last executing test programs: 54.433601004s ago: executing program 0 (id=1547): syz_open_dev$midi(&(0x7f0000000180), 0x2, 0x2) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') 49.458679698s ago: executing program 1 (id=1548): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0xc}, 0x0, [0x40000000, 0x0, 0x4, 0x3, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x2, 0x3, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x4829d, 0x0, 0x0, 0x0, 0x0, 0x1000008000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x10000, 0x4, 0xfdfffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20040000000, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x100003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1075, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x7, 0x0, 0x20, 0x6, 0xffffffff80000001, 0x2, 0x0, 0xfffffffffffffffc, 0x4]}) 45.682267501s ago: executing program 0 (id=1549): r0 = socket(0x1d, 0x2, 0x6) accept4$llc(r0, 0x0, 0x0, 0x0) 42.832686286s ago: executing program 1 (id=1550): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) 38.299213255s ago: executing program 0 (id=1551): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_delrule={0x1c, 0x18, 0xc961a4b31a2c6a35, 0x0, 0x25dfdbfe, {0xa, 0x80, 0x14, 0x0, 0xff, 0x3, 0x0, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x20048015}, 0x0) 34.33454459s ago: executing program 1 (id=1552): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) 26.070149052s ago: executing program 0 (id=1553): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 21.545160102s ago: executing program 1 (id=1554): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x10, 0x1418, 0x1, 0x0, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x8}, 0x0) 8.434861236s ago: executing program 1 (id=1555): unshare(0x8040480) unshare(0x80) 6.757124781s ago: executing program 0 (id=1556): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newae={0x50, 0x1e, 0x5e74984b1e295b5f, 0x70bd25, 0x25dfdbfc, {{@in=@private=0xa010101, 0x4d5, 0x0, 0x3c}, @in=@multicast1, 0x5, 0x34ff}, [@replay_val={0x10, 0xa, {0x70bd2b, 0x70bd2d, 0x7ff8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x850}, 0x20004810) 127.493249ms ago: executing program 1 (id=1557): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x7000000) 0s ago: executing program 0 (id=1558): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:33122' (ED25519) to the list of known hosts. syzkaller login: [ 672.421482][ T3211] cgroup: Unknown subsys name 'net' [ 673.448762][ T3211] cgroup: Unknown subsys name 'cpuset' [ 673.584939][ T3211] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 768.657295][ T3211] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 966.790142][ T3324] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1082.092954][ T3434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1082.495822][ T3434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1089.488246][ T3433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1089.959684][ T3433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1104.649557][ T3434] hsr_slave_0: entered promiscuous mode [ 1104.717687][ T3434] hsr_slave_1: entered promiscuous mode [ 1108.738737][ T3433] hsr_slave_0: entered promiscuous mode [ 1108.767261][ T3433] hsr_slave_1: entered promiscuous mode [ 1108.793517][ T3433] debugfs: 'hsr0' already exists in 'hsr' [ 1108.795679][ T3433] Cannot create hsr debugfs directory [ 1118.000318][ T3434] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1118.301240][ T3434] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1118.514587][ T3434] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1118.807612][ T3434] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1119.377716][ T3434] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1119.625310][ T3434] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1119.801166][ T3434] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1119.955496][ T3434] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1121.566228][ T3433] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1121.713095][ T3433] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1121.766560][ T3433] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1121.917640][ T3433] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1122.089266][ T3433] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1122.285663][ T3433] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1122.437627][ T3433] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1122.625661][ T3433] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1145.758647][ T3434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1147.034254][ T3433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1217.846784][ T3434] veth0_vlan: entered promiscuous mode [ 1218.806781][ T3434] veth1_vlan: entered promiscuous mode [ 1226.922579][ T3434] veth0_macvtap: entered promiscuous mode [ 1228.903389][ T3434] veth1_macvtap: entered promiscuous mode [ 1231.084226][ T3433] veth0_vlan: entered promiscuous mode [ 1233.858612][ T3433] veth1_vlan: entered promiscuous mode [ 1236.407801][ T1367] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.677570][ T3518] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.745692][ T3321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.206611][ T47] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.628069][ T3433] veth0_macvtap: entered promiscuous mode [ 1242.660032][ T3433] veth1_macvtap: entered promiscuous mode [ 1248.699649][ T3571] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.708269][ T3571] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.709721][ T3571] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.711035][ T3571] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.107240][ T4052] tmpfs: Bad value for 'mpol' [ 1397.999697][ T31] audit: type=1326 audit(1396.360:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4113 comm="syz.1.88" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0x7fffae33427a code=0x0 [ 1971.738404][ T31] audit: type=1326 audit(1970.170:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.0.230" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0x7fffa7f3427a code=0x0 [ 2138.178590][ T3217] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2139.017796][ T3217] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 2139.278395][ T3217] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 2139.286852][ T3217] usb 2-1: config 0 has no interface number 0 [ 2139.314069][ T3217] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x7 has an invalid bInterval 129, changing to 11 [ 2139.318374][ T3217] usb 2-1: config 0 interface 11 altsetting 253 has a duplicate endpoint with address 0x87, skipping [ 2139.325439][ T3217] usb 2-1: config 0 interface 11 has no altsetting 0 [ 2139.330379][ T3217] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2140.040473][ T3217] usb 2-1: config 0 descriptor?? [ 2141.099264][ T3217] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected [ 2141.368912][ T3217] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 87 [ 2141.574173][ T3217] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 2141.578737][ T3217] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 2141.594968][ T3217] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 2141.601241][ T3217] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 2141.645688][ T3217] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85 [ 2141.660591][ T3217] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5 [ 2142.234417][ T3217] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 2143.197717][ T3217] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 2143.199069][ T3217] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 2143.200167][ T3217] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 2143.201182][ T3217] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 2143.221341][ T3217] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86 [ 2143.343828][ T3217] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6 [ 2143.794270][ T3217] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 2144.380571][ T3217] usb 2-1: USB disconnect, device number 2 [ 2145.824068][ T3217] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 2146.940113][ T3217] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 2147.189436][ T3217] keyspan 2-1:0.11: device disconnected [ 2263.798153][ T4576] capability: warning: `syz.0.297' uses 32-bit capabilities (legacy support in use) [ 2342.958837][ T4614] Device tree not included in the provided image [ 2621.495200][ T4778] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 2738.664653][ T29] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 2739.109550][ T29] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 2739.237097][ T29] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2739.244935][ T29] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 14, setting to 8 [ 2739.256045][ T29] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2739.256920][ T29] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2739.260238][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2739.687017][ T29] usb 2-1: config 0 descriptor?? [ 2740.065884][ T4842] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2741.721032][ T29] usbhid 2-1:0.0: can't add hid device: -71 [ 2741.794999][ T29] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2742.460771][ T29] usb 2-1: USB disconnect, device number 3 [ 2776.480708][ T4877] Device name cannot be null; rc = [-22] [ 2784.834338][ T4241] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2785.248359][ T4241] usb 2-1: Using ep0 maxpacket: 8 [ 2786.974918][ T4241] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 2787.308616][ T4241] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 2787.325460][ T4241] usb 2-1: config 0 has no interface number 0 [ 2787.345240][ T4241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2787.925980][ T4241] usb 2-1: config 0 descriptor?? [ 2788.616085][ T4241] viperboard 2-1:0.143: version 0.00 found at bus 002 address 004 [ 2789.685301][ T4241] viperboard-i2c viperboard-i2c.1.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 2789.690276][ T4241] viperboard-i2c viperboard-i2c.1.auto: probe with driver viperboard-i2c failed with error -5 [ 2791.104161][ T4241] usb 2-1: USB disconnect, device number 4 [ 2828.199022][ T4937] cgroup: noprefix used incorrectly [ 2854.719991][ T4953] X.509: signatureAlgorithm (106) differs from tbsCertificate.signature (7) [ 2984.529840][ T31] audit: type=1326 audit(31234.240:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5042 comm="syz.1.501" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0x7fffae33427a code=0x0 [ 3078.001786][ T5092] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 3147.137901][ T5128] syz.0.540 uses obsolete (PF_INET,SOCK_PACKET) [ 3185.501271][ T5153] IPv6: addrconf: prefix option has invalid lifetime [ 3193.904553][ T5156] capability: warning: `syz.0.553' uses deprecated v2 capabilities in a way that may be insecure [ 3194.222718][ T5157] binder: Bad value for 'max' [ 3212.988315][ T5169] syz.1.559 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 3227.341753][ T5191] futex_wake_op: syz.1.563 tries to shift op by -1; fix this program [ 3258.460431][ T4280] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 3258.956551][ T4280] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 3260.758064][ T4280] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3260.759142][ T4280] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3262.284690][ T4280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3262.285904][ T4280] usb 2-1: Product: syz [ 3262.286267][ T4280] usb 2-1: Manufacturer: syz [ 3262.286543][ T4280] usb 2-1: SerialNumber: syz [ 3268.693327][ T4280] usb 2-1: 0:1 : does not exist [ 3268.717449][ T4280] usb 2-1: BAAD SPEAKER p_chmask mismatch [ 3272.929521][ T4280] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 3273.190912][ T4280] usb 2-1: USB disconnect, device number 5 [ 3322.602908][ T5287] futex_wake_op: syz.1.590 tries to shift op by 144; fix this program [ 3764.303964][ T5539] tmpfs: Bad value for 'mpol' [ 3779.462283][ T5550] Option 'å%%*UÄ' to dns_resolver key: bad/missing value [ 4168.571336][ T5727] bpf: Bad value for 'mode' [ 4204.776064][ T31] audit: type=1326 audit(32515.174:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5742 comm="syz.0.799" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0x7fffa7f3427a code=0x0 [ 4353.193836][ T5807] syz.0.829(5807): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 4558.035188][ T5900] futex_wake_op: syz.1.874 tries to shift op by 32; fix this program [ 4747.919085][ T5975] tmpfs: Unknown parameter 'no' [ 4814.210427][ T6008] tmpfs: Bad value for 'mpol' [ 4869.112864][ T4715] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 4869.270312][ T6044] mmap: syz.0.940 (6044) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 4869.583852][ T4715] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 4869.903595][ T4715] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 4869.904283][ T4715] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 999, setting to 64 [ 4870.154955][ T4715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4870.155704][ T4715] usb 2-1: Product: syz [ 4870.159536][ T4715] usb 2-1: Manufacturer: syz [ 4870.159876][ T4715] usb 2-1: SerialNumber: syz [ 4874.877368][ T4715] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 4874.903099][ T4715] usb 2-1: MIDIStreaming interface descriptor not found [ 4877.616048][ T4715] usb 2-1: USB disconnect, device number 6 [ 4925.941149][ T6102] futex_wake_op: syz.0.955 tries to shift op by 32; fix this program [ 4931.360425][ T31] audit: type=1326 audit(33277.938:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.0.957" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0x7fffa7f3427a code=0x0 [ 4995.923686][ T6154] Option 'dnserror' to dns_resolver key: bad/missing value [ 5016.366458][ T6167] Device tree not included in the provided image [ 5092.818954][ T6242] PKCS7: Unknown OID: [5] (bad) [ 5092.826393][ T6242] PKCS7: Only support pkcs7_signedData type [ 5097.570755][ T5600] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 5098.119265][ T5600] usb 2-1: Using ep0 maxpacket: 8 [ 5098.183807][ T5600] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 5098.624907][ T5600] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 5098.630142][ T5600] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 5098.632743][ T5600] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 5098.633122][ T5600] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 5098.644948][ T5600] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 5098.654782][ T5600] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 5098.879409][ T5600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5098.879968][ T5600] usb 2-1: Product: syz [ 5098.894723][ T5600] usb 2-1: Manufacturer: syz [ 5098.895111][ T5600] usb 2-1: SerialNumber: syz [ 5099.157833][ T5600] usb 2-1: config 0 descriptor?? [ 5099.408921][ T5600] hub 2-1:0.0: bad descriptor, ignoring hub [ 5099.409741][ T5600] hub 2-1:0.0: probe with driver hub failed with error -5 [ 5101.828670][ T5840] usb 2-1: USB disconnect, device number 7 [ 5182.822371][ T31] audit: type=1326 audit(33542.032:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.0.1057" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0x7fffa7f3427a code=0x0 [ 5434.300483][ T6494] devpts: Unknown parameter '' [ 5439.997496][ T6497] syz.1.1142 (6497): attempted to duplicate a private mapping with mremap. This is not supported. [ 5567.837901][ T6558] Process accounting resumed [ 5601.258230][ T6574] Process accounting paused [ 5607.149691][ T31] audit: type=1326 audit(33987.540:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.0.1181" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0x7fffa7f3427a code=0x0 [ 5640.896662][ T6593] Process accounting resumed [ 5673.895202][ T6605] Process accounting paused [ 5675.333065][ T31] audit: type=1326 audit(34053.742:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.0.1197" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0x7fffa7f3427a code=0x0 [ 5709.107996][ T6621] Process accounting resumed [ 5743.981905][ T31] audit: type=1326 audit(34117.985:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.1.1215" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0x7fffae33427a code=0x0 [ 5746.055436][ T6643] Process accounting paused [ 5765.234167][ T31] audit: type=1326 audit(34137.864:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6653 comm="syz.0.1220" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0x7fffa7f3427a code=0x0 [ 5778.388747][ T6659] Process accounting resumed [ 5812.640863][ T6685] Process accounting paused [ 5830.300328][ T6697] cgroup: release_agent respecified [ 5848.457995][ T6704] Process accounting resumed [ 5881.576103][ T6733] Process accounting paused [ 5916.475399][ T6768] Process accounting resumed [ 5949.607857][ T6802] Process accounting paused [ 5981.777999][ T6821] Process accounting resumed [ 6015.054960][ T6850] Process accounting paused [ 6047.462980][ T6870] Process accounting resumed [ 6080.757137][ T6898] Process accounting paused [ 6082.604777][ T6902] PKCS7: Unknown OID: [98] 1.2.10824.113549.1.1.1 [ 6082.605201][ T6902] Unsupported pkey algo: 106 [ 6105.080906][ T6922] No control pipe specified [ 6112.954308][ T6928] Process accounting resumed [ 6145.623780][ T6963] Process accounting paused [ 6175.468097][ T6986] trusted_key: encrypted_key: insufficient parameters specified [ 6179.379293][ T6987] Process accounting resumed [ 6211.917488][ T7021] Process accounting paused [ 6245.537591][ T7042] Process accounting resumed [ 6279.488463][ T7088] Process accounting paused [ 6298.404955][ T7106] tmpfs: Group quota inode hardlimit too large. [ 6312.143588][ T7120] ======================================================= [ 6312.143588][ T7120] WARNING: The mand mount option has been deprecated and [ 6312.143588][ T7120] and is ignored by this kernel. Remove the mand [ 6312.143588][ T7120] option from the mount to silence this warning. [ 6312.143588][ T7120] ======================================================= [ 6312.855203][ T7122] Process accounting resumed [ 6324.808477][ T31] audit: type=1326 audit(34661.320:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7132 comm="syz.1.1441" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0x7fffae33427a code=0x0 [ 6347.506186][ T7152] Process accounting paused [ 6349.222076][ T7155] gretap0: entered promiscuous mode [ 6381.930988][ T7178] Process accounting resumed [ 6401.333048][ T7197] netlink: 'syz.0.1472': attribute type 9 has an invalid length. [ 6417.168713][ T7203] Process accounting paused [ 6447.397168][ T7223] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1482'. [ 6454.760643][ T7227] Process accounting resumed [ 6469.696875][ T7240] xt_TPROXY: Can be used only with -p tcp or -p udp [ 6497.505823][ T7247] Process accounting paused [ 6503.165469][ T7254] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1497'. [ 6534.419086][ T7276] Process accounting resumed [ 6569.379112][ T7287] Process accounting paused [ 6585.528775][ T7295] xt_connbytes: Forcing CT accounting to be enabled [ 6593.116777][ T7299] comedi comedi0: Minor 8 could not be opened [ 6607.865494][ T7303] Process accounting resumed [ 6643.733312][ T7320] Process accounting paused [ 6677.964395][ T7338] Process accounting resumed [ 6697.818455][ T7345] netlink: 766 bytes leftover after parsing attributes in process `syz.0.1541'. [ 6712.282189][ T7350] Process accounting paused [ 6739.321490][ T7365] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 6739.322117][ T7365] IPv6: NLM_F_CREATE should be set when creating new route [ 6739.324086][ T7365] IPv6: NLM_F_CREATE should be set when creating new route [ 6739.325075][ T7365] IPv6: NLM_F_CREATE should be set when creating new route [ 6742.003749][ T7367] netlink: 'syz.1.1552': attribute type 21 has an invalid length. [ 6746.647310][ T7366] Process accounting resumed [ 6771.089306][ C0] ------------[ cut here ]------------ [ 6771.089832][ C0] WARNING: [timer_delete_sync(&sdp->delay_work) && rcu_segcblist_n_cbs(&sdp->srcu_cblist)] kernel/rcu/srcutree.c:706 at cleanup_srcu_struct+0x54c/0x836, CPU#0: syz.1.1557/7381 [ 6771.096904][ C0] Modules linked in: [ 6771.098950][ C0] CPU: 0 UID: 0 PID: 7381 Comm: syz.1.1557 Not tainted syzkaller #0 PREEMPT [ 6771.100926][ C0] Hardware name: riscv-virtio,qemu (DT) [ 6771.102413][ C0] epc : cleanup_srcu_struct+0x54c/0x836 [ 6771.103901][ C0] ra : cleanup_srcu_struct+0x286/0x836 [ 6771.105395][ C0] epc : ffffffff80383db4 ra : ffffffff80383aee sp : ffff8f8001767a60 [ 6771.107042][ C0] gp : ffffffff8a6d9c00 tp : ffffaf8012780000 t0 : ffff8f8001767958 [ 6771.108645][ C0] t1 : ffffffff8007e9b2 t2 : ffffffff9191b3a0 s0 : ffff8f8001767ae0 [ 6771.110235][ C0] s1 : ffffaf801332e000 a0 : 0000000000000001 a1 : 00000000ffffffff [ 6771.111868][ C0] a2 : ffffaf7ffff7e580 a3 : ffffffff804120a4 a4 : 1ffff5effffefc9d [ 6771.113377][ C0] a5 : 0000000000000003 a6 : 0000000000000003 a7 : 0000000041b58ab3 [ 6771.114935][ C0] s2 : 0000000000000000 s3 : ffffaf801b8682f0 s4 : 1ffff5f00370d066 [ 6771.116512][ C0] s5 : ffffaf801b868330 s6 : fffffffef10932c9 s7 : ffffffffffffffff [ 6771.117996][ C0] s8 : ffffaf7ffff7e400 s9 : ffffffff88499648 s10: ffffaf7ffff7e4e8 [ 6771.119584][ C0] s11: ffffffff9191b3a0 t3 : ffffffff8828dcd0 t4 : fffff5ef0b977660 [ 6771.121198][ C0] t5 : fffff5ef0b977661 t6 : 0000000000000002 ssp : 0000000000000000 [ 6771.122864][ C0] status: 0000000200000120 badaddr: ffffffff80383db4 cause: 0000000000000003 [ 6771.124799][ C0] [] cleanup_srcu_struct+0x54c/0x836 [ 6771.126496][ C0] [] blk_mq_free_tag_set+0x2ae/0x464 [ 6771.128195][ C0] [] loop_add+0x884/0xa90 [ 6771.129576][ C0] [] loop_control_ioctl+0xc6/0x60c [ 6771.131081][ C0] [] __riscv_sys_ioctl+0x17c/0x1e2 [ 6771.132774][ C0] [] syscall_handler+0x92/0x114 [ 6771.134409][ C0] [] do_trap_ecall_u+0x4ca/0x658 [ 6771.136036][ C0] [] handle_exception+0x168/0x174 [ 6771.138406][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 6771.140332][ C0] CPU: 0 UID: 0 PID: 7381 Comm: syz.1.1557 Not tainted syzkaller #0 PREEMPT [ 6771.142212][ C0] Hardware name: riscv-virtio,qemu (DT) [ 6771.143417][ C0] Call Trace: [ 6771.144258][ C0] [] dump_backtrace+0x2e/0x3c [ 6771.145681][ C0] [] show_stack+0x30/0x3c [ 6771.147086][ C0] [] dump_stack_lvl+0x114/0x1aa [ 6771.148578][ C0] [] dump_stack+0x1c/0x24 [ 6771.149937][ C0] [] vpanic+0x32e/0x762 [ 6771.151378][ C0] [] trace_suspend_resume+0x0/0x3f6 [ 6771.152935][ C0] [] check_panic_on_warn+0xc0/0xe4 [ 6771.154504][ C0] [] __warn+0x218/0x61a [ 6771.155916][ C0] [] __report_bug+0x166/0x302 [ 6771.157762][ C0] [] report_bug+0xd8/0x28c [ 6771.159402][ C0] [] handle_break+0x13a/0x30c [ 6771.161115][ C0] [] do_trap_break+0x22e/0x458 [ 6771.162675][ C0] [] handle_exception+0x168/0x174 [ 6771.164301][ C0] [] cleanup_srcu_struct+0x54c/0x836 [ 6771.165787][ C0] [] blk_mq_free_tag_set+0x2ae/0x464 [ 6771.167364][ C0] [] loop_add+0x884/0xa90 [ 6771.168683][ C0] [] loop_control_ioctl+0xc6/0x60c [ 6771.170114][ C0] [] __riscv_sys_ioctl+0x17c/0x1e2 [ 6771.171617][ C0] [] syscall_handler+0x92/0x114 [ 6771.173099][ C0] [] do_trap_ecall_u+0x4ca/0x658 [ 6771.174550][ C0] [] handle_exception+0x168/0x174 [ 6771.176471][ C0] SMP: stopping secondary CPUs [ 6771.179470][ C0] Rebooting in 86400 seconds..