last executing test programs: 4.730598228s ago: executing program 2 (id=364): inotify_init() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c000380"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) 4.600323021s ago: executing program 2 (id=365): r0 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@any_dev={0x4, 0xd7a, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x11a}}}, 0x0) 4.104994104s ago: executing program 2 (id=374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "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"}) unshare(0x26020480) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r4, &(0x7f00000091c0)=""/16384, 0x4000) 2.914115303s ago: executing program 2 (id=368): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x8000}, 0x4) syz_emit_ethernet(0x2e, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x5, 0x0, @void}}}}}}}, 0x0) 2.660130555s ago: executing program 2 (id=370): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)="0473f9a9", 0x4, 0x2404c081, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='nv', 0x2) shutdown(r0, 0x1) 2.450387646s ago: executing program 2 (id=372): r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) 2.318321026s ago: executing program 1 (id=375): syz_emit_ethernet(0x46, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) gettid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x48000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x16) 1.410277264s ago: executing program 1 (id=378): r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@fd={0xfffffff8, 0x8, 0x4, 0x70000, 0xb3, {0x0, 0xea60}, {0x5, 0x0, 0x5, 0x4, 0x6, 0xe5, "0fce9856"}, 0x0, 0x4, {}, 0x4}) 1.409017039s ago: executing program 1 (id=379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) 1.330075703s ago: executing program 1 (id=380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) 1.329930715s ago: executing program 1 (id=381): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)="0473f9a9", 0x4, 0x2404c081, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='nv', 0x2) shutdown(r0, 0x1) 1.260416504s ago: executing program 1 (id=382): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000224)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) ptrace(0x10, 0x0) ptrace$setopts(0x4200, 0x0, 0x0, 0x1) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0x4212, 0x0, 0x58, &(0x7f0000000080)) 1.260186393s ago: executing program 0 (id=383): inotify_init() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, 0x0}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c000380"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) 1.255623647s ago: executing program 0 (id=384): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805513, 0x0}) 1.160594484s ago: executing program 0 (id=385): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfc, 0x7fff0006}]}) brk(0x200000ffc000) 1.160452816s ago: executing program 0 (id=386): syz_emit_ethernet(0x46, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) gettid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x48000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x16) 448.123576ms ago: executing program 3 (id=394): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, r2, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_ublk_add_dev(r0, r1, 0x0, r2, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@any_dev={0x4, 0xd7a, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x11a}}}, 0x0) 360.726915ms ago: executing program 3 (id=395): write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="d8", 0x1) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 260.783954ms ago: executing program 0 (id=396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) close(r1) 148.479035ms ago: executing program 3 (id=397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}], {0x14, 0x10}}, 0x88}}, 0x0) 148.064437ms ago: executing program 3 (id=398): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x1) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)={0x418103, 0xa, 0xf}, 0x18) rmdir(&(0x7f00000000c0)='./file0\x00') 90.264732ms ago: executing program 3 (id=399): keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000080)='encrypted\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000010c0)='\xc9\x8d\n$\x11J\x06t\x8e\xa6ZH\x88\x9967\xd1\xe6zy\xb1\xc7\xcbB-\xacbe\xad\xc4\xc4o\x1f\x00\x00\x82*\f\x00\x00AT\xe49\xcf\x00', 0x0) 90.103053ms ago: executing program 3 (id=400): setns(0xc9, 0x0) socket(0x8, 0x80000, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) get_mempolicy(0x0, &(0x7f0000000000), 0x1fd, &(0x7f0000ff9000/0x4000)=nil, 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) writev(r3, 0x0, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x15) syz_clone3(0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x6, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) 0s ago: executing program 0 (id=401): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11}, 0xa) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3268}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xf00}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x7e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xcc, 0x0, r5}) prctl$PR_SET_SECCOMP(0x4f, 0x2, &(0x7f0000000080)={0x0, 0x0}) kernel console output (not intermixed with test programs): vice on rfkill (-4) [ 54.879705][ T5877] usb 7-1: device descriptor read/64, error -71 [ 54.899234][ T6029] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 54.899256][ T6029] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 54.920777][ T6029] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 54.920793][ T6029] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 54.929696][ T6029] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 54.929717][ T6029] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 54.988435][ T5877] usb usb7-port1: attempt power cycle [ 55.182169][ T43] imon:send_packet: packet tx failed (-71) [ 55.197218][ T43] imon 5-1:155.0: remote input dev register failed [ 55.197287][ T43] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 55.211556][ T43] imon 5-1:155.0: unable to initialize intf0, err 0 [ 55.211579][ T43] imon:imon_probe: failed to initialize context! [ 55.211588][ T43] imon 5-1:155.0: unable to register, err -19 [ 55.218196][ T43] usb 5-1: USB disconnect, device number 4 [ 55.378282][ T5877] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 55.588479][ T5877] usb 7-1: device not accepting address 5, error -71 [ 56.067815][ T1341] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 56.227175][ T1341] usb 8-1: Using ep0 maxpacket: 32 [ 56.230224][ T1341] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 56.233135][ T1341] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 56.233156][ T1341] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 56.233969][ T1341] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 56.234168][ T1341] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 56.273170][ T1341] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.273219][ T1341] usb 8-1: Product: syz [ 56.273227][ T1341] usb 8-1: Manufacturer: syz [ 56.273259][ T1341] usb 8-1: SerialNumber: syz [ 56.356243][ C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 56.386918][ T1341] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input13 [ 56.568455][ T6061] netlink: 'syz.3.37': attribute type 12 has an invalid length. [ 56.635713][ T6068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.636634][ T6068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.777247][ T1341] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 56.777264][ T1341] (id 0x00) [ 56.827644][ T1341] rc_core: IR keymap rc-imon-pad not found [ 56.827655][ T1341] Registered IR keymap rc-empty [ 56.827687][ T1341] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 56.827698][ T1341] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 57.130614][ T6071] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 57.197507][ T1341] imon:send_packet: packet tx failed (-71) [ 57.217313][ T1341] imon 8-1:155.0: remote input dev register failed [ 57.217429][ T1341] imon 8-1:155.0: imon_init_intf0: rc device setup failed [ 57.242166][ T1341] imon 8-1:155.0: unable to initialize intf0, err 0 [ 57.242185][ T1341] imon:imon_probe: failed to initialize context! [ 57.242201][ T1341] imon 8-1:155.0: unable to register, err -19 [ 57.246431][ T1341] usb 8-1: USB disconnect, device number 4 [ 57.367214][ T5877] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 57.405587][ T6091] xt_CT: No such helper "syz1" [ 57.547624][ T5877] usb 7-1: Using ep0 maxpacket: 32 [ 57.548161][ T5877] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 57.548998][ T5877] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 57.549030][ T5877] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 57.549049][ T5877] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 57.549068][ T5877] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 57.550667][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.550679][ T5877] usb 7-1: Product: syz [ 57.550686][ T5877] usb 7-1: Manufacturer: syz [ 57.550693][ T5877] usb 7-1: SerialNumber: syz [ 57.586605][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 57.593056][ T5877] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input15 [ 57.772097][ T6077] netlink: 'syz.2.41': attribute type 12 has an invalid length. [ 57.817202][ T1341] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 57.841390][ T6077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.841837][ T6077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.867323][ T5877] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 57.867340][ T5877] (id 0x00) [ 57.917236][ T5877] rc_core: IR keymap rc-imon-pad not found [ 57.917252][ T5877] Registered IR keymap rc-empty [ 57.919666][ T5877] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 57.919683][ T5877] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 57.977403][ T1341] usb 5-1: Using ep0 maxpacket: 32 [ 57.977997][ T1341] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 57.978885][ T1341] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 57.978919][ T1341] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 57.978941][ T1341] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 57.978987][ T1341] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 57.980876][ T1341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.980892][ T1341] usb 5-1: Product: syz [ 57.980901][ T1341] usb 5-1: Manufacturer: syz [ 57.980911][ T1341] usb 5-1: SerialNumber: syz [ 57.989442][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 57.992229][ T1341] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input17 [ 58.207970][ T6095] netlink: 'syz.0.43': attribute type 12 has an invalid length. [ 58.266897][ T6103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.272826][ T6103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.281030][ T5877] imon:send_packet: packet tx failed (-71) [ 58.297524][ T5877] imon 7-1:155.0: remote input dev register failed [ 58.297655][ T5877] imon 7-1:155.0: imon_init_intf0: rc device setup failed [ 58.311250][ T5877] imon 7-1:155.0: unable to initialize intf0, err 0 [ 58.312474][ T5877] imon:imon_probe: failed to initialize context! [ 58.312490][ T5877] imon 7-1:155.0: unable to register, err -19 [ 58.319216][ T5877] usb 7-1: USB disconnect, device number 7 [ 58.394122][ T1341] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 58.394141][ T1341] (id 0x00) [ 58.401719][ T1854] Process accounting resumed [ 58.474124][ T1341] rc_core: IR keymap rc-imon-pad not found [ 58.474141][ T1341] Registered IR keymap rc-empty [ 58.474193][ T1341] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 58.474207][ T1341] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 58.891408][ T1341] imon:send_packet: packet tx failed (-71) [ 58.914385][ T1341] imon 5-1:155.0: remote input dev register failed [ 58.914559][ T1341] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 59.087236][ T43] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 59.144168][ T1341] imon 5-1:155.0: unable to initialize intf0, err 0 [ 59.144189][ T1341] imon:imon_probe: failed to initialize context! [ 59.144199][ T1341] imon 5-1:155.0: unable to register, err -19 [ 59.146130][ T1341] usb 5-1: USB disconnect, device number 5 [ 59.238079][ T43] usb 8-1: Using ep0 maxpacket: 32 [ 59.249741][ T43] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 59.256838][ T43] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 59.256875][ T43] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 59.256895][ T43] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 59.256915][ T43] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 59.278013][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.278035][ T43] usb 8-1: Product: syz [ 59.278047][ T43] usb 8-1: Manufacturer: syz [ 59.278059][ T43] usb 8-1: SerialNumber: syz [ 59.283792][ C3] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 59.285167][ T43] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input19 [ 59.493043][ T6108] netlink: 'syz.3.45': attribute type 12 has an invalid length. [ 59.552349][ T6108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.552639][ T6108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.587799][ T43] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 59.587812][ T43] (id 0x00) [ 59.637454][ T43] rc_core: IR keymap rc-imon-pad not found [ 59.637469][ T43] Registered IR keymap rc-empty [ 59.637524][ T43] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 59.637540][ T43] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 59.657429][ T5822] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 59.817249][ T5822] usb 6-1: Using ep0 maxpacket: 8 [ 59.818629][ T5822] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 59.819894][ T5822] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 59.819911][ T5822] usb 6-1: config 0 has no interface number 0 [ 59.819940][ T5822] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 59.819971][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.826119][ T5822] usb 6-1: config 0 descriptor?? [ 59.826471][ T6120] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 59.839473][ T5822] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 59.931420][ T43] imon:send_packet: packet tx failed (-71) [ 59.947269][ T43] imon 8-1:155.0: remote input dev register failed [ 59.947339][ T43] imon 8-1:155.0: imon_init_intf0: rc device setup failed [ 59.951875][ T43] imon 8-1:155.0: unable to initialize intf0, err 0 [ 59.951887][ T43] imon:imon_probe: failed to initialize context! [ 59.951893][ T43] imon 8-1:155.0: unable to register, err -19 [ 59.958729][ T43] usb 8-1: USB disconnect, device number 5 [ 60.065826][ T42] usb 6-1: USB disconnect, device number 5 [ 60.065953][ C3] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 60.277246][ T1341] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 60.429229][ T1341] usb 7-1: unable to get BOS descriptor or descriptor too short [ 60.429668][ T1341] usb 7-1: not running at top speed; connect to a high speed hub [ 60.429691][ T1341] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 60.430546][ T1341] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 60.430564][ T1341] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 60.430579][ T1341] usb 7-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 60.430592][ T1341] usb 7-1: config 14 has no interface number 0 [ 60.430604][ T1341] usb 7-1: config 14 has no interface number 1 [ 60.430645][ T1341] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 60.430663][ T1341] usb 7-1: config 14 interface 228 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 60.430682][ T1341] usb 7-1: config 14 interface 57 has no altsetting 0 [ 60.430692][ T1341] usb 7-1: config 14 interface 228 has no altsetting 0 [ 60.432417][ T1341] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.432429][ T1341] usb 7-1: Product: 舣妧᠎䟘钾岞瑎㩧.壤悵푊믞쥼쩱褁Ꭓⵊ덨㝥聯ၿ镾ꞃ⒣맄髒倩非䚫퉾෡݉騋ꅃ薺콸흴鲓솠稾예芒顅壒馈䅰兣悳얦풆⛕ꕋ供‹ᕮ࿖ఊ͞⣢闈ꡝ믋泞ዻ裛轝弚ﮂ攟剶츒니䆍⼺返遪鋠탄䤶咠ﭕ싃汭 [ 60.432444][ T1341] usb 7-1: Manufacturer: 䰊 [ 60.432451][ T1341] usb 7-1: SerialNumber: syz [ 60.606925][ T6128] FAULT_INJECTION: forcing a failure. [ 60.606925][ T6128] name failslab, interval 1, probability 0, space 0, times 1 [ 60.606978][ T6128] CPU: 3 UID: 0 PID: 6128 Comm: syz.1.52 Not tainted syzkaller #0 PREEMPT(full) [ 60.606997][ T6128] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.607007][ T6128] Call Trace: [ 60.607013][ T6128] [ 60.607020][ T6128] dump_stack_lvl+0x100/0x190 [ 60.607049][ T6128] should_fail_ex.cold+0x5/0xa [ 60.607075][ T6128] should_failslab+0xc2/0x120 [ 60.607103][ T6128] __kmalloc_cache_node_noprof+0x94/0x720 [ 60.607146][ T6128] ? kernel_text_address+0x8d/0x100 [ 60.607176][ T6128] ? __get_vm_area_node+0x124/0x350 [ 60.607204][ T6128] __get_vm_area_node+0x124/0x350 [ 60.607230][ T6128] __vmalloc_node_range_noprof+0x268/0x1420 [ 60.607254][ T6128] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 60.607275][ T6128] ? __pfx_stack_trace_save+0x10/0x10 [ 60.607300][ T6128] ? stack_depot_save_flags+0x27/0x9f0 [ 60.607332][ T6128] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 60.607356][ T6128] ? __kasan_kmalloc+0xaa/0xb0 [ 60.607377][ T6128] ? __do_fast_syscall_32+0x13a/0x8b0 [ 60.607409][ T6128] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 60.607444][ T6128] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 60.607468][ T6128] __vmalloc_node_noprof+0xad/0xf0 [ 60.607494][ T6128] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 60.607521][ T6128] __vmalloc_noprof+0xa3/0x120 [ 60.607546][ T6128] ? __pfx___vmalloc_noprof+0x10/0x10 [ 60.607579][ T6128] bpf_prog_alloc_no_stats+0x58/0x690 [ 60.607606][ T6128] bpf_prog_alloc+0x3b/0x200 [ 60.607631][ T6128] bpf_prog_create_from_user+0xb4/0x2e0 [ 60.607661][ T6128] ? __pfx_seccomp_check_filter+0x10/0x10 [ 60.607683][ T6128] do_seccomp+0x7f7/0x2730 [ 60.607710][ T6128] ? __pfx_do_seccomp+0x10/0x10 [ 60.607733][ T6128] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 60.607757][ T6128] ? __sys_setsockopt+0x139/0x190 [ 60.607782][ T6128] ? __pfx_ksys_write+0x10/0x10 [ 60.607811][ T6128] __do_fast_syscall_32+0x13a/0x8b0 [ 60.607845][ T6128] do_fast_syscall_32+0x32/0x70 [ 60.607873][ T6128] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 60.607895][ T6128] RIP: 0023:0xf705efec [ 60.607916][ T6128] Code: Unable to access opcode bytes at 0xf705efc2. [ 60.607924][ T6128] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000162 [ 60.607942][ T6128] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000008 [ 60.607955][ T6128] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.607967][ T6128] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 60.607979][ T6128] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 60.607991][ T6128] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.608016][ T6128] [ 60.608341][ T6128] syz.1.52: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 60.608475][ T6128] CPU: 3 UID: 0 PID: 6128 Comm: syz.1.52 Not tainted syzkaller #0 PREEMPT(full) [ 60.608496][ T6128] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.608507][ T6128] Call Trace: [ 60.608515][ T6128] [ 60.608521][ T6128] dump_stack_lvl+0x100/0x190 [ 60.608546][ T6128] warn_alloc.cold+0x9e/0xb2 [ 60.608565][ T6128] ? __pfx_warn_alloc+0x10/0x10 [ 60.608581][ T6128] ? __kasan_kmalloc+0x8a/0xb0 [ 60.608609][ T6128] ? __get_vm_area_node+0x22b/0x350 [ 60.608637][ T6128] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 60.608662][ T6128] ? __pfx_stack_trace_save+0x10/0x10 [ 60.608686][ T6128] ? stack_depot_save_flags+0x27/0x9f0 [ 60.608717][ T6128] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 60.608743][ T6128] ? __kasan_kmalloc+0xaa/0xb0 [ 60.608765][ T6128] ? __do_fast_syscall_32+0x13a/0x8b0 [ 60.608794][ T6128] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 60.608826][ T6128] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 60.608846][ T6128] __vmalloc_node_noprof+0xad/0xf0 [ 60.608868][ T6128] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 60.608892][ T6128] __vmalloc_noprof+0xa3/0x120 [ 60.608917][ T6128] ? __pfx___vmalloc_noprof+0x10/0x10 [ 60.608949][ T6128] bpf_prog_alloc_no_stats+0x58/0x690 [ 60.608976][ T6128] bpf_prog_alloc+0x3b/0x200 [ 60.609002][ T6128] bpf_prog_create_from_user+0xb4/0x2e0 [ 60.609047][ T6128] ? __pfx_seccomp_check_filter+0x10/0x10 [ 60.609070][ T6128] do_seccomp+0x7f7/0x2730 [ 60.609098][ T6128] ? __pfx_do_seccomp+0x10/0x10 [ 60.609122][ T6128] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 60.609150][ T6128] ? __sys_setsockopt+0x139/0x190 [ 60.609170][ T6128] ? __pfx_ksys_write+0x10/0x10 [ 60.609194][ T6128] __do_fast_syscall_32+0x13a/0x8b0 [ 60.609227][ T6128] do_fast_syscall_32+0x32/0x70 [ 60.609258][ T6128] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 60.609282][ T6128] RIP: 0023:0xf705efec [ 60.609301][ T6128] Code: Unable to access opcode bytes at 0xf705efc2. [ 60.609308][ T6128] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000162 [ 60.609326][ T6128] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000008 [ 60.609338][ T6128] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.609349][ T6128] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 60.609361][ T6128] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 60.609372][ T6128] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.609396][ T6128] [ 60.612878][ T6128] Mem-Info: [ 60.612891][ T6128] active_anon:4945 inactive_anon:448 isolated_anon:0 [ 60.612891][ T6128] active_file:24 inactive_file:59067 isolated_file:0 [ 60.612891][ T6128] unevictable:1000 dirty:443 writeback:0 [ 60.612891][ T6128] slab_reclaimable:9979 slab_unreclaimable:52247 [ 60.612891][ T6128] mapped:23605 shmem:1525 pagetables:1128 [ 60.612891][ T6128] sec_pagetables:295 bounce:0 [ 60.612891][ T6128] kernel_misc_reclaimable:0 [ 60.612891][ T6128] free:38613 free_pcp:14240 free_cma:0 [ 60.612939][ T6128] Node 0 active_anon:184kB inactive_anon:84kB active_file:96kB inactive_file:2404kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:268kB dirty:16kB writeback:0kB shmem:2004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8384kB pagetables:1392kB sec_pagetables:1108kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 60.613036][ T6128] Node 1 active_anon:19596kB inactive_anon:1708kB active_file:0kB inactive_file:233864kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:94152kB dirty:1756kB writeback:0kB shmem:4096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4840kB pagetables:3120kB sec_pagetables:72kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 60.613085][ T6128] Node 0 DMA free:2032kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:104kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:228kB local_pcp:128kB free_cma:0kB [ 60.613139][ T6128] lowmem_reserve[]: 0 277 277 277 277 [ 60.613181][ T6128] Node 0 DMA32 free:15744kB boost:0kB min:12628kB low:15784kB high:18940kB reserved_highatomic:0kB free_highatomic:0kB active_anon:184kB inactive_anon:84kB active_file:96kB inactive_file:2300kB unevictable:2000kB writepending:16kB zspages:0kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:7124kB local_pcp:448kB free_cma:0kB [ 60.613235][ T6128] lowmem_reserve[]: 0 0 0 0 0 [ 60.613268][ T6128] Node 1 DMA32 free:136676kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0kB free_highatomic:0kB active_anon:19596kB inactive_anon:1708kB active_file:0kB inactive_file:233864kB unevictable:2000kB writepending:1756kB zspages:2604kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:49608kB local_pcp:14588kB free_cma:0kB [ 60.613318][ T6128] lowmem_reserve[]: 0 0 0 0 0 [ 60.613348][ T6128] Node 0 DMA: 2*4kB (UM) 1*8kB (M) 4*16kB (UM) 23*32kB (UM) 9*64kB (UM) 3*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2032kB [ 60.613474][ T6128] Node 0 DMA32: 2*4kB (UE) 35*8kB (UME) 6*16kB (UE) 30*32kB (UE) 29*64kB (UM) 14*128kB (UM) 14*256kB (M) 6*512kB (M) 4*1024kB (M) 0*2048kB 0*4096kB = 15744kB [ 60.613607][ T6128] Node 1 DMA32: 79*4kB (UE) 187*8kB (UME) 127*16kB (UME) 59*32kB (UM) 19*64kB (UM) 41*128kB (UME) 34*256kB (UME) 26*512kB (UME) 16*1024kB (UME) 10*2048kB (ME) 16*4096kB (M) = 136612kB [ 60.613751][ T6128] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 60.613765][ T6128] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 60.613779][ T6128] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 60.613792][ T6128] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 60.613806][ T6128] 61202 total pagecache pages [ 60.613813][ T6128] 590 pages in swap cache [ 60.613819][ T6128] Free swap = 117144kB [ 60.613826][ T6128] Total swap = 124996kB [ 60.613832][ T6128] 524155 pages RAM [ 60.613838][ T6128] 0 pages HighMem/MovableOnly [ 60.613844][ T6128] 212121 pages reserved [ 60.613850][ T6128] 0 pages cma reserved [ 60.852198][ T1341] legousbtower 7-1:14.57: interrupt endpoints not found [ 60.888026][ T5836] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 61.037270][ T5836] usb 6-1: Using ep0 maxpacket: 8 [ 61.044597][ T5836] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 61.047415][ T5836] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 61.047507][ T5836] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 61.047556][ T5836] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 61.047603][ T5836] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 61.047762][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.066421][ T1341] legousbtower 7-1:14.228: interrupt endpoints not found [ 61.071203][ T1341] usb 7-1: USB disconnect, device number 8 [ 61.580121][ T5836] usb 6-1: GET_CAPABILITIES returned 0 [ 61.580227][ T5836] usbtmc 6-1:16.0: can't read capabilities [ 61.638708][ T6135] syz.2.54 uses obsolete (PF_INET,SOCK_PACKET) [ 61.651479][ T6135] netlink: 'syz.2.54': attribute type 39 has an invalid length. [ 61.784257][ T6128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.784600][ T6128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.086413][ T5877] usb 6-1: USB disconnect, device number 6 [ 62.427061][ T6145] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 63.816459][ T6181] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 64.070335][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.63'. [ 64.070404][ T6190] bridge_slave_1: left allmulticast mode [ 64.070423][ T6190] bridge_slave_1: left promiscuous mode [ 64.071309][ T6190] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.087874][ T6190] bridge_slave_0: left allmulticast mode [ 64.087896][ T6190] bridge_slave_0: left promiscuous mode [ 64.089598][ T6190] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.219714][ T44] kauditd_printk_skb: 78 callbacks suppressed [ 64.219930][ T44] audit: type=1326 audit(1789075457.150:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 64.223081][ T44] audit: type=1326 audit(1789075457.150:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 64.226424][ T44] audit: type=1326 audit(1789075457.150:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 64.226910][ T44] audit: type=1326 audit(1789075457.150:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=218 compat=1 ip=0xf705efec code=0x7ffc0000 [ 64.230083][ T44] audit: type=1326 audit(1789075457.150:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 64.230173][ T44] audit: type=1326 audit(1789075457.150:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 64.230638][ T44] audit: type=1326 audit(1789075457.160:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 64.235468][ T44] audit: type=1326 audit(1789075457.160:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 64.236710][ T44] audit: type=1326 audit(1789075457.160:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=308 compat=1 ip=0xf705efec code=0x7ffc0000 [ 64.250283][ T44] audit: type=1326 audit(1789075457.170:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 64.577465][ T5836] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 64.739598][ T5836] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 64.743529][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 135, changing to 11 [ 64.743560][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58457, setting to 1024 [ 64.743626][ T5836] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 64.743720][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.774342][ T5836] usb 6-1: config 0 descriptor?? [ 64.785919][ T6200] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 66.114957][ T6205] syzkaller0: entered promiscuous mode [ 66.115072][ T6205] syzkaller0: entered allmulticast mode [ 67.476014][ T6219] netlink: 'syz.3.70': attribute type 5 has an invalid length. [ 67.476028][ T6219] netlink: 20 bytes leftover after parsing attributes in process `syz.3.70'. [ 67.849029][ T5836] usbhid 6-1:0.0: can't add hid device: -71 [ 67.849112][ T5836] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 67.852722][ T5836] usb 6-1: USB disconnect, device number 7 [ 68.358294][ T43] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 68.564201][ T43] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.569627][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 135, changing to 11 [ 68.569728][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58457, setting to 1024 [ 68.569823][ T43] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 68.570227][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.646707][ T43] usb 8-1: config 0 descriptor?? [ 68.651833][ T6223] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 69.247262][ T5836] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 69.350840][ T6238] Zero length message leads to an empty skb [ 69.407253][ T5836] usb 6-1: Using ep0 maxpacket: 32 [ 69.407964][ T5836] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 69.410926][ T5836] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 69.410962][ T5836] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 69.410982][ T5836] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 69.411003][ T5836] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 69.412885][ T5836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.412903][ T5836] usb 6-1: Product: syz [ 69.412915][ T5836] usb 6-1: Manufacturer: syz [ 69.412927][ T5836] usb 6-1: SerialNumber: syz [ 69.439968][ C2] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 69.440848][ T5836] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input21 [ 69.567362][ T5822] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 69.666682][ T6225] netlink: 'syz.1.72': attribute type 12 has an invalid length. [ 69.719397][ T6251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.719896][ T6251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.787199][ T5836] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 69.787216][ T5836] (id 0x00) [ 69.857233][ T5836] rc_core: IR keymap rc-imon-pad not found [ 69.857249][ T5836] Registered IR keymap rc-empty [ 69.857308][ T5836] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 69.857357][ T5836] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 69.906121][ T5822] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 69.945868][ T5822] usb 5-1: Dual-Role OTG device on HNP port [ 69.969348][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.151027][ T5836] imon:send_packet: packet tx failed (-71) [ 70.167792][ T5836] imon 6-1:155.0: remote input dev register failed [ 70.168264][ T5836] imon 6-1:155.0: imon_init_intf0: rc device setup failed [ 70.302993][ T5836] imon 6-1:155.0: unable to initialize intf0, err 0 [ 70.303010][ T5836] imon:imon_probe: failed to initialize context! [ 70.303424][ T5836] imon 6-1:155.0: unable to register, err -19 [ 70.322162][ T5836] usb 6-1: USB disconnect, device number 8 [ 70.417199][ T6258] bridge_slave_0: left allmulticast mode [ 70.417223][ T6258] bridge_slave_0: left promiscuous mode [ 70.417573][ T6258] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.430268][ T6258] bridge_slave_1: left allmulticast mode [ 70.430289][ T6258] bridge_slave_1: left promiscuous mode [ 70.430450][ T6258] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.535711][ T6258] bond0: (slave bond_slave_0): Releasing backup interface [ 70.554982][ T5822] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 70.560531][ T6258] bond0: (slave bond_slave_1): Releasing backup interface [ 70.578613][ T6260] kernel profiling enabled (shift: 7) [ 70.583495][ T6258] team0: Port device team_slave_0 removed [ 70.591141][ T6258] team0: Port device team_slave_1 removed [ 70.591515][ T6258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.591527][ T6258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.595141][ T6258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.595154][ T6258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.601813][ T6258] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 70.697161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.881572][ T43] usbhid 8-1:0.0: can't add hid device: -71 [ 70.881650][ T43] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 70.883519][ T43] usb 8-1: USB disconnect, device number 6 [ 70.925157][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.925377][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.926213][ T1035] cfg80211: failed to load regulatory.db [ 71.376433][ T44] kauditd_printk_skb: 473 callbacks suppressed [ 71.376457][ T44] audit: type=1326 audit(1789075464.300:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6271 comm="syz.0.82" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 71.376496][ T44] audit: type=1326 audit(1789075464.300:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6271 comm="syz.0.82" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 71.376528][ T44] audit: type=1326 audit(1789075464.300:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6271 comm="syz.0.82" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 71.376561][ T44] audit: type=1326 audit(1789075464.300:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6271 comm="syz.0.82" exe="/syz-executor" sig=0 arch=40000003 syscall=218 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 71.376595][ T44] audit: type=1326 audit(1789075464.300:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6271 comm="syz.0.82" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 71.377215][ T44] audit: type=1326 audit(1789075464.300:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6271 comm="syz.0.82" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 71.377568][ T44] audit: type=1326 audit(1789075464.300:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6271 comm="syz.0.82" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 71.378722][ T44] audit: type=1326 audit(1789075464.300:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6271 comm="syz.0.82" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 71.379625][ T44] audit: type=1326 audit(1789075464.300:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6271 comm="syz.0.82" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 71.379658][ T44] audit: type=1326 audit(1789075464.300:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6271 comm="syz.0.82" exe="/syz-executor" sig=0 arch=40000003 syscall=308 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 71.544775][ T6274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.545092][ T6274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.807917][ T6280] device-mapper: table: 248:0: thin-pool: Invalid argument count (-EINVAL) [ 71.807940][ T6280] device-mapper: ioctl: error adding target to table [ 71.927228][ T5836] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 71.932977][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.84'. [ 72.077244][ T5836] usb 6-1: Using ep0 maxpacket: 32 [ 72.077786][ T5836] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 72.079274][ T5836] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 72.079295][ T5836] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 72.079307][ T5836] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 72.079320][ T5836] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 72.082859][ T5836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.082872][ T5836] usb 6-1: Product: syz [ 72.082879][ T5836] usb 6-1: Manufacturer: syz [ 72.082886][ T5836] usb 6-1: SerialNumber: syz [ 72.089795][ C2] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 72.094111][ T5836] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input23 [ 72.176775][ T6294] Bluetooth: MGMT ver 1.23 [ 72.333586][ T6278] netlink: 'syz.1.83': attribute type 12 has an invalid length. [ 72.449614][ T6278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.450116][ T6278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.477260][ T5836] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 72.477273][ T5836] (id 0x00) [ 72.547252][ T5836] rc_core: IR keymap rc-imon-pad not found [ 72.547268][ T5836] Registered IR keymap rc-empty [ 72.547322][ T5836] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 72.547335][ T5836] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 72.870166][ T5836] imon:send_packet: packet tx failed (-71) [ 72.887206][ T5836] imon 6-1:155.0: remote input dev register failed [ 72.887275][ T5836] imon 6-1:155.0: imon_init_intf0: rc device setup failed [ 72.893060][ T5836] imon 6-1:155.0: unable to initialize intf0, err 0 [ 72.893077][ T5836] imon:imon_probe: failed to initialize context! [ 72.893086][ T5836] imon 6-1:155.0: unable to register, err -19 [ 72.899078][ T5836] usb 6-1: USB disconnect, device number 9 [ 72.960072][ T5733] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 73.108031][ T5733] usb 8-1: New USB device found, idVendor=05ac, idProduct=0320, bcdDevice= 0.40 [ 73.108920][ T5733] usb 8-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 73.108936][ T5733] usb 8-1: config 1 interface 0 has no altsetting 0 [ 73.110787][ T5733] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.110798][ T5733] usb 8-1: Product: 䳈ඹ뿃楿肓ึ퓛㖐則쮪둕几ꮨ䞵ẟ搃⎪怲蛾ঽ窑 [ 73.110807][ T5733] usb 8-1: Manufacturer: 셽㱆畴ቓ쌏裈첕욐଄鮝嚪磅≺柱庽曍瀩쨦㗝嚮当ṛ㖽ꛑꄄ揈㐗裘ﰋự抡㱐擭﹢쪚䡕덫郞உ拝棢蚅슑鲮ﲍ撚実鎈џ쌤鏦᭎倡ည汣꺋迫狮駴凟⮵觤ᓨቨ퀊쳖ⰼ [ 73.110820][ T5733] usb 8-1: SerialNumber: 䬹헜ꞎ䋓覕邗㘚ᖧⱦ첷颦ꀟ㓻裛븆覺撇擙幙麲摫皝䮘퉂驎䅷㝛覼䆁驍揗䌥䘾ំ똆淋潴ක嗝욉沾蹽⊕ᆢ萉粸罛ॶƶ㮓≝惊쁔鋿㺦첀㇎襻Ɐ궴洏쁐烎럮１窨㑅ࠐ穂殮 [ 73.112738][ T6309] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 73.371328][ T5733] usbhid 8-1:1.0: can't add hid device: -71 [ 73.371380][ T5733] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 73.373583][ T5733] usb 8-1: USB disconnect, device number 7 [ 73.487732][ T43] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 73.638801][ T43] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.641155][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 135, changing to 11 [ 73.641180][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58457, setting to 1024 [ 73.641200][ T43] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 73.641232][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.645007][ T43] usb 7-1: config 0 descriptor?? [ 73.646920][ T6306] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 74.392709][ T6321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.94'. [ 74.671744][ T6323] FAULT_INJECTION: forcing a failure. [ 74.671744][ T6323] name failslab, interval 1, probability 0, space 0, times 0 [ 74.671775][ T6323] CPU: 2 UID: 0 PID: 6323 Comm: syz.0.95 Not tainted syzkaller #0 PREEMPT(full) [ 74.671796][ T6323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.671807][ T6323] Call Trace: [ 74.671814][ T6323] [ 74.671821][ T6323] dump_stack_lvl+0x100/0x190 [ 74.671848][ T6323] should_fail_ex.cold+0x5/0xa [ 74.671873][ T6323] should_failslab+0xc2/0x120 [ 74.671900][ T6323] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 74.671921][ T6323] ? find_held_lock+0x2b/0x80 [ 74.671938][ T6323] ? sock_alloc_inode+0x26/0x2c0 [ 74.671965][ T6323] ? __pfx_sock_alloc_inode+0x10/0x10 [ 74.671993][ T6323] sock_alloc_inode+0x26/0x2c0 [ 74.672019][ T6323] ? __pfx_sock_alloc_inode+0x10/0x10 [ 74.672042][ T6323] alloc_inode+0x68/0x250 [ 74.672065][ T6323] sock_alloc+0x44/0x280 [ 74.672088][ T6323] ? security_socket_create+0x7f/0x250 [ 74.672113][ T6323] __sock_create+0xc2/0x860 [ 74.672135][ T6323] __sys_socket+0x14d/0x260 [ 74.672153][ T6323] ? fput+0x7c/0x100 [ 74.672172][ T6323] ? __pfx___sys_socket+0x10/0x10 [ 74.672189][ T6323] ? ksys_write+0x1ac/0x250 [ 74.672207][ T6323] ? __pfx_ksys_write+0x10/0x10 [ 74.672231][ T6323] __ia32_sys_socket+0x72/0xb0 [ 74.672248][ T6323] ? lockdep_hardirqs_on+0x7d/0x110 [ 74.672275][ T6323] __do_fast_syscall_32+0x13a/0x8b0 [ 74.672326][ T6323] do_fast_syscall_32+0x32/0x70 [ 74.672355][ T6323] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 74.672379][ T6323] RIP: 0023:0xf7f56fec [ 74.672399][ T6323] Code: Unable to access opcode bytes at 0xf7f56fc2. [ 74.672406][ T6323] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 74.672425][ T6323] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 74.672437][ T6323] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.672448][ T6323] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 74.672459][ T6323] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 74.672470][ T6323] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.672493][ T6323] [ 74.672525][ T6323] socket: no more sockets [ 75.124612][ T6331] orangefs_devreq_write_iter: total:226: must be at least:8240: [ 75.267418][ T1035] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 75.321679][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.100'. [ 75.322423][ T6338] syzkaller0: entered promiscuous mode [ 75.322434][ T6338] syzkaller0: entered allmulticast mode [ 75.421777][ T1035] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.424664][ T1035] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 135, changing to 11 [ 75.424682][ T1035] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58457, setting to 1024 [ 75.424695][ T1035] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.424714][ T1035] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.427275][ T1035] usb 6-1: config 0 descriptor?? [ 75.430207][ T6330] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 75.488598][ T43] usbhid 7-1:0.0: can't add hid device: -71 [ 75.488695][ T43] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 75.490670][ T43] usb 7-1: USB disconnect, device number 9 [ 75.681993][ T6329] orangefs_mount: mount request failed with -4 [ 75.707301][ T1341] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 75.837272][ T43] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 75.857506][ T1341] usb 8-1: Using ep0 maxpacket: 8 [ 75.861102][ T1341] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 75.866080][ T1341] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 75.866180][ T1341] usb 8-1: config 0 has no interface number 0 [ 75.866739][ T1341] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 75.867033][ T1341] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.869566][ T1341] usb 8-1: config 0 descriptor?? [ 75.876116][ T1341] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 75.987209][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 75.987906][ T43] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 75.989007][ T43] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 75.990727][ T43] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 75.990739][ T43] usb 7-1: Product: syz [ 75.990746][ T43] usb 7-1: Manufacturer: syz [ 75.990859][ T43] usb 7-1: SerialNumber: syz [ 75.993945][ T43] usb 7-1: config 0 descriptor?? [ 75.995919][ T6342] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 75.996929][ T43] hub 7-1:0.0: bad descriptor, ignoring hub [ 75.996941][ T43] hub 7-1:0.0: probe with driver hub failed with error -5 [ 76.173594][ T6346] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 76.378299][ T44] kauditd_printk_skb: 2643 callbacks suppressed [ 76.378311][ T44] audit: type=1326 audit(1789075469.310:4667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6324 comm="syz.1.96" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71975ab code=0x7ffc0000 [ 76.379495][ T44] audit: type=1326 audit(1789075469.310:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6324 comm="syz.1.96" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71975ab code=0x7ffc0000 [ 76.380815][ T44] audit: type=1326 audit(1789075469.310:4669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6324 comm="syz.1.96" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71975ab code=0x7ffc0000 [ 76.382106][ T44] audit: type=1326 audit(1789075469.310:4670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6324 comm="syz.1.96" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71975ab code=0x7ffc0000 [ 76.383303][ T44] audit: type=1326 audit(1789075469.310:4671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6324 comm="syz.1.96" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71975ab code=0x7ffc0000 [ 76.384654][ T44] audit: type=1326 audit(1789075469.310:4672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6324 comm="syz.1.96" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71975ab code=0x7ffc0000 [ 76.385938][ T44] audit: type=1326 audit(1789075469.310:4673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6324 comm="syz.1.96" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71975ab code=0x7ffc0000 [ 76.387744][ T44] audit: type=1326 audit(1789075469.310:4674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6324 comm="syz.1.96" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71975ab code=0x7ffc0000 [ 76.388995][ T44] audit: type=1326 audit(1789075469.320:4675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6324 comm="syz.1.96" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71975ab code=0x7ffc0000 [ 76.390302][ T44] audit: type=1326 audit(1789075469.320:4676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6324 comm="syz.1.96" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71975ab code=0x7ffc0000 [ 76.823900][ T6353] use of bytesused == 0 is deprecated and will be removed in the future, [ 76.823910][ T6353] use the actual size instead. [ 77.056745][ T6355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.057093][ T6355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.060836][ T6355] netlink: 'syz.0.105': attribute type 12 has an invalid length. [ 77.125545][ T6355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.126042][ T6355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.173080][ T5733] usb 8-1: USB disconnect, device number 8 [ 77.297889][ T6342] capability: warning: `syz.2.102' uses deprecated v2 capabilities in a way that may be insecure [ 77.457350][ T1854] usb 7-1: USB disconnect, device number 10 [ 77.725926][ T6362] e1000e 0000:00:02.0 eth1: removed PHC [ 77.831302][ T6362] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 77.872195][ T1035] usbhid 6-1:0.0: can't add hid device: -71 [ 77.872244][ T1035] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 77.877968][ T1035] usb 6-1: USB disconnect, device number 10 [ 78.200704][ T6383] binder: 6380:6383 ioctl c00c6211 0 returned -14 [ 78.217258][ T1035] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 78.263877][ T6387] loop2: detected capacity change from 0 to 2640 [ 78.350419][ T6387] buffer_io_error: 320 callbacks suppressed [ 78.350436][ T6387] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 78.356119][ T6387] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 78.356141][ T6387] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 78.369097][ T1035] usb 6-1: unable to get BOS descriptor or descriptor too short [ 78.369987][ T1035] usb 6-1: not running at top speed; connect to a high speed hub [ 78.370003][ T1035] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 78.370803][ T1035] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 78.370821][ T1035] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 78.370838][ T1035] usb 6-1: config 14 has no interface number 0 [ 78.370850][ T1035] usb 6-1: config 14 has no interface number 1 [ 78.370919][ T1035] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 78.370932][ T1035] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 78.370943][ T1035] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 78.370955][ T1035] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 78.370968][ T1035] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 78.370980][ T1035] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 78.370991][ T1035] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.371004][ T1035] usb 6-1: config 14 interface 57 has no altsetting 0 [ 78.371012][ T1035] usb 6-1: config 14 interface 228 has no altsetting 0 [ 78.372599][ T1035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.372613][ T1035] usb 6-1: Product: 舣妧᠎䟘钾岞瑎㩧.壤悵푊믞쥼쩱褁Ꭓⵊ덨㝥聯ၿ镾ꞃ⒣맄髒倩非䚫퉾෡݉騋ꅃ薺콸흴鲓솠稾예芒顅壒馈䅰兣悳얦풆⛕ꕋ供‹ᕮ࿖ఊ͞⣢闈ꡝ믋泞ዻ裛轝弚ﮂ攟剶츒니䆍⼺返遪鋠탄䤶咠ﭕ싃汭 [ 78.372628][ T1035] usb 6-1: Manufacturer: 䰊 [ 78.372634][ T1035] usb 6-1: SerialNumber: syz [ 78.418789][ T6387] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 78.418818][ T6387] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 78.419885][ T6387] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 78.419901][ T6387] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 78.419913][ T6387] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 78.419925][ T6387] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 78.424630][ T6387] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 78.793222][ T1035] legousbtower 6-1:14.57: interrupt endpoints not found [ 79.247025][ T1035] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 79.332103][ T1035] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 79.617680][ T35] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 79.768333][ T35] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.771751][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 135, changing to 11 [ 79.771850][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58457, setting to 1024 [ 79.771864][ T35] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.771988][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.857260][ T5877] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 79.888242][ T35] usb 7-1: config 0 descriptor?? [ 79.895436][ T6413] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 80.037577][ T5877] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.410621][ T1035] usb 6-1: USB disconnect, device number 11 [ 80.415904][ T1035] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 80.420899][ T5877] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 135, changing to 11 [ 80.420923][ T5877] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58457, setting to 1024 [ 80.421058][ T5877] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.421125][ T5877] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.509266][ T5877] usb 8-1: config 0 descriptor?? [ 80.559415][ T6422] netlink: 14 bytes leftover after parsing attributes in process `syz.0.111'. [ 80.588960][ T6422] bond0 (unregistering): Released all slaves [ 80.623627][ T6423] syz.0.111: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 80.623707][ T6423] CPU: 2 UID: 0 PID: 6423 Comm: syz.0.111 Not tainted syzkaller #0 PREEMPT(full) [ 80.623728][ T6423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.623738][ T6423] Call Trace: [ 80.623745][ T6423] [ 80.623751][ T6423] dump_stack_lvl+0x100/0x190 [ 80.623779][ T6423] warn_alloc.cold+0x9e/0xb2 [ 80.623799][ T6423] ? __pfx_warn_alloc+0x10/0x10 [ 80.623826][ T6423] ? __lock_acquire+0x5c0/0x1f40 [ 80.623853][ T6423] __vmalloc_node_range_noprof+0x123b/0x1420 [ 80.623878][ T6423] ? __lock_acquire+0x5c0/0x1f40 [ 80.623902][ T6423] ? __lock_acquire+0x5c0/0x1f40 [ 80.623931][ T6423] ? do_replace+0x1c6/0x490 [ 80.623954][ T6423] ? do_raw_spin_lock+0x128/0x260 [ 80.623984][ T6423] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 80.624010][ T6423] ? __lock_acquire+0x5c0/0x1f40 [ 80.624034][ T6423] ? do_raw_spin_unlock+0x145/0x1e0 [ 80.624055][ T6423] ? do_replace+0x1c6/0x490 [ 80.624082][ T6423] __vmalloc_node_noprof+0xad/0xf0 [ 80.624106][ T6423] ? do_replace+0x1c6/0x490 [ 80.624130][ T6423] __vmalloc_noprof+0xa3/0x120 [ 80.624155][ T6423] ? __pfx___vmalloc_noprof+0x10/0x10 [ 80.624206][ T6423] do_replace+0x1c6/0x490 [ 80.624228][ T6423] ? __pfx_do_replace+0x10/0x10 [ 80.624267][ T6423] compat_do_replace+0x589/0x7a0 [ 80.624292][ T6423] ? __pfx_compat_do_replace+0x10/0x10 [ 80.624330][ T6423] ? bpf_lsm_capable+0x9/0x10 [ 80.624356][ T6423] ? security_capable+0x80/0x260 [ 80.624382][ T6423] do_ebt_set_ctl+0x3f4/0x4a0 [ 80.624406][ T6423] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 80.624429][ T6423] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 80.624453][ T6423] ? nf_sockopt_find.isra.0+0x222/0x290 [ 80.624481][ T6423] nf_setsockopt+0x8d/0xf0 [ 80.624505][ T6423] ip_setsockopt+0xcb/0xf0 [ 80.624526][ T6423] tcp_setsockopt+0xa7/0x100 [ 80.624551][ T6423] smc_setsockopt+0x1b6/0xa40 [ 80.624572][ T6423] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 80.624605][ T6423] ? __pfx_smc_setsockopt+0x10/0x10 [ 80.624630][ T6423] ? aa_sock_opt_perm+0x114/0x1e0 [ 80.624653][ T6423] ? __pfx_smc_setsockopt+0x10/0x10 [ 80.624675][ T6423] do_sock_setsockopt+0xf3/0x1d0 [ 80.624704][ T6423] __sys_setsockopt+0x119/0x190 [ 80.624731][ T6423] __ia32_sys_setsockopt+0xbc/0x160 [ 80.624755][ T6423] ? __do_fast_syscall_32+0xb3/0x8b0 [ 80.624783][ T6423] ? lockdep_hardirqs_on+0x7d/0x110 [ 80.624808][ T6423] __do_fast_syscall_32+0x13a/0x8b0 [ 80.624839][ T6423] do_fast_syscall_32+0x32/0x70 [ 80.624867][ T6423] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.624890][ T6423] RIP: 0023:0xf7f56fec [ 80.624910][ T6423] Code: Unable to access opcode bytes at 0xf7f56fc2. [ 80.624919][ T6423] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 80.624938][ T6423] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000000 [ 80.624950][ T6423] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108 [ 80.624961][ T6423] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.624971][ T6423] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 80.624981][ T6423] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.625006][ T6423] [ 80.625070][ T6423] Mem-Info: [ 80.626059][ T6423] active_anon:5031 inactive_anon:522 isolated_anon:0 [ 80.626059][ T6423] active_file:24 inactive_file:59075 isolated_file:0 [ 80.626059][ T6423] unevictable:1000 dirty:351 writeback:0 [ 80.626059][ T6423] slab_reclaimable:10080 slab_unreclaimable:52979 [ 80.626059][ T6423] mapped:23729 shmem:1512 pagetables:1074 [ 80.626059][ T6423] sec_pagetables:291 bounce:0 [ 80.626059][ T6423] kernel_misc_reclaimable:0 [ 80.626059][ T6423] free:33167 free_pcp:13981 free_cma:0 [ 80.626115][ T6423] Node 0 active_anon:112kB inactive_anon:84kB active_file:96kB inactive_file:2404kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:268kB dirty:8kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8384kB pagetables:1232kB sec_pagetables:1104kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 80.626166][ T6423] Node 1 active_anon:20012kB inactive_anon:2004kB active_file:0kB inactive_file:233896kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:94648kB dirty:1396kB writeback:0kB shmem:4048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4960kB pagetables:3064kB sec_pagetables:60kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 80.626216][ T6423] Node 0 DMA free:2008kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:104kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:472kB local_pcp:28kB free_cma:0kB [ 80.626267][ T6423] lowmem_reserve[]: 0 277 277 277 277 [ 80.626299][ T6423] Node 0 DMA32 free:15312kB boost:0kB min:12628kB low:15784kB high:18940kB reserved_highatomic:0kB free_highatomic:0kB active_anon:112kB inactive_anon:84kB active_file:96kB inactive_file:2300kB unevictable:2000kB writepending:8kB zspages:0kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:10868kB local_pcp:2724kB free_cma:0kB [ 80.626351][ T6423] lowmem_reserve[]: 0 0 0 0 0 [ 80.626382][ T6423] Node 1 DMA32 free:115348kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0kB free_highatomic:0kB active_anon:20012kB inactive_anon:2004kB active_file:0kB inactive_file:233896kB unevictable:2000kB writepending:1396kB zspages:2600kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:44584kB local_pcp:5980kB free_cma:0kB [ 80.626433][ T6423] lowmem_reserve[]: 0 0 0 0 0 [ 80.626464][ T6423] Node 0 DMA: 2*4kB (UM) 0*8kB 1*16kB (U) 20*32kB (UM) 9*64kB (UM) 2*128kB (M) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2008kB [ 80.626604][ T6423] Node 0 DMA32: 2*4kB (UE) 35*8kB (UME) 3*16kB (UE) 30*32kB (UE) 23*64kB (UM) 14*128kB (UM) 14*256kB (M) 6*512kB (M) 4*1024kB (M) 0*2048kB 0*4096kB = 15312kB [ 80.626737][ T6423] Node 1 DMA32: 177*4kB (M) 170*8kB (UME) 130*16kB (UME) 99*32kB (UME) 59*64kB (UM) 10*128kB (UME) 28*256kB (UME) 25*512kB (UME) 17*1024kB (UME) 10*2048kB (ME) 11*4096kB (UM) = 115284kB [ 80.626912][ T6423] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 80.626926][ T6423] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 80.626941][ T6423] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 80.626954][ T6423] Node 1 hugepages_total=6 hugepages_free=6 hugepages_surp=4 hugepages_size=2048kB [ 80.626968][ T6423] 61359 total pagecache pages [ 80.626975][ T6423] 752 pages in swap cache [ 80.626981][ T6423] Free swap = 117248kB [ 80.626987][ T6423] Total swap = 124996kB [ 80.626994][ T6423] 524155 pages RAM [ 80.627000][ T6423] 0 pages HighMem/MovableOnly [ 80.627006][ T6423] 212121 pages reserved [ 80.627012][ T6423] 0 pages cma reserved [ 80.747882][ T6417] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 81.388393][ T44] kauditd_printk_skb: 1359 callbacks suppressed [ 81.388970][ T44] audit: type=1326 audit(1789075474.320:6037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.2.109" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71275ab code=0x7ffc0000 [ 81.389860][ T44] audit: type=1326 audit(1789075474.320:6038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.2.109" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71275ab code=0x7ffc0000 [ 81.398269][ T44] audit: type=1326 audit(1789075474.320:6039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.2.109" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71275ab code=0x7ffc0000 [ 81.398587][ T44] audit: type=1326 audit(1789075474.320:6040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.2.109" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71275ab code=0x7ffc0000 [ 81.398922][ T44] audit: type=1326 audit(1789075474.320:6041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.2.109" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71275ab code=0x7ffc0000 [ 81.398993][ T44] audit: type=1326 audit(1789075474.320:6042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.2.109" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71275ab code=0x7ffc0000 [ 81.399310][ T44] audit: type=1326 audit(1789075474.320:6043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.2.109" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71275ab code=0x7ffc0000 [ 81.399354][ T44] audit: type=1326 audit(1789075474.330:6044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.2.109" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71275ab code=0x7ffc0000 [ 81.399468][ T44] audit: type=1326 audit(1789075474.330:6045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.2.109" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71275ab code=0x7ffc0000 [ 81.404440][ T44] audit: type=1326 audit(1789075474.330:6046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.2.109" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71275ab code=0x7ffc0000 [ 82.050967][ T35] usbhid 7-1:0.0: can't add hid device: -71 [ 82.051019][ T35] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 82.093278][ T35] usb 7-1: USB disconnect, device number 11 [ 82.518236][ T35] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 82.649861][ T6450] xt_connbytes: Forcing CT accounting to be enabled [ 82.649874][ T6450] Cannot find del_set index 0 as target [ 82.667908][ T35] usb 7-1: New USB device found, idVendor=13d3, idProduct=3201, bcdDevice=e1.bf [ 82.668803][ T35] usb 7-1: config 253 has an invalid interface number: 225 but max is 0 [ 82.668822][ T35] usb 7-1: config 253 contains an unexpected descriptor of type 0x1, skipping [ 82.668835][ T35] usb 7-1: config 253 has no interface number 0 [ 82.668861][ T35] usb 7-1: config 253 interface 225 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 82.668877][ T35] usb 7-1: config 253 interface 225 altsetting 15 bulk endpoint 0xA has invalid maxpacket 1024 [ 82.668895][ T35] usb 7-1: config 253 interface 225 altsetting 15 endpoint 0x3 has an invalid bInterval 23, changing to 7 [ 82.668914][ T35] usb 7-1: config 253 interface 225 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 82.668930][ T35] usb 7-1: config 253 interface 225 altsetting 15 has a duplicate endpoint with address 0xA, skipping [ 82.668946][ T35] usb 7-1: config 253 interface 225 has no altsetting 0 [ 82.670701][ T35] usb 7-1: Dual-Role OTG device on HNP port [ 82.670934][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.670949][ T35] usb 7-1: Product: syz [ 82.670960][ T35] usb 7-1: Manufacturer: syz [ 82.670970][ T35] usb 7-1: SerialNumber: syz [ 82.673621][ T6436] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 82.737267][ T30] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 82.887237][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 82.888160][ T30] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 82.889984][ T30] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 82.890002][ T30] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 82.890019][ T30] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 82.890033][ T30] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.890092][ T30] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 82.890106][ T30] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 82.890119][ T30] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 82.890131][ T30] usb 6-1: config 168 interface 0 has no altsetting 0 [ 82.891846][ T30] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 82.891862][ T30] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 82.891878][ T30] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 82.891891][ T30] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.891903][ T30] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 82.891961][ T30] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 82.891976][ T30] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 82.891988][ T30] usb 6-1: config 168 interface 0 has no altsetting 0 [ 82.893126][ T30] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 82.893141][ T30] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 82.893158][ T30] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 82.893171][ T30] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.893230][ T30] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 82.893244][ T30] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 82.893256][ T30] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 82.893269][ T30] usb 6-1: config 168 interface 0 has no altsetting 0 [ 82.898813][ T30] usb 6-1: string descriptor 0 read error: -22 [ 82.898916][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.908567][ T30] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 83.078549][ T35] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in cold state, will try to load a firmware [ 83.086398][ T35] usb 7-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 83.086423][ T35] usb 7-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 83.112229][ T30] usb 6-1: USB disconnect, device number 12 [ 83.176654][ T5877] usbhid 8-1:0.0: can't add hid device: -71 [ 83.176702][ T5877] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 83.179894][ T5877] usb 8-1: USB disconnect, device number 9 [ 83.316684][ T6447] comedi comedi3: comedi_config --init_data is deprecated [ 83.320102][ T30] usb 5-1: USB disconnect, device number 6 [ 83.852714][ T6466] netlink: 52 bytes leftover after parsing attributes in process `syz.3.125'. [ 83.885822][ T6468] netlink: 'syz.1.126': attribute type 3 has an invalid length. [ 83.885840][ T6468] netlink: 3 bytes leftover after parsing attributes in process `syz.1.126'. [ 83.892179][ T6468] ======================================================= [ 83.892179][ T6468] WARNING: The mand mount option has been deprecated and [ 83.892179][ T6468] and is ignored by this kernel. Remove the mand [ 83.892179][ T6468] option from the mount to silence this warning. [ 83.892179][ T6468] ======================================================= [ 84.507287][ T5836] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 84.647253][ T5836] usb 6-1: device descriptor read/64, error -71 [ 84.907350][ T5836] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 85.047264][ T5836] usb 6-1: device descriptor read/64, error -71 [ 85.157974][ T5836] usb usb6-port1: attempt power cycle [ 85.205221][ T6480] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 85.394807][ T6480] md: personality for level is not loaded! [ 85.497372][ T5836] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 85.517909][ T5836] usb 6-1: device descriptor read/8, error -71 [ 85.767215][ T5836] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 85.788056][ T5836] usb 6-1: device descriptor read/8, error -71 [ 85.897474][ T5836] usb usb6-port1: unable to enumerate USB device [ 86.448530][ T6490] syzkaller0: entered promiscuous mode [ 86.448549][ T6490] syzkaller0: entered allmulticast mode [ 86.566215][ T44] kauditd_printk_skb: 901 callbacks suppressed [ 86.566233][ T44] audit: type=1326 audit(1789075479.490:6947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6471 comm="syz.1.128" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705efec code=0x7ffc0000 [ 86.639575][ T44] audit: type=1326 audit(1789075479.570:6948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6471 comm="syz.1.128" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705efec code=0x7ffc0000 [ 86.809031][ T44] audit: type=1326 audit(1789075479.740:6949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.3.137" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 86.809752][ T44] audit: type=1326 audit(1789075479.740:6950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.3.137" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 86.810367][ T44] audit: type=1326 audit(1789075479.740:6951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.3.137" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 86.817967][ T44] audit: type=1326 audit(1789075479.740:6952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.3.137" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 86.818558][ T44] audit: type=1326 audit(1789075479.750:6953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.3.137" exe="/syz-executor" sig=0 arch=40000003 syscall=218 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 86.819574][ T44] audit: type=1326 audit(1789075479.750:6954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.3.137" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 86.819848][ T44] audit: type=1326 audit(1789075479.750:6955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.3.137" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 86.821644][ T44] audit: type=1326 audit(1789075479.750:6956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.3.137" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 86.859478][ T1035] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 87.248445][ T5836] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 87.409360][ T5836] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.415959][ T5836] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 135, changing to 11 [ 87.416004][ T5836] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58457, setting to 1024 [ 87.416045][ T5836] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.416162][ T5836] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.472722][ T5836] usb 8-1: config 0 descriptor?? [ 87.473843][ T6502] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 88.584409][ T6507] netlink: 13 bytes leftover after parsing attributes in process `syz.1.139'. [ 89.267186][ T1035] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 89.577180][ T1035] usb 6-1: Using ep0 maxpacket: 32 [ 89.577888][ T1035] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 89.578783][ T1035] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 89.578835][ T1035] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 89.578854][ T1035] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 89.578872][ T1035] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 89.580995][ T1035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.581014][ T1035] usb 6-1: Product: syz [ 89.581025][ T1035] usb 6-1: Manufacturer: syz [ 89.581037][ T1035] usb 6-1: SerialNumber: syz [ 89.586164][ C3] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 89.616555][ T1035] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input25 [ 89.792888][ T6527] netlink: 'syz.1.145': attribute type 12 has an invalid length. [ 89.866763][ T6527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.867065][ T6527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.907247][ T1035] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 89.907264][ T1035] (id 0x00) [ 89.958980][ T1035] rc_core: IR keymap rc-imon-pad not found [ 89.958998][ T1035] Registered IR keymap rc-empty [ 89.959045][ T1035] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 89.959054][ T1035] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 90.063023][ T5836] usbhid 8-1:0.0: can't add hid device: -71 [ 90.063072][ T5836] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 90.064894][ T5836] usb 8-1: USB disconnect, device number 10 [ 90.263426][ T1035] imon:send_packet: packet tx failed (-71) [ 90.288929][ T1035] imon 6-1:155.0: remote input dev register failed [ 90.289051][ T1035] imon 6-1:155.0: imon_init_intf0: rc device setup failed [ 90.308728][ T1035] imon 6-1:155.0: unable to initialize intf0, err 0 [ 90.308746][ T1035] imon:imon_probe: failed to initialize context! [ 90.308755][ T1035] imon 6-1:155.0: unable to register, err -19 [ 90.311194][ T1035] usb 6-1: USB disconnect, device number 18 [ 90.947253][ T5836] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 91.397533][ T5882] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 91.451194][ T5836] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.567697][ T5882] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 91.568668][ T5882] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 91.568689][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.568703][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.568714][ T5882] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 91.569707][ T5882] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 91.569725][ T5882] usb 5-1: Manufacturer: syz [ 91.571251][ T5882] usb 5-1: config 0 descriptor?? [ 91.597927][ T44] kauditd_printk_skb: 622 callbacks suppressed [ 91.597943][ T44] audit: type=1326 audit(1789075484.530:7579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6547 comm="syz.3.150" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 91.638671][ T5836] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 135, changing to 11 [ 91.638691][ T5836] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58457, setting to 1024 [ 91.638704][ T5836] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.638873][ T5836] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.653802][ T5836] usb 8-1: config 0 descriptor?? [ 91.714733][ T44] audit: type=1326 audit(1789075484.630:7580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6547 comm="syz.3.150" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 91.748698][ T44] audit: type=1326 audit(1789075484.680:7581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6547 comm="syz.3.150" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 91.806994][ T44] audit: type=1326 audit(1789075484.730:7582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6547 comm="syz.3.150" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 91.811641][ T44] audit: type=1326 audit(1789075484.740:7583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6547 comm="syz.3.150" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 91.811809][ T6550] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 91.812368][ T44] audit: type=1326 audit(1789075484.740:7584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6547 comm="syz.3.150" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 91.875705][ T44] audit: type=1326 audit(1789075484.790:7585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6547 comm="syz.3.150" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71675ab code=0x7ffc0000 [ 92.114078][ T6558] netlink: 56 bytes leftover after parsing attributes in process `syz.2.152'. [ 92.288976][ T5882] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 92.361254][ T5882] appleir 0003:05AC:8243.0002: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 92.671792][ T44] audit: type=1326 audit(1789075485.280:7586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6547 comm="syz.3.150" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 92.673762][ T44] audit: type=1326 audit(1789075485.600:7587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6547 comm="syz.3.150" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 92.922760][ T44] audit: type=1326 audit(1789075485.850:7588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6547 comm="syz.3.150" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 93.113087][ T6572] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 93.203283][ T6572] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 93.818809][ T30] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 94.253532][ T5836] usbhid 8-1:0.0: can't add hid device: -71 [ 94.253584][ T5836] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 94.255257][ T5836] usb 8-1: USB disconnect, device number 11 [ 94.341018][ T6594] FAULT_INJECTION: forcing a failure. [ 94.341018][ T6594] name fail_futex, interval 1, probability 0, space 0, times 1 [ 94.341089][ T6594] CPU: 3 UID: 0 PID: 6594 Comm: syz.1.163 Not tainted syzkaller #0 PREEMPT(full) [ 94.341111][ T6594] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.341122][ T6594] Call Trace: [ 94.341129][ T6594] [ 94.341137][ T6594] dump_stack_lvl+0x100/0x190 [ 94.341167][ T6594] should_fail_ex.cold+0x5/0xa [ 94.341192][ T6594] get_futex_key+0x1d0/0x14f0 [ 94.341225][ T6594] ? __pfx_get_futex_key+0x10/0x10 [ 94.341255][ T6594] ? __pfx___schedule+0x10/0x10 [ 94.341285][ T6594] futex_wait_setup+0x91/0x540 [ 94.341313][ T6594] __futex_wait+0x19f/0x300 [ 94.341339][ T6594] ? __pfx___futex_wait+0x10/0x10 [ 94.341361][ T6594] ? __pfx_try_to_wake_up+0x10/0x10 [ 94.341387][ T6594] ? futex_hash+0x311/0x400 [ 94.341416][ T6594] ? __pfx_futex_wake_mark+0x10/0x10 [ 94.341441][ T6594] ? find_held_lock+0x2b/0x80 [ 94.341459][ T6594] ? futex_wake+0x4ea/0x5e0 [ 94.341486][ T6594] futex_wait+0xe6/0x370 [ 94.341507][ T6594] ? __pfx_futex_wait+0x10/0x10 [ 94.341535][ T6594] ? madvise_unlock+0xa9/0x220 [ 94.341563][ T6594] do_futex+0x265/0x440 [ 94.341582][ T6594] ? __pfx_do_futex+0x10/0x10 [ 94.341601][ T6594] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 94.341632][ T6594] __ia32_sys_futex_time32+0x2f4/0x470 [ 94.341655][ T6594] ? xfd_validate_state+0x129/0x190 [ 94.341682][ T6594] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 94.341712][ T6594] __do_fast_syscall_32+0x13a/0x8b0 [ 94.341744][ T6594] do_fast_syscall_32+0x32/0x70 [ 94.341772][ T6594] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.341795][ T6594] RIP: 0023:0xf705efec [ 94.341814][ T6594] Code: Unable to access opcode bytes at 0xf705efc2. [ 94.341822][ T6594] RSP: 002b:00000000f53505bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 94.341839][ T6594] RAX: ffffffffffffffda RBX: 00000000f7455020 RCX: 0000000000000080 [ 94.341850][ T6594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7455024 [ 94.341861][ T6594] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 94.341872][ T6594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.341882][ T6594] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.341905][ T6594] [ 94.784515][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.168'. [ 94.784563][ T6605] FAULT_INJECTION: forcing a failure. [ 94.784563][ T6605] name failslab, interval 1, probability 0, space 0, times 0 [ 94.784584][ T6605] CPU: 0 UID: 0 PID: 6605 Comm: syz.3.168 Not tainted syzkaller #0 PREEMPT(full) [ 94.784605][ T6605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.784616][ T6605] Call Trace: [ 94.784623][ T6605] [ 94.784645][ T6605] dump_stack_lvl+0x100/0x190 [ 94.784676][ T6605] should_fail_ex.cold+0x5/0xa [ 94.784698][ T6605] should_failslab+0xc2/0x120 [ 94.784721][ T6605] __kmalloc_cache_noprof+0x91/0x6d0 [ 94.784750][ T6605] ? nfnetlink_rcv_batch+0x780/0x2880 [ 94.784783][ T6605] nfnetlink_rcv_batch+0x780/0x2880 [ 94.784821][ T6605] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 94.784854][ T6605] ? find_held_lock+0x2b/0x80 [ 94.784877][ T6605] ? __local_bh_enable_ip+0xa5/0x120 [ 94.784906][ T6605] ? lockdep_hardirqs_on+0x7d/0x110 [ 94.784931][ T6605] ? __dev_queue_xmit+0xa12/0x4970 [ 94.784984][ T6605] ? __nla_parse+0x40/0x60 [ 94.785009][ T6605] nfnetlink_rcv+0x3bd/0x440 [ 94.785035][ T6605] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 94.785066][ T6605] netlink_unicast+0x585/0x850 [ 94.785091][ T6605] ? __pfx_netlink_unicast+0x10/0x10 [ 94.785119][ T6605] netlink_sendmsg+0x8b0/0xda0 [ 94.785144][ T6605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.785166][ T6605] ? apparmor_socket_sendmsg+0x165/0x280 [ 94.785194][ T6605] ____sys_sendmsg+0xa4d/0xbe0 [ 94.785210][ T6605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.785234][ T6605] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.785262][ T6605] ___sys_sendmsg+0x190/0x1e0 [ 94.785281][ T6605] ? __pfx____sys_sendmsg+0x10/0x10 [ 94.785300][ T6605] ? futex_wait+0x11e/0x370 [ 94.785330][ T6605] ? find_held_lock+0x2b/0x80 [ 94.785363][ T6605] __sys_sendmsg+0x160/0x210 [ 94.785386][ T6605] ? __pfx___sys_sendmsg+0x10/0x10 [ 94.785422][ T6605] __do_fast_syscall_32+0x13a/0x8b0 [ 94.785449][ T6605] ? lockdep_hardirqs_on+0x7d/0x110 [ 94.785476][ T6605] do_fast_syscall_32+0x32/0x70 [ 94.785502][ T6605] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.785523][ T6605] RIP: 0023:0xf7f63fec [ 94.785542][ T6605] Code: Unable to access opcode bytes at 0xf7f63fc2. [ 94.785551][ T6605] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 94.785570][ T6605] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800006c0 [ 94.785583][ T6605] RDX: 0000000020004080 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.785594][ T6605] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.785605][ T6605] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 94.785616][ T6605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.785638][ T6605] [ 94.951901][ T1854] usb 5-1: USB disconnect, device number 7 [ 95.135834][ T6615] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 96.607935][ T44] kauditd_printk_skb: 618 callbacks suppressed [ 96.607953][ T44] audit: type=1800 audit(1789075489.540:8207): pid=6632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.177" name="cpuset.effective_cpus" dev="sda1" ino=2038 res=0 errno=0 [ 96.742003][ T6641] netlink: 48 bytes leftover after parsing attributes in process `syz.3.179'. [ 96.818161][ T6641] netlink: 48 bytes leftover after parsing attributes in process `syz.3.179'. [ 96.880087][ T6628] syz.1.177 (6628) used greatest stack depth: 19856 bytes left [ 97.104418][ T6659] FAULT_INJECTION: forcing a failure. [ 97.104418][ T6659] name failslab, interval 1, probability 0, space 0, times 0 [ 97.104449][ T6659] CPU: 1 UID: 0 PID: 6659 Comm: syz.0.190 Not tainted syzkaller #0 PREEMPT(full) [ 97.104471][ T6659] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.104489][ T6659] Call Trace: [ 97.104495][ T6659] [ 97.104503][ T6659] dump_stack_lvl+0x100/0x190 [ 97.104532][ T6659] should_fail_ex.cold+0x5/0xa [ 97.104555][ T6659] should_failslab+0xc2/0x120 [ 97.104579][ T6659] __kmalloc_cache_noprof+0x91/0x6d0 [ 97.104606][ T6659] ? nf_tables_newflowtable+0x62c/0x2830 [ 97.104636][ T6659] nf_tables_newflowtable+0x62c/0x2830 [ 97.104670][ T6659] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 97.104699][ T6659] ? __pfx___nla_validate_parse+0x10/0x10 [ 97.104719][ T6659] ? lock_acquire+0x1d1/0x380 [ 97.104742][ T6659] ? net_generic+0x25/0x2a0 [ 97.104771][ T6659] ? __nla_parse+0x40/0x60 [ 97.104791][ T6659] nfnetlink_rcv_batch+0x1410/0x2880 [ 97.104830][ T6659] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 97.104854][ T6659] ? find_held_lock+0x2b/0x80 [ 97.104874][ T6659] ? __local_bh_enable_ip+0xa5/0x120 [ 97.104924][ T6659] ? lockdep_hardirqs_on+0x7d/0x110 [ 97.104950][ T6659] ? __dev_queue_xmit+0xa12/0x4970 [ 97.105003][ T6659] ? __nla_parse+0x40/0x60 [ 97.105023][ T6659] nfnetlink_rcv+0x3bd/0x440 [ 97.105047][ T6659] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 97.105079][ T6659] netlink_unicast+0x585/0x850 [ 97.105103][ T6659] ? __pfx_netlink_unicast+0x10/0x10 [ 97.105130][ T6659] netlink_sendmsg+0x8b0/0xda0 [ 97.105155][ T6659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.105177][ T6659] ? apparmor_socket_sendmsg+0x165/0x280 [ 97.105205][ T6659] ____sys_sendmsg+0xa4d/0xbe0 [ 97.105220][ T6659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.105243][ T6659] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.105270][ T6659] ___sys_sendmsg+0x190/0x1e0 [ 97.105290][ T6659] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.105308][ T6659] ? futex_wait+0x11e/0x370 [ 97.105337][ T6659] ? find_held_lock+0x2b/0x80 [ 97.105372][ T6659] __sys_sendmsg+0x160/0x210 [ 97.105396][ T6659] ? __pfx___sys_sendmsg+0x10/0x10 [ 97.105431][ T6659] __do_fast_syscall_32+0x13a/0x8b0 [ 97.105460][ T6659] do_fast_syscall_32+0x32/0x70 [ 97.105493][ T6659] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.105516][ T6659] RIP: 0023:0xf7f56fec [ 97.105537][ T6659] Code: Unable to access opcode bytes at 0xf7f56fc2. [ 97.105546][ T6659] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 97.105564][ T6659] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800006c0 [ 97.105574][ T6659] RDX: 00000000040080c4 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.105586][ T6659] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.105597][ T6659] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 97.105608][ T6659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.105632][ T6659] [ 97.171905][ T6663] capability: warning: `syz.1.192' uses 32-bit capabilities (legacy support in use) [ 97.175005][ T6663] program syz.1.192 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.527224][ T5882] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 97.697266][ T5882] usb 5-1: Using ep0 maxpacket: 8 [ 97.698102][ T5882] usb 5-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 97.703761][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.703781][ T5882] usb 5-1: Product: syz [ 97.703792][ T5882] usb 5-1: Manufacturer: syz [ 97.703802][ T5882] usb 5-1: SerialNumber: syz [ 97.919242][ T5882] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 97.920070][ T5882] usb 5-1: unit 5 not found! [ 97.950045][ T5882] usb 5-1: USB disconnect, device number 8 [ 97.998124][ T5736] udevd[5736]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.336674][ T6689] FAULT_INJECTION: forcing a failure. [ 99.336674][ T6689] name failslab, interval 1, probability 0, space 0, times 0 [ 99.336706][ T6689] CPU: 3 UID: 0 PID: 6689 Comm: syz.1.200 Not tainted syzkaller #0 PREEMPT(full) [ 99.336729][ T6689] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.336741][ T6689] Call Trace: [ 99.336747][ T6689] [ 99.336755][ T6689] dump_stack_lvl+0x100/0x190 [ 99.336786][ T6689] should_fail_ex.cold+0x5/0xa [ 99.336813][ T6689] should_failslab+0xc2/0x120 [ 99.336840][ T6689] __kmalloc_cache_noprof+0x91/0x6d0 [ 99.336870][ T6689] ? nf_tables_newflowtable+0x62c/0x2830 [ 99.336900][ T6689] nf_tables_newflowtable+0x62c/0x2830 [ 99.336937][ T6689] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 99.336967][ T6689] ? __pfx___nla_validate_parse+0x10/0x10 [ 99.336989][ T6689] ? lock_acquire+0x1d1/0x380 [ 99.337015][ T6689] ? net_generic+0x25/0x2a0 [ 99.337049][ T6689] ? __nla_parse+0x40/0x60 [ 99.337073][ T6689] nfnetlink_rcv_batch+0x1410/0x2880 [ 99.337133][ T6689] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 99.337166][ T6689] ? find_held_lock+0x2b/0x80 [ 99.337189][ T6689] ? __local_bh_enable_ip+0xa5/0x120 [ 99.337220][ T6689] ? lockdep_hardirqs_on+0x7d/0x110 [ 99.337249][ T6689] ? __dev_queue_xmit+0xa12/0x4970 [ 99.337306][ T6689] ? __nla_parse+0x40/0x60 [ 99.337329][ T6689] nfnetlink_rcv+0x3bd/0x440 [ 99.337357][ T6689] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 99.337392][ T6689] netlink_unicast+0x585/0x850 [ 99.337418][ T6689] ? __pfx_netlink_unicast+0x10/0x10 [ 99.337449][ T6689] netlink_sendmsg+0x8b0/0xda0 [ 99.337493][ T6689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.337526][ T6689] ? apparmor_socket_sendmsg+0x165/0x280 [ 99.337557][ T6689] ____sys_sendmsg+0xa4d/0xbe0 [ 99.337576][ T6689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.337600][ T6689] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.337631][ T6689] ___sys_sendmsg+0x190/0x1e0 [ 99.337653][ T6689] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.337673][ T6689] ? futex_wait+0x11e/0x370 [ 99.337706][ T6689] ? find_held_lock+0x2b/0x80 [ 99.337744][ T6689] __sys_sendmsg+0x160/0x210 [ 99.337770][ T6689] ? __pfx___sys_sendmsg+0x10/0x10 [ 99.337810][ T6689] __do_fast_syscall_32+0x13a/0x8b0 [ 99.337844][ T6689] do_fast_syscall_32+0x32/0x70 [ 99.337874][ T6689] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 99.337899][ T6689] RIP: 0023:0xf705efec [ 99.337920][ T6689] Code: Unable to access opcode bytes at 0xf705efc2. [ 99.337929][ T6689] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 99.337949][ T6689] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800006c0 [ 99.337961][ T6689] RDX: 00000000040080c4 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.337972][ T6689] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 99.337983][ T6689] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 99.337994][ T6689] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 99.338019][ T6689] [ 99.438631][ T44] audit: type=1804 audit(1789075492.360:8208): pid=6694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.203" name="bus" dev="ramfs" ino=14453 res=1 errno=0 [ 99.929972][ T6708] netlink: 16 bytes leftover after parsing attributes in process `syz.2.210'. [ 100.034701][ T6718] netlink: 'syz.3.215': attribute type 1 has an invalid length. [ 100.052996][ T6718] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.395536][ T6744] FAULT_INJECTION: forcing a failure. [ 100.395536][ T6744] name failslab, interval 1, probability 0, space 0, times 0 [ 100.395556][ T6744] CPU: 2 UID: 0 PID: 6744 Comm: syz.3.226 Not tainted syzkaller #0 PREEMPT(full) [ 100.395568][ T6744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.395575][ T6744] Call Trace: [ 100.395579][ T6744] [ 100.395584][ T6744] dump_stack_lvl+0x100/0x190 [ 100.395603][ T6744] should_fail_ex.cold+0x5/0xa [ 100.395619][ T6744] should_failslab+0xc2/0x120 [ 100.395635][ T6744] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 100.395649][ T6744] ? alloc_inode+0x183/0x250 [ 100.395667][ T6744] alloc_inode+0x183/0x250 [ 100.395683][ T6744] create_pipe_files+0x4c/0x970 [ 100.395698][ T6744] do_pipe2+0xbd/0x1e0 [ 100.395712][ T6744] ? __pfx_do_pipe2+0x10/0x10 [ 100.395724][ T6744] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 100.395737][ T6744] ? ksys_write+0x1ac/0x250 [ 100.395751][ T6744] __ia32_sys_pipe2+0x53/0x80 [ 100.395764][ T6744] __do_fast_syscall_32+0x13a/0x8b0 [ 100.395783][ T6744] do_fast_syscall_32+0x32/0x70 [ 100.395800][ T6744] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.395813][ T6744] RIP: 0023:0xf7f63fec [ 100.395825][ T6744] Code: Unable to access opcode bytes at 0xf7f63fc2. [ 100.395830][ T6744] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 000000000000014b [ 100.395841][ T6744] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000800 [ 100.395848][ T6744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.395854][ T6744] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.395860][ T6744] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 100.395866][ T6744] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.395879][ T6744] [ 100.515015][ T6757] Bluetooth: MGMT ver 1.23 [ 100.641848][ T6762] syz.3.234 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 102.135866][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.249'. [ 102.617708][ T6813] bridge_slave_0: left allmulticast mode [ 102.617727][ T6813] bridge_slave_0: left promiscuous mode [ 102.618834][ T6813] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.654463][ T6813] bridge_slave_1: left allmulticast mode [ 102.654493][ T6813] bridge_slave_1: left promiscuous mode [ 102.654683][ T6813] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.729228][ T6813] bond0: (slave bond_slave_0): Releasing backup interface [ 102.732816][ T6813] bond0: (slave bond_slave_1): Releasing backup interface [ 102.758994][ T6813] team0: Port device team_slave_0 removed [ 102.778535][ T6813] team0: Port device team_slave_1 removed [ 102.781291][ T6813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.781310][ T6813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.789790][ T6813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.789809][ T6813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.799059][ T6813] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 102.833913][ T6814] team0: Port device xfrm0 added [ 102.875663][ T6822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 103.587474][ T6834] mmap: syz.1.271 (6834) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.936610][ T6841] program syz.1.265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.288889][ T30] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 104.451639][ T30] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 104.457890][ T30] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.457917][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.481813][ T30] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 104.482159][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 104.482215][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 104.504919][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 104.504962][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 104.509331][ T30] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 104.516609][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 104.516646][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 104.527404][ T30] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 105.005062][ T30] usb 8-1: USB disconnect, device number 12 [ 105.041366][ T30] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 105.078574][ T30] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 105.081395][ T30] keyspan 8-1:1.0: device disconnected [ 105.093135][ T6852] FAULT_INJECTION: forcing a failure. [ 105.093135][ T6852] name failslab, interval 1, probability 0, space 0, times 0 [ 105.093167][ T6852] CPU: 0 UID: 0 PID: 6852 Comm: syz.1.270 Not tainted syzkaller #0 PREEMPT(full) [ 105.093191][ T6852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.093203][ T6852] Call Trace: [ 105.093210][ T6852] [ 105.093218][ T6852] dump_stack_lvl+0x100/0x190 [ 105.093251][ T6852] should_fail_ex.cold+0x5/0xa [ 105.093278][ T6852] should_failslab+0xc2/0x120 [ 105.093304][ T6852] kmem_cache_alloc_noprof+0x92/0x6a0 [ 105.093325][ T6852] ? __asan_memcpy+0x3c/0x60 [ 105.093344][ T6852] ? __kernfs_new_node+0xd2/0xa10 [ 105.093373][ T6852] __kernfs_new_node+0xd2/0xa10 [ 105.093401][ T6852] ? __pfx___kernfs_new_node+0x10/0x10 [ 105.093427][ T6852] ? lock_acquire+0x1d1/0x380 [ 105.093449][ T6852] ? kernfs_root+0x23/0x2a0 [ 105.093472][ T6852] ? find_held_lock+0x2b/0x80 [ 105.093490][ T6852] ? kernfs_root+0xee/0x2a0 [ 105.093511][ T6852] ? kernfs_root+0xee/0x2a0 [ 105.093540][ T6852] kernfs_new_node+0x117/0x150 [ 105.093571][ T6852] kernfs_create_link+0xcc/0x240 [ 105.093592][ T6852] sysfs_do_create_link_sd+0x90/0x140 [ 105.093616][ T6852] sysfs_create_link+0x61/0xc0 [ 105.093636][ T6852] driver_sysfs_add+0x91/0x2d0 [ 105.093661][ T6852] really_probe+0x146/0xa60 [ 105.093688][ T6852] __driver_probe_device+0x210/0x460 [ 105.093713][ T6852] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 105.093741][ T6852] driver_probe_device+0x4a/0x140 [ 105.093767][ T6852] __driver_attach+0x21f/0x5b0 [ 105.093802][ T6852] ? __pfx___driver_attach+0x10/0x10 [ 105.093828][ T6852] bus_for_each_dev+0x13e/0x1d0 [ 105.093850][ T6852] ? __pfx_bus_for_each_dev+0x10/0x10 [ 105.093871][ T6852] ? bus_add_driver+0x2b5/0x5b0 [ 105.093901][ T6852] bus_add_driver+0x305/0x5b0 [ 105.093928][ T6852] driver_register+0x1e2/0x360 [ 105.093954][ T6852] ? rcu_is_watching+0x13/0xc0 [ 105.093975][ T6852] usb_gadget_register_driver_owner+0x132/0x210 [ 105.094001][ T6852] raw_ioctl+0x1a85/0x2b80 [ 105.094028][ T6852] ? __pfx_raw_ioctl+0x10/0x10 [ 105.094053][ T6852] ? __pfx_raw_ioctl+0x10/0x10 [ 105.094073][ T6852] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 105.094107][ T6852] __do_fast_syscall_32+0x13a/0x8b0 [ 105.094140][ T6852] do_fast_syscall_32+0x32/0x70 [ 105.094169][ T6852] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.094192][ T6852] RIP: 0023:0xf705efec [ 105.094211][ T6852] Code: Unable to access opcode bytes at 0xf705efc2. [ 105.094220][ T6852] RSP: 002b:00000000f544b424 EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 105.094238][ T6852] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005501 [ 105.094249][ T6852] RDX: 0000000000000000 RSI: 00000000f7428ff4 RDI: 00000000f544c4c0 [ 105.094261][ T6852] RBP: 00000000f7428ff4 R08: 0000000000000000 R09: 0000000000000000 [ 105.094287][ T6852] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 105.094297][ T6852] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.094322][ T6852] [ 105.094354][ T6852] raw-gadget.0 gadget.1: really_probe: driver_sysfs_add failed [ 105.099633][ T6852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.100539][ T6852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.070083][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.078445][ T1035] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 107.818324][ T5882] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 107.988404][ T5882] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 107.988891][ T5882] usb 6-1: config 0 has no interfaces? [ 107.988907][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.998902][ T5882] usb 6-1: config 0 descriptor?? [ 108.209423][ T5882] usb 6-1: USB disconnect, device number 19 [ 109.187298][ T1035] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 109.368030][ T1035] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 109.369137][ T1035] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 109.369173][ T1035] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.581802][ T6985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.582087][ T6985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.592199][ T1035] qmi_wwan 5-1:1.0: cdc-wdm0: USB WDM device [ 109.646218][ T1035] wwan wwan0: port wwan0qmi0 attached [ 109.834532][ T6985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.835824][ T6985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.846546][ T6985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.846757][ T6985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.084636][ T1035] qmi_wwan 5-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, 32:99:c6:f4:6c:1c [ 111.092406][ T1035] usb 5-1: USB disconnect, device number 9 [ 111.096294][ T1035] qmi_wwan 5-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device [ 111.172419][ T1035] wwan wwan0: port wwan0qmi0 disconnected [ 111.363718][ T7034] Console: switching to colour dummy device 80x25 [ 111.460965][ T7037] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 111.468616][ T7037] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 111.468756][ T7037] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 111.468998][ T7037] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 111.470682][ T7037] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 111.565780][ T7037] pci 0000:00:01.0: Adding to iommu group 1 [ 111.625274][ T7037] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 111.625296][ T7037] pci 0000:00:01.0: vgaarb: bridge control possible [ 111.625310][ T7037] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 111.661618][ T7037] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 111.693337][ T7037] pci 0000:00:02.0: BAR 0 [mem 0xfea80000-0xfea9ffff] [ 111.696570][ T7037] pci 0000:00:02.0: BAR 1 [mem 0xfeaa0000-0xfeabffff] [ 111.696677][ T7037] pci 0000:00:02.0: BAR 2 [io 0xc080-0xc09f] [ 111.696771][ T7037] pci 0000:00:02.0: BAR 3 [mem 0xfeaf0000-0xfeaf3fff] [ 111.708927][ T7037] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 111.710788][ T7037] pci 0000:00:02.0: enabling Extended Tags [ 111.812219][ T7037] pci 0000:00:02.0: Adding to iommu group 2 [ 111.863022][ T7037] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 111.871756][ T7037] pci 0000:00:02.0: ROM [mem 0x81000000-0x8103ffff pref]: assigned [ 111.871838][ T7037] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff]: assigned [ 111.874681][ T7037] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff]: assigned [ 111.891760][ T7037] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff]: assigned [ 111.895252][ T7037] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 111.904664][ T7037] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 111.942079][ T7037] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 112.035817][ T7037] [drm] Found bochs VGA, ID 0xb0c5. [ 112.035834][ T7037] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 112.193492][ T7037] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 112.288129][ T5882] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 112.417431][ T5882] usb 6-1: device descriptor read/64, error -71 [ 112.456990][ T7037] Console: switching to colour frame buffer device 160x50 [ 112.517759][ T7037] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 112.651785][ T7037] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 112.658013][ T5882] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 112.742119][ T7037] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 112.788800][ T5882] usb 6-1: device descriptor read/64, error -71 [ 112.865845][ T7037] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 112.865864][ T7037] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 112.866023][ T7037] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 112.897566][ T5882] usb usb6-port1: attempt power cycle [ 113.008149][ T7063] netlink: 'syz.2.362': attribute type 26 has an invalid length. [ 113.057856][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.364'. [ 113.071908][ T7066] FAULT_INJECTION: forcing a failure. [ 113.071908][ T7066] name fail_futex, interval 1, probability 0, space 0, times 0 [ 113.071929][ T7066] CPU: 2 UID: 0 PID: 7066 Comm: syz.2.364 Not tainted syzkaller #0 PREEMPT(full) [ 113.071942][ T7066] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.071949][ T7066] Call Trace: [ 113.071983][ T7066] [ 113.071988][ T7066] dump_stack_lvl+0x100/0x190 [ 113.072042][ T7066] should_fail_ex.cold+0x5/0xa [ 113.072057][ T7066] get_futex_key+0x1d0/0x14f0 [ 113.072078][ T7066] ? __pfx_get_futex_key+0x10/0x10 [ 113.072097][ T7066] ? ___sys_sendmsg+0x127/0x1e0 [ 113.072130][ T7066] futex_wake+0xf4/0x5e0 [ 113.072144][ T7066] ? __pfx_futex_wake+0x10/0x10 [ 113.072159][ T7066] ? find_held_lock+0x2b/0x80 [ 113.072174][ T7066] do_futex+0x2b2/0x440 [ 113.072186][ T7066] ? __pfx_do_futex+0x10/0x10 [ 113.072198][ T7066] ? fput+0x7c/0x100 [ 113.072232][ T7066] __ia32_sys_futex_time32+0x2f4/0x470 [ 113.072246][ T7066] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 113.072263][ T7066] __do_fast_syscall_32+0x13a/0x8b0 [ 113.072301][ T7066] ? lockdep_hardirqs_on+0x7d/0x110 [ 113.072320][ T7066] do_fast_syscall_32+0x32/0x70 [ 113.072339][ T7066] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.072355][ T7066] RIP: 0023:0xf7f25fec [ 113.072369][ T7066] Code: Unable to access opcode bytes at 0xf7f25fc2. [ 113.072391][ T7066] RSP: 002b:00000000f53e65cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 113.072403][ T7066] RAX: ffffffffffffffda RBX: 00000000f73e4f8c RCX: 0000000000000081 [ 113.072410][ T7066] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 113.072416][ T7066] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 113.072422][ T7066] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 113.072429][ T7066] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.072442][ T7066] [ 113.237406][ T5882] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 113.258195][ T5882] usb 6-1: device descriptor read/8, error -71 [ 113.507980][ T5882] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 113.527884][ T5882] usb 6-1: device descriptor read/8, error -71 [ 113.572186][ T5448] 8021q: adding VLAN 0 to HW filter on device eth1 [ 113.637403][ T5882] usb usb6-port1: unable to enumerate USB device [ 114.061993][ T30] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 114.141292][ T1854] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 114.307238][ T1854] usb 5-1: Using ep0 maxpacket: 32 [ 114.321900][ T1854] usb 5-1: unable to get BOS descriptor or descriptor too short [ 114.321924][ T1854] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 114.324231][ T1854] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 114.324244][ T1854] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 114.324254][ T1854] usb 5-1: config 14 has no interface number 0 [ 114.324262][ T1854] usb 5-1: config 14 has no interface number 1 [ 114.324288][ T1854] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 114.324299][ T1854] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 114.324311][ T1854] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 114.324324][ T1854] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 114.324337][ T1854] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 114.324354][ T1854] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.324367][ T1854] usb 5-1: config 14 interface 57 has no altsetting 0 [ 114.324375][ T1854] usb 5-1: config 14 interface 228 has no altsetting 0 [ 114.329035][ T1854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.329048][ T1854] usb 5-1: Product: syz [ 114.329055][ T1854] usb 5-1: Manufacturer: syz [ 114.329062][ T1854] usb 5-1: SerialNumber: syz [ 114.804507][ T1854] legousbtower 5-1:14.57: interrupt endpoints not found [ 115.092632][ T7099] UBIFS error (pid: 7099): cannot open "ubi0:testvol", error -19 [ 115.205835][ T1854] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 115.210435][ T1854] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 115.395182][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.373'. [ 115.409737][ T7105] FAULT_INJECTION: forcing a failure. [ 115.409737][ T7105] name fail_futex, interval 1, probability 0, space 0, times 0 [ 115.409757][ T7105] CPU: 0 UID: 0 PID: 7105 Comm: syz.1.373 Not tainted syzkaller #0 PREEMPT(full) [ 115.409770][ T7105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.409776][ T7105] Call Trace: [ 115.409780][ T7105] [ 115.409784][ T7105] dump_stack_lvl+0x100/0x190 [ 115.409807][ T7105] should_fail_ex.cold+0x5/0xa [ 115.409822][ T7105] get_futex_key+0x1d0/0x14f0 [ 115.409841][ T7105] ? __pfx_get_futex_key+0x10/0x10 [ 115.409858][ T7105] ? __mutex_unlock_slowpath+0x35d/0x930 [ 115.409878][ T7105] futex_wake+0xf4/0x5e0 [ 115.409893][ T7105] ? __pfx_futex_wake+0x10/0x10 [ 115.409908][ T7105] ? detach_task_ctx_data+0x83/0x490 [ 115.409926][ T7105] do_futex+0x2b2/0x440 [ 115.409937][ T7105] ? __pfx_do_futex+0x10/0x10 [ 115.409947][ T7105] ? __might_fault+0xc5/0x140 [ 115.409966][ T7105] mm_exit_exec_release+0x256/0x2f0 [ 115.409984][ T7105] do_exit+0x707/0x2ae0 [ 115.409998][ T7105] ? __pfx_do_exit+0x10/0x10 [ 115.410011][ T7105] ? do_raw_spin_lock+0x128/0x260 [ 115.410035][ T7105] ? find_held_lock+0x2b/0x80 [ 115.410050][ T7105] ? get_signal+0x7e0/0x21e0 [ 115.410075][ T7105] do_group_exit+0xd5/0x2a0 [ 115.410099][ T7105] get_signal+0x1ec7/0x21e0 [ 115.410126][ T7105] ? find_held_lock+0x2b/0x80 [ 115.410138][ T7105] ? __pfx_get_signal+0x10/0x10 [ 115.410155][ T7105] ? do_futex+0x190/0x440 [ 115.410167][ T7105] arch_do_signal_or_restart+0x91/0x7a0 [ 115.410183][ T7105] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 115.410201][ T7105] ? xfd_validate_state+0x129/0x190 [ 115.410221][ T7105] exit_to_user_mode_loop+0x139/0x700 [ 115.410237][ T7105] ? rcu_is_watching+0x13/0xc0 [ 115.410250][ T7105] __do_fast_syscall_32+0x59f/0x8b0 [ 115.410266][ T7105] ? lockdep_hardirqs_on+0x7d/0x110 [ 115.410282][ T7105] do_fast_syscall_32+0x32/0x70 [ 115.410301][ T7105] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 115.410315][ T7105] RIP: 0023:0xf705efec [ 115.410328][ T7105] Code: Unable to access opcode bytes at 0xf705efc2. [ 115.410333][ T7105] RSP: 002b:00000000f544d5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 115.410343][ T7105] RAX: fffffffffffffe00 RBX: 00000000f7454f88 RCX: 0000000000000080 [ 115.410350][ T7105] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7454f8c [ 115.410356][ T7105] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 115.410363][ T7105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.410369][ T7105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 115.410382][ T7105] [ 115.977325][ T30] usb 5-1: USB disconnect, device number 10 [ 116.003728][ T30] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 116.531555][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.383'. [ 117.217953][ T7145] syz_tun: entered promiscuous mode [ 117.217975][ T7145] FAULT_INJECTION: forcing a failure. [ 117.217975][ T7145] name failslab, interval 1, probability 0, space 0, times 0 [ 117.217989][ T7145] CPU: 2 UID: 0 PID: 7145 Comm: syz.3.390 Not tainted syzkaller #0 PREEMPT(full) [ 117.218003][ T7145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.218010][ T7145] Call Trace: [ 117.218014][ T7145] [ 117.218018][ T7145] dump_stack_lvl+0x100/0x190 [ 117.218037][ T7145] should_fail_ex.cold+0x5/0xa [ 117.218052][ T7145] should_failslab+0xc2/0x120 [ 117.218069][ T7145] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 117.218083][ T7145] ? __alloc_skb+0x140/0x710 [ 117.218099][ T7145] __alloc_skb+0x140/0x710 [ 117.218111][ T7145] ? __alloc_skb+0x5b7/0x710 [ 117.218124][ T7145] ? __pfx___alloc_skb+0x10/0x10 [ 117.218138][ T7145] ? if_nlmsg_size+0x4b/0xdc0 [ 117.218158][ T7145] rtmsg_ifinfo_build_skb+0x81/0x260 [ 117.218178][ T7145] rtmsg_ifinfo+0xa4/0x1b0 [ 117.218190][ T7145] __dev_notify_flags+0x362/0x4b0 [ 117.218211][ T7145] ? __pfx___dev_notify_flags+0x10/0x10 [ 117.218235][ T7145] ? __dev_change_flags+0x548/0x850 [ 117.218259][ T7145] ? __pfx___dev_change_flags+0x10/0x10 [ 117.218279][ T7145] ? is_bpf_text_address+0x94/0x1a0 [ 117.218299][ T7145] ? validate_linkmsg+0x57c/0xba0 [ 117.218323][ T7145] ? kernel_text_address+0x8d/0x100 [ 117.218348][ T7145] netif_change_flags+0x108/0x160 [ 117.218372][ T7145] do_setlink.isra.0+0x1ac4/0x3e60 [ 117.218397][ T7145] ? stack_trace_save+0x8e/0xc0 [ 117.218419][ T7145] ? is_bpf_text_address+0x25/0x1a0 [ 117.218442][ T7145] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 117.218468][ T7145] ? __lock_acquire+0x5c0/0x1f40 [ 117.218494][ T7145] ? kasan_save_track+0x14/0x30 [ 117.218515][ T7145] ? __kasan_kmalloc+0xaa/0xb0 [ 117.218534][ T7145] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 117.218561][ T7145] ? rtnl_newlink+0x139/0x2620 [ 117.218584][ T7145] ? rtnetlink_rcv_msg+0x95e/0xe90 [ 117.218608][ T7145] ? netlink_rcv_skb+0x159/0x420 [ 117.218627][ T7145] ? netlink_unicast+0x585/0x850 [ 117.218645][ T7145] ? netlink_sendmsg+0x8b0/0xda0 [ 117.218663][ T7145] ? ____sys_sendmsg+0xa4d/0xbe0 [ 117.218677][ T7145] ? ___sys_sendmsg+0x190/0x1e0 [ 117.218724][ T7145] ? lock_acquire+0x1d1/0x380 [ 117.218746][ T7145] ? rtnl_newlink+0xac3/0x2620 [ 117.218774][ T7145] ? rcu_is_watching+0x13/0xc0 [ 117.218791][ T7145] ? trace_contention_end+0x126/0x160 [ 117.218835][ T7145] ? __mutex_lock+0x26c/0x1bd0 [ 117.218863][ T7145] ? rtnl_newlink+0xac3/0x2620 [ 117.218893][ T7145] ? __nla_validate_parse+0x1e7/0x28b0 [ 117.218917][ T7145] ? __pfx___mutex_lock+0x10/0x10 [ 117.218943][ T7145] ? rcu_is_watching+0x13/0xc0 [ 117.218962][ T7145] ? apparmor_capable+0x1d7/0x4d0 [ 117.219000][ T7145] rtnl_newlink+0x13c1/0x2620 [ 117.219033][ T7145] ? __pfx_rtnl_newlink+0x10/0x10 [ 117.219060][ T7145] ? rcu_is_watching+0x13/0xc0 [ 117.219077][ T7145] ? kasan_quarantine_put+0x104/0x240 [ 117.219097][ T7145] ? lockdep_hardirqs_on+0x7d/0x110 [ 117.219140][ T7145] ? __lock_acquire+0x5c0/0x1f40 [ 117.219174][ T7145] ? find_held_lock+0x2b/0x80 [ 117.219202][ T7145] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 117.219225][ T7145] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 117.219252][ T7145] ? __pfx_rtnl_newlink+0x10/0x10 [ 117.219278][ T7145] rtnetlink_rcv_msg+0x95e/0xe90 [ 117.219305][ T7145] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 117.219336][ T7145] ? ref_tracker_free+0x37e/0x6c0 [ 117.219365][ T7145] netlink_rcv_skb+0x159/0x420 [ 117.219386][ T7145] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 117.219410][ T7145] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 117.219438][ T7145] ? netlink_deliver_tap+0x1ae/0xcc0 [ 117.219461][ T7145] netlink_unicast+0x585/0x850 [ 117.219483][ T7145] ? __pfx_netlink_unicast+0x10/0x10 [ 117.219511][ T7145] netlink_sendmsg+0x8b0/0xda0 [ 117.219535][ T7145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.219558][ T7145] ? apparmor_socket_sendmsg+0x165/0x280 [ 117.219585][ T7145] ____sys_sendmsg+0xa4d/0xbe0 [ 117.219601][ T7145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.219623][ T7145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.219645][ T7145] ? plist_check_list+0x1b8/0x280 [ 117.219665][ T7145] ? plist_del+0x308/0x510 [ 117.219687][ T7145] ___sys_sendmsg+0x190/0x1e0 [ 117.219707][ T7145] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.219726][ T7145] ? futex_wake+0x220/0x5e0 [ 117.219756][ T7145] ? find_held_lock+0x2b/0x80 [ 117.219790][ T7145] __sys_sendmsg+0x160/0x210 [ 117.219814][ T7145] ? __pfx___sys_sendmsg+0x10/0x10 [ 117.219850][ T7145] __do_fast_syscall_32+0x13a/0x8b0 [ 117.219881][ T7145] do_fast_syscall_32+0x32/0x70 [ 117.219917][ T7145] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.219939][ T7145] RIP: 0023:0xf7f63fec [ 117.219958][ T7145] Code: Unable to access opcode bytes at 0xf7f63fc2. [ 117.219965][ T7145] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 117.219982][ T7145] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280 [ 117.219994][ T7145] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.220005][ T7145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.220016][ T7145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.220028][ T7145] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.220052][ T7145] [ 117.333978][ T7151] FAULT_INJECTION: forcing a failure. [ 117.333978][ T7151] name failslab, interval 1, probability 0, space 0, times 0 [ 117.333999][ T7151] CPU: 0 UID: 0 PID: 7151 Comm: syz.3.393 Not tainted syzkaller #0 PREEMPT(full) [ 117.334012][ T7151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.334019][ T7151] Call Trace: [ 117.334023][ T7151] [ 117.334028][ T7151] dump_stack_lvl+0x100/0x190 [ 117.334047][ T7151] should_fail_ex.cold+0x5/0xa [ 117.334062][ T7151] should_failslab+0xc2/0x120 [ 117.334079][ T7151] __kmalloc_cache_noprof+0x91/0x6d0 [ 117.334098][ T7151] ? nfnetlink_rcv_batch+0x780/0x2880 [ 117.334117][ T7151] nfnetlink_rcv_batch+0x780/0x2880 [ 117.334140][ T7151] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 117.334156][ T7151] ? find_held_lock+0x2b/0x80 [ 117.334170][ T7151] ? __local_bh_enable_ip+0xa5/0x120 [ 117.334186][ T7151] ? lockdep_hardirqs_on+0x7d/0x110 [ 117.334202][ T7151] ? __dev_queue_xmit+0xa12/0x4970 [ 117.334247][ T7151] ? __nla_parse+0x40/0x60 [ 117.334260][ T7151] nfnetlink_rcv+0x3bd/0x440 [ 117.334276][ T7151] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 117.334295][ T7151] netlink_unicast+0x585/0x850 [ 117.334310][ T7151] ? __pfx_netlink_unicast+0x10/0x10 [ 117.334327][ T7151] netlink_sendmsg+0x8b0/0xda0 [ 117.334343][ T7151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.334358][ T7151] ? apparmor_socket_sendmsg+0x165/0x280 [ 117.334375][ T7151] ____sys_sendmsg+0xa4d/0xbe0 [ 117.334385][ T7151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.334401][ T7151] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.334419][ T7151] ___sys_sendmsg+0x190/0x1e0 [ 117.334432][ T7151] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.334443][ T7151] ? futex_wait+0x11e/0x370 [ 117.334461][ T7151] ? find_held_lock+0x2b/0x80 [ 117.334480][ T7151] __sys_sendmsg+0x160/0x210 [ 117.334495][ T7151] ? __pfx___sys_sendmsg+0x10/0x10 [ 117.334517][ T7151] __do_fast_syscall_32+0x13a/0x8b0 [ 117.334536][ T7151] do_fast_syscall_32+0x32/0x70 [ 117.334552][ T7151] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.334566][ T7151] RIP: 0023:0xf7f63fec [ 117.334578][ T7151] Code: Unable to access opcode bytes at 0xf7f63fc2. [ 117.334583][ T7151] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 117.334594][ T7151] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800006c0 [ 117.334601][ T7151] RDX: 00000000040080c4 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.334607][ T7151] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.334613][ T7151] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 117.334619][ T7151] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.334632][ T7151] [ 118.083308][ T7128] [ 118.084391][ T7128] ====================================================== [ 118.087095][ T7128] WARNING: possible circular locking dependency detected [ 118.089915][ T7128] syzkaller #0 Not tainted [ 118.091931][ T7128] ------------------------------------------------------ [ 118.094854][ T7128] syz.1.382/7128 is trying to acquire lock: [ 118.097335][ T7128] ffff88804ed1d1e8 (kn->active#80){++++}-{0:0}, at: __kernfs_remove+0x34c/0xb80 [ 118.101080][ T7128] [ 118.101080][ T7128] but task is already holding lock: [ 118.104090][ T7128] ffffffff904e4aa0 (serio_mutex){+.+.}-{4:4}, at: serio_unregister_port+0x1b/0x40 [ 118.107816][ T7128] [ 118.107816][ T7128] which lock already depends on the new lock. [ 118.107816][ T7128] [ 118.111985][ T7128] [ 118.111985][ T7128] the existing dependency chain (in reverse order) is: [ 118.115706][ T7128] [ 118.115706][ T7128] -> #1 (serio_mutex){+.+.}-{4:4}: [ 118.118737][ T7128] lock_acquire+0x1d1/0x380 [ 118.120839][ T7128] __mutex_lock+0x1a4/0x1bd0 [ 118.122514][ T7128] drvctl_store+0x3c/0x350 [ 118.124111][ T7128] dev_attr_store+0x58/0x80 [ 118.125698][ T7128] sysfs_kf_write+0xf2/0x150 [ 118.127631][ T7128] kernfs_fop_write_iter+0x3e0/0x5f0 [ 118.129534][ T7128] vfs_write+0x6af/0x1050 [ 118.131022][ T7128] ksys_write+0x12a/0x250 [ 118.132594][ T7128] __do_fast_syscall_32+0x13a/0x8b0 [ 118.134379][ T7128] do_fast_syscall_32+0x32/0x70 [ 118.136050][ T7128] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.138141][ T7128] [ 118.138141][ T7128] -> #0 (kn->active#80){++++}-{0:0}: [ 118.141233][ T7128] check_prev_add+0xeb/0xe60 [ 118.143307][ T7128] __lock_acquire+0x1528/0x1f40 [ 118.145373][ T7128] lock_acquire+0x1d1/0x380 [ 118.147409][ T7128] kernfs_drain+0x4f0/0x600 [ 118.149429][ T7128] __kernfs_remove+0x34c/0xb80 [ 118.151349][ T7128] kernfs_remove_by_name_ns+0x7c/0x120 [ 118.153819][ T7128] remove_files+0x96/0x1c0 [ 118.155881][ T7128] sysfs_remove_group+0x8b/0x1b0 [ 118.157989][ T7128] sysfs_remove_groups+0x60/0xb0 [ 118.160246][ T7128] device_remove_attrs+0x192/0x290 [ 118.162562][ T7128] device_del+0x36e/0x9b0 [ 118.164619][ T7128] serio_destroy_port+0x47f/0x590 [ 118.166912][ T7128] serio_unregister_port+0x2b/0x40 [ 118.169205][ T7128] userio_char_release+0x91/0xe0 [ 118.171508][ T7128] __fput+0x3ff/0xb50 [ 118.173341][ T7128] task_work_run+0x150/0x240 [ 118.175426][ T7128] exit_to_user_mode_loop+0x1d8/0x700 [ 118.177757][ T7128] __do_fast_syscall_32+0x59f/0x8b0 [ 118.180031][ T7128] do_fast_syscall_32+0x32/0x70 [ 118.181921][ T7128] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.183993][ T7128] [ 118.183993][ T7128] other info that might help us debug this: [ 118.183993][ T7128] [ 118.186894][ T7128] Possible unsafe locking scenario: [ 118.186894][ T7128] [ 118.189149][ T7128] CPU0 CPU1 [ 118.190785][ T7128] ---- ---- [ 118.192372][ T7128] lock(serio_mutex); [ 118.193616][ T7128] lock(kn->active#80); [ 118.195669][ T7128] lock(serio_mutex); [ 118.197671][ T7128] lock(kn->active#80); [ 118.199021][ T7128] [ 118.199021][ T7128] *** DEADLOCK *** [ 118.199021][ T7128] [ 118.201537][ T7128] locks held by syz.1.382/7128: 1, last CPU#1: [ 118.203431][ T7128] #0: ffffffff904e4aa0 (serio_mutex){+.+.}-{4:4}, at: serio_unregister_port+0x1b/0x40 [ 118.206342][ T7128] [ 118.206342][ T7128] stack backtrace: [ 118.208201][ T7128] CPU: 1 UID: 0 PID: 7128 Comm: syz.1.382 Not tainted syzkaller #0 PREEMPT(full) [ 118.211000][ T7128] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.214023][ T7128] Call Trace: [ 118.215072][ T7128] [ 118.216066][ T7128] dump_stack_lvl+0x100/0x190 [ 118.217895][ T7128] print_circular_bug.cold+0x178/0x1be [ 118.219910][ T7128] check_noncircular+0x146/0x160 [ 118.221452][ T7128] check_prev_add+0xeb/0xe60 [ 118.223176][ T7128] __lock_acquire+0x1528/0x1f40 [ 118.224701][ T7128] lock_acquire+0x1d1/0x380 [ 118.226101][ T7128] ? __kernfs_remove+0x34c/0xb80 [ 118.227674][ T7128] ? kernfs_drain+0x4c7/0x600 [ 118.229581][ T7128] kernfs_drain+0x4f0/0x600 [ 118.231331][ T7128] ? __kernfs_remove+0x34c/0xb80 [ 118.233395][ T7128] ? __pfx_kernfs_drain+0x10/0x10 [ 118.235413][ T7128] ? find_held_lock+0x2b/0x80 [ 118.237149][ T7128] ? __kernfs_remove+0x224/0xb80 [ 118.238935][ T7128] ? __kernfs_remove+0x224/0xb80 [ 118.240771][ T7128] ? up_write+0x2dc/0x5b0 [ 118.242437][ T7128] __kernfs_remove+0x34c/0xb80 [ 118.244376][ T7128] kernfs_remove_by_name_ns+0x7c/0x120 [ 118.246498][ T7128] remove_files+0x96/0x1c0 [ 118.247886][ T7128] sysfs_remove_group+0x8b/0x1b0 [ 118.249776][ T7128] sysfs_remove_groups+0x60/0xb0 [ 118.251332][ T7128] device_remove_attrs+0x192/0x290 [ 118.252928][ T7128] ? __pfx_device_remove_attrs+0x10/0x10 [ 118.254651][ T7128] device_del+0x36e/0x9b0 [ 118.255985][ T7128] ? __pfx_device_del+0x10/0x10 [ 118.257452][ T7128] ? mark_held_locks+0x40/0x70 [ 118.259218][ T7128] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 118.261526][ T7128] serio_destroy_port+0x47f/0x590 [ 118.263653][ T7128] serio_unregister_port+0x2b/0x40 [ 118.265563][ T7128] userio_char_release+0x91/0xe0 [ 118.267596][ T7128] ? __pfx_userio_char_release+0x10/0x10 [ 118.269923][ T7128] __fput+0x3ff/0xb50 [ 118.271694][ T7128] task_work_run+0x150/0x240 [ 118.273523][ T7128] ? __pfx_task_work_run+0x10/0x10 [ 118.275560][ T7128] exit_to_user_mode_loop+0x1d8/0x700 [ 118.277811][ T7128] ? rcu_is_watching+0x13/0xc0 [ 118.279820][ T7128] __do_fast_syscall_32+0x59f/0x8b0 [ 118.282009][ T7128] ? lockdep_hardirqs_on+0x7d/0x110 [ 118.284098][ T7128] do_fast_syscall_32+0x32/0x70 [ 118.285977][ T7128] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.288565][ T7128] RIP: 0023:0xf705efec [ 118.290285][ T7128] Code: Unable to access opcode bytes at 0xf705efc2. [ 118.292989][ T7128] RSP: 002b:00000000ffc9ba6c EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 118.296455][ T7128] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 118.299655][ T7128] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.302839][ T7128] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 118.306029][ T7128] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 118.309246][ T7128] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 118.312466][ T7128]