last executing test programs: 3.129308042s ago: executing program 0 (id=933): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) ioctl$HIDIOCGUSAGE(r1, 0xc0145b0e, 0x0) 2.600168634s ago: executing program 1 (id=937): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000000)={{@host}, 0x200000000000, 0x0, 0x0, 0xfffffffc}) 2.599804186s ago: executing program 1 (id=938): symlink(0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[], 0x119) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{0x0}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) unshare(0x6a040000) 1.981110914s ago: executing program 3 (id=940): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x8}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c) sendto$inet6(r1, &(0x7f0000000240)="b66f", 0x2, 0x8000, 0x0, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x100013c, 0x20000000) 1.980711338s ago: executing program 3 (id=941): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x8, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r0, &(0x7f0000000600)='dir .', 0x5) write(r0, &(0x7f0000000700)='bind', 0x4) 1.889503019s ago: executing program 1 (id=942): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x31, &(0x7f0000001440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffcac, 0x0}}, 0x10) 1.888798475s ago: executing program 3 (id=943): truncate(&(0x7f0000000000)='./file0\x00', 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f00000002c0)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000840)="ffb753958aded4156352581e0921be76b23f3dd58ab28c98e78e21791c73ba5436e45ea93ba1885c33d560532e215b67661f887f42e7ccb67a0e4791087d4edd72c2aaee1e9cc3ed5edff282b47f4efcf00f8224c95c938a93e58abc2c3a6772238a69f59316a543119d7994f2065dc5249a0811c6738b2ae797f86efc021619e3faef657ad4fe8501ddb616f95dbcbc804cef9666afb0aa8e98b4d67250b64b30da746eb0a12eaa473011aee375c0cf458c46b9e91934400e843e8fb05ded864d51a00e1dc786be20a2f796b8e2c24c640cfe1ec28e684c22ef7ec5b9432bc86648f932d51b9cc708460b944dc596d9f77200349d73d85c33b2b26500d7a0d4d6446206819fd95a0078677c8ec55aed1c1a8314c93d2c3a1b8325092916da4846605c45b1200fd6ea0e1ddcb4534f2a246ec93c260fabab6f70eb1e7befb09c14f944b2a22e1454f837149ba325c53b2075370cff9a5f2a3ca2f09e9c98989d4007ed4b7783f1d1a8bc1ec8dae74a46a7c240112c3999685c0277ba74abae6fc8c5ef896fb2c99830af9f6e68a71e4f2053b9b20c1ff59795cbd046da272793be541a1cc66fd11d5d00d9aaf49281dcab805962bfe8bc1ee68f191db2a84a7b4b230bf4e62e8c3619096938f012a626cd9aba62540131147e0d73080746e8dc6dcab7d3c1ca8773e149485c0f14307a5e548be8cc6b5e97da4227a124e6e8074bf1c64d8c7abad0516781db723b71e5d1d45d56e1405690d11b892f502e9ded96752a4e46c34a5a688aac40652a6f40a8236b33931257f0459cf0edd910fb1de406bb6ea9cecb5cc830a1592fade86c50a09076858da1b10dad46b67eab0ec5f3730bc1ead4afc27d94c1fabf5b0e4add7ddd78fe041cd960ca353b3c953c812a056c7bb3b495cd3ebc56a6dbcf12148f504431703c6944a67840a7ecb6849012cb42d74fd00c5377874d85c6282418a34079e47859f96502e7bc06e45c05a4661575ed79642bcebb60240b24106e6f165335d268715873cd1278653b062c8921bd003437528633f234246c65c40368285d601e827275160c951fbbadc55f6155d3c33c89fa15a5c7ebf00a16e5b52d9391aaaf66c0bac8558ff6323860c2bf3671e37b1d68fe7733c9b14111137a01f99593edddae106d4ae74f668491f2d589a155414f2fd9603650313db270eaf28fe53a59e2812afe0e7b95a231d082bfb1b2a611165ee7a2297529d57cd8982ae07687d4ff170ecb45a29eea109aa355ab39c38e990dda06e77ea7ea8f8bc060eff342938a5f60053d29dbd1968b6b270ed303e6608490617bba13e3cdb2f2a50649d74272aefb48f66726ea1d5fc6641f918cf067692ba22221b097ed2fa2ac67a727a22613cd88d0321a98b7d280363405dca485320a88236c80e00d59564cddda6f0c542cea1bfec27bfe948d58c2bc4279278d548fd216e640144e2ea20be2af3682244618fc35e009a3b3616001519e8591ddf3f7d4d2bec8e745df868f59f0d4377c4f7c7c84a6d1b988f9efe8cbb16854b76422f1b693435e7ab50c512a158a21acadc6b4a35df156249a7735e45532c6d39c527b65905607dda3b553940f0988526deeb9bdb3a47a0419c52f9f0ac5cd9849727755f2e303147fdb4c78166d56a0f0fd1fa3d76b81fb8aa9a467ab62eb6156bb2936de830b7e7ef8bcc79e4a887302359d0ec171918edb77e618120ac216217178ddb761e6452baaa3e2fd098af484438c6d585cec2d2ab1cdb2d422da56bce00c4427d9f567cae70f8779374de1ee76b00163146d9791ea68181fb2bedc617f61a34c484227b8a5fc033626f18187ba92b9d2ec257053d30921589cafe75014d45c59ec2db321d076558670ed033667c4e64a2403ed7168a84d5a250b8903836fb1a913377e8b6218452ccfebc62c7a2e87d64ff024da176124ed51131cc2528ea09367083bdac80ac68f0599878e65a70a5cc28f67a062ecc4778a26f050e421826ff4b68d7f1abec433f7a27ca8b6bc5ea4596794075564eece57bc867a513470d4151ef1e67d398aa105446d8b54c9a4cb80b5db003da96e6eb061e75ba45f133797ed692706575c9fe609d925ecb71a7ba27280e98155dda68ba398cf8a2a0b1442eb78ed8ba1c1f468ad39b6c21d3520f86f81d3f2f5e38a5f98d2714ff16a1447e11f8936f0b1ef61256dd7aa76c9c93665a1ed1dc58d8f268e5bad2addb3696ada5513003bb048fac3c2b5d8e50777f1a3003357057c322bf6200dbf8a31672b315c43be4583bd667937741f82322da8a7c4d74d1e5abe535c4056ff9015c7ea9d1fc7e6f9115a70765934bf886fa9361b699cdb1aa94c20e38c7e623766d243076eee2fbcdc99ae06766dcc69c854297caf7c67e6702d87af079e9a6d50a103d31da0587f7a78f0046a4d2ff491622b39b8681b618fbd68d9e0bf07ba59fbd25e589153d1b877f702cfd5156212b7b19b062e56a662226d7e534b9c42aafd7eb6f25c35f96c4afd2c9496ef2d0277953e752192f24c23e0c903f5dff8fbb92b76ee7a8fb9942e13d39a080f5eb3dca5d6bc976f4f03bcb17846df4f872d2bb07b914b91ffc2971a1b129e3997351055970506e1b210d2235080a3c11d0ce06d596de742de7eb47f0ce496bdc0ed46d4c2c346acd665367b42dab7d5c2ce7a6fcf5f69d3515581b0d4e4fbe8b86301ed5bf1f3d00751ae0a57c66e091ce15bd7ea3c391230a01a3a241af34348818ad53179d7967d1602a43809fadc7e12db8ca8081194ac123f194edc82cd21439f9228ae34027c6dcb8b0cc6bddbcf88f96a66138173e2f19456ef67466711171c8b39febb7d1849429ee753b3f798d1076d3f1a21ed1bd959c5ea270a08fae6036413bd47c123c8c40783a7e5ca5f0217958724f25a1c9451684d5558be84c37c6e07772c23fe28458ffa2f3e6723964ac90ffdc3eeccefeac68b9d32966902cf9d316512a16fa64d3ab3eb9dc845ac78fbce8590a7a2a778805d0742c0f73d0450ef2d5fdd2569de4c517e348828d43427f44cfa375dc6c65be91a842d9e8c04e010bd7c2f60e17c100b8122cedc426ff12e81504b71cd0c9f531093d3ffd71d943f8f63cc105a31d97d75b0adbc3175371c193a7d7bdcac287c0fabbb82507f5630ef6b659c59a4db12e2e92e3db1f0942d13d6dd42e54186454a78bf14d302ef9b1d2f1178e36eca7dcde45b24fa282e775ab2f74915541f1dbfedfb841dbb81075d496109cc88c177589cead781b316c73b9cb8c872d0d6da5bc22d514ef04054e9d9fc2b490d5c13188096dac698cbfedc761f475ed045a07ada47e5cf3e546950ef5c6819d63a7541678186908d9a0c0dbaa37ace49dacacabd41b771ef1783f4c687428352e73bbcb0697b3e69bd1971537db2e6598e923b047a0ae48bbc493a1a773fa1c86a0c5ac93d7f715c4f7cf1f8fc9723a9bba50eab7865e14850a43e54739cf270cdbc5ff0012c6dbe5f73bd43e2d9f5f0ef9a6bbb846f7f77210e8150b6c0569481eb4a891a8ae2ba52a785711b3a80558d9476e4d6892ea4c09c7fc1e13409534aa226a64fa9510d15203c37693692d7b212ff58b98c9dd1beab8e5c572f530f319e309a79a38c2f502e199d62afe54e56e2baf82e1385b6b692350727c48f2faca562552d9465cf6323457e2fec928f746e2a340bd0d88116e4471f14079a12c7dd7281488700f02b6f42aab4469024df345b44cb9444d84ebed4d2c22721b4133acde252c9dc644a3317462ed597db116cff381e70f26a8dbb42b6e377e125c1b12886ce8908a879883824e003ddd45fd30e2a676ee484febf223f32af83c071015186a746ea72eff34cb6d4d1a43430c4fa6440f05acd9c85dd9c8f34582978186fa0e379bb7aaf7fd448ab9fdadbc120784e692b485ee9b388018226bb8f2e28b644c118f920d342eccb33ae41a8a75a35f9a526c6e64da4830848c3676c5527c3ac14eb01d5eed8e60bd733dc7c8b4049eb1dc922e25f40997f39bc54c06139cbe835e0031ae3c96912490d061574f71d226a0197546b815257f7135a5c0c4152855806f807f970963e68295bba2f87ca6e05664281f889b8a3b380cf519b38d0461b4d485aa08a5a8c9a34f8f78e6ffcfb33a1b91db8340c137177e2f4ee2aec9513e509be69693162fe424826c63b8c706b9dc75c11ca78958dfad91749a03a90b0f8fc7f900c79c6b901f95d8b3cbe933d193601f5e4b9d4f957248b70ed7563e07f5917e70dd95a4e758de6bbb41de9aac80477c3e9994c874c6844e71ceab5cedb8898dbdbab8499a5cf77343cd42faaa36049c512966067251e0f65074b362613e526590be865e23db45706c0e3471b946323e36f289ccb2ec85d68d5ca6475ff84758ae5b1b4b9ba11e155d71ea2726485c4b6638b4a47526150b79b9e6dcbbc0fac74a7b8bc8d89ea0c6f0c990c12f6d7b7b287cced6ebc388d585f214312919593af12271b5399cf26345630ff59a104feedd59182512a63a49cf1c5298f98701d40feb33cff03075762195ff866ec671fa2b089466998540f0439bcd5f76b8ef3cc54752cdc1d1eb94ba5e40624f5d04a3e64de3beddbb60d97581f105c197d81350c2ae8a9903336f76f2694d3d2e9e6d329c4bcd1309b4e98e43aeb73b3707e00fc0d794f6521c718f6475224b35f8657fe1bde341d66417886c27c759415503d11c86a320b5a4fd45f6b8b2781e081ac36a7779a3a672d6f7660c6c0d70e12a2b8b8d43ca509897ee024348fbe5e6e2812e733da75493f0a0b1ce0ba6b845806a32ebef989fa08abed95449492a25c51f7b0017ff5f63f3432b9aef714cbc5909893a4214a38c4cda24a3f0d3574f5d3489161d7a8593060003f66df5dbbe8c756e8da905740d89cba132f2b26eddc9e9356aa4f5a601498b49eb7fe5ef3618f39eff170c4538496cfa7c13b3aed877d85f828acac6fb9f11cec00546c4f70d498f1796fe5d2447c945352b1153636b541209b608c85", 0xde1}], 0x1, &(0x7f0000001880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0xa}, @multicast1}}}], 0x20}, 0x4c0c1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xa) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='usbip-vudc.0', 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write(r3, &(0x7f00000004c0)='\n', 0x1) io_uring_setup(0x5c6b, &(0x7f0000000040)={0x0, 0x800000, 0x8000, 0x4, 0x19b}) 1.88827997s ago: executing program 1 (id=944): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x9}, 0x0, &(0x7f0000000300)={0xf, 0x0, 0x0, 0x9, 0x10001, 0x80663, 0x407fffffff}, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x400) r0 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000200)=0x4, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007000080000000000000ff02000000000000ffff000000000001fe8000000000000000000000000000aaffff0000000000000000002002000600", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000000002b000000fc0000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000200"/94], 0x104}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a"], 0x104}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x4801, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x100) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0xd, 0x10005, 0xfffffffe, 0x0, [{0x2, 0x6, 0x87, '\x00', 0x8}, {0xd, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd3, '\x00', 0x9}, {0x7, 0x9, 0x12, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x2, 0xd5, 0x80, '\x00', 0x4}, {0x3, 0x4, 0xc}, {0x7c, 0xd, 0xb, '\x00', 0xb}, {0x1, 0xd, 0x8, '\x00', 0x6}, {0x2, 0x28, 0x80, '\x00', 0x5}, {0xff, 0x5, 0x5, '\x00', 0xff}, {0xfe, 0xa, 0x26, '\x00', 0x6}, {0xcf, 0xb, 0x1, '\x00', 0x6}, {0xf, 0x4, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0x10, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x0, '\x00', 0xc}, {0x3, 0xe1, 0x7, '\x00', 0xc2}, {0xfd, 0x80, 0x10, '\x00', 0x1}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x18, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0xd}]}}) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000000180)) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000004c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=@newtfilter={0x2c, 0x2c, 0xf3f, 0x30bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0xb, 0x300}}, [@TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x80000}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f00000000c0)=0x8b, 0x100000500) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendto$inet(r8, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r8, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 1.781277986s ago: executing program 0 (id=945): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x8, 0x0, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0x8, 0x0, &(0x7f0000001040)) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000001c0)={"fc7fbced01eb1b00000000000000000700", r8, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r6, 0x40045701, 0x0) ppoll(&(0x7f0000000500)=[{r9, 0x200}], 0x1, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.513508066s ago: executing program 3 (id=946): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000007000000", 0x39}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.431240241s ago: executing program 3 (id=947): timer_create(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) write$tun(r1, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x7b4, 0x66, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0x7c2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x7, 0x0, 0x3, 0x1567, 0x3ff, 0x50ae, 0x4}, 0x1c) r4 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000100)=0xb329, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r5, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0x7005, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000000)=0xfffffe01, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x6, 0xb5, 0x47, 0x2}, {0x8, 0xe, 0x3, 0xfffffff9}, {0x40, 0x5, 0x6, 0xd7000000}]}, 0x10) readv(r4, &(0x7f00000192c0)=[{&(0x7f00000190c0)=""/142, 0x8e}], 0x1) 1.290816018s ago: executing program 2 (id=948): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r1, 0x0, 0x0) 1.290265145s ago: executing program 2 (id=949): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x8082, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.219487945s ago: executing program 2 (id=950): symlink(0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[], 0x119) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{0x0}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) unshare(0x6a040000) 980.58731ms ago: executing program 1 (id=951): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x8}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c) sendto$inet6(r1, &(0x7f0000000240)="b66f", 0x2, 0x8000, 0x0, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x100013c, 0x20000000) 901.40003ms ago: executing program 0 (id=952): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x8, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r0, &(0x7f0000000600)='dir .', 0x5) write(r0, &(0x7f0000000700)='bind', 0x4) 866.318808ms ago: executing program 3 (id=953): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r2, &(0x7f00000002c0)=[{0x0}, {0x0}, {&(0x7f0000000200)=""/192, 0xc0}], 0x3, 0x1, 0x8) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000000)={0x2, 0x1, 0x3, 0x2, 0x4}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffff1000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) socket(0x1e, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x20, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) 775.385723ms ago: executing program 0 (id=954): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e06, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20002050) 691.231958ms ago: executing program 0 (id=955): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000007000000", 0x39}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 591.281976ms ago: executing program 0 (id=956): syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x7, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x8, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 361.139908ms ago: executing program 2 (id=957): socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$inet_mptcp(0x2, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000480050001"], 0x80}}, 0x0) 138.992224ms ago: executing program 2 (id=958): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000000)={{@host}, 0x200000000000, 0x0, 0x0, 0xfffffffc}) 49.853274ms ago: executing program 1 (id=959): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffff1}, [@generic={0x91, 0x1, 0x1, 0x6a}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x4b6ecc4d802e1d46, '\x00', @auto="6ae4efd915aadc889755afb95c8eee3e"}) fstat(0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff6202000000", @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf6100000000000007010000"], &(0x7f0000000500)='GPL\x00', 0x7, 0x1000, &(0x7f0000001000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x1, 0x6) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/md0\x00', 0x2, 0x0) ioctl(r2, 0x40480923, &(0x7f0000000300)) ioctl(r2, 0x40140921, &(0x7f0000000400)="0000000001") 0s ago: executing program 2 (id=960): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x8, 0x0, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0x8, 0x0, &(0x7f0000001040)) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000001c0)={"fc7fbced01eb1b00000000000000000700", r8, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r6, 0x40045701, 0x0) ppoll(&(0x7f0000000500)=[{r9, 0x200}], 0x1, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 96.789750][ T7217] create_new_namespaces+0x3ea/0xac0 [ 96.789770][ T7217] unshare_nsproxy_namespaces+0xf2/0x220 [ 96.789787][ T7217] ksys_unshare+0x4a2/0xa70 [ 96.789799][ T7217] ? __pfx_ksys_unshare+0x10/0x10 [ 96.789815][ T7217] __ia32_sys_unshare+0x30/0x40 [ 96.789825][ T7217] __do_fast_syscall_32+0x13a/0x8b0 [ 96.789844][ T7217] do_fast_syscall_32+0x32/0x70 [ 96.789860][ T7217] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 96.789874][ T7217] RIP: 0023:0xf705efec [ 96.789888][ T7217] Code: Unable to access opcode bytes at 0xf705efc2. [ 96.789893][ T7217] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 96.789904][ T7217] RAX: ffffffffffffffda RBX: 0000000062040200 RCX: 0000000000000000 [ 96.789911][ T7217] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.789917][ T7217] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.789923][ T7217] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 96.789929][ T7217] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.789948][ T7217] [ 96.790656][ T7217] memory: usage 96kB, limit 96kB, failcnt 34 [ 96.790667][ T7217] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 96.790677][ T7217] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 96.790685][ T7217] Memory cgroup stats for /syz0/test: [ 96.790763][ T7217] cache 0 [ 96.790769][ T7217] rss 0 [ 96.790773][ T7217] rss_huge 0 [ 96.790777][ T7217] shmem 0 [ 96.790781][ T7217] mapped_file 0 [ 96.790785][ T7217] dirty 0 [ 96.790789][ T7217] writeback 0 [ 96.790793][ T7217] workingset_refault_anon 0 [ 96.790798][ T7217] workingset_refault_file 0 [ 96.790802][ T7217] swap 0 [ 96.790806][ T7217] swapcached 0 [ 96.790810][ T7217] pgpgin 0 [ 96.790814][ T7217] pgpgout 0 [ 96.790819][ T7217] pgfault 0 [ 96.790824][ T7217] pgmajfault 0 [ 96.790828][ T7217] inactive_anon 0 [ 96.790832][ T7217] active_anon 0 [ 96.790835][ T7217] inactive_file 0 [ 96.790839][ T7217] active_file 0 [ 96.790843][ T7217] unevictable 0 [ 96.790846][ T7217] hierarchical_memory_limit 98304 [ 96.790851][ T7217] hierarchical_memsw_limit 9223372036854771712 [ 96.790855][ T7217] total_cache 0 [ 96.790859][ T7217] total_rss 0 [ 96.790862][ T7217] total_rss_huge 0 [ 96.790866][ T7217] total_shmem 0 [ 96.790870][ T7217] total_mapped_file 0 [ 96.790873][ T7217] total_dirty 0 [ 96.790877][ T7217] total_writeback 0 [ 96.790881][ T7217] total_workingset_refault_anon 0 [ 96.790885][ T7217] total_workingset_refault_file 0 [ 96.790889][ T7217] total_swap 0 [ 96.790892][ T7217] total_swapcached 0 [ 96.790896][ T7217] total_pgpgin 0 [ 96.790900][ T7217] total_pgpgout 0 [ 96.790903][ T7217] total_pgfault 0 [ 96.790907][ T7217] total_pgmajfault 0 [ 96.790911][ T7217] total_inactive_anon 0 [ 96.790914][ T7217] total_active_anon 0 [ 96.790918][ T7217] total_inactive_file 0 [ 96.790922][ T7217] total_active_file 0 [ 96.790926][ T7217] total_unevictable 0 [ 96.790929][ T7217] anon_cost 0 [ 96.790933][ T7217] file_cost 0 [ 96.790943][ T7217] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.428,pid=7216,uid=0 [ 96.792115][ T7217] Memory cgroup out of memory: Killed process 7216 (syz.0.428) total-vm:102028kB, anon-rss:1296kB, file-rss:22760kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 96.797926][ T7217] Failed to initialize the IGMP6 autojoin socket (err -105) [ 96.811458][ T7220] jffs2: notice: (7220) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 97.242536][ T7242] netlink: 'syz.1.435': attribute type 1 has an invalid length. [ 97.253297][ T7242] bond6: entered promiscuous mode [ 97.253684][ T7242] 8021q: adding VLAN 0 to HW filter on device bond6 [ 97.273515][ T7242] bond6: (slave bridge3): making interface the new active one [ 97.273538][ T7242] bridge3: entered promiscuous mode [ 97.275600][ T7242] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 97.337825][ T7247] FAULT_INJECTION: forcing a failure. [ 97.337825][ T7247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.337848][ T7247] CPU: 0 UID: 0 PID: 7247 Comm: syz.1.437 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.337863][ T7247] Tainted: [L]=SOFTLOCKUP [ 97.337867][ T7247] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.337874][ T7247] Call Trace: [ 97.337878][ T7247] [ 97.337883][ T7247] dump_stack_lvl+0x100/0x190 [ 97.337914][ T7247] should_fail_ex.cold+0x5/0xa [ 97.337931][ T7247] _copy_from_user+0x2e/0xd0 [ 97.337950][ T7247] get_compat_sigset+0x21/0x50 [ 97.337969][ T7247] __ia32_compat_sys_signalfd4+0x120/0x1e0 [ 97.337989][ T7247] ? __pfx___ia32_compat_sys_signalfd4+0x10/0x10 [ 97.338011][ T7247] __do_fast_syscall_32+0x13a/0x8b0 [ 97.338031][ T7247] do_fast_syscall_32+0x32/0x70 [ 97.338049][ T7247] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.338063][ T7247] RIP: 0023:0xf7fc2fec [ 97.338075][ T7247] Code: Unable to access opcode bytes at 0xf7fc2fc2. [ 97.338081][ T7247] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000147 [ 97.338092][ T7247] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000080002140 [ 97.338099][ T7247] RDX: 0000000000000008 RSI: 0000000000080800 RDI: 0000000000000000 [ 97.338106][ T7247] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.338112][ T7247] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 97.338119][ T7247] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.338131][ T7247] [ 97.345624][ T42] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 97.437073][ T7253] syz.0.440 uses obsolete (PF_INET,SOCK_PACKET) [ 97.441921][ T7253] FAULT_INJECTION: forcing a failure. [ 97.441921][ T7253] name failslab, interval 1, probability 0, space 0, times 0 [ 97.441950][ T7253] CPU: 0 UID: 0 PID: 7253 Comm: syz.0.440 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.441985][ T7253] Tainted: [L]=SOFTLOCKUP [ 97.441991][ T7253] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.441999][ T7253] Call Trace: [ 97.442003][ T7253] [ 97.442008][ T7253] dump_stack_lvl+0x100/0x190 [ 97.442027][ T7253] should_fail_ex.cold+0x5/0xa [ 97.442044][ T7253] should_failslab+0xc2/0x120 [ 97.442060][ T7253] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 97.442075][ T7253] ? kstrdup_const+0x63/0x80 [ 97.442088][ T7253] kstrdup+0x51/0xe0 [ 97.442100][ T7253] kstrdup_const+0x63/0x80 [ 97.442110][ T7253] kvasprintf_const+0x10f/0x1a0 [ 97.442127][ T7253] kobject_set_name_vargs+0x5a/0x140 [ 97.442141][ T7253] dev_set_name+0xc7/0x100 [ 97.442152][ T7253] ? __pfx_dev_set_name+0x10/0x10 [ 97.442163][ T7253] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 97.442180][ T7253] ? lockdep_init_map_type+0x5c/0x250 [ 97.442196][ T7253] ? __init_waitqueue_head+0xca/0x150 [ 97.442220][ T7253] netdev_register_kobject+0xc5/0x410 [ 97.442241][ T7253] register_netdevice+0x15b6/0x25a0 [ 97.442269][ T7253] ? __pfx_register_netdevice+0x10/0x10 [ 97.442283][ T7253] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 97.442300][ T7253] ? register_vlan_dev+0x5f8/0x910 [ 97.442314][ T7253] register_vlan_dev+0x36c/0x910 [ 97.442329][ T7253] vlan_ioctl_handler+0x8e9/0xa70 [ 97.442341][ T7253] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 97.442356][ T7253] ? tomoyo_path_number_perm+0x188/0x580 [ 97.442374][ T7253] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 97.442385][ T7253] sock_ioctl+0x5e9/0x6b0 [ 97.442397][ T7253] ? __pfx_sock_ioctl+0x10/0x10 [ 97.442410][ T7253] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 97.442425][ T7253] ? do_vfs_ioctl+0x226/0x13e0 [ 97.442449][ T7253] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 97.442469][ T7253] compat_sock_ioctl+0x595/0x760 [ 97.442483][ T7253] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 97.442495][ T7253] ? hook_file_ioctl_common+0x140/0x440 [ 97.442516][ T7253] ? __fget_files+0x21f/0x3d0 [ 97.442531][ T7253] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 97.442544][ T7253] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 97.442565][ T7253] __do_fast_syscall_32+0x13a/0x8b0 [ 97.442583][ T7253] do_fast_syscall_32+0x32/0x70 [ 97.442600][ T7253] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.442613][ T7253] RIP: 0023:0xf705efec [ 97.442627][ T7253] Code: Unable to access opcode bytes at 0xf705efc2. [ 97.442631][ T7253] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 97.442642][ T7253] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008983 [ 97.442649][ T7253] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.442655][ T7253] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.442660][ T7253] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 97.442666][ T7253] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.442680][ T7253] [ 97.489871][ T7256] netlink: 'syz.1.442': attribute type 1 has an invalid length. [ 97.496453][ T42] usb 8-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 97.498154][ T42] usb 8-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 97.502613][ T42] usb 8-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 97.502634][ T42] usb 8-1: Manufacturer: syz [ 97.502645][ T42] usb 8-1: SerialNumber: syz [ 97.514176][ T7256] bond7: entered promiscuous mode [ 97.514513][ T7256] 8021q: adding VLAN 0 to HW filter on device bond7 [ 97.580574][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'. [ 97.638915][ T7256] 8021q: adding VLAN 0 to HW filter on device bond7 [ 97.639773][ T7256] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 97.639784][ T7256] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 97.691736][ T7256] bond7: (slave wireguard0): making interface the new active one [ 97.691760][ T7256] wireguard0: entered promiscuous mode [ 97.708599][ T7256] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 98.309695][ T7269] netlink: 'syz.2.445': attribute type 1 has an invalid length. [ 98.413253][ T7269] bond9: entered promiscuous mode [ 98.424763][ T7269] 8021q: adding VLAN 0 to HW filter on device bond9 [ 98.459793][ T7270] bond9: (slave bridge4): making interface the new active one [ 98.459808][ T7270] bridge4: entered promiscuous mode [ 98.460492][ T7270] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 98.518668][ T42] usbhid 8-1:36.0: couldn't find an input interrupt endpoint [ 98.519365][ T42] usb 8-1: USB disconnect, device number 11 [ 98.571580][ T7285] syz_tun: entered allmulticast mode [ 98.581153][ T7285] dvmrp6: entered allmulticast mode [ 98.591630][ T7283] syz_tun: left allmulticast mode [ 98.592654][ T7284] syz.0.451 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 98.592676][ T7284] CPU: 3 UID: 0 PID: 7284 Comm: syz.0.451 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.592693][ T7284] Tainted: [L]=SOFTLOCKUP [ 98.592711][ T7284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.592719][ T7284] Call Trace: [ 98.592723][ T7284] [ 98.592727][ T7284] dump_stack_lvl+0x100/0x190 [ 98.592758][ T7284] dump_header+0xfb/0x606 [ 98.592774][ T7284] oom_kill_process.cold+0xd/0x380 [ 98.592789][ T7284] out_of_memory+0x340/0x14f0 [ 98.592807][ T7284] ? __pfx_out_of_memory+0x10/0x10 [ 98.592827][ T7284] mem_cgroup_out_of_memory+0xc6/0x130 [ 98.592842][ T7284] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 98.592853][ T7284] ? find_held_lock+0x2b/0x80 [ 98.592868][ T7284] ? do_raw_spin_unlock+0x145/0x1e0 [ 98.592878][ T7284] ? _raw_spin_unlock+0x28/0x50 [ 98.592894][ T7284] try_charge_memcg+0x783/0xf60 [ 98.592913][ T7284] ? __pfx_try_charge_memcg+0x10/0x10 [ 98.592935][ T7284] ? find_held_lock+0x2b/0x80 [ 98.592946][ T7284] ? rcu_read_unlock+0x17/0x60 [ 98.592963][ T7284] ? rcu_read_unlock+0x17/0x60 [ 98.592984][ T7284] __memcg_slab_post_alloc_hook+0x4a1/0x1270 [ 98.593007][ T7284] ? kasan_save_track+0x14/0x30 [ 98.593023][ T7284] kmem_cache_alloc_noprof+0x4fa/0x6a0 [ 98.593037][ T7284] ? sk_prot_alloc+0x60/0x2a0 [ 98.593056][ T7284] sk_prot_alloc+0x60/0x2a0 [ 98.593074][ T7284] sk_alloc+0x36/0xe80 [ 98.593088][ T7284] inet6_create+0x385/0x12b0 [ 98.593100][ T7284] ? inet6_create+0x7f/0x12b0 [ 98.593113][ T7284] __sock_create+0x339/0x860 [ 98.593126][ T7284] inet_ctl_sock_create+0x94/0x230 [ 98.593144][ T7284] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 98.593162][ T7284] ? ndisc_net_init+0x1b1/0x230 [ 98.593176][ T7284] ? __pfx_ndisc_net_init+0x10/0x10 [ 98.593191][ T7284] ? __pfx_igmp6_net_init+0x10/0x10 [ 98.593205][ T7284] igmp6_net_init+0x35/0x430 [ 98.593219][ T7284] ? __pfx_igmp6_net_init+0x10/0x10 [ 98.593232][ T7284] ops_init+0x1e2/0x5f0 [ 98.593248][ T7284] setup_net+0x118/0x3a0 [ 98.593264][ T7284] ? __pfx_setup_net+0x10/0x10 [ 98.593282][ T7284] copy_net_ns+0x345/0x7a0 [ 98.593300][ T7284] create_new_namespaces+0x3ea/0xac0 [ 98.593319][ T7284] unshare_nsproxy_namespaces+0xf2/0x220 [ 98.593337][ T7284] ksys_unshare+0x4a2/0xa70 [ 98.593348][ T7284] ? __pfx_ksys_unshare+0x10/0x10 [ 98.593364][ T7284] __ia32_sys_unshare+0x30/0x40 [ 98.593375][ T7284] __do_fast_syscall_32+0x13a/0x8b0 [ 98.593393][ T7284] do_fast_syscall_32+0x32/0x70 [ 98.593410][ T7284] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 98.593423][ T7284] RIP: 0023:0xf705efec [ 98.593437][ T7284] Code: Unable to access opcode bytes at 0xf705efc2. [ 98.593442][ T7284] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 98.593454][ T7284] RAX: ffffffffffffffda RBX: 0000000062040200 RCX: 0000000000000000 [ 98.593461][ T7284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.593467][ T7284] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 98.593473][ T7284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.593479][ T7284] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.593493][ T7284] [ 98.593542][ T7284] memory: usage 96kB, limit 96kB, failcnt 84 [ 98.593551][ T7284] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 98.593558][ T7284] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 98.593565][ T7284] Memory cgroup stats for /syz0/test: [ 98.593628][ T7284] cache 0 [ 98.593633][ T7284] rss 0 [ 98.593637][ T7284] rss_huge 0 [ 98.593641][ T7284] shmem 0 [ 98.593645][ T7284] mapped_file 0 [ 98.593649][ T7284] dirty 0 [ 98.593653][ T7284] writeback 0 [ 98.593657][ T7284] workingset_refault_anon 0 [ 98.593661][ T7284] workingset_refault_file 0 [ 98.593665][ T7284] swap 0 [ 98.593669][ T7284] swapcached 0 [ 98.593673][ T7284] pgpgin 0 [ 98.593677][ T7284] pgpgout 0 [ 98.593681][ T7284] pgfault 0 [ 98.593685][ T7284] pgmajfault 0 [ 98.593689][ T7284] inactive_anon 0 [ 98.593694][ T7284] active_anon 0 [ 98.593698][ T7284] inactive_file 0 [ 98.593702][ T7284] active_file 0 [ 98.593706][ T7284] unevictable 0 [ 98.593709][ T7284] hierarchical_memory_limit 98304 [ 98.593714][ T7284] hierarchical_memsw_limit 9223372036854771712 [ 98.593718][ T7284] total_cache 0 [ 98.593722][ T7284] total_rss 0 [ 98.593725][ T7284] total_rss_huge 0 [ 98.593729][ T7284] total_shmem 0 [ 98.593732][ T7284] total_mapped_file 0 [ 98.593736][ T7284] total_dirty 0 [ 98.593740][ T7284] total_writeback 0 [ 98.593744][ T7284] total_workingset_refault_anon 0 [ 98.593748][ T7284] total_workingset_refault_file 0 [ 98.593752][ T7284] total_swap 0 [ 98.593755][ T7284] total_swapcached 0 [ 98.593759][ T7284] total_pgpgin 0 [ 98.593763][ T7284] total_pgpgout 0 [ 98.593766][ T7284] total_pgfault 0 [ 98.593770][ T7284] total_pgmajfault 0 [ 98.593774][ T7284] total_inactive_anon 0 [ 98.593778][ T7284] total_active_anon 0 [ 98.593781][ T7284] total_inactive_file 0 [ 98.593785][ T7284] total_active_file 0 [ 98.593789][ T7284] total_unevictable 0 [ 98.593793][ T7284] anon_cost 0 [ 98.593796][ T7284] file_cost 0 [ 98.593800][ T7284] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.451,pid=7282,uid=0 [ 98.593878][ T7284] Memory cgroup out of memory: Killed process 7282 (syz.0.451) total-vm:102028kB, anon-rss:1296kB, file-rss:22696kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 98.604958][ T7284] Failed to initialize the IGMP6 control socket (err -105) [ 98.723144][ T7291] warning: `syz.2.454' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.149511][ T7303] netlink: 'syz.3.457': attribute type 1 has an invalid length. [ 99.199122][ T7303] bond5: entered promiscuous mode [ 99.205161][ T7303] 8021q: adding VLAN 0 to HW filter on device bond5 [ 99.266453][ T7303] bond5: (slave bridge3): making interface the new active one [ 99.266478][ T7303] bridge3: entered promiscuous mode [ 99.267565][ T7303] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 99.735691][ T35] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 99.871532][ T7315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.461'. [ 99.872075][ T7315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.461'. [ 99.886949][ T35] usb 6-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 99.887865][ T35] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 99.887882][ T35] usb 6-1: config 0 interface 0 has no altsetting 0 [ 99.887900][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.890610][ T35] usb 6-1: config 0 descriptor?? [ 99.891056][ T7309] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 100.014835][ T7320] syz.0.463 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 100.014884][ T7320] CPU: 3 UID: 0 PID: 7320 Comm: syz.0.463 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.014913][ T7320] Tainted: [L]=SOFTLOCKUP [ 100.014921][ T7320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.014950][ T7320] Call Trace: [ 100.014955][ T7320] [ 100.014960][ T7320] dump_stack_lvl+0x100/0x190 [ 100.014980][ T7320] dump_header+0xfb/0x606 [ 100.014995][ T7320] oom_kill_process.cold+0xd/0x380 [ 100.015009][ T7320] out_of_memory+0x340/0x14f0 [ 100.015029][ T7320] ? __pfx_out_of_memory+0x10/0x10 [ 100.015048][ T7320] mem_cgroup_out_of_memory+0xc6/0x130 [ 100.015061][ T7320] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 100.015073][ T7320] ? find_held_lock+0x2b/0x80 [ 100.015087][ T7320] ? do_raw_spin_unlock+0x145/0x1e0 [ 100.015098][ T7320] ? _raw_spin_unlock+0x28/0x50 [ 100.015114][ T7320] try_charge_memcg+0x783/0xf60 [ 100.015141][ T7320] ? __pfx_try_charge_memcg+0x10/0x10 [ 100.015166][ T7320] ? find_held_lock+0x2b/0x80 [ 100.015186][ T7320] ? rcu_read_unlock+0x17/0x60 [ 100.015209][ T7320] ? rcu_read_unlock+0x17/0x60 [ 100.015230][ T7320] __memcg_slab_post_alloc_hook+0x4a1/0x1270 [ 100.015252][ T7320] ? kasan_unpoison+0x27/0x60 [ 100.015265][ T7320] __kmalloc_node_track_caller_noprof+0x66a/0x870 [ 100.015280][ T7320] ? nlmsg_notify+0xbf/0x290 [ 100.015295][ T7320] ? __devinet_sysctl_register+0xbc/0x360 [ 100.015316][ T7320] kmemdup_noprof+0x29/0x60 [ 100.015333][ T7320] __devinet_sysctl_register+0xbc/0x360 [ 100.015350][ T7320] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 100.015371][ T7320] ? __asan_memcpy+0x3c/0x60 [ 100.015384][ T7320] devinet_init_net+0x334/0x8d0 [ 100.015400][ T7320] ? __pfx_devinet_init_net+0x10/0x10 [ 100.015415][ T7320] ops_init+0x1e2/0x5f0 [ 100.015434][ T7320] setup_net+0x118/0x3a0 [ 100.015449][ T7320] ? __pfx_setup_net+0x10/0x10 [ 100.015471][ T7320] copy_net_ns+0x345/0x7a0 [ 100.015498][ T7320] create_new_namespaces+0x3ea/0xac0 [ 100.015531][ T7320] unshare_nsproxy_namespaces+0xf2/0x220 [ 100.015560][ T7320] ksys_unshare+0x4a2/0xa70 [ 100.015573][ T7320] ? __pfx_ksys_unshare+0x10/0x10 [ 100.015590][ T7320] __ia32_sys_unshare+0x30/0x40 [ 100.015600][ T7320] __do_fast_syscall_32+0x13a/0x8b0 [ 100.015620][ T7320] do_fast_syscall_32+0x32/0x70 [ 100.015636][ T7320] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.015651][ T7320] RIP: 0023:0xf705efec [ 100.015666][ T7320] Code: Unable to access opcode bytes at 0xf705efc2. [ 100.015672][ T7320] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 100.015683][ T7320] RAX: ffffffffffffffda RBX: 0000000062040200 RCX: 0000000000000000 [ 100.015691][ T7320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.015698][ T7320] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.015705][ T7320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.015711][ T7320] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.015726][ T7320] [ 100.022024][ T7320] memory: usage 92kB, limit 96kB, failcnt 120 [ 100.022043][ T7320] memory+swap: usage 92kB, limit 9007199254740988kB, failcnt 0 [ 100.022055][ T7320] kmem: usage 52kB, limit 9007199254740988kB, failcnt 0 [ 100.022066][ T7320] Memory cgroup stats for /syz0/test: [ 100.022183][ T7320] cache 0 [ 100.022189][ T7320] rss 0 [ 100.022193][ T7320] rss_huge 0 [ 100.022196][ T7320] shmem 0 [ 100.022199][ T7320] mapped_file 0 [ 100.022203][ T7320] dirty 0 [ 100.022206][ T7320] writeback 0 [ 100.022210][ T7320] workingset_refault_anon 0 [ 100.022214][ T7320] workingset_refault_file 0 [ 100.022217][ T7320] swap 0 [ 100.022221][ T7320] swapcached 0 [ 100.022224][ T7320] pgpgin 0 [ 100.022228][ T7320] pgpgout 0 [ 100.022232][ T7320] pgfault 0 [ 100.022236][ T7320] pgmajfault 0 [ 100.022239][ T7320] inactive_anon 0 [ 100.022243][ T7320] active_anon 0 [ 100.022247][ T7320] inactive_file 0 [ 100.022251][ T7320] active_file 0 [ 100.022255][ T7320] unevictable 0 [ 100.022259][ T7320] hierarchical_memory_limit 98304 [ 100.022264][ T7320] hierarchical_memsw_limit 9223372036854771712 [ 100.022269][ T7320] total_cache 0 [ 100.022272][ T7320] total_rss 0 [ 100.022276][ T7320] total_rss_huge 0 [ 100.022325][ T7320] total_shmem 0 [ 100.022331][ T7320] total_mapped_file 0 [ 100.022335][ T7320] total_dirty 0 [ 100.022339][ T7320] total_writeback 0 [ 100.022343][ T7320] total_workingset_refault_anon 0 [ 100.022348][ T7320] total_workingset_refault_file 0 [ 100.022352][ T7320] total_swap 0 [ 100.022356][ T7320] total_swapcached 0 [ 100.022360][ T7320] total_pgpgin 0 [ 100.022365][ T7320] total_pgpgout 0 [ 100.022369][ T7320] total_pgfault 0 [ 100.022373][ T7320] total_pgmajfault 0 [ 100.022377][ T7320] total_inactive_anon 0 [ 100.022380][ T7320] total_active_anon 0 [ 100.022384][ T7320] total_inactive_file 0 [ 100.022388][ T7320] total_active_file 0 [ 100.022392][ T7320] total_unevictable 0 [ 100.022398][ T7320] anon_cost 0 [ 100.022401][ T7320] file_cost 0 [ 100.022406][ T7320] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.463,pid=7318,uid=0 [ 100.022522][ T7320] Memory cgroup out of memory: Killed process 7318 (syz.0.463) total-vm:102028kB, anon-rss:1296kB, file-rss:22696kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 100.303584][ T35] hid-steam 0003:28DE:1205.0006: unknown main item tag 0x4 [ 100.303627][ T35] hid-steam 0003:28DE:1205.0006: unknown main item tag 0x0 [ 100.303639][ T35] hid-steam 0003:28DE:1205.0006: unknown main item tag 0x0 [ 100.303651][ T35] hid-steam 0003:28DE:1205.0006: unknown main item tag 0x0 [ 100.303662][ T35] hid-steam 0003:28DE:1205.0006: unknown main item tag 0x0 [ 100.303674][ T35] hid-steam 0003:28DE:1205.0006: unknown main item tag 0x0 [ 100.303685][ T35] hid-steam 0003:28DE:1205.0006: unknown main item tag 0x0 [ 100.303697][ T35] hid-steam 0003:28DE:1205.0006: unknown main item tag 0x0 [ 100.303708][ T35] hid-steam 0003:28DE:1205.0006: unknown main item tag 0x0 [ 100.303719][ T35] hid-steam 0003:28DE:1205.0006: unknown main item tag 0x0 [ 100.303814][ T35] hid-steam 0003:28DE:1205.0006: unbalanced collection at end of report description [ 100.304083][ T35] hid-steam 0003:28DE:1205.0006: steam_probe:parse of hid interface failed [ 100.311540][ T35] hid-steam 0003:28DE:1205.0006: probe with driver hid-steam failed with error -22 [ 100.445768][ T5820] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 100.450499][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 100.450516][ T43] audit: type=1326 audit(1789462281.299:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.0.466" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705efec code=0x0 [ 100.476021][ T7333] netlink: 'syz.3.467': attribute type 1 has an invalid length. [ 100.501001][ T7333] bond6: entered promiscuous mode [ 100.504545][ T7333] 8021q: adding VLAN 0 to HW filter on device bond6 [ 100.553823][ T7333] bond6: (slave bridge4): making interface the new active one [ 100.553840][ T7333] bridge4: entered promiscuous mode [ 100.554428][ T7333] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 100.604873][ T5820] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 100.606387][ T5820] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 100.606410][ T5820] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 100.606431][ T5820] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.608200][ T5820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.608213][ T5820] usb 7-1: Product: syz [ 100.608221][ T5820] usb 7-1: Manufacturer: syz [ 100.608228][ T5820] usb 7-1: SerialNumber: syz [ 100.613874][ T5820] hub 7-1:1.0: bad descriptor, ignoring hub [ 100.613889][ T5820] hub 7-1:1.0: probe with driver hub failed with error -5 [ 100.828296][ T5820] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 101.015280][ T35] usb 6-1: USB disconnect, device number 17 [ 101.095420][ T7343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.470'. [ 101.096304][ T7343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.470'. [ 101.243269][ T7348] jffs2: notice: (7348) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 101.317592][ T7323] usb 7-1: reset high-speed USB device number 11 using dummy_hcd [ 101.417519][ T7354] syz.0.474 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 101.417558][ T7354] CPU: 3 UID: 0 PID: 7354 Comm: syz.0.474 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.417584][ T7354] Tainted: [L]=SOFTLOCKUP [ 101.417609][ T7354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.417621][ T7354] Call Trace: [ 101.417629][ T7354] [ 101.417636][ T7354] dump_stack_lvl+0x100/0x190 [ 101.417666][ T7354] dump_header+0xfb/0x606 [ 101.417688][ T7354] oom_kill_process.cold+0xd/0x380 [ 101.417709][ T7354] out_of_memory+0x340/0x14f0 [ 101.417738][ T7354] ? __pfx_out_of_memory+0x10/0x10 [ 101.417768][ T7354] mem_cgroup_out_of_memory+0xc6/0x130 [ 101.417791][ T7354] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 101.417810][ T7354] ? find_held_lock+0x2b/0x80 [ 101.417833][ T7354] ? do_raw_spin_unlock+0x145/0x1e0 [ 101.417850][ T7354] ? _raw_spin_unlock+0x28/0x50 [ 101.417875][ T7354] try_charge_memcg+0x783/0xf60 [ 101.417906][ T7354] ? __pfx_try_charge_memcg+0x10/0x10 [ 101.417933][ T7354] ? find_held_lock+0x2b/0x80 [ 101.417951][ T7354] ? rcu_read_unlock+0x17/0x60 [ 101.417976][ T7354] ? rcu_read_unlock+0x17/0x60 [ 101.418025][ T7354] __memcg_slab_post_alloc_hook+0x4a1/0x1270 [ 101.418068][ T7354] ? kasan_unpoison+0x27/0x60 [ 101.418091][ T7354] __kmalloc_noprof+0x653/0x840 [ 101.418112][ T7354] ? __register_sysctl_table+0xac/0x1650 [ 101.418142][ T7354] __register_sysctl_table+0xac/0x1650 [ 101.418166][ T7354] ? lock_acquire+0x1d1/0x380 [ 101.418192][ T7354] ? __pfx___register_sysctl_table+0x10/0x10 [ 101.418214][ T7354] ? is_module_address+0x5f/0xf0 [ 101.418240][ T7354] ? is_module_address+0x5f/0xf0 [ 101.418270][ T7354] register_net_sysctl_sz+0x325/0x420 [ 101.418290][ T7354] ? __asan_memcpy+0x3c/0x60 [ 101.418310][ T7354] nf_conntrack_pernet_init+0x83e/0xb40 [ 101.418338][ T7354] ? __pfx_nf_conntrack_pernet_init+0x10/0x10 [ 101.418363][ T7354] ops_init+0x1e2/0x5f0 [ 101.418390][ T7354] setup_net+0x118/0x3a0 [ 101.418413][ T7354] ? __pfx_setup_net+0x10/0x10 [ 101.418444][ T7354] copy_net_ns+0x345/0x7a0 [ 101.418472][ T7354] create_new_namespaces+0x3ea/0xac0 [ 101.418503][ T7354] unshare_nsproxy_namespaces+0xf2/0x220 [ 101.418531][ T7354] ksys_unshare+0x4a2/0xa70 [ 101.418547][ T7354] ? __pfx_ksys_unshare+0x10/0x10 [ 101.418575][ T7354] __ia32_sys_unshare+0x30/0x40 [ 101.418591][ T7354] __do_fast_syscall_32+0x13a/0x8b0 [ 101.418621][ T7354] do_fast_syscall_32+0x32/0x70 [ 101.418646][ T7354] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 101.418667][ T7354] RIP: 0023:0xf705efec [ 101.418688][ T7354] Code: Unable to access opcode bytes at 0xf705efc2. [ 101.418696][ T7354] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 101.418714][ T7354] RAX: ffffffffffffffda RBX: 0000000062040200 RCX: 0000000000000000 [ 101.418726][ T7354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.418735][ T7354] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.418745][ T7354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.418756][ T7354] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.418781][ T7354] [ 101.421976][ T7354] memory: usage 96kB, limit 96kB, failcnt 167 [ 101.421997][ T7354] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 101.422088][ T7354] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 101.422101][ T7354] Memory cgroup stats for /syz0/test: [ 101.422207][ T7354] cache 0 [ 101.422215][ T7354] rss 0 [ 101.422221][ T7354] rss_huge 0 [ 101.422227][ T7354] shmem 0 [ 101.422233][ T7354] mapped_file 0 [ 101.422239][ T7354] dirty 0 [ 101.422245][ T7354] writeback 0 [ 101.422251][ T7354] workingset_refault_anon 0 [ 101.422257][ T7354] workingset_refault_file 0 [ 101.422264][ T7354] swap 0 [ 101.422269][ T7354] swapcached 0 [ 101.422275][ T7354] pgpgin 0 [ 101.422282][ T7354] pgpgout 0 [ 101.422288][ T7354] pgfault 0 [ 101.422295][ T7354] pgmajfault 0 [ 101.422301][ T7354] inactive_anon 0 [ 101.422308][ T7354] active_anon 0 [ 101.422315][ T7354] inactive_file 0 [ 101.422322][ T7354] active_file 0 [ 101.422329][ T7354] unevictable 0 [ 101.422335][ T7354] hierarchical_memory_limit 98304 [ 101.422342][ T7354] hierarchical_memsw_limit 9223372036854771712 [ 101.422349][ T7354] total_cache 0 [ 101.422354][ T7354] total_rss 0 [ 101.422360][ T7354] total_rss_huge 0 [ 101.422366][ T7354] total_shmem 0 [ 101.422372][ T7354] total_mapped_file 0 [ 101.422378][ T7354] total_dirty 0 [ 101.422384][ T7354] total_writeback 0 [ 101.422390][ T7354] total_workingset_refault_anon 0 [ 101.422397][ T7354] total_workingset_refault_file 0 [ 101.422404][ T7354] total_swap 0 [ 101.422410][ T7354] total_swapcached 0 [ 101.422417][ T7354] total_pgpgin 0 [ 101.422423][ T7354] total_pgpgout 0 [ 101.422429][ T7354] total_pgfault 0 [ 101.422434][ T7354] total_pgmajfault 0 [ 101.422441][ T7354] total_inactive_anon 0 [ 101.422448][ T7354] total_active_anon 0 [ 101.422454][ T7354] total_inactive_file 0 [ 101.422460][ T7354] total_active_file 0 [ 101.422467][ T7354] total_unevictable 0 [ 101.422473][ T7354] anon_cost 0 [ 101.422479][ T7354] file_cost 0 [ 101.422485][ T7354] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.474,pid=7353,uid=0 [ 101.422586][ T7354] Memory cgroup out of memory: Killed process 7353 (syz.0.474) total-vm:102028kB, anon-rss:1296kB, file-rss:22696kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 101.696035][ T43] audit: type=1804 audit(1789462282.539:23): pid=7358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.476" name="/newroot/108/file1" dev="fuse" ino=1 res=1 errno=0 [ 101.696676][ T43] audit: type=1800 audit(1789462282.549:24): pid=7358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.476" name="/" dev="fuse" ino=1 res=0 errno=0 [ 101.727391][ T1329] usb 7-1: USB disconnect, device number 11 [ 101.730403][ T1329] usblp0: removed [ 101.859920][ T7368] netlink: 'syz.3.479': attribute type 1 has an invalid length. [ 101.870644][ T7368] 8021q: adding VLAN 0 to HW filter on device bond7 [ 101.874151][ T7368] netlink: 52 bytes leftover after parsing attributes in process `syz.3.479'. [ 101.917894][ T7371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.480'. [ 101.918182][ T7371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.480'. [ 101.962625][ T5744] Bluetooth: hci1: ISO packet for unknown connection handle 1588 [ 102.417115][ T7387] tipc: Started in network mode [ 102.417270][ T7387] tipc: Node identity ac1414aa, cluster identity 4711 [ 102.420532][ T7387] tipc: New replicast peer: 172.20.20.187 [ 102.423502][ T7387] tipc: Enabled bearer , priority 10 [ 102.513728][ T7392] fuse: Bad value for 'group_id' [ 102.513741][ T7392] fuse: Bad value for 'group_id' [ 102.582338][ T7395] syz.0.491 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 102.582364][ T7395] CPU: 0 UID: 0 PID: 7395 Comm: syz.0.491 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.582381][ T7395] Tainted: [L]=SOFTLOCKUP [ 102.582385][ T7395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.582392][ T7395] Call Trace: [ 102.582396][ T7395] [ 102.582402][ T7395] dump_stack_lvl+0x100/0x190 [ 102.582421][ T7395] dump_header+0xfb/0x606 [ 102.582436][ T7395] oom_kill_process.cold+0xd/0x380 [ 102.582451][ T7395] out_of_memory+0x340/0x14f0 [ 102.582470][ T7395] ? __pfx_out_of_memory+0x10/0x10 [ 102.582488][ T7395] mem_cgroup_out_of_memory+0xc6/0x130 [ 102.582502][ T7395] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 102.582514][ T7395] ? find_held_lock+0x2b/0x80 [ 102.582529][ T7395] ? do_raw_spin_unlock+0x145/0x1e0 [ 102.582539][ T7395] ? _raw_spin_unlock+0x28/0x50 [ 102.582555][ T7395] try_charge_memcg+0x783/0xf60 [ 102.582574][ T7395] ? __pfx_try_charge_memcg+0x10/0x10 [ 102.582590][ T7395] ? find_held_lock+0x2b/0x80 [ 102.582601][ T7395] ? rcu_read_unlock+0x17/0x60 [ 102.582616][ T7395] ? rcu_read_unlock+0x17/0x60 [ 102.582637][ T7395] __memcg_slab_post_alloc_hook+0x4a1/0x1270 [ 102.582658][ T7395] ? kasan_unpoison+0x27/0x60 [ 102.582672][ T7395] __kmalloc_noprof+0x653/0x840 [ 102.582685][ T7395] ? __register_sysctl_table+0xac/0x1650 [ 102.582703][ T7395] __register_sysctl_table+0xac/0x1650 [ 102.582719][ T7395] ? lock_acquire+0x1d1/0x380 [ 102.582734][ T7395] ? __pfx___register_sysctl_table+0x10/0x10 [ 102.582749][ T7395] ? is_module_address+0x5f/0xf0 [ 102.582765][ T7395] ? is_module_address+0x5f/0xf0 [ 102.582798][ T7395] register_net_sysctl_sz+0x325/0x420 [ 102.582816][ T7395] ? __asan_memcpy+0x3c/0x60 [ 102.582829][ T7395] nf_conntrack_pernet_init+0x83e/0xb40 [ 102.582851][ T7395] ? __pfx_nf_conntrack_pernet_init+0x10/0x10 [ 102.582868][ T7395] ops_init+0x1e2/0x5f0 [ 102.582886][ T7395] setup_net+0x118/0x3a0 [ 102.582907][ T7395] ? __pfx_setup_net+0x10/0x10 [ 102.582927][ T7395] copy_net_ns+0x345/0x7a0 [ 102.582946][ T7395] create_new_namespaces+0x3ea/0xac0 [ 102.582967][ T7395] unshare_nsproxy_namespaces+0xf2/0x220 [ 102.582985][ T7395] ksys_unshare+0x4a2/0xa70 [ 102.582997][ T7395] ? __pfx_ksys_unshare+0x10/0x10 [ 102.583015][ T7395] __ia32_sys_unshare+0x30/0x40 [ 102.583027][ T7395] __do_fast_syscall_32+0x13a/0x8b0 [ 102.583046][ T7395] do_fast_syscall_32+0x32/0x70 [ 102.583062][ T7395] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.583076][ T7395] RIP: 0023:0xf705efec [ 102.583089][ T7395] Code: Unable to access opcode bytes at 0xf705efc2. [ 102.583094][ T7395] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 102.583105][ T7395] RAX: ffffffffffffffda RBX: 0000000062040200 RCX: 0000000000000000 [ 102.583112][ T7395] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.583118][ T7395] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.583124][ T7395] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 102.583130][ T7395] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.583144][ T7395] [ 102.583174][ T7395] memory: usage 92kB, limit 96kB, failcnt 215 [ 102.583182][ T7395] memory+swap: usage 92kB, limit 9007199254740988kB, failcnt 0 [ 102.583189][ T7395] kmem: usage 92kB, limit 9007199254740988kB, failcnt 0 [ 102.583196][ T7395] Memory cgroup stats for /syz0/test: [ 102.583262][ T7395] cache 0 [ 102.583267][ T7395] rss 0 [ 102.583271][ T7395] rss_huge 0 [ 102.583276][ T7395] shmem 0 [ 102.583280][ T7395] mapped_file 0 [ 102.583284][ T7395] dirty 0 [ 102.583288][ T7395] writeback 0 [ 102.583292][ T7395] workingset_refault_anon 0 [ 102.583296][ T7395] workingset_refault_file 0 [ 102.583300][ T7395] swap 0 [ 102.583304][ T7395] swapcached 0 [ 102.583309][ T7395] pgpgin 0 [ 102.583313][ T7395] pgpgout 0 [ 102.583318][ T7395] pgfault 0 [ 102.583321][ T7395] pgmajfault 0 [ 102.583325][ T7395] inactive_anon 0 [ 102.583329][ T7395] active_anon 0 [ 102.583332][ T7395] inactive_file 0 [ 102.583336][ T7395] active_file 0 [ 102.583340][ T7395] unevictable 0 [ 102.583343][ T7395] hierarchical_memory_limit 98304 [ 102.583348][ T7395] hierarchical_memsw_limit 9223372036854771712 [ 102.583352][ T7395] total_cache 0 [ 102.583501][ T7395] total_rss 0 [ 102.583507][ T7395] total_rss_huge 0 [ 102.583511][ T7395] total_shmem 0 [ 102.583516][ T7395] total_mapped_file 0 [ 102.583520][ T7395] total_dirty 0 [ 102.583524][ T7395] total_writeback 0 [ 102.583528][ T7395] total_workingset_refault_anon 0 [ 102.583639][ T7395] total_workingset_refault_file 0 [ 102.583646][ T7395] total_swap 0 [ 102.583650][ T7395] total_swapcached 0 [ 102.583654][ T7395] total_pgpgin 0 [ 102.583658][ T7395] total_pgpgout 0 [ 102.583662][ T7395] total_pgfault 0 [ 102.583666][ T7395] total_pgmajfault 0 [ 102.583670][ T7395] total_inactive_anon 0 [ 102.584760][ T7395] total_active_anon 0 [ 102.584769][ T7395] total_inactive_file 0 [ 102.584775][ T7395] total_active_file 0 [ 102.584780][ T7395] total_unevictable 0 [ 102.584784][ T7395] anon_cost 0 [ 102.584788][ T7395] file_cost 0 [ 102.584792][ T7395] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.491,pid=7394,uid=0 [ 102.584863][ T7395] Memory cgroup out of memory: Killed process 7394 (syz.0.491) total-vm:102028kB, anon-rss:1296kB, file-rss:22696kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 102.655903][ T1329] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 102.807918][ T1329] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 102.809019][ T1329] usb 6-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 102.810845][ T1329] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 102.810864][ T1329] usb 6-1: Manufacturer: syz [ 102.810878][ T1329] usb 6-1: SerialNumber: syz [ 103.025669][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 103.175660][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 103.176447][ T10] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 103.177274][ T10] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 103.177295][ T10] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 103.177308][ T10] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.177321][ T10] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 103.178958][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.178970][ T10] usb 5-1: Product: syz [ 103.178977][ T10] usb 5-1: Manufacturer: syz [ 103.178984][ T10] usb 5-1: SerialNumber: syz [ 103.185936][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 103.189234][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input20 [ 103.263466][ T7419] fuse: Bad value for 'group_id' [ 103.263483][ T7419] fuse: Bad value for 'group_id' [ 103.416880][ T10] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 103.416894][ T10] (id 0x00) [ 103.417700][ T57] tipc: Node number set to 2886997162 [ 103.475607][ T10] rc_core: IR keymap rc-imon-pad not found [ 103.475620][ T10] Registered IR keymap rc-empty [ 103.475659][ T10] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 103.475668][ T10] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 103.512066][ T1329] usbhid 6-1:36.0: couldn't find an input interrupt endpoint [ 103.514873][ T1329] usb 6-1: USB disconnect, device number 18 [ 103.611733][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 103.613692][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input21 [ 103.625285][ T10] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:7> initialized [ 104.330363][ T7441] fuse: Bad value for 'group_id' [ 104.330383][ T7441] fuse: Bad value for 'group_id' [ 104.968126][ T5744] Bluetooth: hci1: ISO packet for unknown connection handle 1588 [ 105.391319][ T7465] input: syz0 as /devices/virtual/input/input22 [ 105.391396][ T7465] input: failed to attach handler leds to device input22, error: -6 [ 105.555567][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 105.654189][ T7470] netlink: 'syz.1.520': attribute type 1 has an invalid length. [ 105.665986][ T7470] 8021q: adding VLAN 0 to HW filter on device bond8 [ 105.669407][ T7470] netlink: 52 bytes leftover after parsing attributes in process `syz.1.520'. [ 105.716248][ T10] usb 7-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 105.717122][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.717139][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.717157][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.718448][ T10] usb 7-1: config 0 descriptor?? [ 105.785016][ T7408] imon:send_packet: task interrupted [ 105.785073][ T7408] imon:send_packet: packet tx failed (-512) [ 105.785961][ T7408] imon:vfd_write: send packet #0 failed [ 105.794371][ T73] usb 5-1: USB disconnect, device number 7 [ 105.913224][ T5744] Bluetooth: hci0: ISO packet for unknown connection handle 1588 [ 106.126775][ T10] hid_parser_main: 22 callbacks suppressed [ 106.126791][ T10] ntrig 0003:1B96:0004.0007: unknown main item tag 0x0 [ 106.126805][ T10] ntrig 0003:1B96:0004.0007: unknown main item tag 0x0 [ 106.126816][ T10] ntrig 0003:1B96:0004.0007: unknown main item tag 0x0 [ 106.126828][ T10] ntrig 0003:1B96:0004.0007: unknown main item tag 0x0 [ 106.126839][ T10] ntrig 0003:1B96:0004.0007: unknown main item tag 0x0 [ 106.126850][ T10] ntrig 0003:1B96:0004.0007: unknown main item tag 0x0 [ 106.126862][ T10] ntrig 0003:1B96:0004.0007: unknown main item tag 0x0 [ 106.126873][ T10] ntrig 0003:1B96:0004.0007: unknown main item tag 0x0 [ 106.126884][ T10] ntrig 0003:1B96:0004.0007: unknown main item tag 0x0 [ 106.126896][ T10] ntrig 0003:1B96:0004.0007: unknown main item tag 0x0 [ 106.134207][ T10] ntrig 0003:1B96:0004.0007: hidraw1: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.2-1/input0 [ 106.211075][ T7490] netlink: 'syz.1.528': attribute type 1 has an invalid length. [ 106.225983][ T7490] bond9: entered promiscuous mode [ 106.226173][ T7490] 8021q: adding VLAN 0 to HW filter on device bond9 [ 106.244884][ T7490] bond9: (slave bridge4): making interface the new active one [ 106.244926][ T7490] bridge4: entered promiscuous mode [ 106.248902][ T7490] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 106.276611][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.527'. [ 106.301076][ T7496] netlink: 'syz.1.529': attribute type 1 has an invalid length. [ 106.319231][ T7496] 8021q: adding VLAN 0 to HW filter on device bond10 [ 106.326540][ T7496] netlink: 52 bytes leftover after parsing attributes in process `syz.1.529'. [ 106.327013][ T10] ntrig 0003:1B96:0004.0007: Firmware version: 4.14.14.11.7 (7978 7fd1) [ 106.529174][ T9] usb 7-1: USB disconnect, device number 12 [ 106.735942][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 106.794148][ T5744] Bluetooth: hci2: ISO packet for unknown connection handle 1588 [ 106.885711][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 106.886334][ T10] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 106.887419][ T10] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 106.887459][ T10] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 106.887487][ T10] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 106.887509][ T10] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 106.889699][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.889721][ T10] usb 6-1: Product: syz [ 106.889733][ T10] usb 6-1: Manufacturer: syz [ 106.889745][ T10] usb 6-1: SerialNumber: syz [ 106.895688][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 106.899465][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input23 [ 107.136290][ T10] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 107.136350][ T10] (id 0x00) [ 107.174787][ T7522] netlink: 'syz.0.538': attribute type 1 has an invalid length. [ 107.185645][ T10] rc_core: IR keymap rc-imon-pad not found [ 107.185710][ T10] Registered IR keymap rc-empty [ 107.186051][ T10] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 107.186114][ T10] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 107.214444][ T7522] 8021q: adding VLAN 0 to HW filter on device bond4 [ 107.222614][ T7522] netlink: 52 bytes leftover after parsing attributes in process `syz.0.538'. [ 107.358857][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 107.397841][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input24 [ 107.604452][ T10] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:19> initialized [ 107.641555][ T10] usb 6-1: USB disconnect, device number 19 [ 107.996256][ T5820] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 108.133731][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.542'. [ 108.156449][ T5820] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 108.157275][ T5820] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.157311][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.158627][ T5820] usb 5-1: config 0 descriptor?? [ 108.160627][ T5820] pwc: Askey VC010 type 2 USB webcam detected. [ 108.225624][ T57] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 108.385574][ T57] usb 7-1: Using ep0 maxpacket: 8 [ 108.386245][ T57] usb 7-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 108.387211][ T57] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 108.387224][ T57] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 108.387242][ T57] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 108.389111][ T57] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.389123][ T57] usb 7-1: Product: syz [ 108.389130][ T57] usb 7-1: Manufacturer: syz [ 108.389137][ T57] usb 7-1: SerialNumber: syz [ 108.390884][ T57] usb 7-1: config 0 descriptor?? [ 108.394272][ T57] powermate 7-1:0.0: probe with driver powermate failed with error -22 [ 108.566439][ T5820] pwc: recv_control_msg error -32 req 02 val 2b00 [ 108.567364][ T5820] pwc: recv_control_msg error -32 req 02 val 2700 [ 108.567975][ T5820] pwc: recv_control_msg error -32 req 02 val 2c00 [ 108.568576][ T5820] pwc: recv_control_msg error -32 req 04 val 1000 [ 108.569292][ T5820] pwc: recv_control_msg error -32 req 04 val 1300 [ 108.570134][ T5820] pwc: recv_control_msg error -32 req 04 val 1400 [ 108.570669][ T5820] pwc: recv_control_msg error -32 req 02 val 2000 [ 108.571294][ T5820] pwc: recv_control_msg error -32 req 02 val 2100 [ 108.571883][ T5820] pwc: recv_control_msg error -32 req 04 val 1500 [ 108.572463][ T5820] pwc: recv_control_msg error -32 req 02 val 2500 [ 108.777971][ T5820] pwc: recv_control_msg error -71 req 02 val 2600 [ 108.779573][ T5820] pwc: recv_control_msg error -71 req 02 val 2900 [ 108.779972][ T5820] pwc: recv_control_msg error -71 req 02 val 2800 [ 108.780322][ T5820] pwc: recv_control_msg error -71 req 04 val 1100 [ 108.780594][ T5820] pwc: recv_control_msg error -71 req 04 val 1200 [ 108.787530][ T5820] pwc: Registered as video103. [ 108.789320][ T5820] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb5/5-1/input/input25 [ 108.803423][ T5820] usb 5-1: USB disconnect, device number 8 [ 108.987384][ T5739] Bluetooth: hci0: ISO packet for unknown connection handle 1588 [ 109.056822][ T5739] Bluetooth: hci4: command 0x1003 tx timeout [ 109.057010][ T5744] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 109.125992][ T7546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.545'. [ 109.271947][ T7554] netlink: 'syz.1.547': attribute type 1 has an invalid length. [ 109.284131][ T7554] 8021q: adding VLAN 0 to HW filter on device bond11 [ 109.289777][ T7554] netlink: 52 bytes leftover after parsing attributes in process `syz.1.547'. [ 109.334987][ T7557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.548'. [ 109.336330][ T7557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.548'. [ 109.426073][ T7563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.551'. [ 109.534501][ T5744] Bluetooth: hci2: ISO packet for unknown connection handle 1588 [ 109.866378][ T7578] netlink: 'syz.0.557': attribute type 1 has an invalid length. [ 109.887046][ T7578] 8021q: adding VLAN 0 to HW filter on device bond5 [ 109.892696][ T7578] netlink: 52 bytes leftover after parsing attributes in process `syz.0.557'. [ 109.966451][ T7581] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer. [ 110.012613][ T7586] ªªªªªª: renamed from vlan0 (while UP) [ 110.080637][ T7590] netlink: 'syz.1.561': attribute type 1 has an invalid length. [ 110.090943][ T7590] bond12: entered promiscuous mode [ 110.091151][ T7590] 8021q: adding VLAN 0 to HW filter on device bond12 [ 110.099849][ T7590] macvtap1: entered allmulticast mode [ 110.107395][ T7590] bond12: (slave bridge5): making interface the new active one [ 110.107409][ T7590] bridge5: entered promiscuous mode [ 110.108276][ T7590] bond12: (slave bridge5): Enslaving as an active interface with an up link [ 110.208844][ T5744] Bluetooth: hci1: ISO packet for unknown connection handle 1588 [ 110.499579][ T43] audit: type=1804 audit(1789462291.349:25): pid=7604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.565" name="/newroot/129/file1" dev="fuse" ino=1 res=1 errno=0 [ 110.505025][ T43] audit: type=1800 audit(1789462291.349:26): pid=7604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.565" name="/" dev="fuse" ino=1 res=0 errno=0 [ 110.820968][ T7609] netlink: 'syz.0.567': attribute type 1 has an invalid length. [ 110.831774][ T7609] 8021q: adding VLAN 0 to HW filter on device bond6 [ 110.879279][ T7612] fuse: Unknown parameter 'grou00000000000000000000' [ 110.924028][ T7614] CUSE: unknown device info "n¸Þ|’zQC*¯" [ 110.924038][ T7614] CUSE: unknown device info "G2¢“‰a"ëî V­Ä|ÿ#Úyï€S—ioåLåÎà”¢8†9ÔIÿèܥѮžÃ‡Å[¥<^ÎQÎÓ>”nHw Ý×'0KVÆ,†¹${\d" [ 110.924046][ T7614] CUSE: DEVNAME unspecified [ 110.942663][ T43] audit: type=1326 audit(1789462291.789:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz.0.569" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705efec code=0x0 [ 110.992428][ T5820] usb 7-1: USB disconnect, device number 13 [ 111.463028][ T7624] __nla_validate_parse: 2 callbacks suppressed [ 111.463050][ T7624] netlink: 44 bytes leftover after parsing attributes in process `syz.1.573'. [ 111.753156][ T7631] netlink: 'syz.2.576': attribute type 1 has an invalid length. [ 111.770073][ T7631] 8021q: adding VLAN 0 to HW filter on device bond10 [ 111.773805][ T7631] netlink: 52 bytes leftover after parsing attributes in process `syz.2.576'. [ 111.849225][ T7636] fuse: Unknown parameter 'grou00000000000000000000' [ 112.811680][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'. [ 113.178216][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.591'. [ 113.221361][ T7671] 8250_pericom 0000:00:00.0: probe with driver 8250_pericom failed with error -12 [ 113.245924][ T5820] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 113.396336][ T5820] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 113.397248][ T5820] usb 6-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 113.398614][ T5820] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 113.398634][ T5820] usb 6-1: Manufacturer: syz [ 113.398646][ T5820] usb 6-1: SerialNumber: syz [ 113.615372][ T5820] usbhid 6-1:36.0: couldn't find an input interrupt endpoint [ 113.620362][ T5820] usb 6-1: USB disconnect, device number 20 [ 113.656531][ T7677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.594'. [ 113.688006][ T7677] kAFS: unable to lookup cell 'ÿ' [ 113.688438][ T7677] kAFS: unable to lookup cell '(,c¾Ì' [ 114.552751][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'. [ 114.567491][ T7700] ipvlan2: entered allmulticast mode [ 114.567507][ T7700] ip6gretap0: entered allmulticast mode [ 115.068708][ T7705] netlink: 'syz.3.603': attribute type 1 has an invalid length. [ 115.094401][ T7705] bond8: entered promiscuous mode [ 115.094604][ T7705] 8021q: adding VLAN 0 to HW filter on device bond8 [ 115.127300][ T7705] macvtap1: entered allmulticast mode [ 115.148174][ T7705] bond8: (slave bridge5): making interface the new active one [ 115.148198][ T7705] bridge5: entered promiscuous mode [ 115.149786][ T7705] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 115.445872][ T30] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 115.606454][ T30] usb 8-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 115.607563][ T30] usb 8-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 115.609223][ T30] usb 8-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 115.609244][ T30] usb 8-1: Manufacturer: syz [ 115.609255][ T30] usb 8-1: SerialNumber: syz [ 115.804625][ T7717] No source specified [ 115.995962][ T25] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 116.047837][ T30] usbhid 8-1:36.0: couldn't find an input interrupt endpoint [ 116.049413][ T30] usb 8-1: USB disconnect, device number 12 [ 116.145543][ T25] usb 7-1: device descriptor read/64, error -71 [ 116.321575][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.610'. [ 116.396343][ T25] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 116.535658][ T25] usb 7-1: device descriptor read/64, error -71 [ 116.599639][ T7730] netlink: 'syz.0.613': attribute type 1 has an invalid length. [ 116.606591][ T5901] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 116.626103][ T7730] bond7: entered promiscuous mode [ 116.626273][ T7730] 8021q: adding VLAN 0 to HW filter on device bond7 [ 116.641698][ T7730] macvtap1: entered allmulticast mode [ 116.654507][ T7730] bond7: (slave bridge4): making interface the new active one [ 116.654532][ T7730] bridge4: entered promiscuous mode [ 116.656499][ T25] usb usb7-port1: attempt power cycle [ 116.659045][ T7730] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 116.720548][ T7737] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 116.720590][ T7737] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 116.720634][ T7737] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 116.728907][ T7737] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 116.765668][ T5901] usb 6-1: Using ep0 maxpacket: 8 [ 116.766234][ T5901] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 116.767172][ T5901] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 116.767209][ T5901] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.769030][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.769048][ T5901] usb 6-1: Product: syz [ 116.769061][ T5901] usb 6-1: Manufacturer: syz [ 116.769072][ T5901] usb 6-1: SerialNumber: syz [ 116.771791][ T5901] usb 6-1: config 0 descriptor?? [ 116.776229][ T7737] nvmet_rdma: malformed ip/port passed: :4420 [ 116.776697][ T5901] powermate 6-1:0.0: probe with driver powermate failed with error -22 [ 116.959308][ T7742] 9pnet_fd: p9_fd_create_tcp (7742): problem connecting socket to 127.0.0.1 [ 117.015583][ T25] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 117.046284][ T25] usb 7-1: device descriptor read/8, error -71 [ 117.295719][ T25] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 117.317491][ T25] usb 7-1: device descriptor read/8, error -71 [ 117.428407][ T25] usb usb7-port1: unable to enumerate USB device [ 117.847935][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.620'. [ 118.484179][ T7749] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 118.558117][ T7760] netlink: 48 bytes leftover after parsing attributes in process `syz.0.622'. [ 118.565056][ T7762] fuse: Unknown parameter 'group_id00000000000000000000' [ 118.617067][ T7766] netlink: 'syz.3.625': attribute type 1 has an invalid length. [ 118.628295][ T7766] bond9: entered promiscuous mode [ 118.628486][ T7766] 8021q: adding VLAN 0 to HW filter on device bond9 [ 118.637170][ T7766] macvtap2: entered allmulticast mode [ 118.645341][ T7766] bond9: (slave bridge6): making interface the new active one [ 118.645364][ T7766] bridge6: entered promiscuous mode [ 118.649765][ T7766] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 118.845598][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 119.026068][ T25] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 119.029201][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.029249][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 119.029267][ T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 119.029285][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.029315][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.206340][ T7776] 9pnet_fd: p9_fd_create_tcp (7776): problem connecting socket to 127.0.0.1 [ 119.240820][ T25] usb 5-1: USB disconnect, device number 9 [ 119.354644][ T30] usb 6-1: USB disconnect, device number 21 [ 119.386873][ T7778] ======================================================= [ 119.386873][ T7778] WARNING: The mand mount option has been deprecated and [ 119.386873][ T7778] and is ignored by this kernel. Remove the mand [ 119.386873][ T7778] option from the mount to silence this warning. [ 119.386873][ T7778] ======================================================= [ 119.392380][ T7778] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 119.696463][ T5744] Bluetooth: hci0: command 0x1407 tx timeout [ 119.784549][ T43] audit: type=1804 audit(1789462300.629:28): pid=7789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.632" name="/newroot/169/file1" dev="fuse" ino=1 res=1 errno=0 [ 119.784699][ T43] audit: type=1800 audit(1789462300.629:29): pid=7789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.632" name="/" dev="fuse" ino=1 res=0 errno=0 [ 119.799669][ T7791] fuse: Unknown parameter 'group_id00000000000000000000' [ 120.069943][ T7801] bridge_slave_0: left allmulticast mode [ 120.069968][ T7801] bridge_slave_0: left promiscuous mode [ 120.071182][ T7801] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.087968][ T7801] bridge_slave_1: left allmulticast mode [ 120.087985][ T7801] bridge_slave_1: left promiscuous mode [ 120.088126][ T7801] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.091403][ T7801] bond0: (slave bond_slave_0): Releasing backup interface [ 120.093995][ T7801] bond0: (slave bond_slave_1): Releasing backup interface [ 120.099943][ T7801] team0: Port device team_slave_0 removed [ 120.105365][ T7801] team0: Port device team_slave_1 removed [ 120.108838][ T7801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.108853][ T7801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.110853][ T7801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.110867][ T7801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.112695][ T7801] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 120.125659][ T30] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 120.135211][ T5840] syz1: Port: 1 Link DOWN [ 120.235599][ T73] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 120.287050][ T30] usb 7-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 120.287926][ T30] usb 7-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 120.289080][ T30] usb 7-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 120.289093][ T30] usb 7-1: Manufacturer: syz [ 120.289101][ T30] usb 7-1: SerialNumber: syz [ 120.415553][ T73] usb 8-1: Using ep0 maxpacket: 8 [ 120.416197][ T73] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 120.417106][ T73] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 120.417128][ T73] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 120.419127][ T73] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.419140][ T73] usb 8-1: Product: syz [ 120.419147][ T73] usb 8-1: Manufacturer: syz [ 120.419154][ T73] usb 8-1: SerialNumber: syz [ 120.420955][ T73] usb 8-1: config 0 descriptor?? [ 120.424656][ T73] powermate 8-1:0.0: probe with driver powermate failed with error -22 [ 120.501208][ T30] usbhid 7-1:36.0: couldn't find an input interrupt endpoint [ 120.503633][ T30] usb 7-1: USB disconnect, device number 18 [ 121.265569][ T73] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 121.446456][ T73] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 121.447760][ T73] usb 5-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 121.449311][ T73] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 121.449323][ T73] usb 5-1: Manufacturer: syz [ 121.449331][ T73] usb 5-1: SerialNumber: syz [ 121.663553][ T73] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 121.665146][ T73] usb 5-1: USB disconnect, device number 10 [ 121.670719][ T5751] udevd[5751]: setting mode of /dev/bus/usb/005/010 to 020664 failed: No such file or directory [ 121.670808][ T5751] udevd[5751]: setting owner of /dev/bus/usb/005/010 to uid=0, gid=0 failed: No such file or directory [ 122.035099][ T7815] netlink: 'syz.2.643': attribute type 1 has an invalid length. [ 122.043909][ T7815] bond11: entered promiscuous mode [ 122.044106][ T7815] 8021q: adding VLAN 0 to HW filter on device bond11 [ 122.056126][ T7815] macvtap1: entered allmulticast mode [ 122.063730][ T7815] bond11: (slave bridge5): making interface the new active one [ 122.063745][ T7815] bridge5: entered promiscuous mode [ 122.065593][ T7815] bond11: (slave bridge5): Enslaving as an active interface with an up link [ 122.095122][ T7818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.644'. [ 122.294105][ T7832] fuse: Bad value for 'user_id' [ 122.294123][ T7832] fuse: Bad value for 'user_id' [ 122.391533][ T7837] netlink: 'syz.0.654': attribute type 1 has an invalid length. [ 122.400800][ T7837] bond8: entered promiscuous mode [ 122.400991][ T7837] 8021q: adding VLAN 0 to HW filter on device bond8 [ 122.409573][ T7837] macvtap2: entered allmulticast mode [ 122.418377][ T7837] bond8: (slave bridge5): making interface the new active one [ 122.418391][ T7837] bridge5: entered promiscuous mode [ 122.420760][ T7837] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 122.580518][ T7849] bridge0: port 3(team0) entered blocking state [ 122.583956][ T7849] bridge0: port 3(team0) entered disabled state [ 122.586066][ T7849] team0: entered allmulticast mode [ 122.586116][ T7849] team_slave_0: entered allmulticast mode [ 122.586262][ T7849] team_slave_1: entered allmulticast mode [ 122.599550][ T7849] team0: entered promiscuous mode [ 122.599572][ T7849] team_slave_0: entered promiscuous mode [ 122.599733][ T7849] team_slave_1: entered promiscuous mode [ 122.601798][ T7849] bridge0: port 3(team0) entered blocking state [ 122.601919][ T7849] bridge0: port 3(team0) entered forwarding state [ 122.984352][ T25] usb 8-1: USB disconnect, device number 13 [ 122.985928][ T73] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 123.061794][ T7853] fuse: Bad value for 'fd' [ 123.182071][ T73] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 123.249757][ T73] usb 5-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 123.383525][ T73] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 123.383542][ T73] usb 5-1: Manufacturer: syz [ 123.383549][ T73] usb 5-1: SerialNumber: syz [ 123.561402][ T7868] input: syz0 as /devices/virtual/input/input27 [ 123.561454][ T7868] input: failed to attach handler leds to device input27, error: -6 [ 123.620689][ T73] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 123.622669][ T73] usb 5-1: USB disconnect, device number 11 [ 124.071168][ T7873] syzkaller1: entered promiscuous mode [ 124.071190][ T7873] syzkaller1: entered allmulticast mode [ 124.324960][ T7878] fuse: Bad value for 'fd' [ 124.435957][ T5901] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 124.454786][ T43] audit: type=1804 audit(1789462305.299:30): pid=7883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.672" name="/newroot/172/file1" dev="fuse" ino=1 res=1 errno=0 [ 124.454834][ T43] audit: type=1800 audit(1789462305.299:31): pid=7883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.672" name="/" dev="fuse" ino=1 res=0 errno=0 [ 124.585613][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 124.586326][ T5901] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 124.587242][ T5901] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 124.587278][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 124.587298][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 124.587319][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 124.589440][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.589460][ T5901] usb 5-1: Product: syz [ 124.589472][ T5901] usb 5-1: Manufacturer: syz [ 124.589483][ T5901] usb 5-1: SerialNumber: syz [ 124.591781][ T5901] usb 5-1: config 0 descriptor?? [ 124.592536][ T7875] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 124.796447][ T5901] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 124.798302][ T5901] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input28 [ 124.998373][ C3] powermate: config urb returned -71 [ 124.999923][ C3] powermate: config urb returned -71 [ 125.000113][ C3] powermate: config urb returned -71 [ 125.000283][ C3] powermate: config urb returned -71 [ 125.000463][ C3] powermate: config urb returned -71 [ 125.000482][ C3] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 125.000487][ T10] usb 5-1: USB disconnect, device number 12 [ 125.585620][ T57] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 125.746374][ T57] usb 7-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 125.747371][ T57] usb 7-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 125.748793][ T57] usb 7-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 125.748813][ T57] usb 7-1: Manufacturer: syz [ 125.748827][ T57] usb 7-1: SerialNumber: syz [ 125.785595][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 125.935662][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 125.936401][ T10] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 125.937613][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.937625][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 125.937644][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 125.937663][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.940677][ T10] hub 5-1:1.0: bad descriptor, ignoring hub [ 125.940689][ T10] hub 5-1:1.0: probe with driver hub failed with error -5 [ 125.940954][ T10] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 125.961920][ T57] usbhid 7-1:36.0: couldn't find an input interrupt endpoint [ 125.965813][ T57] usb 7-1: USB disconnect, device number 19 [ 126.246172][ T3265] usb 5-1: USB disconnect, device number 13 [ 126.617037][ T7922] netlink: 'syz.3.686': attribute type 1 has an invalid length. [ 126.631044][ T7922] bond10: entered promiscuous mode [ 126.631232][ T7922] 8021q: adding VLAN 0 to HW filter on device bond10 [ 126.649145][ T7922] macvtap3: entered allmulticast mode [ 126.659056][ T7922] macvtap4: entered allmulticast mode [ 126.746019][ T10] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 126.896099][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 126.897122][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.897146][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.897166][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.907136][ T10] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 127.319767][ T5901] usb 7-1: USB disconnect, device number 20 [ 127.321578][ T2505] usb 7-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 127.321593][ T2505] usb 7-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 127.935601][ T57] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 127.985701][ T25] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 128.086434][ T57] usb 8-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 128.087447][ T57] usb 8-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 128.089096][ T57] usb 8-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 128.089116][ T57] usb 8-1: Manufacturer: syz [ 128.089128][ T57] usb 8-1: SerialNumber: syz [ 128.136839][ T25] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 128.137864][ T25] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 128.137887][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 128.140106][ T25] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 128.140123][ T25] usb 5-1: Product: syz [ 128.140133][ T25] usb 5-1: Manufacturer: syz [ 128.140143][ T25] usb 5-1: SerialNumber: syz [ 128.142461][ T25] usb 5-1: config 0 descriptor?? [ 128.173017][ T25] usb 5-1: selecting invalid altsetting 0 [ 128.357992][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.693'. [ 128.362221][ T5808] usb 5-1: USB disconnect, device number 14 [ 128.496727][ T57] usbhid 8-1:36.0: couldn't find an input interrupt endpoint [ 128.502396][ T57] usb 8-1: USB disconnect, device number 14 [ 128.516860][ T7949] CacheFiles: Failed to register: -95 [ 128.551795][ T7951] netlink: 'syz.1.697': attribute type 1 has an invalid length. [ 128.560720][ T7951] bond13: entered promiscuous mode [ 128.560905][ T7951] 8021q: adding VLAN 0 to HW filter on device bond13 [ 128.569680][ T7951] macvtap2: entered allmulticast mode [ 128.577783][ T7951] macvtap3: entered allmulticast mode [ 129.069756][ T43] audit: type=1804 audit(1789462309.919:32): pid=7964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.700" name="/newroot/194/file1" dev="fuse" ino=1 res=1 errno=0 [ 129.069878][ T43] audit: type=1800 audit(1789462309.919:33): pid=7964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.700" name="/" dev="fuse" ino=1 res=0 errno=0 [ 129.287601][ T7974] netlink: 'syz.3.706': attribute type 1 has an invalid length. [ 129.317504][ T7974] bond11: entered promiscuous mode [ 129.317717][ T7974] 8021q: adding VLAN 0 to HW filter on device bond11 [ 129.339823][ T7974] macvtap5: entered allmulticast mode [ 129.353794][ T7974] macvtap6: entered allmulticast mode [ 129.414530][ T5744] Bluetooth: hci1: ISO packet for unknown connection handle 1588 [ 129.845651][ T30] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 130.015694][ T30] usb 8-1: Using ep0 maxpacket: 32 [ 130.016208][ T30] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 130.017024][ T30] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 130.017046][ T30] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 130.017059][ T30] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.017072][ T30] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 130.018623][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.018641][ T30] usb 8-1: Product: syz [ 130.018649][ T30] usb 8-1: Manufacturer: syz [ 130.018656][ T30] usb 8-1: SerialNumber: syz [ 130.023196][ C1] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 130.025079][ T30] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input31 [ 130.235954][ T30] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 130.235967][ T30] (id 0x00) [ 130.297678][ T30] rc_core: IR keymap rc-imon-pad not found [ 130.297690][ T30] Registered IR keymap rc-empty [ 130.299241][ T30] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 130.299254][ T30] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 130.437541][ T30] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 130.439033][ T30] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input32 [ 130.441157][ T30] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:15> initialized [ 131.169447][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'. [ 131.860011][ T8008] netlink: 'syz.1.715': attribute type 1 has an invalid length. [ 131.888062][ T8008] bond14: entered promiscuous mode [ 131.888424][ T8008] 8021q: adding VLAN 0 to HW filter on device bond14 [ 131.892915][ T5744] Bluetooth: hci3: ISO packet for unknown connection handle 1588 [ 131.928958][ T8008] macvtap4: entered allmulticast mode [ 131.937918][ T8008] macvtap5: entered allmulticast mode [ 132.005334][ T8017] netlink: 'syz.2.719': attribute type 1 has an invalid length. [ 132.027304][ T8017] bond12: entered promiscuous mode [ 132.027603][ T8017] 8021q: adding VLAN 0 to HW filter on device bond12 [ 132.031400][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'. [ 132.265686][ T30] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 132.330034][ T5744] Bluetooth: hci3: ISO packet for unknown connection handle 1588 [ 132.333268][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.724'. [ 132.337431][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.337461][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.377091][ T8037] netlink: 'syz.2.727': attribute type 1 has an invalid length. [ 132.394606][ T8037] bond13: entered promiscuous mode [ 132.394877][ T8037] 8021q: adding VLAN 0 to HW filter on device bond13 [ 132.411987][ T8037] macvtap2: entered allmulticast mode [ 132.416845][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 132.418574][ T30] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 132.420974][ T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.420988][ T30] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 132.421067][ T30] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.421088][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.441095][ T30] hub 6-1:1.0: bad descriptor, ignoring hub [ 132.441110][ T30] hub 6-1:1.0: probe with driver hub failed with error -5 [ 132.441432][ T30] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 132.464663][ T8037] macvtap3: entered allmulticast mode [ 132.613466][ T7981] imon:send_packet: task interrupted [ 132.613479][ T7981] imon:send_packet: packet tx failed (-512) [ 132.613508][ T7981] imon:vfd_write: send packet #0 failed [ 132.622448][ T30] usb 8-1: USB disconnect, device number 15 [ 132.636548][ T8020] imon:display_open: could not find interface for minor 0 [ 132.656642][ T8046] netlink: 'syz.3.730': attribute type 1 has an invalid length. [ 132.672582][ T8046] bond12: entered promiscuous mode [ 132.672796][ T8046] 8021q: adding VLAN 0 to HW filter on device bond12 [ 132.676570][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.730'. [ 132.725220][ T8050] CacheFiles: Failed to register: -95 [ 132.745674][ T73] usb 6-1: USB disconnect, device number 22 [ 132.901865][ T5744] Bluetooth: hci1: ISO packet for unknown connection handle 1588 [ 133.097030][ T8066] netlink: 'syz.0.739': attribute type 1 has an invalid length. [ 133.097645][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.739'. [ 133.154378][ T8069] CacheFiles: Failed to register: -95 [ 133.327489][ T5744] Bluetooth: hci2: ISO packet for unknown connection handle 1588 [ 133.373904][ T8081] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 133.452735][ T8084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.460682][ T3265] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 133.503869][ T8081] md/raid10:md0: active with 2 out of 2 devices [ 133.504969][ T8081] md0: detected capacity change from 0 to 4096 [ 133.557328][ T8088] fuse: Bad value for 'rootmode' [ 133.606470][ T3265] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 133.607294][ T3265] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 133.607310][ T3265] usb 8-1: config 0 interface 0 has no altsetting 0 [ 133.609560][ T3265] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 133.609575][ T3265] usb 8-1: Product: syz [ 133.609582][ T3265] usb 8-1: Manufacturer: syz [ 133.609589][ T3265] usb 8-1: SerialNumber: syz [ 133.611620][ T3265] usb 8-1: config 0 descriptor?? [ 133.623140][ T3265] usb 8-1: selecting invalid altsetting 0 [ 133.668515][ T8092] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 133.668821][ T10] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 133.719438][ T8096] CacheFiles: No cache directory specified [ 133.827386][ T8076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.743'. [ 133.831003][ T5820] usb 8-1: USB disconnect, device number 16 [ 133.869940][ T8105] jffs2: notice: (8105) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 133.875887][ T57] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 134.046142][ T57] usb 6-1: Using ep0 maxpacket: 8 [ 134.047051][ T57] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 134.047982][ T57] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.047995][ T57] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 134.048014][ T57] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 134.048044][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.052069][ T57] hub 6-1:1.0: bad descriptor, ignoring hub [ 134.052090][ T57] hub 6-1:1.0: probe with driver hub failed with error -5 [ 134.052549][ T57] cdc_wdm 6-1:1.0: skipping garbage [ 134.052567][ T57] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 134.165576][ T73] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 134.325604][ T73] usb 5-1: Using ep0 maxpacket: 8 [ 134.326493][ T73] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 134.327637][ T73] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 134.327675][ T73] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.327696][ T73] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 134.327717][ T73] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 134.329941][ T73] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.329960][ T73] usb 5-1: Product: syz [ 134.329973][ T73] usb 5-1: Manufacturer: syz [ 134.329985][ T73] usb 5-1: SerialNumber: syz [ 134.332336][ T73] usb 5-1: config 0 descriptor?? [ 134.333089][ T8108] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 134.355851][ T57] usb 6-1: USB disconnect, device number 23 [ 134.382728][ T8110] fuse: Bad value for 'rootmode' [ 134.453674][ T8112] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 134.516556][ T8112] md: couldn't update array info. -22 [ 134.516963][ T8113] md: could not open device unknown-block(1,0). [ 134.516993][ T8113] md: md_import_device returned -16 [ 134.538533][ T73] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 134.541924][ T73] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input34 [ 134.555691][ T8112] md: could not open device unknown-block(1,1). [ 134.555722][ T8112] md: md_import_device returned -16 [ 134.658420][ T8117] CacheFiles: No cache directory specified [ 134.742960][ C1] powermate: config urb returned -71 [ 134.743117][ T9] usb 5-1: USB disconnect, device number 15 [ 134.743130][ C1] powermate: config urb returned -71 [ 134.743137][ C1] powermate: usb_submit_urb(config) failed [ 134.743149][ C1] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 134.953900][ T8126] jffs2: notice: (8126) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 134.998406][ T8130] netlink: 'syz.1.765': attribute type 1 has an invalid length. [ 135.037825][ T8132] fuse: Bad value for 'rootmode' [ 135.088977][ T8134] netlink: 24 bytes leftover after parsing attributes in process `syz.1.767'. [ 135.089456][ T8134] netlink: 24 bytes leftover after parsing attributes in process `syz.1.767'. [ 135.336280][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.769'. [ 135.385596][ T3265] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 135.553837][ T3265] usb 6-1: Using ep0 maxpacket: 32 [ 135.555290][ T3265] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 135.556452][ T3265] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 135.556488][ T3265] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 135.556508][ T3265] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.556531][ T3265] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 135.558419][ T3265] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.558438][ T3265] usb 6-1: Product: syz [ 135.558448][ T3265] usb 6-1: Manufacturer: syz [ 135.558459][ T3265] usb 6-1: SerialNumber: syz [ 135.567114][ C2] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 135.572119][ T3265] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input35 [ 135.579139][ T8143] netlink: 'syz.3.770': attribute type 1 has an invalid length. [ 135.614473][ T8143] bond13: entered promiscuous mode [ 135.614990][ T8143] 8021q: adding VLAN 0 to HW filter on device bond13 [ 135.635742][ T8143] macvtap7: entered allmulticast mode [ 135.649504][ T8143] macvtap8: entered allmulticast mode [ 135.806390][ T3265] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 135.806403][ T3265] (id 0x00) [ 135.955665][ T10] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 136.055190][ T3265] rc_core: IR keymap rc-imon-pad not found [ 136.055203][ T3265] Registered IR keymap rc-empty [ 136.055637][ T3265] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 136.055647][ T3265] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 136.106114][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 136.106813][ T10] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 136.107802][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.107820][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 136.107851][ T10] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 136.107882][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.116972][ T10] hub 8-1:1.0: bad descriptor, ignoring hub [ 136.116994][ T10] hub 8-1:1.0: probe with driver hub failed with error -5 [ 136.117371][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 136.117389][ T10] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 136.146167][ T3265] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 136.147074][ T3265] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input36 [ 136.425929][ T10] usb 8-1: USB disconnect, device number 17 [ 136.638191][ T3265] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:24> initialized [ 136.639844][ T3265] usb 6-1: USB disconnect, device number 24 [ 136.733351][ T8157] fuse: Unknown parameter 'use00000000000000000000' [ 136.810899][ T8161] netlink: 'syz.1.776': attribute type 1 has an invalid length. [ 136.812376][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.776'. [ 136.911413][ T8171] syzkaller1: entered promiscuous mode [ 136.911435][ T8171] syzkaller1: entered allmulticast mode [ 137.515621][ T42] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 137.675657][ T42] usb 8-1: Using ep0 maxpacket: 32 [ 137.676338][ T42] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 137.677316][ T42] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 137.677339][ T42] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 137.677352][ T42] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 137.677365][ T42] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 137.679139][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.679151][ T42] usb 8-1: Product: syz [ 137.679159][ T42] usb 8-1: Manufacturer: syz [ 137.679166][ T42] usb 8-1: SerialNumber: syz [ 137.686319][ C2] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 137.687572][ T42] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input37 [ 137.919838][ T42] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 137.919850][ T42] (id 0x00) [ 138.005562][ T42] rc_core: IR keymap rc-imon-pad not found [ 138.005573][ T42] Registered IR keymap rc-empty [ 138.005606][ T42] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 138.005615][ T42] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 138.116949][ T42] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 138.117923][ T42] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input38 [ 138.119737][ T42] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:18> initialized [ 138.189960][ T8198] netlink: 'syz.0.791': attribute type 1 has an invalid length. [ 138.199038][ T8198] bond9: entered promiscuous mode [ 138.199354][ T8198] 8021q: adding VLAN 0 to HW filter on device bond9 [ 138.213702][ T8198] macvtap3: entered allmulticast mode [ 138.220509][ T8198] macvtap4: entered allmulticast mode [ 138.303306][ T8184] imon:vfd_write: invalid payload size [ 138.305223][ T42] usb 8-1: USB disconnect, device number 18 [ 138.938953][ T8210] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 138.986078][ T8210] md: couldn't update array info. -22 [ 139.016833][ T8210] md: could not open device unknown-block(1,0). [ 139.016862][ T8210] md: md_import_device returned -16 [ 139.125308][ T8222] netlink: 'syz.1.800': attribute type 1 has an invalid length. [ 139.315621][ T5820] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 139.465614][ T5820] usb 8-1: Using ep0 maxpacket: 32 [ 139.468288][ T5820] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 139.478777][ T5820] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 139.478801][ T5820] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 139.478814][ T5820] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.478827][ T5820] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 139.480448][ T5820] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.480461][ T5820] usb 8-1: Product: syz [ 139.480468][ T5820] usb 8-1: Manufacturer: syz [ 139.480475][ T5820] usb 8-1: SerialNumber: syz [ 139.486412][ C3] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 139.487176][ T5820] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input39 [ 139.703170][ T8231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.804'. [ 139.706061][ T5820] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 139.706079][ T5820] (id 0x00) [ 139.775697][ T5820] rc_core: IR keymap rc-imon-pad not found [ 139.775713][ T5820] Registered IR keymap rc-empty [ 139.775766][ T5820] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 139.775779][ T5820] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 139.907959][ T5820] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 139.912116][ T5820] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input40 [ 139.914368][ T5820] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:19> initialized [ 140.125947][ T8243] netlink: 16 bytes leftover after parsing attributes in process `syz.0.808'. [ 140.165883][ T8220] imon:vfd_write: invalid payload size [ 140.167181][ T30] usb 8-1: USB disconnect, device number 19 [ 142.004352][ T8259] syzkaller1: entered promiscuous mode [ 142.004371][ T8259] syzkaller1: entered allmulticast mode [ 142.135947][ T1329] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 142.286298][ T1329] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 142.289524][ T1329] usb 5-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 142.290887][ T1329] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 142.290906][ T1329] usb 5-1: Manufacturer: syz [ 142.290919][ T1329] usb 5-1: SerialNumber: syz [ 142.478488][ T8268] netlink: 'syz.3.817': attribute type 1 has an invalid length. [ 142.492082][ T8268] bond14: entered promiscuous mode [ 142.492318][ T8268] 8021q: adding VLAN 0 to HW filter on device bond14 [ 142.503591][ T8268] macvtap9: entered allmulticast mode [ 142.512513][ T8268] macvtap10: entered allmulticast mode [ 142.516734][ T8268] netlink: 28 bytes leftover after parsing attributes in process `syz.3.817'. [ 142.577173][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.820'. [ 142.706537][ T1329] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 142.707658][ T1329] usb 5-1: USB disconnect, device number 16 [ 142.795582][ T30] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 142.861983][ T8280] netlink: 'syz.3.822': attribute type 1 has an invalid length. [ 142.885755][ T8280] bond15: entered promiscuous mode [ 142.886000][ T8280] 8021q: adding VLAN 0 to HW filter on device bond15 [ 142.889644][ T8280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.822'. [ 142.889996][ T8283] CacheFiles: Failed to register: -95 [ 142.904894][ T8280] 8021q: adding VLAN 0 to HW filter on device bond15 [ 142.905168][ T8280] bond15: (slave wireguard2): The slave device specified does not support setting the MAC address [ 142.905185][ T8280] bond15: (slave wireguard2): Setting fail_over_mac to active for active-backup mode [ 142.918303][ T8280] bond15: (slave wireguard2): making interface the new active one [ 142.918326][ T8280] wireguard2: entered promiscuous mode [ 142.921766][ T8286] fuse: Unknown parameter 'user_id00000000000000000000' [ 142.924278][ T8280] bond15: (slave wireguard2): Enslaving as an active interface with an up link [ 142.946585][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 142.948965][ T30] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 142.949969][ T30] usb 6-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 142.949989][ T30] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 142.950022][ T30] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.950054][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.982505][ T30] hub 6-1:1.0: bad descriptor, ignoring hub [ 142.982521][ T30] hub 6-1:1.0: probe with driver hub failed with error -5 [ 142.982742][ T30] cdc_wdm 6-1:1.0: skipping garbage [ 142.982749][ T30] cdc_wdm 6-1:1.0: skipping garbage [ 142.982758][ T30] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 143.034488][ T8293] syzkaller1: entered promiscuous mode [ 143.034504][ T8293] syzkaller1: entered allmulticast mode [ 143.296097][ T42] usb 6-1: USB disconnect, device number 25 [ 143.521239][ T8309] CacheFiles: Failed to register: -95 [ 143.584837][ T8311] netlink: 'syz.3.834': attribute type 1 has an invalid length. [ 143.602310][ T8311] bond16: entered promiscuous mode [ 143.602601][ T8311] 8021q: adding VLAN 0 to HW filter on device bond16 [ 143.611092][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.834'. [ 143.621247][ T8311] 8021q: adding VLAN 0 to HW filter on device bond16 [ 143.621407][ T8311] bond16: (slave wireguard3): The slave device specified does not support setting the MAC address [ 143.621417][ T8311] bond16: (slave wireguard3): Setting fail_over_mac to active for active-backup mode [ 143.623813][ T8311] bond16: (slave wireguard3): making interface the new active one [ 143.623826][ T8311] wireguard3: entered promiscuous mode [ 143.624629][ T8311] bond16: (slave wireguard3): Enslaving as an active interface with an up link [ 143.945614][ T30] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 144.076378][ T8321] gadgetfs: bound to dummy_udc driver [ 144.115565][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 144.116357][ T30] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 144.120429][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 144.120470][ T30] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 144.120487][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 144.120505][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 144.124707][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.124729][ T30] usb 8-1: Product: syz [ 144.124740][ T30] usb 8-1: Manufacturer: syz [ 144.124753][ T30] usb 8-1: SerialNumber: syz [ 144.140687][ T30] usb 8-1: config 0 descriptor?? [ 144.141320][ T8317] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 144.200995][ T8326] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 144.256313][ T8326] md: couldn't update array info. -22 [ 144.295643][ T8327] md: could not open device unknown-block(1,1). [ 144.295675][ T8327] md: md_import_device returned -16 [ 144.325554][ T10] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 144.325816][ C0] gadgetfs: connected [ 144.325895][ T10] gadgetfs: disconnected [ 144.359031][ T30] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 144.361244][ T30] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input41 [ 144.496182][ C0] gadgetfs: connected [ 144.497092][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 144.497333][ T10] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 144.497351][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.500464][ C0] gadgetfs: configuration #1 [ 144.576931][ C1] powermate: config urb returned -71 [ 144.577123][ C1] powermate: config urb returned -71 [ 144.577247][ T30] usb 8-1: USB disconnect, device number 20 [ 144.577297][ C1] powermate: config urb returned -71 [ 144.577303][ C1] powermate: usb_submit_urb(config) failed [ 144.577317][ C1] powermate 8-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 144.659773][ T8337] netlink: 'syz.0.843': attribute type 1 has an invalid length. [ 144.669531][ T8337] bond10: entered promiscuous mode [ 144.669698][ T8337] 8021q: adding VLAN 0 to HW filter on device bond10 [ 144.673349][ T8337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.843'. [ 144.960546][ T8342] CacheFiles: Failed to register: -95 [ 145.317543][ T8322] gadgetfs: suspended from state 3 [ 145.317853][ T10] usb 5-1: can't set config #1, error -71 [ 145.319736][ T10] usb 5-1: USB disconnect, device number 17 [ 145.320183][ T8322] gadgetfs: disconnected [ 145.728486][ T8355] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 145.775866][ T8355] md: couldn't update array info. -22 [ 145.835832][ T8355] md: could not open device unknown-block(1,1). [ 145.835867][ T8355] md: md_import_device returned -16 [ 145.888533][ T8358] netlink: 'syz.1.849': attribute type 4 has an invalid length. [ 145.959989][ T8362] netlink: 'syz.0.851': attribute type 1 has an invalid length. [ 145.990653][ T8365] netlink: 'syz.1.852': attribute type 1 has an invalid length. [ 145.994321][ T8362] bond11: entered promiscuous mode [ 145.994721][ T8362] 8021q: adding VLAN 0 to HW filter on device bond11 [ 146.024030][ T8365] bond15: entered promiscuous mode [ 146.024311][ T8365] 8021q: adding VLAN 0 to HW filter on device bond15 [ 146.030967][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.852'. [ 146.034690][ T8368] CacheFiles: Failed to register: -95 [ 146.044030][ T8362] macvtap5: entered allmulticast mode [ 146.050632][ T8362] macvtap6: entered allmulticast mode [ 146.051896][ T8362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.851'. [ 146.127167][ T8379] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 146.165963][ T8379] md: could not open device unknown-block(1,0). [ 146.165994][ T8379] md: md_import_device returned -16 [ 146.206238][ T8379] md: could not open device unknown-block(1,1). [ 146.206276][ T8379] md: md_import_device returned -16 [ 146.315762][ T5820] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 146.465601][ T5820] usb 8-1: Using ep0 maxpacket: 8 [ 146.466113][ T5820] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 146.467003][ T5820] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 146.467025][ T5820] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 146.467038][ T5820] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 146.467050][ T5820] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 146.468922][ T5820] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.468934][ T5820] usb 8-1: Product: syz [ 146.468942][ T5820] usb 8-1: Manufacturer: syz [ 146.468949][ T5820] usb 8-1: SerialNumber: syz [ 146.470103][ T5820] usb 8-1: config 0 descriptor?? [ 146.473187][ T8371] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 146.678450][ T5820] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 146.680054][ T5820] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input43 [ 146.883355][ C3] powermate: config urb returned -71 [ 146.883616][ C3] powermate: config urb returned -71 [ 146.883956][ C3] powermate: config urb returned -71 [ 146.884060][ T5820] usb 8-1: USB disconnect, device number 21 [ 146.884168][ C3] powermate: config urb returned -71 [ 146.884196][ C3] powermate 8-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 146.886437][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 147.036320][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 147.037241][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.037279][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.040265][ T9] usb 6-1: config 0 descriptor?? [ 147.436669][ T8396] netlink: 'syz.3.863': attribute type 1 has an invalid length. [ 147.450080][ T9] ath6kl: Failed to read usb control message: -32 [ 147.450120][ T9] ath6kl: Unable to read the bmi data from the device: -32 [ 147.450132][ T9] ath6kl: Unable to recv target info: -32 [ 147.451588][ T9] ath6kl: Failed to init ath6kl core: -32 [ 147.451827][ T9] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 147.466563][ T9] usb 6-1: USB disconnect, device number 26 [ 147.474422][ T8396] bond17: entered promiscuous mode [ 147.474611][ T8396] 8021q: adding VLAN 0 to HW filter on device bond17 [ 147.480945][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.863'. [ 147.578887][ T8405] CacheFiles: Failed to register: -95 [ 147.611110][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.867'. [ 147.712209][ T8409] syzkaller1: entered promiscuous mode [ 147.712225][ T8409] syzkaller1: entered allmulticast mode [ 148.095632][ T8419] netlink: 'syz.3.872': attribute type 1 has an invalid length. [ 148.109218][ T8419] bond18: entered promiscuous mode [ 148.109451][ T8419] 8021q: adding VLAN 0 to HW filter on device bond18 [ 148.115447][ T8419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.872'. [ 148.204896][ T8427] netlink: 'syz.3.873': attribute type 4 has an invalid length. [ 148.911274][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.876'. [ 149.301798][ T8445] netlink: 'syz.0.881': attribute type 1 has an invalid length. [ 149.314559][ T8445] bond12: entered promiscuous mode [ 149.314760][ T8445] 8021q: adding VLAN 0 to HW filter on device bond12 [ 149.315785][ T5820] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 149.319841][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.881'. [ 149.479241][ T5820] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 149.480425][ T5820] usb 6-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 149.481959][ T5820] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 149.481983][ T5820] usb 6-1: Manufacturer: syz [ 149.482001][ T5820] usb 6-1: SerialNumber: syz [ 149.542544][ T8449] syzkaller1: entered promiscuous mode [ 149.542607][ T8449] syzkaller1: entered allmulticast mode [ 149.861625][ T5820] usbhid 6-1:36.0: couldn't find an input interrupt endpoint [ 149.866568][ T5820] usb 6-1: USB disconnect, device number 27 [ 150.633744][ T8460] CacheFiles: Failed to register: -95 [ 150.670504][ T8462] wlan0 speed is unknown, defaulting to 1000 [ 150.670558][ T8462] wlan0 speed is unknown, defaulting to 1000 [ 150.681046][ T8462] wlan0 speed is unknown, defaulting to 1000 [ 150.690034][ T8462] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 150.690070][ T8462] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 150.690110][ T8462] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 150.703562][ T8462] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 150.774476][ T8462] wlan0 speed is unknown, defaulting to 1000 [ 150.803113][ T8462] wlan0 speed is unknown, defaulting to 1000 [ 150.840196][ T8462] wlan0 speed is unknown, defaulting to 1000 [ 150.862204][ T8462] wlan0 speed is unknown, defaulting to 1000 [ 150.928795][ T8465] Need at least one configuration in g1. [ 150.929039][ T8465] udc usbip-vudc.0: failed to start g1: -22 [ 150.929059][ T8465] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 150.935222][ T8465] UDC core: g1: couldn't find an available UDC or it's busy [ 151.462507][ T8477] netlink: 24 bytes leftover after parsing attributes in process `syz.2.893'. [ 151.463214][ T8477] netlink: 24 bytes leftover after parsing attributes in process `syz.2.893'. [ 151.505709][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 151.531046][ T8480] CacheFiles: Failed to register: -95 [ 151.649778][ T43] audit: type=1326 audit(1789462332.499:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.2.896" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f98fec code=0x0 [ 151.675614][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 151.676168][ T10] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 151.677038][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 151.677070][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 151.677088][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 151.677104][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 151.679056][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.679075][ T10] usb 5-1: Product: syz [ 151.679087][ T10] usb 5-1: Manufacturer: syz [ 151.679099][ T10] usb 5-1: SerialNumber: syz [ 151.711899][ T43] audit: type=1326 audit(1789462332.559:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.2.896" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 151.711943][ T43] audit: type=1326 audit(1789462332.559:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.2.896" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 151.714527][ T43] audit: type=1326 audit(1789462332.559:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.2.896" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 151.719812][ T43] audit: type=1326 audit(1789462332.569:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.2.896" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f99008 code=0x7ffc0000 [ 151.719853][ T43] audit: type=1326 audit(1789462332.569:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.2.896" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 151.719886][ T43] audit: type=1326 audit(1789462332.569:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.2.896" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 151.720394][ T43] audit: type=1326 audit(1789462332.569:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.2.896" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 151.720429][ T43] audit: type=1326 audit(1789462332.569:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.2.896" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 151.720460][ T43] audit: type=1326 audit(1789462332.569:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.2.896" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 151.802666][ T10] usb 5-1: config 0 descriptor?? [ 151.803575][ T8468] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.007109][ T10] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 152.011294][ T10] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input45 [ 152.212116][ C0] powermate: config urb returned -71 [ 152.212259][ T30] usb 5-1: USB disconnect, device number 18 [ 152.212336][ C0] powermate: config urb returned -71 [ 152.212346][ C0] powermate: usb_submit_urb(config) failed [ 152.212371][ C0] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 152.266732][ T8507] netlink: 24 bytes leftover after parsing attributes in process `syz.3.905'. [ 152.267184][ T8507] netlink: 24 bytes leftover after parsing attributes in process `syz.3.905'. [ 152.312206][ T8509] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 152.469513][ T8515] netlink: 'syz.2.909': attribute type 1 has an invalid length. [ 152.488852][ T8515] bond14: entered promiscuous mode [ 152.489173][ T8515] 8021q: adding VLAN 0 to HW filter on device bond14 [ 152.509613][ T8515] macvtap4: entered allmulticast mode [ 152.521879][ T8515] macvtap5: entered allmulticast mode [ 152.523763][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.909'. [ 152.523781][ T8515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.909'. [ 152.578932][ T8520] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 152.807948][ T8529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.915'. [ 152.808326][ T8529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.915'. [ 152.860612][ T8531] ima: policy update completed [ 152.907374][ T8533] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 152.964044][ T8538] netlink: 9 bytes leftover after parsing attributes in process `syz.0.918'. [ 152.964375][ T8538] FAULT_INJECTION: forcing a failure. [ 152.964375][ T8538] name failslab, interval 1, probability 0, space 0, times 0 [ 152.964397][ T8538] CPU: 1 UID: 0 PID: 8538 Comm: syz.0.918 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.964415][ T8538] Tainted: [L]=SOFTLOCKUP [ 152.964419][ T8538] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.964426][ T8538] Call Trace: [ 152.964430][ T8538] [ 152.964435][ T8538] dump_stack_lvl+0x100/0x190 [ 152.964454][ T8538] should_fail_ex.cold+0x5/0xa [ 152.964470][ T8538] should_failslab+0xc2/0x120 [ 152.964485][ T8538] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 152.964500][ T8538] ? __alloc_skb+0x140/0x710 [ 152.964516][ T8538] __alloc_skb+0x140/0x710 [ 152.964529][ T8538] ? __alloc_skb+0x5b7/0x710 [ 152.964543][ T8538] ? __pfx___alloc_skb+0x10/0x10 [ 152.964561][ T8538] __neigh_notify+0xe6/0x350 [ 152.964579][ T8538] neigh_cleanup_and_release+0x97/0x2d0 [ 152.964596][ T8538] neigh_flush_dev.isra.0+0x146/0x1b0 [ 152.964615][ T8538] neigh_changeaddr+0x54/0x70 [ 152.964627][ T8538] ndisc_netdev_event+0xf4/0x560 [ 152.964645][ T8538] notifier_call_chain+0x99/0x3f0 [ 152.964659][ T8538] call_netdevice_notifiers_info+0xbe/0x110 [ 152.964677][ T8538] netif_set_mac_address+0x370/0x4a0 [ 152.964692][ T8538] ? __pfx_netif_set_mac_address+0x10/0x10 [ 152.964710][ T8538] ? __pfx_down_write+0x10/0x10 [ 152.964725][ T8538] ? tick_nohz_tick_stopped+0x6c/0xa0 [ 152.964745][ T8538] do_setlink.isra.0+0x75f/0x3e60 [ 152.964766][ T8538] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 152.964783][ T8538] ? __lock_acquire+0x5c0/0x1f40 [ 152.964800][ T8538] ? ___ratelimit+0x642/0xae0 [ 152.964818][ T8538] ? find_held_lock+0x2b/0x80 [ 152.964832][ T8538] ? ___ratelimit+0x77b/0xae0 [ 152.964850][ T8538] ? lock_acquire+0x1d1/0x380 [ 152.964864][ T8538] ? rtnl_setlink+0x4dd/0xac0 [ 152.964880][ T8538] ? rcu_is_watching+0x13/0xc0 [ 152.964892][ T8538] ? trace_contention_end+0x126/0x160 [ 152.964907][ T8538] ? __mutex_lock+0x26c/0x1bd0 [ 152.964923][ T8538] ? rtnl_setlink+0x4dd/0xac0 [ 152.964937][ T8538] ? __nla_validate_parse+0x1e7/0x28b0 [ 152.964958][ T8538] ? netlink_ns_capable+0xfa/0x130 [ 152.964971][ T8538] rtnl_setlink+0x5fd/0xac0 [ 152.964988][ T8538] ? __pfx_rtnl_setlink+0x10/0x10 [ 152.965002][ T8538] ? __kasan_slab_free+0x5f/0x80 [ 152.965017][ T8538] ? __dev_queue_xmit+0x1bbf/0x4970 [ 152.965028][ T8538] ? netlink_deliver_tap+0xa4d/0xcc0 [ 152.965038][ T8538] ? netlink_unicast+0x62b/0x850 [ 152.965050][ T8538] ? netlink_sendmsg+0x8b0/0xda0 [ 152.965061][ T8538] ? sock_write_iter+0x53a/0x5b0 [ 152.965095][ T8538] ? __lock_acquire+0x5c0/0x1f40 [ 152.965112][ T8538] ? find_held_lock+0x2b/0x80 [ 152.965126][ T8538] ? lock_acquire+0x1d1/0x380 [ 152.965140][ T8538] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 152.965156][ T8538] ? find_held_lock+0x2b/0x80 [ 152.965167][ T8538] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 152.965181][ T8538] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 152.965197][ T8538] ? __pfx_rtnl_setlink+0x10/0x10 [ 152.965213][ T8538] rtnetlink_rcv_msg+0x95e/0xe90 [ 152.965232][ T8538] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 152.965251][ T8538] ? ref_tracker_free+0x37e/0x6c0 [ 152.965269][ T8538] netlink_rcv_skb+0x159/0x420 [ 152.965281][ T8538] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 152.965298][ T8538] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 152.965315][ T8538] ? netlink_deliver_tap+0x1ae/0xcc0 [ 152.965329][ T8538] netlink_unicast+0x585/0x850 [ 152.965344][ T8538] ? __pfx_netlink_unicast+0x10/0x10 [ 152.965360][ T8538] netlink_sendmsg+0x8b0/0xda0 [ 152.965375][ T8538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.965408][ T8538] ? apparmor_socket_sendmsg+0x165/0x280 [ 152.965425][ T8538] sock_write_iter+0x53a/0x5b0 [ 152.965437][ T8538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.965450][ T8538] ? __pfx_sock_write_iter+0x10/0x10 [ 152.965469][ T8538] do_iter_readv_writev+0x6f7/0x930 [ 152.965489][ T8538] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 152.965505][ T8538] ? common_file_perm+0x266/0x500 [ 152.965523][ T8538] ? bpf_lsm_file_permission+0x9/0x10 [ 152.965537][ T8538] ? security_file_permission+0x76/0x210 [ 152.965554][ T8538] ? rw_verify_area+0xce/0x6d0 [ 152.965571][ T8538] vfs_writev+0x360/0xdd0 [ 152.965582][ T8538] ? __lock_acquire+0x5c0/0x1f40 [ 152.965598][ T8538] ? __pfx_vfs_writev+0x10/0x10 [ 152.965608][ T8538] ? percpu_counter_add_batch+0xb9/0x230 [ 152.965624][ T8538] ? lock_acquire+0x1d1/0x380 [ 152.965637][ T8538] ? __fget_files+0x34/0x3d0 [ 152.965654][ T8538] ? __fget_files+0x21f/0x3d0 [ 152.965669][ T8538] ? do_writev+0x28a/0x340 [ 152.965678][ T8538] do_writev+0x28a/0x340 [ 152.965688][ T8538] ? __pfx_do_writev+0x10/0x10 [ 152.965702][ T8538] __do_fast_syscall_32+0x13a/0x8b0 [ 152.965730][ T8538] do_fast_syscall_32+0x32/0x70 [ 152.965747][ T8538] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 152.965762][ T8538] RIP: 0023:0xf705efec [ 152.965775][ T8538] Code: Unable to access opcode bytes at 0xf705efc2. [ 152.965780][ T8538] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 152.965791][ T8538] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 152.965798][ T8538] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 152.965804][ T8538] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 152.965810][ T8538] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 152.965816][ T8538] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 152.965829][ T8538] [ 152.969400][ T8540] netlink: 'syz.1.919': attribute type 1 has an invalid length. [ 152.974363][ T8538] gretap0: entered promiscuous mode [ 152.993424][ T8540] bond16: entered promiscuous mode [ 152.993617][ T8540] 8021q: adding VLAN 0 to HW filter on device bond16 [ 153.014925][ T8540] macvtap6: entered allmulticast mode [ 153.038537][ T8540] macvtap7: entered allmulticast mode [ 153.041476][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'. [ 153.878960][ T8553] fuse: Unknown parameter '0x0000000000000005' [ 154.096918][ T8559] tap0: tun_chr_ioctl cmd 1074025675 [ 154.096938][ T8559] tap0: persist enabled [ 154.122311][ T8559] tap0: tun_chr_ioctl cmd 1074025678 [ 154.122334][ T8559] tap0: group set to 8388608 [ 154.351475][ T8564] syzkaller1: entered promiscuous mode [ 154.351499][ T8564] syzkaller1: entered allmulticast mode [ 155.095592][ T5808] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 155.238828][ T8589] nbd: must specify at least one socket [ 155.245576][ T5808] usb 5-1: Using ep0 maxpacket: 8 [ 155.246025][ T5808] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 155.247849][ T5808] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 155.247876][ T5808] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.247888][ T5808] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 155.247923][ T5808] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.247935][ T5808] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.247955][ T5808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.453542][ T5808] usb 5-1: GET_CAPABILITIES returned 0 [ 155.453581][ T5808] usbtmc 5-1:16.0: can't read capabilities [ 155.480406][ T8593] wlan0 speed is unknown, defaulting to 1000 [ 155.656179][ T25] usb 5-1: USB disconnect, device number 19 [ 156.085758][ T8602] CacheFiles: Failed to register: -95 [ 156.377090][ T8609] Need at least one configuration in g1. [ 156.377151][ T8609] udc usbip-vudc.0: failed to start g1: -22 [ 156.377163][ T8609] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 156.378082][ T8609] UDC core: g1: couldn't find an available UDC or it's busy [ 156.549468][ T8621] syzkaller1: entered promiscuous mode [ 156.549483][ T8621] syzkaller1: entered allmulticast mode [ 156.683774][ T43] kauditd_printk_skb: 53 callbacks suppressed [ 156.683787][ T43] audit: type=1800 audit(1789462337.529:97): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 156.721530][ T43] audit: type=1800 audit(1789462337.569:98): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 156.757716][ T43] audit: type=1800 audit(1789462337.609:99): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 156.800585][ T8627] __nla_validate_parse: 9 callbacks suppressed [ 156.800606][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.950'. [ 156.854212][ T8627] wlan0 speed is unknown, defaulting to 1000 [ 157.019685][ T43] audit: type=1800 audit(1789462337.869:100): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 157.075953][ T43] audit: type=1800 audit(1789462337.929:101): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=129358 res=0 errno=0 [ 157.158775][ T43] audit: type=1800 audit(1789462338.009:102): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 157.165884][ T8636] CacheFiles: Failed to register: -95 [ 157.214268][ T43] audit: type=1800 audit(1789462338.059:103): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=129358 res=0 errno=0 [ 157.285690][ T43] audit: type=1800 audit(1789462338.139:104): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=129358 res=0 errno=0 [ 157.386057][ T43] audit: type=1800 audit(1789462338.229:105): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=129358 res=0 errno=0 [ 157.630103][ T43] audit: type=1800 audit(1789462338.479:106): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 158.036355][ T8654] md: couldn't update array info. -22 [ 158.077590][ T8657] [ 158.078677][ T8657] ====================================================== [ 158.081667][ T8657] WARNING: possible circular locking dependency detected [ 158.084639][ T8657] syzkaller #0 Tainted: G L [ 158.087223][ T8657] ------------------------------------------------------ [ 158.090099][ T8657] syz.1.959/8657 is trying to acquire lock: [ 158.092287][ T8657] ffffffff8f9bb760 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 158.095290][ T8657] [ 158.095290][ T8657] but task is already holding lock: [ 158.097576][ T8657] ffff88804c5cc358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: md_ioctl+0x111d/0x36d0 [ 158.100480][ T8657] [ 158.100480][ T8657] which lock already depends on the new lock. [ 158.100480][ T8657] [ 158.104144][ T8657] [ 158.104144][ T8657] the existing dependency chain (in reverse order) is: [ 158.107618][ T8657] [ 158.107618][ T8657] -> #3 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 158.110213][ T8657] lock_acquire+0x1d1/0x380 [ 158.111803][ T8657] __mutex_lock+0x1a4/0x1bd0 [ 158.113921][ T8657] md_start_sync+0xc4/0xea0 [ 158.116081][ T8657] process_one_work+0xac7/0x1b10 [ 158.118353][ T8657] worker_thread+0x5ef/0xe50 [ 158.120567][ T8657] kthread+0x373/0x450 [ 158.122610][ T8657] ret_from_fork+0x730/0xd60 [ 158.124811][ T8657] ret_from_fork_asm+0x1a/0x30 [ 158.127048][ T8657] [ 158.127048][ T8657] -> #2 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}: [ 158.130448][ T8657] lock_acquire+0x1d1/0x380 [ 158.132073][ T8657] process_one_work+0xa32/0x1b10 [ 158.134334][ T8657] worker_thread+0x5ef/0xe50 [ 158.136017][ T8657] kthread+0x373/0x450 [ 158.137500][ T8657] ret_from_fork+0x730/0xd60 [ 158.139132][ T8657] ret_from_fork_asm+0x1a/0x30 [ 158.140795][ T8657] [ 158.140795][ T8657] -> #1 ((wq_completion)md_misc){+.+.}-{0:0}: [ 158.143503][ T8657] lock_acquire+0x1d1/0x380 [ 158.145216][ T8657] touch_wq_lockdep_map+0xad/0x1c0 [ 158.147249][ T8657] __flush_workqueue+0x131/0x1200 [ 158.149394][ T8657] md_alloc+0x30/0x10a0 [ 158.150942][ T8657] md_probe+0x73/0xf0 [ 158.152890][ T8657] blk_probe_dev+0x149/0x1e0 [ 158.154925][ T8657] blk_request_module+0x16/0xc0 [ 158.156822][ T8657] blkdev_get_no_open+0x9b/0xf0 [ 158.158616][ T8657] bdev_file_open_by_dev+0x70/0x210 [ 158.160487][ T8657] swsusp_check+0x72/0x470 [ 158.162082][ T8657] software_resume+0x6f/0x330 [ 158.164281][ T8657] resume_store+0x248/0x460 [ 158.166401][ T8657] kobj_attr_store+0x58/0x80 [ 158.168565][ T8657] sysfs_kf_write+0xf2/0x150 [ 158.170713][ T8657] kernfs_fop_write_iter+0x3e0/0x5f0 [ 158.173341][ T8657] vfs_write+0x6af/0x1050 [ 158.175395][ T8657] ksys_write+0x12a/0x250 [ 158.177288][ T8657] __do_fast_syscall_32+0x13a/0x8b0 [ 158.179592][ T8657] do_fast_syscall_32+0x32/0x70 [ 158.181845][ T8657] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.184575][ T8657] [ 158.184575][ T8657] -> #0 (major_names_lock){+.+.}-{4:4}: [ 158.187407][ T8657] check_prev_add+0xeb/0xe60 [ 158.189469][ T8657] __lock_acquire+0x1528/0x1f40 [ 158.191749][ T8657] lock_acquire+0x1d1/0x380 [ 158.193932][ T8657] __mutex_lock+0x1a4/0x1bd0 [ 158.196113][ T8657] blk_probe_dev+0x28/0x1e0 [ 158.198253][ T8657] blk_request_module+0x16/0xc0 [ 158.200527][ T8657] blkdev_get_no_open+0x9b/0xf0 [ 158.202801][ T8657] bdev_file_open_by_dev+0x70/0x210 [ 158.205213][ T8657] md_import_device+0x120/0x360 [ 158.207458][ T8657] md_add_new_disk+0xcc0/0x1820 [ 158.209706][ T8657] md_ioctl+0x2bec/0x36d0 [ 158.211754][ T8657] compat_blkdev_ioctl+0x682/0x7b0 [ 158.214299][ T8657] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 158.216871][ T8657] __do_fast_syscall_32+0x13a/0x8b0 [ 158.219275][ T8657] do_fast_syscall_32+0x32/0x70 [ 158.221569][ T8657] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.224590][ T8657] [ 158.224590][ T8657] other info that might help us debug this: [ 158.224590][ T8657] [ 158.228736][ T8657] Chain exists of: [ 158.228736][ T8657] major_names_lock --> (work_completion)(&mddev->sync_work) --> &mddev->reconfig_mutex [ 158.228736][ T8657] [ 158.235122][ T8657] Possible unsafe locking scenario: [ 158.235122][ T8657] [ 158.238245][ T8657] CPU0 CPU1 [ 158.240506][ T8657] ---- ---- [ 158.242716][ T8657] lock(&mddev->reconfig_mutex); [ 158.244844][ T8657] lock((work_completion)(&mddev->sync_work)); [ 158.248330][ T8657] lock(&mddev->reconfig_mutex); [ 158.251209][ T8657] lock(major_names_lock); [ 158.253088][ T8657] [ 158.253088][ T8657] *** DEADLOCK *** [ 158.253088][ T8657] [ 158.256248][ T8657] locks held by syz.1.959/8657: 1, last CPU#2: [ 158.258489][ T8657] #0: ffff88804c5cc358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: md_ioctl+0x111d/0x36d0 [ 158.261525][ T8657] [ 158.261525][ T8657] stack backtrace: [ 158.263545][ T8657] CPU: 2 UID: 0 PID: 8657 Comm: syz.1.959 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.266919][ T8657] Tainted: [L]=SOFTLOCKUP [ 158.268278][ T8657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.271387][ T8657] Call Trace: [ 158.272604][ T8657] [ 158.273873][ T8657] dump_stack_lvl+0x100/0x190 [ 158.275885][ T8657] print_circular_bug.cold+0x178/0x1be [ 158.278026][ T8657] check_noncircular+0x146/0x160 [ 158.279613][ T8657] check_prev_add+0xeb/0xe60 [ 158.281079][ T8657] ? find_held_lock+0x2b/0x80 [ 158.282631][ T8657] __lock_acquire+0x1528/0x1f40 [ 158.284206][ T8657] lock_acquire+0x1d1/0x380 [ 158.285800][ T8657] ? blk_probe_dev+0x28/0x1e0 [ 158.287284][ T8657] ? __pfx___might_resched+0x10/0x10 [ 158.288948][ T8657] ? do_fast_syscall_32+0x32/0x70 [ 158.290531][ T8657] __mutex_lock+0x1a4/0x1bd0 [ 158.292003][ T8657] ? blk_probe_dev+0x28/0x1e0 [ 158.293992][ T8657] ? blk_probe_dev+0x28/0x1e0 [ 158.295706][ T8657] ? lock_acquire+0x1d1/0x380 [ 158.297134][ T8657] ? find_inode_fast+0xa5/0xa30 [ 158.298672][ T8657] ? find_held_lock+0x2b/0x80 [ 158.300042][ T8657] ? __pfx___mutex_lock+0x10/0x10 [ 158.301594][ T8657] ? find_inode_fast+0x1fa/0xa30 [ 158.303508][ T8657] ? blk_probe_dev+0x28/0x1e0 [ 158.305385][ T8657] blk_probe_dev+0x28/0x1e0 [ 158.306826][ T8657] blk_request_module+0x16/0xc0 [ 158.308384][ T8657] blkdev_get_no_open+0x9b/0xf0 [ 158.309914][ T8657] bdev_file_open_by_dev+0x70/0x210 [ 158.311537][ T8657] md_import_device+0x120/0x360 [ 158.313463][ T8657] md_add_new_disk+0xcc0/0x1820 [ 158.315537][ T8657] md_ioctl+0x2bec/0x36d0 [ 158.317371][ T8657] ? __pfx_md_ioctl+0x10/0x10 [ 158.319387][ T8657] ? do_vfs_ioctl+0x226/0x13e0 [ 158.321433][ T8657] ? __fget_files+0x34/0x3d0 [ 158.323278][ T8657] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 158.325282][ T8657] ? __pfx_md_compat_ioctl+0x10/0x10 [ 158.326998][ T8657] compat_blkdev_ioctl+0x682/0x7b0 [ 158.328820][ T8657] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 158.331129][ T8657] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 158.333627][ T8657] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 158.335952][ T8657] __do_fast_syscall_32+0x13a/0x8b0 [ 158.338167][ T8657] do_fast_syscall_32+0x32/0x70 [ 158.340203][ T8657] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.342322][ T8657] RIP: 0023:0xf7fc2fec [ 158.344219][ T8657] Code: Unable to access opcode bytes at 0xf7fc2fc2. [ 158.346601][ T8657] RSP: 002b:00000000f546550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 158.349507][ T8657] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000040140921 [ 158.352767][ T8657] RDX: 0000000080000400 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.356196][ T8657] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.359490][ T8657] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 158.362832][ T8657] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.366258][ T8657] [ 158.391758][ T8657] block device autoloading is deprecated and will be removed. [ 165.135986][ T5734] Bluetooth: hci1: command 0x0406 tx timeout [ 165.136018][ T5734] Bluetooth: hci2: command 0x0406 tx timeout [ 165.136118][ T5737] Bluetooth: hci0: command 0x1407 tx timeout