last executing test programs: 1h21m31.128768268s ago: executing program 1 (id=239): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0xf2, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 1h21m19.83223089s ago: executing program 1 (id=240): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) r0 = socket(0x1, 0x803, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x20004050}, 0x20044800) 1h21m9.66233994s ago: executing program 1 (id=242): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac) 1h20m59.51170462s ago: executing program 1 (id=244): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 1h20m49.575244416s ago: executing program 1 (id=246): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x20004050}, 0x20044800) 1h20m35.155992056s ago: executing program 1 (id=248): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac) 1h20m17.508779237s ago: executing program 32 (id=248): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac) 24m45.025784602s ago: executing program 0 (id=775): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x44) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "d3ff2108438086fc", "c8a89f9648c12027d7da6eda54e60554", "c4ba1dc4", "407c5c29d5cd033f"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r0, 0x1) 24m37.459454591s ago: executing program 0 (id=777): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) accept(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, &(0x7f0000001dc0)={0x0, 0x8a, 0x20000}, 0x20) 24m31.819500945s ago: executing program 0 (id=779): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x99e86f6a6737948, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 24m26.693486719s ago: executing program 0 (id=780): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010010000000ffdbdf2500000000", @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000f"], 0x44}}, 0x0) 24m20.789311178s ago: executing program 0 (id=781): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x44) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "d3ff2108438086fc", "c8a89f9648c12027d7da6eda54e60554", "c4ba1dc4", "407c5c29d5cd033f"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r0, 0x1) 24m16.161063702s ago: executing program 0 (id=783): timer_create(0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{r2, 0x3328}, {r1, 0x4236}], 0x2, 0x0, 0x0, 0x0) unshare(0x22020400) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 23m26.798458979s ago: executing program 33 (id=783): timer_create(0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{r2, 0x3328}, {r1, 0x4236}], 0x2, 0x0, 0x0, 0x0) unshare(0x22020400) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1m24.227609285s ago: executing program 2 (id=1027): r0 = getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x2251024, 0x0) 1m8.554352743s ago: executing program 2 (id=1030): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 56.412307118s ago: executing program 2 (id=1032): unshare(0x20000400) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/time_for_children\x00') ioctl$FS_IOC_ENABLE_VERITY(r0, 0xb703, 0x0) 48.066345987s ago: executing program 2 (id=1034): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r1, 0x20, &(0x7f00000007c0)={&(0x7f0000000800)=""/243, 0xfffffffffffffdb4, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000500)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 47.719995313s ago: executing program 3 (id=1035): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 42.401754107s ago: executing program 3 (id=1036): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000007e000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 27.348792255s ago: executing program 3 (id=1037): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x2}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 26.597315328s ago: executing program 2 (id=1038): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 17.733920215s ago: executing program 3 (id=1039): socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="ea77", 0x2}], 0x1}}], 0x1, 0x119e75c40673edef) 10.739092789s ago: executing program 2 (id=1040): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f00000fd000/0x2000)=nil, 0x2000, 0x2, 0x28012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) 7.207521222s ago: executing program 3 (id=1041): unshare(0x22020600) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=1042): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) capset(0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getpid() r5 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000a, 0x24011, r5, 0x0) setresgid(0x0, 0xee01, 0x0) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ftruncate(r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:64783' (ED25519) to the list of known hosts. syzkaller login: [ 489.785644][ T3194] cgroup: Unknown subsys name 'net' [ 490.283513][ T3194] cgroup: Unknown subsys name 'cpuset' [ 490.393601][ T3194] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 577.795893][ T3194] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 693.156274][ T3200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.491474][ T3200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.552654][ T3203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.045105][ T3203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.223575][ T3203] hsr_slave_0: entered promiscuous mode [ 707.302307][ T3203] hsr_slave_1: entered promiscuous mode [ 708.665129][ T3200] hsr_slave_0: entered promiscuous mode [ 708.716246][ T3200] hsr_slave_1: entered promiscuous mode [ 708.766915][ T3200] debugfs: 'hsr0' already exists in 'hsr' [ 708.771746][ T3200] Cannot create hsr debugfs directory [ 721.679320][ T3200] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 721.967065][ T3200] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 722.291633][ T3200] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 722.527085][ T3200] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 725.885924][ T3203] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 726.144005][ T3203] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 726.312029][ T3203] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 726.496387][ T3203] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 741.003651][ T3200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.923711][ T3203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.523433][ T3200] veth0_vlan: entered promiscuous mode [ 796.562762][ T3200] veth1_vlan: entered promiscuous mode [ 798.938339][ T3200] veth0_macvtap: entered promiscuous mode [ 800.120542][ T3200] veth1_macvtap: entered promiscuous mode [ 801.774484][ T3203] veth0_vlan: entered promiscuous mode [ 803.353693][ T3203] veth1_vlan: entered promiscuous mode [ 803.952141][ T3205] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.059110][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.061493][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.063020][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.934610][ T3203] veth0_macvtap: entered promiscuous mode [ 807.597024][ T3203] veth1_macvtap: entered promiscuous mode [ 809.803309][ T3200] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 810.285713][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.300438][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.302665][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.304118][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.285276][ T3834] ======================================================= [ 838.285276][ T3834] WARNING: The mand mount option has been deprecated and [ 838.285276][ T3834] and is ignored by this kernel. Remove the mand [ 838.285276][ T3834] option from the mount to silence this warning. [ 838.285276][ T3834] ======================================================= [ 838.311333][ T3834] tmpfs: Unknown parameter 'claimable 2513 [ 838.311333][ T3834] nr_slab_unreclaimable 26259 [ 838.311333][ T3834] nr_isolated_anon 0 [ 838.311333][ T3834] nr_isolated_file 0 [ 838.311333][ T3834] workingset_nodes 0 [ 838.311333][ T3834] workingset_refault_anon 0 [ 838.311333][ T3834] workingset_refault_file 0 [ 838.311333][ T3834] workingset_activate_anon 0 [ 838.311333][ T3834] workingset_activate_file 0 [ 838.311333][ T3834] workingset_restore_anon 0 [ 838.311333][ T3834] workingset_restore_file 0 [ 838.311333][ T3834] workingset_nodereclaim 0 [ 838.311333][ T3834] nr_anon_pages 2850 [ 838.311333][ T3834] nr_mapped 13666 [ 838.311333][ T3834] nr_file_pages 44668 [ 838.311333][ T3834] nr_dirty 25 [ 838.311333][ T3834] nr_writeback 0 [ 838.311333][ T3834] nr_shmem 2007 [ 838.311333][ T3834] nr_shmem_hugepages 0 [ 838.311333][ T3834] nr_shmem_pmdmapped 0 [ 838.311333][ T3834] nr_file_hugepages 0 [ 838.311333][ T3834] nr_file_pmdmapped 0 [ 838.311333][ T3834] nr_anon_transparent_hugepages 0 [ 838.311333][ T3834] nr_vmscan_write 0 [ 838.311333][ T3834] nr_vmscan_immediate_reclaim 0 [ 838.311333][ T3834] nr_dirtied 1434 [ 838.311333][ T3834] nr_written 1409 [ 838.311333][ T3834] nr_throttled_written 0 [ 838.311333][ T3834] nr_kernel_misc_reclaimable 0 [ 838.311333][ T3834] nr_foll_pin_acquired 0 [ 838.311333][ T3834] nr_foll_pin_released 0 [ 838.311333][ T3834] nr_kernel_stack 6040 [ 838.311333][ T3834] nr_page_table_pages 734 [ 838.311333][ T3834] nr_sec_page_table_pages 0 [ 838.311333][ T3834] nr_iommu_pages 0 [ 838.311333][ T3834] nr_swapcached 0 [ 838.311333][ T3834] pgpromote_success 0 [ 838.311333][ T3834] pgpromote_candidate 0 [ 838.311333][ T3834] pgpromote_candidate_nrl 0 [ 838.311333][ T3834] pgdemote_kswapd 0 [ 838.311333][ T3834] pgdemote_direct 0 [ 838.311333][ T3834] pgdemote_khugepaged 0 [ 838.311333][ T3834] pgdemote_proactive 0 [ 838.311333][ T3834] nr_hugetlb 0 [ 838.311333][ T3834] nr_balloon_pages 0 [ 838.356399][ T3834] futex_wake_op: syz.0.7 tries to shift op by -1; fix this program [ 844.115614][ T3837] dlm: non-version read from control device 0 [ 850.555914][ T3840] syz.0.8 uses obsolete (PF_INET,SOCK_PACKET) [ 899.291482][ T3881] ªªªªªª: renamed from vlan0 (while UP) [ 962.381754][ T3902] dvmrp1: entered allmulticast mode [ 987.996658][ T3917] fuse: Bad value for 'group_id' [ 987.999130][ T3917] fuse: Bad value for 'group_id' [ 1001.486570][ T3927] syzkaller0: entered promiscuous mode [ 1001.508813][ T3927] syzkaller0: entered allmulticast mode [ 1021.674615][ T3938] fuse: Bad value for 'group_id' [ 1021.676523][ T3938] fuse: Bad value for 'group_id' [ 1037.401369][ T3943] kvm [3943]: VCPU exit error -95 [ 1037.403939][ T3943] kvm [3943]: SEPC=0x0 SSTATUS=0x200004120 HSTATUS=0x2002001c0 [ 1037.405711][ T3943] kvm [3943]: SCAUSE=0x14 STVAL=0x0 HTVAL=0x0 HTINST=0x0 [ 1041.082758][ T3948] Zero length message leads to an empty skb [ 1054.660847][ T3755] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1055.747123][ T3755] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1055.762037][ T3755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.778899][ T3755] usb 2-1: Product: syz [ 1055.780887][ T3755] usb 2-1: Manufacturer: syz [ 1055.782482][ T3755] usb 2-1: SerialNumber: syz [ 1056.045634][ T3755] usb 2-1: config 0 descriptor?? [ 1060.842958][ T3755] usb 2-1: f81604_read: reg: 100e failed: -EPROTO [ 1061.809794][ T3755] usb 2-1: f81604_read: reg: 200f failed: -EPROTO [ 1062.112444][ T3057] usb 2-1: f81604_read: reg: 100f failed: -EPROTO [ 1062.136991][ T3057] usb 2-1: f81604_read: reg: 100f failed: -EPROTO [ 1062.172390][ T3057] usb 2-1: f81604_read: reg: 200f failed: -EPROTO [ 1062.403933][ T3755] usb 2-1: USB disconnect, device number 2 [ 1062.812453][ T3755] usb 2-1: f81604_read: reg: 100f failed: -ENODEV [ 1063.735548][ T3755] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 1065.271411][ T3967] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1079.323183][ T4005] futex_wake_op: syz.1.43 tries to shift op by -1; fix this program [ 1091.432674][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1091.653432][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1091.782287][ T10] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1091.784475][ T10] usb 2-1: config 0 has no interface number 0 [ 1092.236155][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1092.243130][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.244328][ T10] usb 2-1: Product: syz [ 1092.245165][ T10] usb 2-1: Manufacturer: syz [ 1092.246453][ T10] usb 2-1: SerialNumber: syz [ 1092.380078][ T10] usb 2-1: config 0 descriptor?? [ 1094.362422][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1094.365641][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1097.196822][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1097.302837][ T10] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1098.143918][ T10] usb 2-1: USB disconnect, device number 3 [ 1101.134611][ T4033] futex_wake_op: syz.0.50 tries to shift op by -1; fix this program [ 1132.460787][ T4053] netlink: 'syz.0.59': attribute type 1 has an invalid length. [ 1133.284998][ T4055] netlink: 52 bytes leftover after parsing attributes in process `syz.0.59'. [ 1134.171077][ T4067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.59'. [ 1136.676057][ T4067] bond1 (unregistering): Released all slaves [ 1155.670712][ T3965] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1156.031633][ T3965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1156.035493][ T3965] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1156.038836][ T3965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.404135][ T3965] usb 2-1: config 0 descriptor?? [ 1156.477147][ T4135] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1158.872450][ T3965] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 1158.874313][ T3965] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 1158.876197][ T3965] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 1158.881146][ T3965] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 1158.884555][ T3965] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 1158.885933][ T3965] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 1158.889542][ T3965] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 1158.893362][ T3965] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 1158.896621][ T3965] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 1158.898700][ T3965] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 1159.264501][ T3965] logitech-djreceiver 0003:046D:C71F.0001: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.1-1/input0 [ 1159.710319][ T3965] usb 2-1: USB disconnect, device number 4 [ 1168.726793][ T4160] netlink: 'syz.0.67': attribute type 1 has an invalid length. [ 1169.836793][ T4173] netlink: 52 bytes leftover after parsing attributes in process `syz.0.67'. [ 1171.004615][ T4184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.67'. [ 1173.961626][ T4184] bond1 (unregistering): Released all slaves [ 1179.207094][ T4223] syzkaller0: entered promiscuous mode [ 1179.251583][ T4223] syzkaller0: entered allmulticast mode [ 1196.253997][ T3196] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1196.499643][ T3196] usb 1-1: Using ep0 maxpacket: 32 [ 1196.664012][ T3196] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1196.721229][ T3196] usb 1-1: config 8 has an invalid interface number: 180 but max is 0 [ 1196.723543][ T3196] usb 1-1: config 8 has no interface number 0 [ 1196.920535][ T3196] usb 1-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=98.9a [ 1196.923070][ T3196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.925041][ T3196] usb 1-1: Product: syz [ 1196.926576][ T3196] usb 1-1: Manufacturer: syz [ 1196.949443][ T3196] usb 1-1: SerialNumber: syz [ 1199.541434][ T3196] usb 1-1: unsupported MDLM descriptors [ 1199.738721][ T3196] usb 1-1: USB disconnect, device number 2 [ 1228.222692][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1228.500372][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1228.754160][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.756866][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1228.780637][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1228.782918][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 1228.785053][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1228.802452][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1228.804755][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1228.993316][ T10] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1228.994802][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.996190][ T10] usb 2-1: Product: syz [ 1228.997074][ T10] usb 2-1: Manufacturer: syz [ 1229.011702][ T10] usb 2-1: SerialNumber: syz [ 1229.209293][ T10] usb 2-1: config 0 descriptor?? [ 1229.352960][ T4283] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1229.555188][ T10] ati_remote 2-1:0.0: Initializing ati_remote hardware failed. [ 1229.587117][ T10] ati_remote 2-1:0.0: probe with driver ati_remote failed with error -5 [ 1230.984898][ T3711] usb 2-1: USB disconnect, device number 5 [ 1339.151327][ T3711] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1339.663026][ T3711] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1339.666374][ T3711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1339.681781][ T3711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1339.684279][ T3711] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1339.734038][ T3711] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1339.736697][ T3711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.065498][ T3711] usb 2-1: config 0 descriptor?? [ 1342.420177][ T3711] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 1342.865159][ T3711] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1343.043090][ T3711] usb 2-1: USB disconnect, device number 6 [ 1343.283632][ T4376] fuse: Bad value for 'rootmode' [ 1373.526308][ T4400] fuse: Bad value for 'rootmode' [ 1444.576930][ T806] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1445.106512][ T806] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1445.111332][ T806] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1445.117012][ T806] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1445.950783][ T806] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1445.952399][ T806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1445.953619][ T806] usb 2-1: Product: syz [ 1445.954679][ T806] usb 2-1: Manufacturer: syz [ 1445.955731][ T806] usb 2-1: SerialNumber: syz [ 1447.492629][ T4452] syzkaller0: entered promiscuous mode [ 1447.494798][ T4452] syzkaller0: entered allmulticast mode [ 1448.635251][ T806] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1451.064038][ T4024] usb 2-1: USB disconnect, device number 7 [ 1451.622622][ T4024] usblp0: removed [ 1499.421864][ T806] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1500.097183][ T806] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1500.103980][ T806] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1500.124670][ T806] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1500.625793][ T806] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1500.652817][ T806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1500.656690][ T806] usb 2-1: Product: syz [ 1500.664250][ T806] usb 2-1: Manufacturer: syz [ 1500.667096][ T806] usb 2-1: SerialNumber: syz [ 1502.136467][ T806] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1505.076926][ T29] usb 2-1: USB disconnect, device number 8 [ 1505.726291][ T29] usblp0: removed [ 1547.243777][ T4519] binfmt_misc: register: failed to install interpreter file ./file0 [ 1576.423771][ C0] vcan0: j1939_tp_rxtimer: 0xffffaf80225b2400: rx timeout, send abort [ 1576.686868][ T4526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.139'. [ 1576.933180][ C0] vcan0: j1939_tp_rxtimer: 0xffffaf80225b2400: abort rx timeout. Force session deactivation [ 1576.951977][ C0] vcan0: j1939_tp_rxtimer: 0xffffaf80225b2c00: rx timeout, send abort [ 1577.456800][ C0] vcan0: j1939_tp_rxtimer: 0xffffaf80225b2c00: abort rx timeout. Force session deactivation [ 1607.034583][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1607.450629][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1609.533251][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1609.756579][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1609.776639][ T10] usb 1-1: can't read configurations, error -71 [ 1636.714396][ T806] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1637.510964][ T806] usb 2-1: Using ep0 maxpacket: 16 [ 1637.771929][ T806] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1637.781286][ T806] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1637.784461][ T806] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1637.794578][ T806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.263941][ T806] usb 2-1: config 0 descriptor?? [ 1642.864489][ T806] hid_parser_main: 448 callbacks suppressed [ 1642.865435][ T806] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 1642.906789][ T806] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 1642.924405][ T806] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 1642.940951][ T806] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 1642.945149][ T806] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 1643.232872][ T806] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1643.241331][ C0] usb 2-1: input irq status -75 received [ 1644.463896][ T806] usb 2-1: USB disconnect, device number 9 [ 1660.353989][ T4582] syzkaller0: entered promiscuous mode [ 1660.399434][ T4582] syzkaller0: entered allmulticast mode [ 1661.902162][ T806] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1662.740870][ T806] usb 2-1: Using ep0 maxpacket: 32 [ 1664.399766][ T806] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1664.435623][ T806] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1664.468950][ T806] usb 2-1: can't read configurations, error -71 [ 1679.016904][ T4601] binder: BINDER_SET_CONTEXT_MGR already set [ 1679.070846][ T4601] binder: 4600:4601 ioctl 4018620d 200000004a80 returned -16 [ 1697.481989][ T3771] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1697.795977][ T3771] usb 2-1: Using ep0 maxpacket: 32 [ 1698.093200][ T3771] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1698.111116][ T3771] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1698.115823][ T3771] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 106, changing to 10 [ 1698.164497][ T3771] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 42299, setting to 1024 [ 1698.190608][ T3771] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1698.195997][ T3771] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1698.466138][ T3771] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1698.495868][ T3771] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1698.516511][ T3771] usb 2-1: Product: syz [ 1698.520845][ T3771] usb 2-1: Manufacturer: syz [ 1698.523254][ T3771] usb 2-1: SerialNumber: syz [ 1698.960797][ T3771] usb 2-1: config 0 descriptor?? [ 1699.094040][ T4613] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1699.354932][ T3771] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1699.595580][ T3771] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1704.892196][ T806] usb 2-1: USB disconnect, device number 12 [ 1706.096377][ T806] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1723.185492][ T4634] syzkaller0: entered promiscuous mode [ 1723.239628][ T4634] syzkaller0: entered allmulticast mode [ 1723.784116][ T4578] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1724.125912][ T4578] usb 1-1: Using ep0 maxpacket: 32 [ 1726.015992][ T4578] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1726.043435][ T4578] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1726.046168][ T4578] usb 1-1: can't read configurations, error -71 [ 1754.394461][ T4523] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1755.321205][ T4523] usb 1-1: config 8 has an invalid interface number: 7 but max is 0 [ 1755.324584][ T4523] usb 1-1: config 8 has no interface number 0 [ 1755.372022][ T4523] usb 1-1: config 8 interface 7 has no altsetting 0 [ 1755.706810][ T4523] usb 1-1: New USB device found, idVendor=1614, idProduct=0800, bcdDevice=9a.6e [ 1755.714753][ T4523] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1755.728490][ T4523] usb 1-1: Product: syz [ 1755.730991][ T4523] usb 1-1: Manufacturer: syz [ 1755.733455][ T4523] usb 1-1: SerialNumber: syz [ 1759.136269][ T4523] hub 1-1:8.7: bad descriptor, ignoring hub [ 1759.160449][ T4523] hub 1-1:8.7: probe with driver hub failed with error -5 [ 1759.401010][ T4523] option 1-1:8.7: GSM modem (1-port) converter detected [ 1759.972403][ T4523] usb 1-1: USB disconnect, device number 7 [ 1760.556392][ T4523] option 1-1:8.7: device disconnected [ 1763.424429][ T4661] syzkaller0: entered promiscuous mode [ 1763.465196][ T4661] syzkaller0: entered allmulticast mode [ 1781.496069][ T4688] netlink: 'syz.1.162': attribute type 10 has an invalid length. [ 1781.515348][ T4688] veth0_macvtap: entered allmulticast mode [ 1834.183546][ T3771] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 1834.810714][ T3771] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1834.814437][ T3771] usb 2-1: config 0 has no interface number 0 [ 1834.850219][ T3771] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1834.855281][ T3771] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1834.910290][ T3771] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1834.915403][ T3771] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1834.959463][ T3771] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1834.963243][ T3771] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1835.602712][ T3771] usb 2-1: config 0 descriptor?? [ 1839.763745][ T3771] uclogic 0003:145F:0212.0004: failed retrieving string descriptor #100: -71 [ 1839.795025][ T3771] uclogic 0003:145F:0212.0004: failed retrieving pen parameters: -71 [ 1839.815513][ T3771] uclogic 0003:145F:0212.0004: pen probing failed: -71 [ 1839.833116][ T3771] uclogic 0003:145F:0212.0004: failed probing parameters: -71 [ 1839.861551][ T3771] uclogic 0003:145F:0212.0004: probe with driver uclogic failed with error -71 [ 1840.645869][ T3771] usb 2-1: USB disconnect, device number 13 [ 1843.373838][ T4709] syzkaller0: entered promiscuous mode [ 1843.376312][ T4709] syzkaller0: entered allmulticast mode [ 1884.945350][ T4751] syzkaller0: entered promiscuous mode [ 1884.965586][ T4751] syzkaller0: entered allmulticast mode [ 1927.761830][ T4773] syzkaller0: entered promiscuous mode [ 1927.775325][ T4773] syzkaller0: entered allmulticast mode [ 1941.811650][ T4578] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1942.132455][ T4578] usb 1-1: Using ep0 maxpacket: 16 [ 1942.445782][ T4578] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1942.464501][ T4578] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1942.931187][ T4578] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1942.935850][ T4578] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1943.003871][ T4578] usb 1-1: Product: syz [ 1943.006846][ T4578] usb 1-1: Manufacturer: syz [ 1943.034158][ T4578] usb 1-1: SerialNumber: syz [ 1943.364618][ T4578] usb 1-1: config 0 descriptor?? [ 1958.645013][ T806] usb 1-1: USB disconnect, device number 8 [ 1985.961693][ T4420] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1986.484115][ T4420] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1986.521842][ T4420] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1986.539321][ T4420] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1986.930498][ T4420] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1986.936916][ T4420] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1986.989708][ T4420] usb 2-1: Product: syz [ 1986.993079][ T4420] usb 2-1: Manufacturer: syz [ 1986.996325][ T4420] usb 2-1: SerialNumber: syz [ 1988.573977][ T4420] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1989.191651][ T10] usb 2-1: USB disconnect, device number 14 [ 1989.975070][ T10] usblp0: removed [ 2028.412486][ T29] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 2029.020431][ T29] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2029.024533][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2029.496253][ T29] usb 1-1: config 0 descriptor?? [ 2032.122486][ T29] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2033.274334][ T29] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 2033.276914][ T29] [drm] Initialized udl on minor 2 [ 2033.615890][ T29] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 2033.695768][ T29] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 2034.170676][ T29] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2034.376799][ T29] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2034.513946][ T29] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 2034.640817][ T4420] usb 1-1: USB disconnect, device number 9 [ 2038.920536][ T4578] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 2040.314235][ T4578] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2040.366876][ T4578] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2040.374936][ T4578] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2040.876026][ T4578] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2040.899086][ T4578] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2040.902888][ T4578] usb 2-1: Product: syz [ 2040.919557][ T4578] usb 2-1: Manufacturer: syz [ 2040.922572][ T4578] usb 2-1: SerialNumber: syz [ 2042.950093][ T4578] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2043.536868][ T4523] usb 2-1: USB disconnect, device number 15 [ 2044.356050][ T4523] usblp0: removed [ 2078.882342][ T4024] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 2079.662093][ T4024] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2079.664742][ T4024] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2079.666991][ T4024] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2080.051005][ T4024] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2080.066227][ T4024] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2080.074313][ T4024] usb 1-1: Product: syz [ 2080.119487][ T4024] usb 1-1: Manufacturer: syz [ 2080.142315][ T4024] usb 1-1: SerialNumber: syz [ 2082.093221][ T4024] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2082.805179][ T4024] usb 1-1: USB disconnect, device number 10 [ 2083.396738][ T4024] usblp0: removed [ 2096.326396][ T4925] netlink: 'syz.1.203': attribute type 1 has an invalid length. [ 2098.213367][ T4926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.203'. [ 2127.543240][ T4531] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 2128.294895][ T4531] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2128.324066][ T4531] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2128.355486][ T4531] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2128.703896][ T4531] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2128.739891][ T4531] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2128.744150][ T4531] usb 2-1: Product: syz [ 2128.746758][ T4531] usb 2-1: Manufacturer: syz [ 2128.773521][ T4531] usb 2-1: SerialNumber: syz [ 2130.975064][ T4531] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2131.742947][ T4531] usb 2-1: USB disconnect, device number 16 [ 2132.412702][ T4531] usblp0: removed [ 2141.844745][ T4991] netlink: 'syz.0.210': attribute type 1 has an invalid length. [ 2143.456641][ T4993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.210'. [ 2150.292212][ T4993] bond1 (unregistering): Released all slaves [ 2168.814782][ T5064] syzkaller0: entered promiscuous mode [ 2168.842745][ T5064] syzkaller0: entered allmulticast mode [ 2192.326944][ T5078] netlink: 'syz.1.217': attribute type 1 has an invalid length. [ 2193.746849][ T5081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'. [ 2201.216696][ T5081] bond2 (unregistering): Released all slaves [ 2262.361242][ T5171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.230'. [ 2262.365298][ T5171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.230'. [ 2262.469995][ T5171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.230'. [ 2262.473616][ T5171] netlink: 16 bytes leftover after parsing attributes in process `syz.0.230'. [ 2301.070051][ T4024] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 2301.410574][ T4024] usb 1-1: Using ep0 maxpacket: 8 [ 2301.562809][ T4024] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2301.583605][ T4024] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2301.865830][ T4024] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 2301.873330][ T4024] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2301.879875][ T4024] usb 1-1: Product: syz [ 2301.883793][ T4024] usb 1-1: Manufacturer: syz [ 2301.886514][ T4024] usb 1-1: SerialNumber: syz [ 2302.364762][ T4024] usb 1-1: config 0 descriptor?? [ 2304.547208][ T3711] usb 1-1: USB disconnect, device number 11 [ 2349.006331][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2351.542221][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2354.856569][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2357.045216][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2378.182223][ T61] dvmrp1 (unregistering): left allmulticast mode [ 2382.172507][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2382.790416][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2383.409980][ T61] bond0 (unregistering): Released all slaves [ 2384.340147][ T61] bond1 (unregistering): Released all slaves [ 2388.743588][ T61] hsr_slave_0: left promiscuous mode [ 2388.922266][ T61] hsr_slave_1: left promiscuous mode [ 2390.035802][ T61] veth1_macvtap: left promiscuous mode [ 2390.072664][ T61] veth1_vlan: left promiscuous mode [ 2390.091285][ T61] veth0_vlan: left promiscuous mode [ 2450.794325][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 2451.233469][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2451.279195][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2451.282217][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2451.643156][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2451.644638][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2451.646138][ T10] usb 1-1: Product: syz [ 2451.663634][ T10] usb 1-1: Manufacturer: syz [ 2451.664969][ T10] usb 1-1: SerialNumber: syz [ 2453.243065][ T10] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2453.661983][ T10] usb 1-1: USB disconnect, device number 12 [ 2454.142997][ T10] usblp0: removed [ 2504.145575][ T5235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2504.677118][ T5235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2514.792259][ T5193] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 2515.602314][ T5193] usb 1-1: device descriptor read/64, error -71 [ 2515.984581][ T5193] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 2516.625684][ T5193] usb 1-1: device descriptor read/64, error -71 [ 2516.798591][ T5193] usb usb1-port1: attempt power cycle [ 2517.504681][ T5193] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 2517.615765][ T5193] usb 1-1: device descriptor read/8, error -71 [ 2518.022483][ T5193] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 2518.129839][ T5193] usb 1-1: device descriptor read/8, error -71 [ 2518.285130][ T5193] usb usb1-port1: unable to enumerate USB device [ 2542.059316][ T5496] kernel read not supported for file /file1 (pid: 5496 comm: syz.0.267) [ 2542.193979][ T31] audit: type=1800 audit(2540.990:2): pid=5496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.267" name="file1" dev="mqueue" ino=6321 res=0 errno=0 [ 2542.382393][ T5235] hsr_slave_0: entered promiscuous mode [ 2542.519838][ T5235] hsr_slave_1: entered promiscuous mode [ 2543.129814][ T31] audit: type=1804 audit(2541.990:3): pid=5496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.267" name="file1" dev="mqueue" ino=6321 res=1 errno=0 [ 2563.430671][ T3196] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2563.764179][ T3196] usb 1-1: device descriptor read/64, error -71 [ 2564.185111][ T3196] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 2564.463458][ T3196] usb 1-1: device descriptor read/64, error -71 [ 2564.631004][ T3196] usb usb1-port1: attempt power cycle [ 2565.290775][ T3196] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 2565.604314][ T3196] usb 1-1: device descriptor read/8, error -71 [ 2566.002201][ T3196] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 2566.071618][ T3196] usb 1-1: device descriptor read/8, error -71 [ 2566.250512][ T3196] usb usb1-port1: unable to enumerate USB device [ 2567.794929][ T5235] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2568.475475][ T5235] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2569.072189][ T5235] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2569.872421][ T5235] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2606.240352][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2617.601061][ T4024] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2618.100514][ T4024] usb 1-1: device descriptor read/64, error -71 [ 2618.536017][ T4024] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 2618.864012][ T4024] usb 1-1: device descriptor read/64, error -71 [ 2618.992555][ T4024] usb usb1-port1: attempt power cycle [ 2619.994385][ T4024] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 2620.144031][ T4024] usb 1-1: device descriptor read/8, error -71 [ 2620.484612][ T4024] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2620.636938][ T4024] usb 1-1: device descriptor read/8, error -71 [ 2620.835297][ T4024] usb usb1-port1: unable to enumerate USB device [ 2660.451428][ T4420] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2661.272033][ T4420] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2661.275010][ T4420] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2661.312091][ T4420] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2661.662952][ T4420] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2661.666018][ T4420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2661.689154][ T4420] usb 1-1: Product: syz [ 2661.691653][ T4420] usb 1-1: Manufacturer: syz [ 2661.693678][ T4420] usb 1-1: SerialNumber: syz [ 2664.135957][ T4420] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2664.666543][ T4420] usb 1-1: USB disconnect, device number 25 [ 2665.249302][ T4420] usblp0: removed [ 2684.002795][ T4024] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2684.330809][ T4024] usb 1-1: device descriptor read/64, error -71 [ 2684.695028][ T4024] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 2685.254487][ T4024] usb 1-1: device descriptor read/64, error -71 [ 2685.402337][ T4024] usb usb1-port1: attempt power cycle [ 2686.062066][ T4024] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2686.181284][ T4024] usb 1-1: device descriptor read/8, error -71 [ 2686.542262][ T4024] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 2686.620644][ T4024] usb 1-1: device descriptor read/8, error -71 [ 2686.792637][ T4024] usb usb1-port1: unable to enumerate USB device [ 2740.046822][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 2740.543215][ T10] usb 1-1: no configurations [ 2740.545472][ T10] usb 1-1: can't read configurations, error -22 [ 2740.930468][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 2741.795950][ T10] usb 1-1: no configurations [ 2741.813226][ T10] usb 1-1: can't read configurations, error -22 [ 2741.933684][ T10] usb usb1-port1: attempt power cycle [ 2742.833334][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 2743.092468][ T10] usb 1-1: no configurations [ 2743.094747][ T10] usb 1-1: can't read configurations, error -22 [ 2743.734090][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 2743.904780][ T10] usb 1-1: no configurations [ 2743.907026][ T10] usb 1-1: can't read configurations, error -22 [ 2743.981203][ T10] usb usb1-port1: unable to enumerate USB device [ 2745.252092][ T5235] veth0_vlan: entered promiscuous mode [ 2746.514728][ T5235] veth1_vlan: entered promiscuous mode [ 2751.434963][ T5235] veth0_macvtap: entered promiscuous mode [ 2753.243249][ T5235] veth1_macvtap: entered promiscuous mode [ 2757.935429][ T4630] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2757.969008][ T4630] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2758.154424][ T3205] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2758.461247][ T3205] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2769.843592][ T5739] kernel read not supported for file /file1 (pid: 5739 comm: syz.0.283) [ 2769.924313][ T31] audit: type=1800 audit(2768.790:4): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.283" name="file1" dev="mqueue" ino=6321 res=0 errno=0 [ 2811.665108][ T31] audit: type=1804 audit(2810.510:5): pid=5753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.289" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="hugetlbfs" ino=6091 res=1 errno=0 [ 2812.306667][ T31] audit: type=1804 audit(2811.190:6): pid=5753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.289" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="hugetlbfs" ino=6091 res=1 errno=0 [ 2832.755884][ T5763] deleting an unspecified loop device is not supported. [ 2866.573585][ T5652] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 2866.936148][ T5652] usb 1-1: no configurations [ 2866.955091][ T5652] usb 1-1: can't read configurations, error -22 [ 2867.220625][ T5652] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 2867.943770][ T5652] usb 1-1: no configurations [ 2867.946154][ T5652] usb 1-1: can't read configurations, error -22 [ 2867.994777][ T5652] usb usb1-port1: attempt power cycle [ 2868.623522][ T5652] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2868.785247][ T5652] usb 1-1: no configurations [ 2868.809423][ T5652] usb 1-1: can't read configurations, error -22 [ 2869.075178][ T5652] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2869.292512][ T5652] usb 1-1: no configurations [ 2869.294454][ T5652] usb 1-1: can't read configurations, error -22 [ 2869.343614][ T5652] usb usb1-port1: unable to enumerate USB device [ 2908.663619][ T5652] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2909.414374][ T5652] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2909.440622][ T5652] usb 1-1: config 0 has no interfaces? [ 2909.772294][ T5652] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 2909.776578][ T5652] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2909.807033][ T5652] usb 1-1: Product: syz [ 2909.821523][ T5652] usb 1-1: Manufacturer: syz [ 2909.823534][ T5652] usb 1-1: SerialNumber: syz [ 2910.444891][ T5652] usb 1-1: config 0 descriptor?? [ 2914.532560][ T5811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2914.757269][ T5811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2922.580809][ T5652] usb 1-1: USB disconnect, device number 38 [ 2939.965795][ T5826] syzkaller0: entered promiscuous mode [ 2939.994242][ T5826] syzkaller0: entered allmulticast mode [ 2950.642797][ T5843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2950.747410][ T5843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2960.120199][ T4977] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 2960.743105][ T4977] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2960.745612][ T4977] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2960.781844][ T4977] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2961.092192][ T4977] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2961.094927][ T4977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2961.096856][ T4977] usb 1-1: Product: syz [ 2961.121106][ T4977] usb 1-1: Manufacturer: syz [ 2961.122720][ T4977] usb 1-1: SerialNumber: syz [ 2963.761583][ T4977] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2964.015364][ T4977] usb 1-1: USB disconnect, device number 39 [ 2964.415016][ T4977] usblp0: removed [ 2980.121511][ T5882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2980.181144][ T5882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2980.595764][ T5877] syzkaller0: entered promiscuous mode [ 2980.621903][ T5877] syzkaller0: entered allmulticast mode [ 2991.772326][ T4024] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 2992.254093][ T4024] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2992.271217][ T4024] usb 1-1: config 0 has no interfaces? [ 2992.566324][ T4024] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 2992.575867][ T4024] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2992.599994][ T4024] usb 1-1: Product: syz [ 2992.602765][ T4024] usb 1-1: Manufacturer: syz [ 2992.605003][ T4024] usb 1-1: SerialNumber: syz [ 2992.947020][ T4024] usb 1-1: config 0 descriptor?? [ 3007.536761][ T3711] usb 1-1: USB disconnect, device number 40 [ 3011.910858][ T5915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3011.991918][ T5915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3013.942981][ T5914] syzkaller0: entered promiscuous mode [ 3013.945202][ T5914] syzkaller0: entered allmulticast mode [ 3032.880393][ T4420] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 3033.460665][ T4420] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3033.463614][ T4420] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3033.695976][ T4420] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 3033.709167][ T4420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3033.711580][ T4420] usb 1-1: Product: syz [ 3033.713538][ T4420] usb 1-1: Manufacturer: syz [ 3033.715186][ T4420] usb 1-1: SerialNumber: syz [ 3034.060881][ T4420] usb 1-1: config 0 descriptor?? [ 3049.736818][ T10] usb 1-1: USB disconnect, device number 41 [ 3052.760170][ T5948] ptrace attach of "/syz-executor exec"[5235] was attempted by "/syz-executor exec"[5948] [ 3131.563817][ T5952] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 3132.055787][ T5952] usb 1-1: Using ep0 maxpacket: 8 [ 3132.241885][ T5952] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3132.244419][ T5952] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 3132.246457][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 3132.262725][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 3132.266118][ T5952] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3132.695572][ T5952] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 3132.745001][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3132.758700][ T5952] usb 1-1: Product: syz [ 3132.760957][ T5952] usb 1-1: Manufacturer: syz [ 3132.763017][ T5952] usb 1-1: SerialNumber: syz [ 3133.080402][ T5952] usb 1-1: config 0 descriptor?? [ 3133.570182][ T5992] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3133.880848][ T5952] ati_remote 1-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 3136.110168][ T5952] usb 1-1: USB disconnect, device number 42 [ 3168.901904][ T5950] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 3169.279578][ T5950] usb 1-1: Using ep0 maxpacket: 8 [ 3169.481954][ T5950] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3169.486157][ T5950] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 3169.511145][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 3169.515316][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 3169.530493][ T5950] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3169.909709][ T5950] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 3169.911793][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3169.913742][ T5950] usb 1-1: Product: syz [ 3169.915337][ T5950] usb 1-1: Manufacturer: syz [ 3169.916994][ T5950] usb 1-1: SerialNumber: syz [ 3170.270621][ T5950] usb 1-1: config 0 descriptor?? [ 3170.359598][ T6020] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3170.806265][ T5950] ati_remote 1-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 3172.270757][ T5952] usb 1-1: USB disconnect, device number 43 [ 3209.930638][ T6046] tmpfs: Bad value for 'mpol' [ 3210.233382][ T6047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3210.360117][ T6047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3214.535595][ T6051] fuse: Bad value for 'fd' [ 3223.308507][ T6057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3223.453036][ T6057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3223.928535][ T6060] netlink: 24 bytes leftover after parsing attributes in process `syz.0.362'. [ 3240.145125][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'. [ 3245.461445][ T6069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3245.514299][ T6069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3286.033548][ T3196] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 3286.290923][ T3196] usb 1-1: device descriptor read/64, error -71 [ 3286.850136][ T3196] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 3287.082924][ T3196] usb 1-1: device descriptor read/64, error -71 [ 3287.214115][ T3196] usb usb1-port1: attempt power cycle [ 3287.761786][ T3196] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 3287.883965][ T3196] usb 1-1: device descriptor read/8, error -71 [ 3288.305023][ T3196] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 3288.386689][ T3196] usb 1-1: device descriptor read/8, error -71 [ 3288.533863][ T3196] usb usb1-port1: unable to enumerate USB device [ 3339.247188][ T6106] ªªªªªª: renamed from vlan0 (while UP) [ 3349.089404][ T4420] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 3349.092026][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 3349.336651][ T4420] usb 1-1: device descriptor read/64, error -32 [ 3349.686332][ T4420] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 3351.786660][ T4420] usb 1-1: config 0 has no interfaces? [ 3352.167884][ T4420] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 3352.169232][ T4420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 3352.188088][ T4420] usb 1-1: Product: syz [ 3352.189179][ T4420] usb 1-1: Manufacturer: syz [ 3352.190189][ T4420] usb 1-1: SerialNumber: syz [ 3353.122234][ T4420] usb 1-1: config 0 descriptor?? [ 3354.850622][ T3711] usb 1-1: USB disconnect, device number 49 [ 3355.841182][ T6122] dlm: non-version read from control device 0 [ 3371.793384][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.379'. [ 3376.492523][ T6129] ªªªªªª: renamed from vlan0 (while UP) [ 3381.744636][ T31] audit: type=1326 audit(3380.570:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 3381.747078][ T31] audit: type=1326 audit(3380.620:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 3382.324904][ T31] audit: type=1326 audit(3381.210:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 3382.361673][ T31] audit: type=1326 audit(3381.240:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c00000f3 syscall=220 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 3382.678378][ T31] audit: type=1326 audit(3381.270:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 3384.938841][ T31] audit: type=1326 audit(3383.800:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 3384.955706][ T31] audit: type=1326 audit(3383.810:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c00000f3 syscall=222 compat=0 ip=0x7fffb8f3380c code=0x7ffc0000 [ 3385.033968][ T31] audit: type=1326 audit(3383.870:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c00000f3 syscall=226 compat=0 ip=0x7fffb8f33844 code=0x7ffc0000 [ 3385.055220][ T31] audit: type=1326 audit(3383.940:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c00000f3 syscall=135 compat=0 ip=0x7fffb8f1ad86 code=0x7ffc0000 [ 3385.071913][ T31] audit: type=1326 audit(3383.950:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c00000f3 syscall=435 compat=0 ip=0x7fffb8f3446c code=0x7ffc0000 [ 3387.660268][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 3387.661052][ T31] audit: type=1326 audit(3386.520:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 3387.703769][ T31] audit: type=1326 audit(3386.580:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 3387.748259][ T31] audit: type=1326 audit(3386.630:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c00000f3 syscall=211 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 3388.101850][ T31] audit: type=1326 audit(3386.930:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 3388.238935][ T31] audit: type=1326 audit(3387.110:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 3388.869036][ T31] audit: type=1326 audit(3387.570:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 3389.063927][ T31] audit: type=1326 audit(3387.920:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 3389.130223][ T31] audit: type=1326 audit(3388.000:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 3389.589115][ T31] audit: type=1326 audit(3388.230:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 3389.632638][ T31] audit: type=1326 audit(3388.060:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c00000f3 syscall=222 compat=0 ip=0x7fffb8f3380c code=0x7ffc0000 [ 3392.678474][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 3392.678856][ T31] audit: type=1326 audit(3391.560:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c00000f3 syscall=115 compat=0 ip=0x7fffb8f1df74 code=0x7ffc0000 [ 3394.190885][ T31] audit: type=1326 audit(3392.910:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c00000f3 syscall=436 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 3395.210233][ T31] audit: type=1326 audit(3394.010:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c00000f3 syscall=94 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 3409.065750][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'. [ 3417.116485][ T6165] dlm: non-version read from control device 0 [ 3439.713320][ T6177] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3439.719368][ T6177] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3439.721481][ T6177] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3439.723234][ T6177] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3439.725015][ T6177] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3439.726783][ T6177] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3439.728935][ T6177] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3439.730447][ T6177] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3439.731904][ T6177] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3439.733395][ T6177] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3444.718061][ T6177] net_ratelimit: 662 callbacks suppressed [ 3444.718700][ T6177] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3444.722381][ T6177] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3444.724943][ T6177] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3444.728759][ T6177] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3444.731431][ T6177] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3444.734003][ T6177] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3444.736460][ T6177] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3444.739804][ T6177] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3444.742333][ T6177] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3444.744849][ T6177] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3479.984963][ T6195] dlm: non-version read from control device 0 [ 3486.658336][ T6197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3486.705999][ T6197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3504.996823][ T6203] capability: warning: `syz.0.396' uses 32-bit capabilities (legacy support in use) [ 3534.803378][ T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 3534.892253][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 3535.183179][ T10] usb 1-1: device descriptor read/64, error -32 [ 3535.563791][ T10] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 3536.016559][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 3536.831241][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 3536.833694][ T10] usb 1-1: config 0 has no interface number 0 [ 3536.835971][ T10] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3536.872459][ T10] usb 1-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 3537.654329][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 3537.656426][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3537.702874][ T10] usb 1-1: Product: syz [ 3537.704525][ T10] usb 1-1: Manufacturer: syz [ 3537.705624][ T10] usb 1-1: SerialNumber: syz [ 3537.841514][ T10] usb 1-1: config 0 descriptor?? [ 3538.259782][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 3538.264667][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 3543.984213][ T6222] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 3545.165111][ T6222] syzkaller0: entered promiscuous mode [ 3545.215289][ T6222] syzkaller0: entered allmulticast mode [ 3549.396984][ T10] usb 1-1: USB disconnect, device number 51 [ 3564.220948][ T6245] netlink: 68 bytes leftover after parsing attributes in process `syz.2.404'. [ 3587.545705][ T6260] fuse: Bad value for 'group_id' [ 3587.546824][ T6260] fuse: Bad value for 'group_id' [ 3623.814892][ T6286] fuse: Bad value for 'group_id' [ 3623.816181][ T6286] fuse: Bad value for 'group_id' [ 3670.253179][ T31] audit: type=1326 audit(3669.050:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.0.421" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 3670.273841][ T31] audit: type=1326 audit(3669.130:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.0.421" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 3670.925583][ T31] audit: type=1326 audit(3669.810:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.0.421" exe="/syz-executor" sig=0 arch=c00000f3 syscall=283 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 3671.025567][ T31] audit: type=1326 audit(3669.810:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.0.421" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 3675.563563][ T6316] fuse: Bad value for 'group_id' [ 3675.566399][ T6316] fuse: Bad value for 'group_id' [ 3819.602159][ T6407] fuse: Bad value for 'fd' [ 3851.177078][ T6427] capability: warning: `syz.2.447' uses deprecated v2 capabilities in a way that may be insecure [ 3926.806722][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.462'. [ 3926.864438][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.462'. [ 4022.923442][ T6192] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 4023.365084][ T6192] usb 1-1: Using ep0 maxpacket: 32 [ 4023.919711][ T6192] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 4023.923107][ T6192] usb 1-1: config 0 has no interface number 0 [ 4024.296347][ T6192] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 4024.311750][ T6192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4024.314934][ T6192] usb 1-1: Product: syz [ 4024.317115][ T6192] usb 1-1: Manufacturer: syz [ 4024.326543][ T6192] usb 1-1: SerialNumber: syz [ 4024.721599][ T6192] usb 1-1: config 0 descriptor?? [ 4027.172635][ T6192] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 4027.200026][ T6192] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 4027.534343][ T6192] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 4027.565454][ T6192] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 4028.060547][ T6192] usb 1-1: USB disconnect, device number 52 [ 4068.075322][ T6576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4068.234838][ T6576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4072.503518][ T4977] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 4072.944582][ T4977] usb 1-1: Using ep0 maxpacket: 32 [ 4073.172004][ T4977] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 4073.175209][ T4977] usb 1-1: config 0 has no interface number 0 [ 4073.594016][ T4977] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 4073.639233][ T4977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4073.642968][ T4977] usb 1-1: Product: syz [ 4073.645655][ T4977] usb 1-1: Manufacturer: syz [ 4073.672009][ T4977] usb 1-1: SerialNumber: syz [ 4074.305935][ T4977] usb 1-1: config 0 descriptor?? [ 4078.222487][ T4977] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 4078.226909][ T4977] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 4079.014307][ T4977] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 4079.067009][ T4977] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 4079.701198][ T4977] usb 1-1: USB disconnect, device number 53 [ 4280.622231][ T6688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.517'. [ 4285.536628][ T6690] netlink: 48 bytes leftover after parsing attributes in process `syz.2.518'. [ 4324.153354][ T6715] netlink: 20 bytes leftover after parsing attributes in process `syz.2.525'. [ 4354.119148][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.531'. [ 4377.162195][ T6746] syzkaller0: entered promiscuous mode [ 4377.164511][ T6746] syzkaller0: entered allmulticast mode [ 4386.941194][ T6753] syzkaller0: entered promiscuous mode [ 4386.942833][ T6753] syzkaller0: entered allmulticast mode [ 4540.120656][ T6834] netlink: 44 bytes leftover after parsing attributes in process `syz.2.563'. [ 4630.059403][ T6873] fuse: Bad value for 'fd' [ 4637.674055][ T6876] netlink: 40 bytes leftover after parsing attributes in process `syz.2.581'. [ 4698.555398][ T6898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.591'. [ 4698.685877][ T6898] netlink: 16 bytes leftover after parsing attributes in process `syz.2.591'. [ 4740.211279][ T31] audit: type=1326 audit(4739.000:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.2.598" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8f933992 code=0x7ffc0000 [ 4740.345719][ T31] audit: type=1326 audit(4739.220:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.2.598" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8f933992 code=0x7ffc0000 [ 4741.027038][ T31] audit: type=1326 audit(4739.910:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.2.598" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8f933992 code=0x7ffc0000 [ 4741.090661][ T31] audit: type=1326 audit(4739.960:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.2.598" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8f933992 code=0x7ffc0000 [ 4741.134798][ T31] audit: type=1326 audit(4739.930:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.2.598" exe="/syz-executor" sig=0 arch=c00000f3 syscall=172 compat=0 ip=0x7fff8f933992 code=0x7ffc0000 [ 4741.163844][ T31] audit: type=1326 audit(4739.970:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.2.598" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8f933992 code=0x7ffc0000 [ 4741.219476][ T31] audit: type=1326 audit(4740.070:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.2.598" exe="/syz-executor" sig=0 arch=c00000f3 syscall=121 compat=0 ip=0x7fff8f933992 code=0x7ffc0000 [ 4741.224473][ T31] audit: type=1326 audit(4740.100:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.2.598" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8f933992 code=0x7ffc0000 [ 4741.300074][ T31] audit: type=1326 audit(4740.130:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.2.598" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8f933992 code=0x7ffc0000 [ 4741.305162][ T31] audit: type=1326 audit(4740.160:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.2.598" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8f933992 code=0x7ffc0000 [ 4752.110050][ T6922] netlink: 'syz.2.600': attribute type 3 has an invalid length. [ 4752.112640][ T6922] netlink: 92 bytes leftover after parsing attributes in process `syz.2.600'. [ 4832.469916][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.618'. [ 4852.204422][ T6987] netlink: 44 bytes leftover after parsing attributes in process `syz.0.621'. [ 4868.257056][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.624'. [ 4899.734783][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.630'. [ 5010.843385][ T7064] ipvlan1: entered promiscuous mode [ 5010.846656][ T7064] ipvlan1: entered allmulticast mode [ 5010.903015][ T7064] veth0_vlan: entered allmulticast mode [ 5012.135550][ T7066] ipvlan1: left promiscuous mode [ 5070.890839][ T7098] fuse: Unknown parameter 'user_i00000000000000000000' [ 5114.665763][ T7121] xt_TPROXY: Can be used only with -p tcp or -p udp [ 5168.020422][ T7148] ptrace attach of "/syz-executor exec"[3200] was attempted by "/syz-executor exec"[7148] [ 5201.774203][ T7154] fuse: Unknown parameter 'user_id00000000000000000000' [ 5226.502818][ T7169] netlink: 'syz.0.683': attribute type 1 has an invalid length. [ 5235.950037][ T7172] gretap1: entered promiscuous mode [ 5236.612843][ T7172] bond1: (slave gretap1): making interface the new active one [ 5237.063640][ T7172] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 5247.504914][ T7214] fuse: Unknown parameter 'user_id00000000000000000000' [ 5413.525973][ T7282] netlink: 36 bytes leftover after parsing attributes in process `syz.0.711'. [ 5440.797207][ T7299] netlink: 36 bytes leftover after parsing attributes in process `syz.2.716'. [ 5450.442021][ T7302] ip6gre1: entered promiscuous mode [ 5450.444838][ T7302] ip6gre1: entered allmulticast mode [ 5470.494866][ T7319] netlink: 36 bytes leftover after parsing attributes in process `syz.0.723'. [ 5519.551544][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.727'. [ 5520.420903][ T7344] netlink: 36 bytes leftover after parsing attributes in process `syz.0.729'. [ 5529.953558][ T7346] netlink: 'syz.0.730': attribute type 1 has an invalid length. [ 5535.781141][ T7346] bond2: entered promiscuous mode [ 5535.841980][ T7346] 8021q: adding VLAN 0 to HW filter on device bond2 [ 5536.006449][ T7383] fuse: Unknown parameter '0x0000000000000003' [ 5538.465415][ T7353] 8021q: adding VLAN 0 to HW filter on device bond2 [ 5538.508212][ T7353] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 5538.511935][ T7353] bond2: (slave sit1): Setting fail_over_mac to active for active-backup mode [ 5539.355138][ T7353] bond2: (slave sit1): making interface the new active one [ 5539.356825][ T7353] sit1: entered promiscuous mode [ 5539.476335][ T7353] bond2: (slave sit1): Enslaving as an active interface with an up link [ 5558.931673][ T7398] netlink: 36 bytes leftover after parsing attributes in process `syz.0.734'. [ 5592.119874][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.739'. [ 5599.812547][ T7421] netlink: 36 bytes leftover after parsing attributes in process `syz.2.740'. [ 5609.070062][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.743'. [ 5609.575000][ T7429] fuse: Unknown parameter 'fd0x0000000000000003' [ 5624.354230][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'. [ 5625.591015][ T7443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.747'. [ 5652.913995][ T7461] netlink: 20 bytes leftover after parsing attributes in process `syz.0.754'. [ 5664.552549][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.756'. [ 5682.326170][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'. [ 5700.482732][ T7505] ipvlan1: entered allmulticast mode [ 5700.484789][ T7505] veth0_vlan: entered allmulticast mode [ 5715.084747][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 5715.085354][ T31] audit: type=1326 audit(5713.950:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7515 comm="syz.0.777" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 5715.120575][ T31] audit: type=1326 audit(5713.980:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7515 comm="syz.0.777" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 5715.349065][ T31] audit: type=1326 audit(5714.190:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7515 comm="syz.0.777" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 5715.353264][ T31] audit: type=1326 audit(5714.220:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7515 comm="syz.0.777" exe="/syz-executor" sig=0 arch=c00000f3 syscall=202 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 5715.406816][ T31] audit: type=1326 audit(5714.240:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7515 comm="syz.0.777" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 5715.426607][ T31] audit: type=1326 audit(5714.260:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7515 comm="syz.0.777" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 5715.463091][ T31] audit: type=1326 audit(5714.320:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7515 comm="syz.0.777" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 5715.470739][ T31] audit: type=1326 audit(5714.340:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7515 comm="syz.0.777" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 5715.530296][ T31] audit: type=1326 audit(5714.410:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7515 comm="syz.0.777" exe="/syz-executor" sig=0 arch=c00000f3 syscall=226 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 5715.557061][ T31] audit: type=1326 audit(5714.440:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7515 comm="syz.0.777" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb8f33992 code=0x7ffc0000 [ 5727.301140][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.780'. [ 5757.743617][ T7537] syzkaller0: entered promiscuous mode [ 5757.746047][ T7537] syzkaller0: entered allmulticast mode [ 5780.042101][ T7550] netlink: 'syz.2.790': attribute type 3 has an invalid length. [ 5790.745973][ T7554] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 5831.046347][ T7336] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5833.335453][ T7336] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5834.724205][ T7336] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5836.026634][ T7336] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5844.321622][ T7683] netlink: 60 bytes leftover after parsing attributes in process `syz.2.798'. [ 5847.536056][ T7336] bond2 (unregistering): (slave sit1): Releasing backup interface [ 5847.540735][ T7336] sit1 (unregistering): left promiscuous mode [ 5849.100402][ T7336] bond1 (unregistering): (slave gretap1): Releasing active interface [ 5850.790715][ T7336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5850.963995][ T7336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5851.152176][ T7336] bond0 (unregistering): Released all slaves [ 5851.424934][ T7336] bond1 (unregistering): Released all slaves [ 5852.015759][ T7336] bond2 (unregistering): Released all slaves [ 5855.029695][ T7336] hsr_slave_0: left promiscuous mode [ 5855.141478][ T7336] hsr_slave_1: left promiscuous mode [ 5855.835584][ T7336] veth1_macvtap: left promiscuous mode [ 5855.872979][ T7336] veth0_macvtap: left promiscuous mode [ 5855.896303][ T7336] veth1_vlan: left promiscuous mode [ 5855.919192][ T7336] veth0_vlan: left promiscuous mode [ 5877.714948][ T7705] netlink: 60 bytes leftover after parsing attributes in process `syz.2.802'. [ 5900.212619][ T7557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5900.584942][ T7557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5928.214706][ T7557] hsr_slave_0: entered promiscuous mode [ 5928.391598][ T7557] hsr_slave_1: entered promiscuous mode [ 5928.465425][ T7557] debugfs: 'hsr0' already exists in 'hsr' [ 5928.480815][ T7557] Cannot create hsr debugfs directory [ 5931.404763][ T7814] netlink: 40 bytes leftover after parsing attributes in process `syz.2.806'. [ 5954.564670][ T7557] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 5955.255001][ T7557] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 5955.893350][ T7557] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 5956.641659][ T7557] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 5989.234982][ T7922] netlink: 40 bytes leftover after parsing attributes in process `syz.2.810'. [ 5995.055492][ T7557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6086.506772][ T7991] ipvlan1: left allmulticast mode [ 6086.523550][ T7991] veth0_vlan: left allmulticast mode [ 6086.564274][ T7991] net_ratelimit: 214 callbacks suppressed [ 6086.565041][ T7991] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 6118.566681][ T7557] veth0_vlan: entered promiscuous mode [ 6119.575848][ T7557] veth1_vlan: entered promiscuous mode [ 6125.802783][ T7557] veth0_macvtap: entered promiscuous mode [ 6127.449578][ T7557] veth1_macvtap: entered promiscuous mode [ 6133.423677][ T7327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6133.475691][ T7327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6133.488383][ T7327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6133.490212][ T7327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6169.322502][ T8047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.825'. [ 6203.005742][ T8066] process 'syz.2.830' launched './file2' with NULL argv: empty string added [ 6232.475284][ T8079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.834'. [ 6259.959534][ T8091] fuse: Bad value for 'fd' [ 6289.791917][ T8106] netlink: 'syz.2.844': attribute type 1 has an invalid length. [ 6299.882484][ T8110] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 6304.821716][ T8112] Illegal XDP return value 4294967257 on prog (id 74) dev syz_tun, expect packet loss! [ 6317.685612][ T8117] syzkaller0: entered promiscuous mode [ 6317.704238][ T8117] syzkaller0: entered allmulticast mode [ 6399.706637][ T8161] netlink: 36 bytes leftover after parsing attributes in process `syz.2.860'. [ 6446.643165][ T8185] bond0: option mode: unable to set because the bond device has slaves [ 6466.116281][ T8194] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 6474.834999][ T8198] bond0: option mode: unable to set because the bond device has slaves [ 6828.637018][ T8391] netlink: 'syz.3.952': attribute type 1 has an invalid length. [ 6832.694518][ T8391] bond1: entered promiscuous mode [ 6832.725661][ T8391] 8021q: adding VLAN 0 to HW filter on device bond1 [ 6836.774503][ T8434] kvm [8434]: VCPU exit error -95 [ 6836.775977][ T8434] kvm [8434]: SEPC=0x0 SSTATUS=0x200004120 HSTATUS=0x2002001c0 [ 6836.790260][ T8434] kvm [8434]: SCAUSE=0x14 STVAL=0x0 HTVAL=0x0 HTINST=0x0 [ 6854.834299][ T8450] netlink: 'syz.3.958': attribute type 1 has an invalid length. [ 6878.100491][ T8468] netlink: 'syz.3.964': attribute type 1 has an invalid length. [ 7101.716175][ T8620] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1025'. [ 7103.052818][ T8620] ip6tnl2: entered allmulticast mode [ 7134.541571][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1031'. [ 7134.662864][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1031'. [ 7134.686642][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1031'. [ 7134.715479][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1031'. [ 7200.731403][ C1] ------------[ cut here ]------------ [ 7200.731830][ C1] kernel BUG at [] mm/page_table_check.c:118! [ 7200.733330][ C1] Kernel BUG [#1] [ 7200.733688][ C1] Modules linked in: [ 7200.735753][ C1] CPU: 1 UID: 0 PID: 8668 Comm: syz.3.1042 Tainted: G L syzkaller #0 PREEMPT [ 7200.736988][ C1] Tainted: [L]=SOFTLOCKUP [ 7200.737238][ C1] Hardware name: riscv-virtio,qemu (DT) [ 7200.737906][ C1] epc : page_table_check_set+0xa74/0xd30 [ 7200.738693][ C1] ra : page_table_check_set+0xa74/0xd30 [ 7200.739257][ C1] epc : ffffffff80c4d300 ra : ffffffff80c4d300 sp : ffff8f80008c60c0 [ 7200.739650][ C1] gp : ffffffff8a22a0c0 tp : ffffaf801bfd9a80 t0 : ffff8f80008c6d80 [ 7200.740048][ C1] t1 : fffff5ef027a16f5 t2 : 1ffff1f000118d4c s0 : ffff8f80008c6140 [ 7200.740449][ C1] s1 : 0000000000000001 a0 : 0000000000000001 a1 : 0000000000000000 [ 7200.740871][ C1] a2 : 0000000000080000 a3 : ffffffff80c4d300 a4 : ffff8f800861a000 [ 7200.741286][ C1] a5 : 0000000000080000 a6 : 0000000000000003 a7 : ffffaf8013d0b7ab [ 7200.741669][ C1] s2 : 00000000000bb57e s3 : 0000000000000000 s4 : ffffaf8013d0b760 [ 7200.742083][ C1] s5 : 0000000000000001 s6 : 0000000000000001 s7 : dfffffff00000000 [ 7200.742472][ C1] s8 : 0000000000007fff s9 : ffffffff88a44e80 s10: 0000000000000000 [ 7200.742852][ C1] s11: ffffffff8a347d80 t3 : 0000000000000001 t4 : fffff5ef027a16f5 [ 7200.743218][ C1] t5 : fffff5ef027a16f6 t6 : 0000000000000002 ssp : 0000000000000000 [ 7200.743600][ C1] status: 0000000200000120 badaddr: ffffffff80c4d300 cause: 0000000000000003 [ 7200.744125][ C1] [] page_table_check_set+0xa74/0xd30 [ 7200.745010][ C1] [] __page_table_check_ptes_set+0x264/0x47c [ 7200.745624][ C1] [] remove_migration_pte+0x1034/0x25bc [ 7200.746279][ C1] [] rmap_walk_anon+0x30e/0x690 [ 7200.747014][ C1] [] rmap_walk_locked+0xa6/0xcc [ 7200.747802][ C1] [] remove_migration_ptes+0x18a/0x1bc [ 7200.748422][ C1] [] __folio_split+0xeb4/0x16f8 [ 7200.749163][ C1] [] __split_huge_page_to_list_to_order+0x7e/0x140 [ 7200.750008][ C1] [] split_folio_to_list+0x22/0x30 [ 7200.750788][ C1] [] shrink_folio_list+0x2346/0x4d78 [ 7200.751503][ C1] [] reclaim_folio_list+0x106/0x8ec [ 7200.752165][ C1] [] reclaim_pages+0x33e/0x4b8 [ 7200.753015][ C1] [] madvise_cold_or_pageout_pte_range+0x16de/0x2408 [ 7200.753925][ C1] [] walk_pgd_range+0xcc6/0x1f84 [ 7200.754646][ C1] [] __walk_page_range+0x138/0x7a8 [ 7200.755375][ C1] [] walk_page_range_vma_unsafe+0x1ec/0x82c [ 7200.756145][ C1] [] walk_page_range_vma+0x5a/0x84 [ 7200.756938][ C1] [] madvise_pageout+0x236/0x794 [ 7200.757632][ C1] [] madvise_vma_behavior+0xeb2/0x2ae4 [ 7200.758298][ C1] [] madvise_walk_vmas+0x23a/0x978 [ 7200.758884][ C1] [] madvise_do_behavior+0x1ea/0x5c0 [ 7200.759467][ C1] [] do_madvise+0x18a/0x22c [ 7200.760066][ C1] [] __riscv_sys_madvise+0x88/0xdc [ 7200.760670][ C1] [] syscall_handler+0x92/0x114 [ 7200.761381][ C1] [] do_trap_ecall_u+0x402/0x680 [ 7200.762032][ C1] [] handle_exception+0x15e/0x16a [ 7200.763666][ C1] Code: e097 ff8c 80e7 11c0 81e3 e004 e097 ff8c 80e7 5f00 (9002) e097 [ 7200.765303][ C1] ---[ end trace 0000000000000000 ]--- [ 7200.767268][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 7200.768387][ C1] SMP: stopping secondary CPUs VM DIAGNOSIS: 17:38:03 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff800875b6 mhartid 0000000000000000 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000200000000 mip 0000000000000200 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f4b509 hedeleg 000000000000b10d mtvec 00000000800004f8 stvec ffffffff86459ff4 vstvec 0000000000000000 mepc ffffffff8643aaf2 sepc ffffffff802243b8 vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000001 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080049000 sscratch 0000000000000000 satp 907ee0000009e59f x0/zero 0000000000000000 x1/ra ffffffff800875b2 x2/sp ffff8f8000007e10 x3/gp ffffffff8a22a0c0 x4/tp ffffaf8019ebcf80 x5/t0 ffff8f8000000000 x6/t1 fffffffef1467930 x7/t2 ffffffff91601820 x8/s0 ffff8f8000007e40 x9/s1 ffffffff86a0cae8 x10/a0 0000000000000001 x11/a1 0000000000000004 x12/a2 0000000000000001 x13/a3 ffffffff800875b2 x14/a4 0000000000000000 x15/a5 ffffaf8019ebcf80 x16/a6 fffffffef1467931 x17/a7 0000000000000003 x18/s2 0000000000000000 x19/s3 ffffffff86863000 x20/s4 ffffffff800872fc x21/s5 ffffaf8011d19000 x22/s6 0000000000000000 x23/s7 0000000000000000 x24/s8 0000000000000007 x25/s9 ffffffff91601820 x26/s10 ffffffff86a6e1c0 x27/s11 0000000000000004 x28/t3 ffffffff87fb2860 x29/t4 fffffffef1467930 x30/t5 fffffffef1467931 x31/t6 ffffffff8687a840 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff80375ce4 mhartid 0000000000000001 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000022 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f4b509 hedeleg 000000000000b10d mtvec 00000000800004f8 stvec ffffffff86459ff4 vstvec 0000000000000000 mepc ffffffff80090f72 sepc ffffffff80c4d300 vsepc 0000000000000000 mcause 0000000000000009 scause 0000000000000003 vscause 0000000000000000 mtval 0000000000000000 stval ffffffff80c4d300 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080047000 sscratch 0000000000000000 satp 907ee0000009e59f x0/zero 0000000000000000 x1/ra ffffffff8031dba2 x2/sp ffff8f80008c5a40 x3/gp ffffffff8a22a0c0 x4/tp ffffaf801bfd9a80 x5/t0 ffff8f80008c5b54 x6/t1 fffffffef1445d1c x7/t2 203a6465746e6961 x8/s0 ffff8f80008c5a90 x9/s1 fffff1ef00118b90 x10/a0 ffffffff886feaa0 x11/a1 0000000000000008 x12/a2 0000000000000002 x13/a3 ffffffff803182a0 x14/a4 1ffffffff10dfd54 x15/a5 0000000000000000 x16/a6 0000000000ff0100 x17/a7 0000000000000003 x18/s2 ffffffff886feaa0 x19/s3 ffff8f80008c5c80 x20/s4 ffffffff868647c0 x21/s5 0000000200000120 x22/s6 ffff8f80008c5ca0 x23/s7 dfffffff00000000 x24/s8 0000000000007fff x25/s9 ffffffff88a44e80 x26/s10 1ffff1f000118b90 x27/s11 ffff8f80008c5c70 x28/t3 ffffffff8031dac0 x29/t4 fffffffef1445d1c x30/t5 fffffffef1445d1d x31/t6 ffffffff913fc0b7 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000