_key+0x10/0x10 [ 221.047665][T10075] ? release_sock+0x21/0x280 [ 221.047702][T10075] ? do_raw_spin_lock+0x128/0x260 [ 221.047723][T10075] futex_wake+0xf4/0x5e0 [ 221.047736][T10075] ? pppoe_connect+0x2c9/0x1410 [ 221.047752][T10075] ? __local_bh_enable_ip+0xa5/0x120 [ 221.047772][T10075] ? __pfx_futex_wake+0x10/0x10 [ 221.047785][T10075] ? pppoe_connect+0x2c9/0x1410 [ 221.047798][T10075] ? pppoe_connect+0x2c9/0x1410 [ 221.047815][T10075] do_futex+0x2b2/0x440 [ 221.047827][T10075] ? __pfx_do_futex+0x10/0x10 [ 221.047839][T10075] ? __sys_connect+0xe4/0x170 [ 221.047858][T10075] __ia32_sys_futex_time32+0x2f4/0x470 [ 221.047874][T10075] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 221.047893][T10075] __do_fast_syscall_32+0x13a/0x8b0 [ 221.047932][T10075] do_fast_syscall_32+0x32/0x70 [ 221.047949][T10075] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 221.047965][T10075] RIP: 0023:0xf7ff8fec [ 221.047978][T10075] Code: Unable to access opcode bytes at 0xf7ff8fc2. [ 221.047984][T10075] RSP: 002b:00000000f54b65cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 221.047995][T10075] RAX: ffffffffffffffda RBX: 00000000f74b4f8c RCX: 0000000000000081 [ 221.048003][T10075] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 221.048010][T10075] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 221.048021][T10075] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 221.048032][T10075] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 221.048053][T10075] [ 221.076474][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.076495][ T30] usb 7-1: Product: syz [ 221.076506][ T30] usb 7-1: Manufacturer: syz [ 221.076517][ T30] usb 7-1: SerialNumber: syz [ 221.135784][T10068] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 221.135889][T10068] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 221.143274][ T30] usbserial_generic 7-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 221.143294][ T30] usbserial_generic 7-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 221.143322][ T30] usbserial_generic 7-1:1.0: generic converter detected [ 221.171589][ T30] usb 7-1: generic converter now attached to ttyUSB0 [ 221.354292][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 221.354361][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 221.355525][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 221.355705][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 221.355748][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 221.355865][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 221.355901][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 221.356028][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 221.356210][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 221.356249][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 221.356378][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 221.358841][ T9186] usb 7-1: USB disconnect, device number 10 [ 221.362000][ T9186] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 221.362265][ T9186] usbserial_generic 7-1:1.0: device disconnected [ 221.525867][T10083] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1132'. [ 221.525939][T10083] openvswitch: netlink: Message has 16 unknown bytes. [ 221.860808][T10082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1132'. [ 221.864033][T10086] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 221.865000][T10086] i2c i2c-0: delete_device: Can't find device in list [ 221.926865][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1135'. [ 222.436366][T10112] fuse: fd is not a fuse device [ 222.986988][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1145'. [ 222.996061][T10119] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1145'. [ 222.996123][T10119] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 223.300451][T10139] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 223.444711][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1154'. [ 223.776395][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1157'. [ 223.777459][T10156] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1157'. [ 223.777478][T10156] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 223.882207][T10164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1166'. [ 223.885846][T10164] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 224.032973][T10172] syzkaller0: entered promiscuous mode [ 224.033038][T10172] syzkaller0: entered allmulticast mode [ 224.137844][T10176] tipc: Enabling of bearer rejected, failed to enable media [ 224.191180][T10182] syzkaller0: entered promiscuous mode [ 224.191277][T10182] syzkaller0: entered allmulticast mode [ 224.248594][T10190] syz_tun: entered allmulticast mode [ 224.408817][T10190] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 224.412198][T10189] syz_tun: left allmulticast mode [ 224.584272][ T5823] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 224.744298][ T5823] usb 6-1: Using ep0 maxpacket: 8 [ 224.746655][ T5823] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 224.747627][ T5823] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 224.747648][ T5823] usb 6-1: config 0 has no interface number 0 [ 224.747679][ T5823] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 224.747713][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.749984][ T5823] usb 6-1: config 0 descriptor?? [ 224.758619][ T5823] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 225.052580][T10236] Console: switching to colour dummy device 80x25 [ 225.188161][T10237] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 225.230637][T10237] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 225.237564][T10237] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 225.247845][T10237] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 225.259015][T10237] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 225.441920][T10237] pci 0000:00:01.0: Adding to iommu group 1 [ 225.486322][T10237] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 225.486348][T10237] pci 0000:00:01.0: vgaarb: bridge control possible [ 225.486358][T10237] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=mem,locks=none [ 225.508061][T10237] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 225.508534][T10237] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 225.513534][T10237] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 225.566962][T10237] [drm] Found bochs VGA, ID 0xb0c5. [ 225.567313][T10237] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 225.598808][T10237] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 225.901617][T10237] Console: switching to colour frame buffer device 160x50 [ 225.931522][T10237] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 226.614122][ T5736] Bluetooth: hci0: command 0x0c1a tx timeout [ 226.618831][T10209] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 226.621068][T10258] __nla_validate_parse: 3 callbacks suppressed [ 226.621080][T10258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1179'. [ 226.628495][T10209] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 227.126301][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1182'. [ 227.127380][T10271] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1182'. [ 227.127401][T10271] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 227.199577][T10274] syzkaller0: entered promiscuous mode [ 227.199652][T10274] syzkaller0: entered allmulticast mode [ 227.377006][T10276] syzkaller0: entered promiscuous mode [ 227.379015][T10276] syzkaller0: entered allmulticast mode [ 227.457217][T10209] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 227.457275][T10209] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 227.464062][T10209] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 227.464137][T10209] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 227.468783][T10209] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 227.468802][T10209] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 227.555099][T10278] binder_alloc: 10277: binder_alloc_buf, no vma [ 227.585692][ T56] Bluetooth: hci4: Frame reassembly failed (-84) [ 227.610925][T10280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1187'. [ 227.627929][T10280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.801366][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1191'. [ 228.007945][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1200'. [ 229.479192][T10326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1202'. [ 229.644102][ T5736] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 229.657639][ T10] usb 6-1: USB disconnect, device number 15 [ 230.473128][T10336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1205'. [ 230.474841][T10336] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1205'. [ 230.474855][T10336] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 230.886635][T10358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1211'. [ 231.360114][T10380] netlink: 'syz.0.1216': attribute type 10 has an invalid length. [ 231.379428][T10380] bond3: entered allmulticast mode [ 231.379749][T10380] 8021q: adding VLAN 0 to HW filter on device bond3 [ 231.400999][T10380] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 231.405978][T10380] bond3: (slave macvlan2): making interface the new active one [ 231.406049][T10380] macvlan2: entered allmulticast mode [ 231.407670][T10380] bond0: entered allmulticast mode [ 231.407691][T10380] bond_slave_0: entered allmulticast mode [ 231.407709][T10380] bond_slave_1: entered allmulticast mode [ 231.411867][T10380] bond3: (slave macvlan2): Enslaving as an active interface with an up link [ 231.777493][T10392] devpts: Invalid uid '0x00000000ffffffff' [ 231.779579][T10392] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 231.780236][T10392] i2c i2c-0: delete_device: Can't find device in list [ 231.793215][T10391] syzkaller0: entered promiscuous mode [ 231.793271][T10391] syzkaller0: entered allmulticast mode [ 231.929003][T10395] syz_tun: entered allmulticast mode [ 232.086618][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1220'. [ 232.089686][T10394] syz_tun: left allmulticast mode [ 232.377234][T10409] vlan2: entered promiscuous mode [ 232.377293][T10409] hsr0: entered promiscuous mode [ 232.377668][T10409] vlan2: entered allmulticast mode [ 232.377678][T10409] hsr0: entered allmulticast mode [ 232.377686][T10409] hsr_slave_0: entered allmulticast mode [ 232.377694][T10409] hsr_slave_1: entered allmulticast mode [ 232.596692][T10417] syzkaller0: entered promiscuous mode [ 232.596745][T10417] syzkaller0: entered allmulticast mode [ 234.206865][T10428] tipc: Started in network mode [ 234.206921][T10428] tipc: Node identity 080211000001, cluster identity 4711 [ 234.207176][T10428] tipc: Enabled bearer , priority 0 [ 234.317943][T10455] syzkaller0: entered promiscuous mode [ 234.318019][T10455] syzkaller0: entered allmulticast mode [ 234.337930][T10457] syzkaller0: entered promiscuous mode [ 234.337994][T10457] syzkaller0: entered allmulticast mode [ 234.367887][T10461] overlayfs: failed to clone upperpath [ 234.398870][T10460] syzkaller0: entered promiscuous mode [ 234.398944][T10460] syzkaller0: entered allmulticast mode [ 234.510851][T10467] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 234.598174][T10467] null_blk: nullb1: using native zone append [ 234.637503][T10474] netlink: zone id is out of range [ 234.637575][T10474] netlink: zone id is out of range [ 234.637618][T10474] netlink: zone id is out of range [ 234.637648][T10474] netlink: zone id is out of range [ 234.637673][T10474] netlink: zone id is out of range [ 234.637698][T10474] netlink: zone id is out of range [ 234.638619][T10474] netlink: zone id is out of range [ 234.638659][T10474] netlink: zone id is out of range [ 234.638687][T10474] netlink: zone id is out of range [ 234.638714][T10474] netlink: zone id is out of range [ 234.852145][T10467] null_blk: disk nullb1 created [ 235.117836][ T8999] syz_tun (unregistering): left allmulticast mode [ 235.126336][ T8999] bond2: (slave syz_tun): Removing an active aggregator [ 235.126702][ T8999] bond2: (slave syz_tun): Releasing backup interface [ 235.640729][ T5093] tipc: Node number set to 134418688 [ 235.747831][ T5746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.756648][ T5746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.763212][ T5746] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.772373][ T5746] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.776055][ T5746] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.065331][T10511] tipc: Started in network mode [ 236.067864][T10511] tipc: Node identity 12bd60d2b1f8, cluster identity 4711 [ 236.071363][T10511] tipc: Enabled bearer , priority 0 [ 236.075435][T10511] syzkaller0: entered promiscuous mode [ 236.077992][T10511] syzkaller0: entered allmulticast mode [ 236.086995][T10511] tipc: Resetting bearer [ 236.438944][T10510] tipc: Resetting bearer [ 236.463866][ T1036] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 236.477234][ T43] audit: type=1326 audit(1788239779.700:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.1.1254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 236.479112][ T43] audit: type=1326 audit(1788239779.700:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.1.1254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 236.480455][ T43] audit: type=1326 audit(1788239779.700:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.1.1254" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf704efec code=0x7ffc0000 [ 236.480480][ T43] audit: type=1326 audit(1788239779.700:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.1.1254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 236.480499][ T43] audit: type=1326 audit(1788239779.700:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.1.1254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 236.480887][ T43] audit: type=1326 audit(1788239779.700:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.1.1254" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf704efec code=0x7ffc0000 [ 236.496517][ T43] audit: type=1326 audit(1788239779.720:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.1.1254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 236.497108][ T43] audit: type=1326 audit(1788239779.720:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.1.1254" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704efec code=0x7ffc0000 [ 236.497403][ T43] audit: type=1326 audit(1788239779.720:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.1.1254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 236.497507][ T43] audit: type=1326 audit(1788239779.720:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.1.1254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 236.525367][T10510] tipc: Disabling bearer [ 236.538966][ T5736] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 236.542182][ T5736] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 236.542361][ T5736] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 236.544546][ T5736] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 236.544861][ T5736] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.913907][T10548] syz_tun: entered allmulticast mode [ 237.067785][T10548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'. [ 237.071388][T10548] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1257'. [ 237.076007][T10547] syz_tun: left allmulticast mode [ 237.237104][T10508] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.237225][T10508] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.237318][T10508] bridge_slave_0: entered allmulticast mode [ 237.239530][T10508] bridge_slave_0: entered promiscuous mode [ 237.242328][T10508] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.243231][T10508] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.243348][T10508] bridge_slave_1: entered allmulticast mode [ 237.245315][T10508] bridge_slave_1: entered promiscuous mode [ 237.278045][T10508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.288616][T10508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.343989][T10508] team0: Port device team_slave_0 added [ 237.350316][T10508] team0: Port device team_slave_1 added [ 237.378191][T10508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.378252][T10508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.379126][T10508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.380254][T10508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.380266][T10508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.380280][T10508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.404607][T10508] hsr_slave_0: entered promiscuous mode [ 237.405037][T10508] hsr_slave_1: entered promiscuous mode [ 237.405364][T10508] debugfs: 'hsr0' already exists in 'hsr' [ 237.405376][T10508] Cannot create hsr debugfs directory [ 237.532109][T10508] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 237.537697][T10508] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 237.538366][T10508] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 237.543058][T10508] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 237.545329][T10508] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 237.550742][T10508] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 237.551655][T10508] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 237.557727][T10508] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 237.574059][T10508] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.574212][T10508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.574387][T10508] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.574457][T10508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.616166][T10508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.626484][ T9048] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.629243][ T9048] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.638751][T10508] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.646658][ T9048] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.646740][ T9048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.650553][ T9048] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.650603][ T9048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.907882][T10508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.048138][T10508] veth0_vlan: entered promiscuous mode [ 238.051408][T10508] veth1_vlan: entered promiscuous mode [ 238.071125][T10508] veth0_macvtap: entered promiscuous mode [ 238.077619][T10508] veth1_macvtap: entered promiscuous mode [ 238.097819][T10508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.107508][T10508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.124232][ T5841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.174432][ T5841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.204351][ T9048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.204404][ T9048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.217063][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.217128][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.233619][ T5813] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.233692][ T5813] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.604243][ T5746] Bluetooth: hci2: command tx timeout [ 240.693271][ T5746] Bluetooth: hci2: command tx timeout [ 242.763268][ T5746] Bluetooth: hci2: command tx timeout [ 244.843330][ T5746] Bluetooth: hci2: command tx timeout [ 246.150674][T10616] syzkaller0: entered promiscuous mode [ 246.153588][T10616] syzkaller0: entered allmulticast mode [ 246.163337][T10616] net_ratelimit: 387 callbacks suppressed [ 246.163398][T10616] 0: reclassify loop, rule prio 0, protocol 700 [ 247.010084][T10625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1267'. [ 247.462885][ T853] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 247.632788][ T853] usb 9-1: Using ep0 maxpacket: 32 [ 247.634996][ T853] usb 9-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 247.639828][ T853] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 8 [ 247.643144][ T853] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 54, changing to 9 [ 247.646604][ T853] usb 9-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 247.651662][ T853] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.654366][ T853] usb 9-1: Product: syz [ 247.655727][ T853] usb 9-1: Manufacturer: syz [ 247.657342][ T853] usb 9-1: SerialNumber: syz [ 247.661555][T10632] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 248.171373][ T853] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 248.171495][ T853] usb 9-1: MIDIStreaming interface descriptor not found [ 248.171574][ T853] usb 9-1: too many endpoints [ 248.583742][ T853] usb 9-1: USB disconnect, device number 2 [ 249.238274][T10665] netlink: zone id is out of range [ 249.248461][T10665] netlink: zone id is out of range [ 249.252004][T10665] netlink: zone id is out of range [ 249.252857][T10665] netlink: zone id is out of range [ 249.324855][T10669] udevd[10669]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.513317][ T50] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 249.673129][ T50] usb 7-1: Using ep0 maxpacket: 16 [ 249.681196][ T50] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 249.728962][ T50] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 249.729075][ T50] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.729129][ T50] usb 7-1: config 1 has no interface number 0 [ 249.731048][ T50] usb 7-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 249.731391][ T50] usb 7-1: config 1 interface 105 has no altsetting 0 [ 249.774966][ T50] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 249.775403][ T50] usb 7-1: Product: syz [ 249.775420][ T50] usb 7-1: Manufacturer: syz [ 249.775603][ T50] usb 7-1: SerialNumber: syz [ 250.122648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 250.206309][ T50] aqc111 7-1:1.105: probe with driver aqc111 failed with error -22 [ 250.210469][ T50] usb 7-1: USB disconnect, device number 11 [ 250.245198][T10679] syzkaller0: entered promiscuous mode [ 250.245257][T10679] syzkaller0: entered allmulticast mode [ 250.249024][T10679] TC_ACT_REPEAT abuse ? [ 250.381958][T10683] netlink: 'syz.1.1282': attribute type 4 has an invalid length. [ 250.402685][ T853] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 250.562789][ T853] usb 9-1: Using ep0 maxpacket: 8 [ 250.569444][ T853] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 250.578556][ T853] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 250.578880][ T853] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.584774][ T853] usb 9-1: config 0 descriptor?? [ 250.801682][ T853] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 250.947873][T10693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1284'. [ 250.984355][T10691] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 251.027052][T10696] syzkaller0: entered promiscuous mode [ 251.027094][T10696] syzkaller0: entered allmulticast mode [ 251.526860][ T5885] usb 9-1: USB disconnect, device number 3 [ 251.550653][T10708] block nbd0: server does not support multiple connections per device. [ 251.555787][T10708] block nbd0: shutting down sockets [ 251.637690][T10709] bond0: (slave dummy0): Releasing backup interface [ 251.963836][ T5885] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 252.123013][ T5885] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 252.127310][ T5885] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 252.132148][ T5885] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 252.141668][ T5885] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 252.145165][ T5885] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 252.152034][ T5885] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 252.152095][ T5885] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 252.160812][ T5885] usb 6-1: string descriptor 0 read error: -22 [ 252.160891][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.377501][T10711] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1289'. [ 252.394008][ T5093] usb 6-1: USB disconnect, device number 16 [ 252.843680][T10730] syzkaller0: entered promiscuous mode [ 252.846187][T10730] syzkaller0: entered allmulticast mode [ 253.764292][T10739] block nbd0: server does not support multiple connections per device. [ 253.808414][T10739] block nbd0: shutting down sockets [ 254.378560][T10757] netlink: 'syz.3.1304': attribute type 11 has an invalid length. [ 254.382535][ T35] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 254.425757][T10757] bond1: option ad_actor_sys_prio: invalid value (0) [ 254.425809][T10757] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 254.435406][T10757] bond1 (unregistering): Released all slaves [ 254.469243][T10760] can: request_module (can-proto-3) failed. [ 254.476056][T10752] team0: Device vlan2 is already an upper device of the team interface [ 254.552418][ T35] usb 7-1: Using ep0 maxpacket: 32 [ 254.554358][ T35] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 254.558698][ T35] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 254.558747][ T35] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 254.558800][ T35] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 254.558826][ T35] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 254.558853][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 254.565494][T10763] e1000e 0000:00:02.0: resetting [ 254.586382][ T35] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 254.589175][ T35] usb 7-1: Product: syz [ 254.590548][ T35] usb 7-1: Manufacturer: syz [ 254.593623][ T35] usb 7-1: SerialNumber: syz [ 254.597769][ T35] usb 7-1: config 0 descriptor?? [ 254.604487][ T35] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 254.610858][ T35] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 254.614697][T10763] e1000e 0000:00:02.0: reset done [ 254.867293][T10769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1307'. [ 255.063562][ T50] usb 7-1: USB disconnect, device number 12 [ 255.063690][ C3] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 255.075360][T10749] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 255.076964][ T50] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 255.081616][T10772] ldusb: No device or device unplugged -19 [ 255.163278][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.165355][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.346248][T10779] Console: switching to colour dummy device 80x25 [ 255.553147][T10782] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 255.569834][T10782] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 255.572492][T10782] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 255.572703][T10782] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 255.573092][T10782] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 255.593146][T10782] pci 0000:00:01.0: Adding to iommu group 1 [ 255.601979][T10782] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 255.602009][T10782] pci 0000:00:01.0: vgaarb: bridge control possible [ 255.602020][T10782] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=mem,locks=none [ 255.649545][T10782] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 255.649699][T10782] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 255.654597][T10782] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 255.702678][T10786] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 255.795651][T10782] [drm] Found bochs VGA, ID 0xb0c5. [ 255.795730][T10782] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 255.951302][T10782] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 256.111604][T10782] Console: switching to colour frame buffer device 160x50 [ 256.140722][T10793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.145725][T10782] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 256.466896][T10796] syzkaller0: entered promiscuous mode [ 256.466956][T10796] syzkaller0: entered allmulticast mode [ 256.946141][T10805] Console: switching to colour dummy device 80x25 [ 257.233327][T10808] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 257.246975][T10808] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 257.247316][T10808] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 257.247995][T10808] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 257.249358][T10808] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 257.303716][T10808] pci 0000:00:01.0: Adding to iommu group 1 [ 257.309564][T10808] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 257.309590][T10808] pci 0000:00:01.0: vgaarb: bridge control possible [ 257.309599][T10808] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=mem,locks=none [ 257.872686][T10808] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 257.876769][T10808] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 257.887591][T10808] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 257.926583][T10808] [drm] Found bochs VGA, ID 0xb0c5. [ 257.926643][T10808] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 257.951646][T10808] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 258.776480][T10808] Console: switching to colour frame buffer device 160x50 [ 258.810669][T10808] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 258.998031][T10828] syzkaller0: entered promiscuous mode [ 259.000434][T10828] syzkaller0: entered allmulticast mode [ 259.218017][T10836] Console: switching to colour dummy device 80x25 [ 259.262197][ T42] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 259.391718][T10837] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 259.413359][T10837] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 259.415914][T10837] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 259.418749][T10837] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 259.422821][T10837] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 259.432890][ T42] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 259.491496][T10837] pci 0000:00:01.0: Adding to iommu group 1 [ 259.499958][T10837] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 259.499984][T10837] pci 0000:00:01.0: vgaarb: bridge control possible [ 259.499994][T10837] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=mem,locks=none [ 259.516267][T10837] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 259.517121][T10837] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 259.525334][T10837] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 259.542546][T10837] [drm] Found bochs VGA, ID 0xb0c5. [ 259.542611][T10837] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 259.606416][T10837] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 259.744821][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 259.748275][ T43] audit: type=1800 audit(2000000007.700:102): pid=10842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1325" name="file0" dev="overlay" ino=132 res=0 errno=0 [ 259.819364][T10837] Console: switching to colour frame buffer device 160x50 [ 259.861560][T10837] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 259.960321][ T42] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x6 has an invalid bInterval 0, changing to 4 [ 259.960383][ T42] usb 7-1: config 0 interface 0 has no altsetting 0 [ 260.018422][ T42] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 260.018469][ T42] usb 7-1: Product: syz [ 260.018509][ T42] usb 7-1: Manufacturer: syz [ 260.018517][ T42] usb 7-1: SerialNumber: syz [ 260.022830][ T42] usb 7-1: config 0 descriptor?? [ 260.732392][ T42] usb 7-1: selecting invalid altsetting 0 [ 260.916803][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.919567][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.919799][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.919955][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.920108][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.922626][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.925184][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.925408][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.925599][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.925766][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.925973][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.926149][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.926317][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.926524][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.926688][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.926840][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.927040][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.927215][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.927407][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.927585][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.927769][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.927997][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.928188][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.928374][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.928595][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.928781][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.928963][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.929192][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.929375][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.929663][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.929850][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.930033][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.930301][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.930576][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.930837][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.938418][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.938589][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.938760][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.938963][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.939133][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.939291][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.939517][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.939673][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.939859][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.940021][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.940175][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.940359][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.940514][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.959726][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.959963][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.960127][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.960294][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.960540][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.960708][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.960924][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.961088][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.961288][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.961505][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.961666][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.961823][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.982624][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.982796][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.983028][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.992503][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.992708][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.992957][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.993143][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.993326][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.993580][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.993771][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.993967][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.994227][T10848] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 260.994380][ T1036] usb 7-1: USB disconnect, device number 13 [ 260.994492][T10848] usb 7-1: cannot submit urb 0, error -19: no device [ 260.994662][T10848] usb 7-1: cannot submit urb 0, error -19: no device [ 260.994871][T10848] usb 7-1: cannot submit urb 0, error -19: no device [ 260.995032][T10848] usb 7-1: cannot submit urb 0, error -19: no device [ 261.222073][ T42] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 261.392033][ T42] usb 9-1: Using ep0 maxpacket: 8 [ 261.392760][ T42] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 261.395442][ T42] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.395458][ T42] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 261.395470][ T42] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 261.395481][ T42] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.395501][ T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.725195][T10863] misc userio: Invalid payload size [ 261.727760][T10863] misc userio: Invalid payload size [ 261.956526][T10863] rnbd_client L607: Mapping device /d on session s., (access_mode: rw, nr_poll_queues: 0) [ 261.960791][T10863] rnbd_client L1256: Session s. not found, and path parameter not given [ 262.082864][ T42] usb 9-1: GET_CAPABILITIES returned 0 [ 262.082980][ T42] usbtmc 9-1:16.0: can't read capabilities [ 262.232857][ T42] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 262.288096][T10847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.288539][T10847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.389591][ T42] usb 9-1: USB disconnect, device number 4 [ 262.783119][ T9036] Bluetooth: Error in BCSP hdr checksum [ 263.013365][T10891] syzkaller0: entered promiscuous mode [ 263.013458][T10891] syzkaller0: entered allmulticast mode [ 263.186040][ T43] audit: type=1326 audit(2000000011.150:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10892 comm="syz.4.1337" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x0 [ 264.588307][T10922] overlayfs: missing 'lowerdir' [ 264.844679][ T5736] Bluetooth: hci4: command 0x1003 tx timeout [ 264.844701][ T5746] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 265.414970][T10928] atomic_op ffff88802a8411e0 conn xmit_atomic 0000000000000000 [ 265.778214][T10934] syzkaller0: entered promiscuous mode [ 265.780209][T10934] syzkaller0: entered allmulticast mode [ 265.972582][ T30] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 265.998186][T10937] Console: switching to colour dummy device 80x25 [ 266.133948][ T30] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 266.143946][ T30] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 266.148432][ T30] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 266.153610][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.175377][T10932] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 266.188015][ T30] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 266.230030][T10938] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 266.241013][T10938] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 266.241626][T10938] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 266.242108][T10938] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 266.243429][T10938] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 266.280123][T10938] pci 0000:00:01.0: Adding to iommu group 1 [ 266.464660][T10938] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 266.464696][T10938] pci 0000:00:01.0: vgaarb: bridge control possible [ 266.464706][T10938] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=mem,locks=none [ 266.478573][T10938] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 266.478848][T10938] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 266.483177][T10938] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 266.492941][ T853] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 266.511131][T10938] [drm] Found bochs VGA, ID 0xb0c5. [ 266.511313][T10938] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 266.624862][T10938] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 266.662360][ T853] usb 7-1: Using ep0 maxpacket: 8 [ 266.668025][ T853] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 266.763079][ T853] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 266.763174][ T853] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 266.763265][ T853] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 266.763290][ T853] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.763334][ T853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.163784][T10938] Console: switching to colour frame buffer device 160x50 [ 267.186124][ T853] usb 7-1: GET_CAPABILITIES returned 0 [ 267.186183][ T853] usbtmc 7-1:16.0: can't read capabilities [ 267.235601][T10938] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 267.353643][T10950] block device autoloading is deprecated and will be removed. [ 267.393930][T10941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.394411][T10941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.515790][ T853] usb 7-1: USB disconnect, device number 14 [ 268.184794][T10959] ieee802154 phy0 wpan0: encryption failed: -22 [ 268.392154][ T75] usb 6-1: USB disconnect, device number 17 [ 270.408647][ T5822] libceph: connect (1)[c::]:6789 error -101 [ 270.424609][ T5822] libceph: mon0 (1)[c::]:6789 connect error [ 270.440153][T10979] ceph: No mds server is up or the cluster is laggy [ 271.131213][ T5093] hid-multitouch 0005:0457:0009.000E: unknown main item tag 0x0 [ 271.152457][ T5093] hid-multitouch 0005:0457:0009.000E: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 271.253007][T10992] gfs2: error -5 reading superblock [ 271.993897][T11008] jffs2: notice: (11008) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 272.252757][ T43] audit: type=1326 audit(2000000020.011:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11002 comm="syz.3.1360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 272.252810][ T43] audit: type=1326 audit(2000000020.011:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11002 comm="syz.3.1360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 272.252859][ T43] audit: type=1326 audit(2000000020.011:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11002 comm="syz.3.1360" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71775ab code=0x7ffc0000 [ 272.252898][ T43] audit: type=1326 audit(2000000020.011:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11002 comm="syz.3.1360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 272.252933][ T43] audit: type=1326 audit(2000000020.011:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11002 comm="syz.3.1360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 272.252968][ T43] audit: type=1326 audit(2000000020.011:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11002 comm="syz.3.1360" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703efec code=0x7ffc0000 [ 272.253002][ T43] audit: type=1326 audit(2000000020.011:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11002 comm="syz.3.1360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 272.253038][ T43] audit: type=1326 audit(2000000020.011:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11002 comm="syz.3.1360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 272.253072][ T43] audit: type=1326 audit(2000000020.021:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11002 comm="syz.3.1360" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703efec code=0x7ffc0000 [ 272.253109][ T43] audit: type=1326 audit(2000000020.021:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11002 comm="syz.3.1360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 272.313809][ T853] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 272.472467][ T853] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 272.476856][ T853] usb 7-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 272.476939][ T853] usb 7-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 272.484602][ T853] usb 7-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 272.484639][ T853] usb 7-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 272.492974][ T853] usb 7-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 272.493013][ T853] usb 7-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 272.503682][ T853] usb 7-1: string descriptor 0 read error: -22 [ 272.506071][ T853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.725957][T11013] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1362'. [ 273.679592][ T42] usb 7-1: USB disconnect, device number 15 [ 274.393916][T11038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1366'. [ 274.402081][T11042] random: crng reseeded on system resumption [ 274.450407][T11042] binder: 11041:11042 ioctl c0306201 0 returned -14 [ 274.752405][T11049] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 274.848534][T11054] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 276.734107][ C3] IPv4: Oversized IP packet from 127.0.0.1 [ 277.051284][ T42] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 277.100697][T11088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.246992][ T42] usb 9-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 277.280543][ T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.848978][T11079] tipc: Started in network mode [ 277.874982][ T43] kauditd_printk_skb: 24 callbacks suppressed [ 277.875103][ T43] audit: type=1400 audit(2000000024.814:138): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=11090 comm="syz.1.1377" [ 277.911249][T11079] tipc: Node identity ac14140f, cluster identity 4711 [ 278.008603][T11079] tipc: New replicast peer: 172.30.0.5 [ 278.015442][ T42] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0 [ 278.015578][ T42] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0 [ 278.016720][ T42] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0 [ 278.016737][ T42] hid-picolcd 0003:04D8:C002.000F: unbalanced collection at end of report description [ 278.025954][ T42] hid-picolcd 0003:04D8:C002.000F: device report parse failed [ 278.026241][ T42] hid-picolcd 0003:04D8:C002.000F: probe with driver hid-picolcd failed with error -22 [ 278.038904][ T5823] kernel write not supported for file /bus/input/handlers (pid: 5823 comm: kworker/1:4) [ 278.061602][T11079] tipc: Enabled bearer , priority 10 [ 278.216872][ T5885] usb 9-1: USB disconnect, device number 5 [ 278.283463][T11101] ntfs3(nullb0): Primary boot signature is not NTFS. [ 278.286153][T11101] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 278.403346][T11103] netlink: 'syz.3.1379': attribute type 1 has an invalid length. [ 278.406246][T11103] netlink: 756 bytes leftover after parsing attributes in process `syz.3.1379'. [ 278.801167][T11109] program syz.1.1380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.673929][ T1039] tipc: Node number set to 2886997007 [ 279.735251][T11112] random: crng reseeded on system resumption [ 279.793927][T11109] infiniband syz0: set active [ 279.793991][T11109] infiniband syz0: added bond_slave_1 [ 279.797762][T11109] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 279.803136][T11109] infiniband syz0: Couldn't open port 1 [ 279.803405][T11109] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 279.803438][T11109] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 279.803477][T11109] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 279.835017][T11109] RDS/IB: syz0: added [ 279.835556][T11109] smc: adding ib device syz0 with port count 1 [ 279.835671][T11109] smc: ib device syz0 port 1 has no pnetid [ 280.268388][T11126] capability: warning: `syz.4.1384' uses deprecated v2 capabilities in a way that may be insecure [ 280.866031][T11130] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 280.958275][T11133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1386'. [ 280.973491][T11133] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1386'. [ 281.532216][ T853] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 281.723607][ T853] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 281.730099][ T853] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 281.736061][ T853] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 281.740478][ T853] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 281.745143][ T853] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 281.760214][ T853] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 281.766029][ T853] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 281.771648][T11150] syzkaller0: entered promiscuous mode [ 281.771671][T11150] syzkaller0: entered allmulticast mode [ 281.841303][T11151] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 281.882875][T11151] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 281.884312][T11151] overlayfs: failed to look up (tracing) for ino (-66) [ 282.176685][ T43] audit: type=1800 audit(2000000029.144:139): pid=11157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1393" name="zone_nr_conv" dev="configfs" ino=31151 res=0 errno=0 [ 282.724507][ T853] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 282.724555][ T853] usb 6-1: Product: syz [ 282.724564][ T853] usb 6-1: Manufacturer: syz [ 282.730198][T11136] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 282.731075][ T853] cdc_wdm 6-1:1.0: skipping garbage [ 282.731085][ T853] cdc_wdm 6-1:1.0: skipping garbage [ 282.737549][ T853] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 282.737563][ T853] cdc_wdm 6-1:1.0: Unknown control protocol [ 282.950591][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 282.950731][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 282.952648][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 282.952679][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 282.955842][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 282.955860][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 282.960535][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 282.960546][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 282.973066][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 282.973080][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 282.975550][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 282.975563][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 282.975817][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 282.975827][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 282.976068][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 282.976077][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 282.976361][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 282.976371][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 282.978348][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 282.978358][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 283.019740][T11136] input input20: cannot allocate more than FF_MAX_EFFECTS effects [ 283.028298][T11136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1387'. [ 283.045900][ T5823] usb 6-1: USB disconnect, device number 18 [ 283.320288][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1406'. [ 283.573061][ T35] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 283.720826][ T35] usb 9-1: Using ep0 maxpacket: 16 [ 283.722168][ T35] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 283.723349][ T35] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.723391][ T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 283.723415][ T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 283.723433][ T35] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 283.723450][ T35] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.724572][ T35] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 283.724590][ T35] usb 9-1: Manufacturer: syz [ 283.727474][ T35] usb 9-1: config 0 descriptor?? [ 283.980817][ T35] rc_core: IR keymap rc-hauppauge not found [ 283.980861][ T35] Registered IR keymap rc-empty [ 283.981262][ T35] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 284.010858][ T35] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 284.034691][ T35] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 284.036766][ T35] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input21 [ 284.052370][ T35] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 284.070793][ T35] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 284.090802][ T35] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 284.110757][ T35] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 284.130823][ T35] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 284.153869][ T35] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 284.171836][ T35] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 284.200829][ T35] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 284.220795][ T35] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 284.240825][ T35] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 284.262728][ T35] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 284.262800][ T35] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 284.267079][ T35] usb 9-1: USB disconnect, device number 6 [ 284.662260][T11266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1432'. [ 284.664206][T11255] Console: switching to colour dummy device 80x25 [ 284.877608][T11280] IPVS: Error connecting to the multicast addr [ 284.991131][ T5823] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 285.132679][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1446'. [ 285.175169][ T5823] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 285.178581][ T5823] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.178603][ T5823] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 285.178637][ T5823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.182308][ T5823] usb 7-1: config 0 descriptor?? [ 285.185432][ T5823] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 285.185735][ T5823] dvb-usb: bulk message failed: -22 (3/0) [ 285.204719][ T5823] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 285.207234][ T5823] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 285.207273][ T5823] usb 7-1: media controller created [ 285.208637][ T5823] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 285.278059][ T5823] dvb-usb: bulk message failed: -22 (6/0) [ 285.278174][ T5823] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 285.283116][ T5823] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input22 [ 285.310569][ T5823] dvb-usb: schedule remote query interval to 150 msecs. [ 285.311761][ T5823] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 285.387759][ T30] usb 7-1: USB disconnect, device number 16 [ 285.425416][ T30] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 285.686698][T11329] Option 'sŒXbă¶.' to dns_resolver key: bad/missing value [ 286.101135][ T5746] Bluetooth: hci2: link tx timeout [ 286.106306][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.119100][ T5746] Bluetooth: hci2: link tx timeout [ 286.119160][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.120196][ T5746] Bluetooth: hci2: link tx timeout [ 286.120239][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.120286][ T5746] Bluetooth: hci2: link tx timeout [ 286.120338][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.127806][ T5746] Bluetooth: hci2: link tx timeout [ 286.127816][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.130348][ T5746] Bluetooth: hci2: link tx timeout [ 286.130364][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.130723][ T5746] Bluetooth: hci2: link tx timeout [ 286.130847][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.134328][ T5746] Bluetooth: hci2: link tx timeout [ 286.134371][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.422007][T11264] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 286.445069][T11264] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 286.448576][T11264] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 286.453910][T11264] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 286.454297][T11264] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 286.480318][T11264] pci 0000:00:01.0: Adding to iommu group 1 [ 286.506204][T11264] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 286.506236][T11264] pci 0000:00:01.0: vgaarb: bridge control possible [ 286.506247][T11264] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=mem,locks=none [ 286.526602][T11264] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 286.529123][T11264] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 286.534189][T11264] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 286.544235][T11264] [drm] Found bochs VGA, ID 0xb0c5. [ 286.546069][T11264] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 286.553793][T11264] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 286.853409][T11264] Console: switching to colour frame buffer device 160x50 [ 286.862353][T11364] kAFS: No cell specified [ 286.920074][T11264] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 287.078045][T11378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1482'. [ 287.346597][ T5746] Bluetooth: hci2: link tx timeout [ 287.348374][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.350918][ T5746] Bluetooth: hci2: link tx timeout [ 287.350926][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.351193][ T5746] Bluetooth: hci2: link tx timeout [ 287.351201][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.353102][ T5746] Bluetooth: hci2: link tx timeout [ 287.353110][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.355952][ T5746] Bluetooth: hci2: link tx timeout [ 287.355964][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.358221][ T5746] Bluetooth: hci2: link tx timeout [ 287.358231][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.360874][ T5746] Bluetooth: hci2: link tx timeout [ 287.360889][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.361135][ T5746] Bluetooth: hci2: link tx timeout [ 287.361146][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.362135][ T5746] Bluetooth: hci2: link tx timeout [ 287.362147][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.362227][ T5746] Bluetooth: hci2: link tx timeout [ 287.362237][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.362575][ T5746] Bluetooth: hci2: link tx timeout [ 287.362586][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.363040][ T5746] Bluetooth: hci2: link tx timeout [ 287.363052][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.363419][ T5746] Bluetooth: hci2: link tx timeout [ 287.363431][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.363565][ T5746] Bluetooth: hci2: link tx timeout [ 287.363575][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.363921][ T5746] Bluetooth: hci2: link tx timeout [ 287.363933][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.365591][ T5746] Bluetooth: hci2: link tx timeout [ 287.365604][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.365801][ T5746] Bluetooth: hci2: link tx timeout [ 287.365829][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.366214][ T5746] Bluetooth: hci2: link tx timeout [ 287.366228][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.370423][ T5746] Bluetooth: hci2: link tx timeout [ 287.370442][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.370728][ T5746] Bluetooth: hci2: link tx timeout [ 287.370739][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.371214][ T5746] Bluetooth: hci2: link tx timeout [ 287.371227][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.371646][ T5746] Bluetooth: hci2: link tx timeout [ 287.371659][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.371742][ T5746] Bluetooth: hci2: link tx timeout [ 287.371752][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.371827][ T5746] Bluetooth: hci2: link tx timeout [ 287.371839][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.372192][ T5746] Bluetooth: hci2: link tx timeout [ 287.372210][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.373034][ T5746] Bluetooth: hci2: link tx timeout [ 287.373050][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.373193][ T5746] Bluetooth: hci2: link tx timeout [ 287.373205][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.373333][ T5746] Bluetooth: hci2: link tx timeout [ 287.373346][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.373767][ T5746] Bluetooth: hci2: link tx timeout [ 287.373781][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.374040][ T5746] Bluetooth: hci2: link tx timeout [ 287.374051][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.374324][ T5746] Bluetooth: hci2: link tx timeout [ 287.374338][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.374575][ T5746] Bluetooth: hci2: link tx timeout [ 287.374589][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.374795][ T5746] Bluetooth: hci2: link tx timeout [ 287.374808][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.374872][ T5746] Bluetooth: hci2: link tx timeout [ 287.374885][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.375416][ T5746] Bluetooth: hci2: link tx timeout [ 287.375431][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.375597][ T5746] Bluetooth: hci2: link tx timeout [ 287.375611][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.375934][ T5746] Bluetooth: hci2: link tx timeout [ 287.375948][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.376084][ T5746] Bluetooth: hci2: link tx timeout [ 287.376096][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.376446][ T5746] Bluetooth: hci2: link tx timeout [ 287.376469][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.376596][ T5746] Bluetooth: hci2: link tx timeout [ 287.376608][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.376901][ T5746] Bluetooth: hci2: link tx timeout [ 287.376915][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.377322][ T5746] Bluetooth: hci2: link tx timeout [ 287.377337][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.377688][ T5746] Bluetooth: hci2: link tx timeout [ 287.377704][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.377901][ T5746] Bluetooth: hci2: link tx timeout [ 287.377913][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.378167][ T5746] Bluetooth: hci2: link tx timeout [ 287.378179][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.378957][ T5746] Bluetooth: hci2: link tx timeout [ 287.378969][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.379245][ T5746] Bluetooth: hci2: link tx timeout [ 287.379256][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.379735][ T5746] Bluetooth: hci2: link tx timeout [ 287.379746][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.379853][ T5746] Bluetooth: hci2: link tx timeout [ 287.379864][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.379972][ T5746] Bluetooth: hci2: link tx timeout [ 287.379983][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.380090][ T5746] Bluetooth: hci2: link tx timeout [ 287.380101][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.381353][ T5746] Bluetooth: hci2: link tx timeout [ 287.381372][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.382247][ T5746] Bluetooth: hci2: link tx timeout [ 287.382260][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.382360][ T5746] Bluetooth: hci2: link tx timeout [ 287.382371][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.382624][ T5746] Bluetooth: hci2: link tx timeout [ 287.382634][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.383745][ T5746] Bluetooth: hci2: link tx timeout [ 287.383757][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.384111][ T5746] Bluetooth: hci2: link tx timeout [ 287.384121][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.384559][ T5746] Bluetooth: hci2: link tx timeout [ 287.384570][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.385218][ T5746] Bluetooth: hci2: link tx timeout [ 287.385231][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.385497][ T5746] Bluetooth: hci2: link tx timeout [ 287.385507][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.386120][ T5746] Bluetooth: hci2: link tx timeout [ 287.386130][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.386265][ T5746] Bluetooth: hci2: link tx timeout [ 287.386275][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.386544][ T5746] Bluetooth: hci2: link tx timeout [ 287.386556][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.387275][ T5746] Bluetooth: hci2: link tx timeout [ 287.387292][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.387688][ T5746] Bluetooth: hci2: link tx timeout [ 287.387700][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.388021][ T5746] Bluetooth: hci2: link tx timeout [ 287.388034][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.388214][ T5746] Bluetooth: hci2: link tx timeout [ 287.388230][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.388485][ T5746] Bluetooth: hci2: link tx timeout [ 287.388496][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.388695][ T5746] Bluetooth: hci2: link tx timeout [ 287.388704][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.389208][ T5746] Bluetooth: hci2: link tx timeout [ 287.389220][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.389355][ T5746] Bluetooth: hci2: link tx timeout [ 287.389366][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.389694][ T5746] Bluetooth: hci2: link tx timeout [ 287.389705][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.389954][ T5746] Bluetooth: hci2: link tx timeout [ 287.389965][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.390276][ T5746] Bluetooth: hci2: link tx timeout [ 287.390286][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.390792][ T5746] Bluetooth: hci2: link tx timeout [ 287.390803][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.390969][ T5746] Bluetooth: hci2: link tx timeout [ 287.390980][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.391268][ T5746] Bluetooth: hci2: link tx timeout [ 287.391279][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.391781][ T5746] Bluetooth: hci2: link tx timeout [ 287.391792][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.391903][ T5746] Bluetooth: hci2: link tx timeout [ 287.391914][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.392092][ T5746] Bluetooth: hci2: link tx timeout [ 287.392105][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.392212][ T5746] Bluetooth: hci2: link tx timeout [ 287.392222][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.392416][ T5746] Bluetooth: hci2: link tx timeout [ 287.392427][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.392551][ T5746] Bluetooth: hci2: link tx timeout [ 287.392562][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.392922][ T5746] Bluetooth: hci2: link tx timeout [ 287.392933][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.393066][ T5746] Bluetooth: hci2: link tx timeout [ 287.393077][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.393328][ T5746] Bluetooth: hci2: link tx timeout [ 287.393339][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.393459][ T5746] Bluetooth: hci2: link tx timeout [ 287.393470][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.393614][ T5746] Bluetooth: hci2: link tx timeout [ 287.393625][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.393725][ T5746] Bluetooth: hci2: link tx timeout [ 287.393734][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.394033][ T5746] Bluetooth: hci2: link tx timeout [ 287.394045][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.394146][ T5746] Bluetooth: hci2: link tx timeout [ 287.394155][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.394545][ T5746] Bluetooth: hci2: link tx timeout [ 287.394556][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.395232][ T5746] Bluetooth: hci2: link tx timeout [ 287.395244][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.395357][ T5746] Bluetooth: hci2: link tx timeout [ 287.395368][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.395629][ T5746] Bluetooth: hci2: link tx timeout [ 287.395645][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.396020][ T5746] Bluetooth: hci2: link tx timeout [ 287.396031][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.396383][ T5746] Bluetooth: hci2: link tx timeout [ 287.396394][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.396739][ T5746] Bluetooth: hci2: link tx timeout [ 287.396757][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.397177][ T5746] Bluetooth: hci2: link tx timeout [ 287.397189][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.397500][ T5746] Bluetooth: hci2: link tx timeout [ 287.397510][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.397592][ T5746] Bluetooth: hci2: link tx timeout [ 287.397603][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.397769][ T5746] Bluetooth: hci2: link tx timeout [ 287.397781][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.397884][ T5746] Bluetooth: hci2: link tx timeout [ 287.397896][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.398144][ T5746] Bluetooth: hci2: link tx timeout [ 287.398162][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.398245][ T5746] Bluetooth: hci2: link tx timeout [ 287.398259][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.398373][ T5746] Bluetooth: hci2: link tx timeout [ 287.398386][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.398669][ T5746] Bluetooth: hci2: link tx timeout [ 287.398681][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.398980][ T5746] Bluetooth: hci2: link tx timeout [ 287.398993][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.399074][ T5746] Bluetooth: hci2: link tx timeout [ 287.399087][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.399666][ T5746] Bluetooth: hci2: link tx timeout [ 287.399679][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.400028][ T5746] Bluetooth: hci2: link tx timeout [ 287.400040][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.400388][ T5746] Bluetooth: hci2: link tx timeout [ 287.400403][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.401381][ T5746] Bluetooth: hci2: link tx timeout [ 287.401396][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.401527][ T5746] Bluetooth: hci2: link tx timeout [ 287.401539][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.402104][ T5746] Bluetooth: hci2: link tx timeout [ 287.402256][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.402279][ T5746] Bluetooth: hci2: link tx timeout [ 287.402290][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.402423][ T5746] Bluetooth: hci2: link tx timeout [ 287.402435][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.402812][ T5746] Bluetooth: hci2: link tx timeout [ 287.402826][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.402939][ T5746] Bluetooth: hci2: link tx timeout [ 287.402951][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.403480][ T5746] Bluetooth: hci2: link tx timeout [ 287.403493][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.403675][ T5746] Bluetooth: hci2: link tx timeout [ 287.403688][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.403875][ T5746] Bluetooth: hci2: link tx timeout [ 287.403888][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.404077][ T5746] Bluetooth: hci2: link tx timeout [ 287.404088][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.404235][ T5746] Bluetooth: hci2: link tx timeout [ 287.404247][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.404271][ T5746] Bluetooth: hci2: link tx timeout [ 287.404281][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.404399][ T5746] Bluetooth: hci2: link tx timeout [ 287.404410][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.404803][ T5746] Bluetooth: hci2: link tx timeout [ 287.404816][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.405274][ T5746] Bluetooth: hci2: link tx timeout [ 287.405287][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.405647][ T5746] Bluetooth: hci2: link tx timeout [ 287.405659][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.405789][ T5746] Bluetooth: hci2: link tx timeout [ 287.405799][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.406130][ T5746] Bluetooth: hci2: link tx timeout [ 287.406140][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.406341][ T5746] Bluetooth: hci2: link tx timeout [ 287.406351][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.406655][ T5746] Bluetooth: hci2: link tx timeout [ 287.406667][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.406839][ T5746] Bluetooth: hci2: link tx timeout [ 287.406849][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.407096][ T5746] Bluetooth: hci2: link tx timeout [ 287.407107][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.407361][ T5746] Bluetooth: hci2: link tx timeout [ 287.407371][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.407838][ T5746] Bluetooth: hci2: link tx timeout [ 287.407848][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.407977][ T5746] Bluetooth: hci2: link tx timeout [ 287.407987][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.408135][ T5746] Bluetooth: hci2: link tx timeout [ 287.408144][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.408662][ T5746] Bluetooth: hci2: link tx timeout [ 287.408674][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.408952][ T5746] Bluetooth: hci2: link tx timeout [ 287.408962][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.409103][ T5746] Bluetooth: hci2: link tx timeout [ 287.409113][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.409133][ T5746] Bluetooth: hci2: link tx timeout [ 287.409143][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.409652][ T5746] Bluetooth: hci2: link tx timeout [ 287.409661][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.409911][ T5746] Bluetooth: hci2: link tx timeout [ 287.409921][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.410107][ T5746] Bluetooth: hci2: link tx timeout [ 287.410119][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.410631][ T5746] Bluetooth: hci2: link tx timeout [ 287.410641][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.411245][ T5746] Bluetooth: hci2: link tx timeout [ 287.411256][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.411443][ T5746] Bluetooth: hci2: link tx timeout [ 287.411452][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.411720][ T5746] Bluetooth: hci2: link tx timeout [ 287.411730][ T5746] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 288.120981][ T5746] Bluetooth: hci2: command 0x0405 tx timeout [ 288.864940][T11446] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 288.873569][T11443] IPVS: stopping backup sync thread 11446 ... [ 288.901178][ T853] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 289.070846][ T853] usb 6-1: Using ep0 maxpacket: 8 [ 289.073147][ T853] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 289.077404][ T853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 289.081882][ T853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.086579][ T853] usb 6-1: config 0 descriptor?? [ 289.100609][ T42] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 289.251345][ T42] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 289.252601][ T42] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 289.252622][ T42] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 289.252642][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.254473][T11445] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 289.260330][ T42] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 289.308207][ T853] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 289.737985][T11456] ieee802154 phy0 wpan0: encryption failed: -22 [ 289.913536][ T5823] usb 6-1: USB disconnect, device number 19 [ 290.013119][ T853] usb 7-1: USB disconnect, device number 17 [ 290.086504][T11462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1509'. [ 290.536454][T11470] program syz.3.1511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.620263][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1513'. [ 291.168457][ T5823] hid-multitouch 0005:0457:0009.0010: unknown main item tag 0x0 [ 291.180614][ T5823] hid-multitouch 0005:0457:0009.0010: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 291.265465][T11513] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.671013][ T853] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 291.821898][ T853] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 291.823098][ T853] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 291.823118][ T853] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 291.824034][ T853] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 291.824051][ T853] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 291.824964][ T853] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 291.824984][ T853] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 291.830071][ T853] usb 9-1: string descriptor 0 read error: -22 [ 291.830166][ T853] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.909815][T11525] ALSA: mixer_oss: invalid OSS volume 'OGADáżCaptuOȘ'.â‹L*8ŒP88re' [ 291.909871][T11525] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqӆŰÈÌONEOUT' [ 291.914970][T11525] ALSA: mixer_oss: invalid OSS volume 'Šä:&ÇBŠG€`TĘoÄD^z' [ 292.043612][T11518] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1522'. [ 292.571560][ T853] usb 9-1: USB disconnect, device number 7 [ 293.170992][ T75] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 293.321629][ T75] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 293.325511][ T75] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 293.329070][ T75] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 293.332315][ T75] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 293.335953][ T75] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 293.341364][ T75] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.344046][ T75] usb 6-1: Product: syz [ 293.344079][ T75] usb 6-1: Manufacturer: syz [ 293.344087][ T75] usb 6-1: SerialNumber: syz [ 293.350645][ T75] usb 6-1: config 0 descriptor?? [ 293.561822][ T75] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 293.759945][ T42] usb 6-1: USB disconnect, device number 20 [ 293.967705][T11569] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 294.571737][T11578] gfs2: error -5 reading superblock [ 294.650366][T11586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1542'. [ 294.880150][ T30] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 295.041793][ T30] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 295.043223][ T30] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 295.043240][ T30] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 4 [ 295.043254][ T30] usb 6-1: config 0 interface 0 has no altsetting 0 [ 295.047428][ T30] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 295.047441][ T30] usb 6-1: Product: syz [ 295.047448][ T30] usb 6-1: Manufacturer: syz [ 295.047455][ T30] usb 6-1: SerialNumber: syz [ 295.052060][ T30] usb 6-1: config 0 descriptor?? [ 295.058341][ T30] usb 6-1: selecting invalid altsetting 0 [ 295.262406][ T30] usb 6-1: USB disconnect, device number 21 [ 296.680521][ T853] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 296.830430][ T853] usb 6-1: Using ep0 maxpacket: 8 [ 296.833174][ T853] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 296.838328][ T853] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 296.838368][ T853] usb 6-1: config 0 has no interface number 0 [ 296.838422][ T853] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 296.838449][ T853] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 296.838477][ T853] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 296.838509][ T853] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 296.838547][ T853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.865936][ T853] usb 6-1: config 0 descriptor?? [ 296.879445][ T853] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 297.370009][ T75] usb 6-1: USB disconnect, device number 22 [ 297.379863][ T75] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 298.030635][ T10] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 298.180291][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 298.180882][ T10] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 298.181711][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.181734][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 298.181747][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 298.181758][ T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 298.181769][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.182543][ T10] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 298.182555][ T10] usb 9-1: Manufacturer: syz [ 298.183772][ T10] usb 9-1: config 0 descriptor?? [ 298.441422][ T10] rc_core: IR keymap rc-hauppauge not found [ 298.441489][ T10] Registered IR keymap rc-empty [ 298.441582][ T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 298.460701][ T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 298.485618][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 298.490258][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input26 [ 298.501321][ T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 298.521485][ T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 298.541161][ T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 298.562176][ T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 298.580581][ T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 298.600457][ T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 298.620673][ T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 298.643955][ T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 298.660527][ T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 298.682970][ T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 298.701358][ T10] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 298.701408][ T10] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 298.706760][ T10] usb 9-1: USB disconnect, device number 8 [ 298.976160][T11643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1556'. [ 299.570374][T11649] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 299.650154][ T30] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 299.800227][ T30] usb 9-1: Using ep0 maxpacket: 32 [ 299.801042][ T30] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 299.802256][ T30] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 299.802287][ T30] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 299.802340][ T30] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 299.802362][ T30] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 299.802384][ T30] usb 9-1: config 0 interface 0 has no altsetting 0 [ 299.807885][ T30] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 299.807909][ T30] usb 9-1: Product: syz [ 299.807921][ T30] usb 9-1: Manufacturer: syz [ 299.807933][ T30] usb 9-1: SerialNumber: syz [ 299.810332][ T30] usb 9-1: config 0 descriptor?? [ 299.816156][ T30] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 299.831041][ T30] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 300.074531][ T10] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 300.185934][T11653] ldusb 9-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 300.185995][ T853] usb 9-1: USB disconnect, device number 9 [ 300.186068][ C1] ldusb 9-1:0.0: usb_submit_urb failed (-19) [ 300.187164][T11669] ldusb 9-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 300.201633][ T853] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 300.221492][ T10] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 300.223009][ T10] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 300.223039][ T10] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 300.223066][ T10] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 300.223088][ T10] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 300.223108][ T10] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 300.223129][ T10] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 300.223149][ T10] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 300.223170][ T10] usb 7-1: config 168 interface 0 has no altsetting 0 [ 300.225867][ T10] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 300.225894][ T10] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 300.225943][ T10] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 300.225964][ T10] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 300.225983][ T10] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 300.226004][ T10] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 300.226024][ T10] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 300.226044][ T10] usb 7-1: config 168 interface 0 has no altsetting 0 [ 300.226903][ T10] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 300.226920][ T10] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 300.226936][ T10] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 300.226949][ T10] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 300.226961][ T10] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 300.226974][ T10] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 300.226986][ T10] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 300.226999][ T10] usb 7-1: config 168 interface 0 has no altsetting 0 [ 300.234424][ T10] usb 7-1: string descriptor 0 read error: -22 [ 300.234521][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.267631][ T10] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 300.466816][ T853] usb 7-1: USB disconnect, device number 18 [ 300.675543][T11666] adutux: No device or device unplugged -19 [ 300.766211][T11689] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 300.789962][ T75] hid-multitouch 0005:0457:0009.0011: unknown main item tag 0x0 [ 300.795431][ T75] hid-multitouch 0005:0457:0009.0011: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 300.988967][T11716] loop9: detected capacity change from 0 to 255852544 [ 301.158915][T11729] random: crng reseeded on system resumption [ 301.275661][T11737] ntfs3(nullb0): Primary boot signature is not NTFS. [ 301.275904][T11737] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 301.392027][T11744] bridge: RTM_NEWNEIGH with invalid state 0x28 [ 301.529643][T11742] netlink: 'syz.2.1596': attribute type 1 has an invalid length. [ 301.529933][T11742] netlink: 756 bytes leftover after parsing attributes in process `syz.2.1596'. [ 301.580197][T11752] jffs2: notice: (11752) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 302.310430][ T853] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 302.460903][ T853] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 302.461858][ T853] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 302.461882][ T853] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 302.461902][ T853] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 302.463638][ T853] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.463655][ T853] usb 9-1: Product: syz [ 302.463666][ T853] usb 9-1: Manufacturer: syz [ 302.463677][ T853] usb 9-1: SerialNumber: syz [ 302.468668][ T853] usb 9-1: config 0 descriptor?? [ 302.469407][T11768] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 302.593592][T11781] program syz.2.1614 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.648190][T11781] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 303.470025][ T853] rc_core: IR keymap rc-streamzap not found [ 303.470080][ T853] Registered IR keymap rc-empty [ 303.473143][ T853] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 303.474375][ T853] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input27 [ 303.486569][ T853] usb 9-1: USB disconnect, device number 10 [ 303.630270][T11810] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 304.169667][ T75] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 304.280905][ T1039] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 304.329654][ T75] usb 9-1: Using ep0 maxpacket: 8 [ 304.330455][ T75] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 304.331409][ T75] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.331434][ T75] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.331453][ T75] usb 9-1: config 0 interface 0 has no altsetting 0 [ 304.331477][ T75] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.333747][ T75] usb 9-1: config 0 descriptor?? [ 304.351893][ T5822] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 304.449699][ T1039] usb 6-1: Using ep0 maxpacket: 16 [ 304.451384][ T1039] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 304.452245][ T1039] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.452272][ T1039] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 304.452286][ T1039] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 304.452297][ T1039] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 304.452308][ T1039] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 304.453647][ T1039] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 304.453660][ T1039] usb 6-1: Manufacturer: syz [ 304.455001][ T1039] usb 6-1: config 0 descriptor?? [ 304.514583][T11828] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 304.519571][ T5822] usb 7-1: Using ep0 maxpacket: 16 [ 304.521809][ T5822] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 304.527053][ T5822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.527103][ T5822] usb 7-1: Product: syz [ 304.527111][ T5822] usb 7-1: Manufacturer: syz [ 304.527119][ T5822] usb 7-1: SerialNumber: syz [ 304.709671][ T1039] rc_core: IR keymap rc-hauppauge not found [ 304.709728][ T1039] Registered IR keymap rc-empty [ 304.709843][ T1039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 304.729672][ T1039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 304.744162][ T75] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 304.748353][ T75] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 304.748407][ T75] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 304.748470][ T75] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 304.748496][ T75] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 304.748902][ T75] mcp2221 0003:04D8:00DD.0012: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 304.750335][ T1039] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 304.751621][ T1039] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input28 [ 304.755709][ T1039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 304.769765][ T1039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 304.772978][ T5822] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 304.779974][ T5822] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 304.780132][ T5822] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 304.780154][ T5822] usb 7-1: media controller created [ 304.785145][ T5822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 304.794254][ T1039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 304.819619][ T1039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 304.839706][ T1039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 304.869660][ T1039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 304.899654][ T1039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 304.920132][ T1039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 304.939730][ T1039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 304.969806][ T1039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 305.001772][ T5822] zl10353_read_register: readreg error (reg=127, ret==-110) [ 305.003155][ T1039] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 305.0 ** replaying previous printk message ** [ 305.003195][ T1039] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 305.010212][T11820] ------------[ cut here ]------------ [ 305.010226][T11820] usb 7-1: BOGUS control dir, pipe 80001380 doesn't match bRequestType c0 [ 305.010242][T11820] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x15ff/0x19b0, CPU#2: syz.4.1629/11820 [ 305.026972][T11820] Modules linked in: [ 305.029262][T11820] CPU: 2 UID: 0 PID: 11820 Comm: syz.4.1629 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.033499][T11820] Tainted: [L]=SOFTLOCKUP [ 305.035101][T11820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 305.039708][T11820] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 305.041648][T11820] Code: 48 89 54 24 40 e8 33 d8 7e fa 4c 89 e7 e8 bb f7 da fe 48 89 c6 48 8d 3d d1 15 c6 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 04 d8 7e fa 89 ee bf ff 00 00 00 [ 305.049019][T11820] RSP: 0018:ffffc900232078c8 EFLAGS: 00010283 [ 305.051560][T11820] RAX: ffffffff8cc85200 RBX: ffff88802597a500 RCX: 0000000080001380 [ 305.054739][T11820] RDX: ffff8880614f3cc0 RSI: ffffffff8cc85200 RDI: ffffffff915279e0 [ 305.057594][T11820] RBP: ffff888028131058 R08: 00000000000000c0 R09: 0000000000000000 [ 305.060561][T11820] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880281310b0 [ 305.063537][T11820] R13: ffff88807579c4c0 R14: ffff88807579c4c6 R15: ffff88807579c4c7 [ 305.066501][T11820] FS: 0000000000000000(0000) GS:ffff888096b68000(0063) knlGS:00000000f541db40 [ 305.069954][T11820] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 305.072712][T11820] CR2: 000000000c3d1d5e CR3: 0000000042e7a000 CR4: 0000000000352ef0 [ 305.075733][T11820] Call Trace: [ 305.076943][T11820] [ 305.078139][T11820] ? __init_swait_queue_head+0xca/0x150 [ 305.080196][T11820] usb_start_wait_urb+0x10e/0x580 [ 305.081786][T11820] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 305.083836][T11820] ? __asan_memset+0x23/0x50 [ 305.085585][T11820] usb_control_msg+0x328/0x4b0 [ 305.089078][T11820] ? __pfx_usb_control_msg+0x10/0x10 [ 305.091652][T11820] ? rt_mutex_slowlock_block.constprop.0+0x383/0x7c0 [ 305.094493][T11820] ? rt_mutex_slowlock_block.constprop.0+0x56/0x7c0 [ 305.097155][T11820] gl861_ctrl_msg+0x1a5/0x4a0 [ 305.098684][T11820] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 305.100882][T11820] gl861_i2c_master_xfer+0x545/0x690 [ 305.103097][T11820] ? mark_held_locks+0x40/0x70 [ 305.104764][T11820] __i2c_transfer+0x5d4/0x1740 [ 305.106497][T11820] ? __pfx___i2c_transfer+0x10/0x10 [ 305.108473][T11820] i2c_transfer+0x158/0x380 [ 305.110730][T11820] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 305.113248][T11820] compat_i2cdev_ioctl+0x469/0x540 [ 305.115636][T11820] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 305.118165][T11820] ? __fget_files+0x21f/0x3d0 [ 305.120393][T11820] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 305.122720][T11820] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 305.124981][T11820] __do_fast_syscall_32+0x13a/0x8b0 [ 305.126775][T11820] ? lockdep_hardirqs_on+0x7d/0x110 [ 305.128899][T11820] do_fast_syscall_32+0x32/0x70 [ 305.131435][T11820] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 305.133926][T11820] RIP: 0023:0xf702efec [ 305.135399][T11820] Code: Unable to access opcode bytes at 0xf702efc2. [ 305.138270][T11820] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 305.142192][T11820] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 305.145003][T11820] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 305.148140][T11820] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 305.151427][T11820] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 305.155025][T11820] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 305.158758][T11820] [ 305.159954][T11820] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 305.162880][T11820] CPU: 2 UID: 0 PID: 11820 Comm: syz.4.1629 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.167184][T11820] Tainted: [L]=SOFTLOCKUP [ 305.168911][T11820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 305.172805][T11820] Call Trace: [ 305.173879][T11820] [ 305.175021][T11820] dump_stack_lvl+0x100/0x190 [ 305.176943][T11820] vpanic+0x553/0x970 [ 305.178589][T11820] ? __pfx_vpanic+0x10/0x10 [ 305.180438][T11820] panic+0xd1/0xe0 [ 305.182117][T11820] ? __pfx_panic+0x10/0x10 [ 305.184170][T11820] check_panic_on_warn.cold+0x19/0x34 [ 305.186669][T11820] ? usb_submit_urb+0x15ff/0x19b0 [ 305.188842][T11820] __warn.cold+0x191/0x318 [ 305.190633][T11820] __report_bug+0x30f/0x440 [ 305.192543][T11820] ? usb_submit_urb+0x15ff/0x19b0 [ 305.194511][T11820] ? __pfx___report_bug+0x10/0x10 [ 305.196213][T11820] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 305.198551][T11820] report_bug_entry+0xe2/0x290 [ 305.200740][T11820] ? usb_submit_urb+0x160d/0x19b0 [ 305.203198][T11820] handle_bug+0x1cd/0x2a0 [ 305.205316][T11820] exc_invalid_op+0x17/0x50 [ 305.207236][T11820] asm_exc_invalid_op+0x1a/0x20 [ 305.209242][T11820] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 305.211594][T11820] Code: 48 89 54 24 40 e8 33 d8 7e fa 4c 89 e7 e8 bb f7 da fe 48 89 c6 48 8d 3d d1 15 c6 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 04 d8 7e fa 89 ee bf ff 00 00 00 [ 305.218822][T11820] RSP: 0018:ffffc900232078c8 EFLAGS: 00010283 [ 305.221501][T11820] RAX: ffffffff8cc85200 RBX: ffff88802597a500 RCX: 0000000080001380 [ 305.225357][T11820] RDX: ffff8880614f3cc0 RSI: ffffffff8cc85200 RDI: ffffffff915279e0 [ 305.228711][T11820] RBP: ffff888028131058 R08: 00000000000000c0 R09: 0000000000000000 [ 305.231893][T11820] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880281310b0 [ 305.235175][T11820] R13: ffff88807579c4c0 R14: ffff88807579c4c6 R15: ffff88807579c4c7 [ 305.237775][T11820] ? usb_submit_urb+0x15f5/0x19b0 [ 305.239804][T11820] ? __init_swait_queue_head+0xca/0x150 [ 305.241781][T11820] usb_start_wait_urb+0x10e/0x580 [ 305.243938][T11820] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 305.246612][T11820] ? __asan_memset+0x23/0x50 [ 305.248742][T11820] usb_control_msg+0x328/0x4b0 [ 305.250719][T11820] ? __pfx_usb_control_msg+0x10/0x10 [ 305.252556][T11820] ? rt_mutex_slowlock_block.constprop.0+0x383/0x7c0 [ 305.254974][T11820] ? rt_mutex_slowlock_block.constprop.0+0x56/0x7c0 [ 305.257613][T11820] gl861_ctrl_msg+0x1a5/0x4a0 [ 305.259508][T11820] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 305.261640][T11820] gl861_i2c_master_xfer+0x545/0x690 [ 305.263749][T11820] ? mark_held_locks+0x40/0x70 [ 305.265692][T11820] __i2c_transfer+0x5d4/0x1740 [ 305.267716][T11820] ? __pfx___i2c_transfer+0x10/0x10 [ 305.270002][T11820] i2c_transfer+0x158/0x380 [ 305.271935][T11820] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 305.273952][T11820] compat_i2cdev_ioctl+0x469/0x540 [ 305.276026][T11820] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 305.278283][T11820] ? __fget_files+0x21f/0x3d0 [ 305.280205][T11820] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 305.282545][T11820] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 305.285361][T11820] __do_fast_syscall_32+0x13a/0x8b0 [ 305.287838][T11820] ? lockdep_hardirqs_on+0x7d/0x110 [ 305.289949][T11820] do_fast_syscall_32+0x32/0x70 [ 305.292239][T11820] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 305.294917][T11820] RIP: 0023:0xf702efec [ 305.296708][T11820] Code: Unable to access opcode bytes at 0xf702efc2. [ 305.299425][T11820] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 305.302275][T11820] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 305.305333][T11820] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 305.309016][T11820] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 305.312999][T11820] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 305.315716][T11820] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 305.318820][T11820] [ 305.320815][T11820] Kernel Offset: disabled [ 305.322615][T11820] Rebooting in 86400 seconds..