last executing test programs: 2.133104025s ago: executing program 0 (id=629): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) fadvise64(r0, 0x7fffffffffffffff, 0xed, 0x3) 2.001804618s ago: executing program 0 (id=631): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone3(&(0x7f0000001200)={0x20110200, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.910342741s ago: executing program 1 (id=632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x20}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 1.910064951s ago: executing program 0 (id=633): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd06, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.749885135s ago: executing program 1 (id=634): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="1fe1bc7f", 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 1.731670725s ago: executing program 0 (id=635): syz_usb_connect(0x2, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="1201000263bac610e90f71db8cfe210203010902120001690640080904"], &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0}) 1.221979738s ago: executing program 1 (id=636): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) r1 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_notify(r1, &(0x7f0000000200)={0x0, 0x26, 0x1, @thr={0x0, 0x0}}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)={0x40, 0x5, 0x2, "2bd8"}}) 978.499805ms ago: executing program 1 (id=637): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 876.326718ms ago: executing program 0 (id=638): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x6c2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0xfffffffc, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x40000000000081, 0x9, 0x5f}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$key(r1, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) 709.043582ms ago: executing program 1 (id=639): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x20000000) 81.679578ms ago: executing program 0 (id=640): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x4000, 0x1000000, 0x2033f, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x8000, 0x2, 0xdfffffff}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=641): r0 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) close(r1) ioctl$MEMREADOOB64(r0, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x8, &(0x7f0000000000)="fdffffffffffffff"}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:23652' (ED25519) to the list of known hosts. syzkaller login: [ 75.791299][ T3368] cgroup: Unknown subsys name 'net' [ 75.967052][ T3368] cgroup: Unknown subsys name 'cpuset' [ 75.980857][ T3368] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.375897][ T3368] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.348858][ T3374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.402103][ T3374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.492800][ T3373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.548501][ T3373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.358421][ T3374] hsr_slave_0: entered promiscuous mode [ 86.363181][ T3374] hsr_slave_1: entered promiscuous mode [ 86.497343][ T3373] hsr_slave_0: entered promiscuous mode [ 86.502443][ T3373] hsr_slave_1: entered promiscuous mode [ 86.507461][ T3373] debugfs: 'hsr0' already exists in 'hsr' [ 86.509278][ T3373] Cannot create hsr debugfs directory [ 87.339004][ T3374] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.367231][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.385128][ T3374] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.402388][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.415267][ T3374] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.435164][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.461852][ T3374] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.483156][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.638430][ T3373] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.653936][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.659249][ T3373] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.677574][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.681469][ T3373] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.699623][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.712306][ T3373] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.730586][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.530835][ T3374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.547319][ T3373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.931161][ T3374] veth0_vlan: entered promiscuous mode [ 91.992088][ T3373] veth0_vlan: entered promiscuous mode [ 92.026082][ T3373] veth1_vlan: entered promiscuous mode [ 92.093003][ T3374] veth1_vlan: entered promiscuous mode [ 92.190070][ T3373] veth0_macvtap: entered promiscuous mode [ 92.246265][ T3373] veth1_macvtap: entered promiscuous mode [ 92.393831][ T3374] veth0_macvtap: entered promiscuous mode [ 92.467703][ T1727] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.481524][ T3374] veth1_macvtap: entered promiscuous mode [ 92.495138][ T2223] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.495888][ T2223] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.496275][ T2223] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.756007][ T1223] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.759080][ T1223] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.775656][ T1223] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.777302][ T1223] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.027665][ T3373] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.722377][ T3523] xt_hashlimit: size too large, truncated to 1048576 [ 94.320073][ T3532] loop4: detected capacity change from 0 to 7 [ 94.846586][ T3537] syzkaller0: entered promiscuous mode [ 94.847219][ T3537] syzkaller0: entered allmulticast mode [ 95.627784][ T3545] xt_hashlimit: size too large, truncated to 1048576 [ 103.807173][ T3584] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 103.807173][ T3584] The task syz.1.25 (3584) triggered the difference, watch for misbehavior. [ 109.585860][ T3443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.626327][ T3443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.686657][ T3443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.693082][ T801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.972734][ T3628] bond1 (unregistering): Released all slaves [ 112.465866][ T3639] netlink: 'syz.1.50': attribute type 3 has an invalid length. [ 112.706066][ T3443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.899164][ T3649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.900274][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.746652][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.556361][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.725430][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.790750][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.204234][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.825704][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.826466][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.379418][ T3695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.874502][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.904741][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.864755][ T3436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.945024][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.994538][ T3474] net_ratelimit: 1 callbacks suppressed [ 119.995149][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.310710][ T801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.043802][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.906525][ T801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.064698][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.871972][ T3436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.105270][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.515922][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.150746][ T3443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.185104][ T3443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.905470][ T3436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.228683][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.269915][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.304946][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.749768][ T28] audit: type=1326 audit(128.590:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3804 comm="syz.1.121" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed78f68 code=0x7ffc0000 [ 128.750315][ T28] audit: type=1326 audit(128.600:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3804 comm="syz.1.121" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed78f68 code=0x7ffc0000 [ 128.750665][ T28] audit: type=1326 audit(128.600:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3804 comm="syz.1.121" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed78f68 code=0x7ffc0000 [ 128.750863][ T28] audit: type=1326 audit(128.600:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3804 comm="syz.1.121" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed78f68 code=0x7ffc0000 [ 128.765309][ T28] audit: type=1326 audit(128.610:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3804 comm="syz.1.121" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed78f68 code=0x7ffc0000 [ 128.767847][ T28] audit: type=1326 audit(128.610:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3804 comm="syz.1.121" exe="/syz-executor" sig=0 arch=c00000b7 syscall=440 compat=0 ip=0xffff9ed78f68 code=0x7ffc0000 [ 128.771986][ T28] audit: type=1326 audit(128.620:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3804 comm="syz.1.121" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed78f68 code=0x7ffc0000 [ 128.779138][ T28] audit: type=1326 audit(128.630:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3804 comm="syz.1.121" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff9ed78f68 code=0x7ffc0000 [ 128.785721][ T28] audit: type=1326 audit(128.630:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3804 comm="syz.1.121" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff9ed78f68 code=0x7ffc0000 [ 128.945013][ T801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.155575][ T3814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.344768][ T3443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.905896][ T3436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.400251][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.550384][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.426373][ T3443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.984726][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.464855][ T3443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.807230][ T3877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.808250][ T3877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.809548][ T3877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.815956][ T3877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.816809][ T3877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.584907][ T3474] net_ratelimit: 7 callbacks suppressed [ 135.585293][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.145533][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.646627][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.944894][ T3921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'. [ 137.664571][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.880958][ T3939] netlink: 16 bytes leftover after parsing attributes in process `syz.0.176'. [ 138.018539][ T3943] netlink: 160 bytes leftover after parsing attributes in process `syz.0.178'. [ 138.019815][ T3943] netlink: 160 bytes leftover after parsing attributes in process `syz.0.178'. [ 139.185840][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.309706][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.163663][ T801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.241325][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.716501][ T3965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.720900][ T3965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.859557][ T3969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.189'. [ 141.265068][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.410082][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.635030][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.751490][ T3983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.785904][ T3983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.791943][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.205687][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 144.398250][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 144.408841][ T10] usb 1-1: config 2 has an invalid interface number: 224 but max is 0 [ 144.410658][ T10] usb 1-1: config 2 has no interface number 0 [ 144.412205][ T10] usb 1-1: config 2 interface 224 has no altsetting 0 [ 144.431288][ T10] usb 1-1: New USB device found, idVendor=a0ca, idProduct=3fc1, bcdDevice=6d.23 [ 144.432839][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.434658][ T10] usb 1-1: Product: syz [ 144.435458][ T10] usb 1-1: Manufacturer: syz [ 144.436259][ T10] usb 1-1: SerialNumber: syz [ 144.689082][ T10] rndis_host 1-1:2.224: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 144.710512][ T10] usb 1-1: USB disconnect, device number 2 [ 145.390099][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 145.564551][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 145.587791][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 145.603015][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.605376][ T10] usb 1-1: config 1 interface 0 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 145.608115][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 145.628040][ T10] usb 1-1: New USB device found, idVendor=5f5e, idProduct=a4a1, bcdDevice= 0.40 [ 145.630274][ T10] usb 1-1: New USB device strings: Mfr=188, Product=9, SerialNumber=3 [ 145.631735][ T10] usb 1-1: Product: syz [ 145.633166][ T10] usb 1-1: Manufacturer: syz [ 145.634849][ T10] usb 1-1: SerialNumber: syz [ 145.815247][ T4019] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.209'. [ 145.871243][ T10] cdc_ether 1-1:1.0: GUID doesn't match [ 145.918071][ T10] usb 1-1: USB disconnect, device number 3 [ 145.925781][ T4021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.926921][ T4021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.798155][ T4047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'. [ 148.071696][ T4051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.223'. [ 151.585242][ T4078] netlink: 16 bytes leftover after parsing attributes in process `syz.0.235'. [ 151.804878][ T4082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.807846][ T4082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.345427][ T4101] netlink: 36 bytes leftover after parsing attributes in process `syz.0.243'. [ 155.356016][ T4101] netlink: 36 bytes leftover after parsing attributes in process `syz.0.243'. [ 155.356929][ T4101] Zero length message leads to an empty skb [ 155.708323][ T4109] netlink: 80 bytes leftover after parsing attributes in process `syz.0.247'. [ 156.095437][ T3436] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 156.157035][ T4117] capability: warning: `syz.1.251' uses deprecated v2 capabilities in a way that may be insecure [ 156.254435][ T3436] usb 1-1: Using ep0 maxpacket: 8 [ 156.310284][ T3436] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 156.311819][ T3436] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.314868][ T3436] usb 1-1: Product: syz [ 156.315902][ T3436] usb 1-1: Manufacturer: syz [ 156.316719][ T3436] usb 1-1: SerialNumber: syz [ 156.337266][ T3436] usb 1-1: config 0 descriptor?? [ 159.834505][ T4140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.836023][ T4140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.107821][ T4147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'. [ 164.189818][ T4179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.192684][ T4179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.276243][ T4181] netlink: 36 bytes leftover after parsing attributes in process `syz.1.280'. [ 164.588325][ T4187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.589753][ T4187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.588114][ T3443] usb 1-1: USB disconnect, device number 4 [ 167.498302][ T4200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.511875][ T4200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.646037][ T4202] netlink: 'syz.1.290': attribute type 1 has an invalid length. [ 167.743146][ T4202] bond1: (slave veth0_to_bond): making interface the new active one [ 167.750807][ T4202] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 169.606575][ T4207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.607773][ T4207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.471105][ T4226] Option 'ÍÎÛ^%ë¼ëÝÏË' to dns_resolver key: bad/missing value [ 170.524878][ T4228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.301'. [ 171.317419][ T4246] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 171.960859][ T4256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.968017][ T4256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.745246][ T4260] netlink: 'syz.1.314': attribute type 10 has an invalid length. [ 174.315228][ T4270] Illegal XDP return value 4294967274 on prog (id 17) dev N/A, expect packet loss! [ 177.298928][ T4286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.300121][ T4286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.461101][ T4288] binder_alloc: binder_alloc_mmap_handler: 4287 ffff97dfb000-ffff97e11000 already mapped failed -16 [ 179.174575][ T4320] syz.0.339 uses obsolete (PF_INET,SOCK_PACKET) [ 179.921250][ T4333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.345'. [ 180.047507][ T4333] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.164547][ T4344] binder: 4343:4344 tried to acquire reference to desc 0, got 1 instead [ 180.175176][ T4344] binder: 4343:4344 got transaction with invalid data ptr [ 180.178398][ T4344] binder: 4343:4344 transaction call to 4343:0 failed 5/29201/-14, code 0 size 252-0 line 3742 [ 180.183224][ T801] binder: undelivered TRANSACTION_ERROR: 29201 [ 180.748207][ T4357] netlink: 'syz.0.353': attribute type 4 has an invalid length. [ 180.952995][ T4362] netlink: 108 bytes leftover after parsing attributes in process `syz.0.356'. [ 181.308476][ T4370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.310009][ T4370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.864596][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 181.884829][ T4383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.366'. [ 181.885233][ T4383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.366'. [ 182.053184][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 182.095040][ T23] usb 1-1: config 2 has an invalid interface number: 224 but max is 0 [ 182.095397][ T23] usb 1-1: config 2 has no interface number 0 [ 182.095672][ T23] usb 1-1: config 2 interface 224 has no altsetting 0 [ 182.139622][ T23] usb 1-1: New USB device found, idVendor=a0ca, idProduct=3fc1, bcdDevice=6d.23 [ 182.139944][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.141646][ T23] usb 1-1: Product: syz [ 182.141736][ T23] usb 1-1: Manufacturer: syz [ 182.141814][ T23] usb 1-1: SerialNumber: syz [ 182.399393][ T23] rndis_host 1-1:2.224: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 182.439498][ T23] usb 1-1: USB disconnect, device number 5 [ 183.091154][ T4409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'. [ 183.093032][ T4409] netlink: 32 bytes leftover after parsing attributes in process `syz.1.378'. [ 183.099339][ T4409] netlink: 32 bytes leftover after parsing attributes in process `syz.1.378'. [ 187.675316][ T801] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 187.876201][ T801] usb 1-1: unable to get BOS descriptor or descriptor too short [ 187.880256][ T801] usb 1-1: not running at top speed; connect to a high speed hub [ 187.888598][ T801] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 187.889048][ T801] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 187.924810][ T801] usb 1-1: string descriptor 0 read error: -22 [ 187.925633][ T801] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 187.925715][ T801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.164728][ T801] snd-usb-6fire 1-1:2.0: unknown device firmware state received from device: [ 188.165544][ T801] 00 00 00 00 00 00 00 00 [ 188.167631][ T801] snd-usb-6fire 1-1:2.0: probe with driver snd-usb-6fire failed with error -5 [ 188.377825][ T801] usb 1-1: USB disconnect, device number 6 [ 191.214255][ T801] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 191.364743][ T801] usb 1-1: Using ep0 maxpacket: 32 [ 191.377217][ T801] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.395236][ T801] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 191.395458][ T801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.395724][ T801] usb 1-1: Product: syz [ 191.395834][ T801] usb 1-1: Manufacturer: syz [ 191.395931][ T801] usb 1-1: SerialNumber: syz [ 191.410594][ T801] usb 1-1: config 0 descriptor?? [ 192.370419][ T801] usb 1-1: No union descriptors [ 192.386669][ T801] usb 1-1: unsupported MDLM descriptors [ 192.406778][ T801] usb 1-1: USB disconnect, device number 7 [ 193.641330][ T4516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.425'. [ 194.004344][ T3443] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 194.187018][ T3443] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.189317][ T3443] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 194.191061][ T3443] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 194.194211][ T3443] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.196363][ T3443] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 194.197605][ T3443] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.207548][ T3443] usb 1-1: config 0 descriptor?? [ 194.438270][ T3443] usb 1-1: USB disconnect, device number 8 [ 195.505825][ T4559] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 195.883868][ T4571] netlink: 128 bytes leftover after parsing attributes in process `syz.0.446'. [ 196.574408][ T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 196.746960][ T23] usb 1-1: config 192 has an invalid interface number: 238 but max is 0 [ 196.747291][ T23] usb 1-1: config 192 has no interface number 0 [ 196.784723][ T23] usb 1-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=75.48 [ 196.786004][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.786117][ T23] usb 1-1: Product: syz [ 196.786180][ T23] usb 1-1: Manufacturer: syz [ 196.786344][ T23] usb 1-1: SerialNumber: syz [ 197.070279][ T23] usb 1-1: USB disconnect, device number 9 [ 198.494084][ T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 198.668774][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 198.710906][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 198.718842][ T23] usb 1-1: config 1 interface 0 altsetting 54 bulk endpoint 0x1 has invalid maxpacket 8 [ 198.721330][ T23] usb 1-1: config 1 interface 0 has no altsetting 0 [ 198.744088][ T23] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 198.744532][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.744738][ T23] usb 1-1: Product: syz [ 198.744852][ T23] usb 1-1: Manufacturer: syz [ 198.744948][ T23] usb 1-1: SerialNumber: syz [ 198.776853][ T4603] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 198.798382][ T4605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.799919][ T4605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.035892][ T23] usb 1-1: USB disconnect, device number 10 [ 199.841847][ T4626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.865383][ T4626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.181218][ T4630] binder: 4629:4630 tried to acquire reference to desc 0, got 1 instead [ 200.192169][ T4630] binder: 4629:4630 got reply transaction with bad transaction stack, transaction 10 has target 4629:0 [ 200.192666][ T4630] binder: 4629:4630 transaction reply to 0:0 failed 11/29201/-71, code 0 size 0-0 line 3170 [ 200.206621][ T4630] binder: 4629:4630 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 200.210835][ T4630] binder: 4630 RLIMIT_NICE not set [ 200.212873][ T4630] binder: 4630 RLIMIT_NICE not set [ 200.218062][ T4630] binder: 4630 RLIMIT_NICE not set [ 200.219924][ T4630] binder_alloc: 4629: binder_alloc_buf, no vma [ 200.221979][ T4630] binder: cannot allocate buffer: vma cleared, target dead or dying [ 200.222822][ T4630] binder: 4629:4630 transaction reply to 4629:4630 failed 12/29189/-3, code 0 size 0-0 line 3408 [ 200.226554][ T4630] binder: send failed reply for transaction 10 to 4629:4630 [ 200.237982][ T3436] binder: undelivered TRANSACTION_COMPLETE [ 200.238259][ T3436] binder: undelivered TRANSACTION_ERROR: 29201 [ 200.238327][ T3436] binder: undelivered TRANSACTION_ERROR: 29189 [ 200.238549][ T3436] binder: undelivered TRANSACTION_ERROR: 29190 [ 204.097427][ T3436] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 204.275784][ T3436] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 204.276132][ T3436] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 204.290586][ T3436] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 204.291035][ T3436] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.291254][ T3436] usb 1-1: Product: syz [ 204.291354][ T3436] usb 1-1: Manufacturer: syz [ 204.291457][ T3436] usb 1-1: SerialNumber: syz [ 204.306489][ T3436] usb 1-1: config 0 descriptor?? [ 211.723174][ T4729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.725263][ T4729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.573000][ T3443] usb 1-1: USB disconnect, device number 11 [ 215.629047][ T4767] netlink: 32 bytes leftover after parsing attributes in process `syz.0.526'. [ 215.887416][ T4773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.529'. [ 218.896376][ T4790] process 'syz.1.535' launched '/dev/fd/4' with NULL argv: empty string added [ 219.086203][ T4794] bridge_slave_0: default FDB implementation only supports local addresses [ 221.822492][ T4828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.827819][ T4828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.621749][ T4858] fuse: Bad value for 'rootmode' [ 227.844574][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 227.994399][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 228.011153][ T10] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 228.011489][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.011617][ T10] usb 1-1: config 0 has no interface number 0 [ 228.011980][ T10] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 228.012164][ T10] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 228.012332][ T10] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.012470][ T10] usb 1-1: config 0 interface 52 has no altsetting 0 [ 228.032269][ T10] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 228.034624][ T10] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 228.037712][ T10] usb 1-1: Manufacturer: syz [ 228.050154][ T10] usb 1-1: config 0 descriptor?? [ 228.071237][ T10] hub 1-1:0.52: bad descriptor, ignoring hub [ 228.084373][ T10] hub 1-1:0.52: probe with driver hub failed with error -5 [ 228.384953][ T10] usb 1-1: USB disconnect, device number 12 [ 231.986884][ T4904] capability: warning: `syz.1.575' uses 32-bit capabilities (legacy support in use) [ 235.405172][ T3474] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 235.566094][ T3474] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 235.566347][ T3474] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.580716][ T3474] usb 1-1: config 0 descriptor?? [ 235.600435][ T3474] cp210x 1-1:0.0: cp210x converter detected [ 236.013179][ T3474] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 236.071851][ T3474] usb 1-1: cp210x converter now attached to ttyUSB0 [ 236.226076][ T3436] usb 1-1: USB disconnect, device number 13 [ 236.256497][ T3436] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 236.321956][ T3436] cp210x 1-1:0.0: device disconnected [ 241.652396][ T4957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.655911][ T4957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.049695][ T4982] netlink: 56 bytes leftover after parsing attributes in process `syz.1.602'. [ 246.137576][ T4984] input: syz0 as /devices/virtual/input/input1 [ 246.694485][ T3436] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 246.844167][ T3436] usb 1-1: Using ep0 maxpacket: 16 [ 246.857473][ T3436] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 246.860366][ T3436] usb 1-1: config 0 interface 0 has no altsetting 0 [ 246.861882][ T3436] usb 1-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 246.863149][ T3436] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.878388][ T3436] usb 1-1: config 0 descriptor?? [ 247.321567][ T3436] hid (null): global environment stack underflow [ 247.341499][ T3436] hid-generic 0003:050D:3201.0001: global environment stack underflow [ 247.346990][ T3436] hid-generic 0003:050D:3201.0001: item 0 4 1 11 parsing failed [ 247.350533][ T3436] hid-generic 0003:050D:3201.0001: probe with driver hid-generic failed with error -22 [ 247.528456][ T3436] usb 1-1: USB disconnect, device number 14 [ 247.871167][ T5003] syzkaller0: entered promiscuous mode [ 247.871508][ T5003] syzkaller0: entered allmulticast mode [ 248.515671][ T5014] netlink: 256 bytes leftover after parsing attributes in process `syz.0.614'. [ 249.064549][ T5018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.065984][ T5018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.175646][ T3474] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 253.348707][ T3474] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 253.349127][ T3474] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 253.352758][ T3474] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.352960][ T3474] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 253.353038][ T3474] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.406710][ T3474] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 253.410011][ T3474] usb 1-1: invalid MIDI out EP 0 [ 253.647184][ T5038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.648051][ T5038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.720358][ T3474] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 253.730324][ T5048] lo: entered allmulticast mode [ 253.750710][ T3474] usb 1-1: USB disconnect, device number 15 [ 253.759983][ T5047] lo: left allmulticast mode [ 253.859689][ T4996] udevd[4996]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.664498][ T3436] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 254.781222][ T5066] trusted_key: syz.1.634 sent an empty control message without MSG_MORE. [ 254.840105][ T3436] usb 1-1: not running at top speed; connect to a high speed hub [ 254.864135][ T3436] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=fe.8c [ 254.874782][ T3436] usb 1-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 254.876209][ T3436] usb 1-1: Product: syz [ 254.876939][ T3436] usb 1-1: Manufacturer: syz [ 254.877802][ T3436] usb 1-1: SerialNumber: syz [ 254.977276][ T5076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.007278][ T5076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.160822][ T3436] usb 1-1: USB disconnect, device number 16 [ 256.139066][ T5089] mtd partition "ss_mixer" doesn't have enough space: 0x8000003 < 0x7261632f646e756f, disabled [ 256.142229][ T5089] ------------[ cut here ]------------ [ 256.145772][ T5089] WARNING: drivers/mtd/mtdcore.c:719 at add_mtd_device+0x678/0x740, CPU#0: syz.1.641/5089 [ 256.153038][ T5089] Modules linked in: [ 256.155618][ T5089] CPU: 0 UID: 0 PID: 5089 Comm: syz.1.641 Tainted: G L syzkaller #0 PREEMPT [ 256.156429][ T5089] Tainted: [L]=SOFTLOCKUP [ 256.156735][ T5089] Hardware name: linux,dummy-virt (DT) [ 256.157339][ T5089] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 256.157840][ T5089] pc : add_mtd_device+0x678/0x740 [ 256.158136][ T5089] lr : mtd_add_partition+0x110/0x208 [ 256.158464][ T5089] sp : ffff800084bc3a50 [ 256.158821][ T5089] x29: ffff800084bc3a90 x28: f8f0000008a07800 x27: 0000000000000000 [ 256.160040][ T5089] x26: f8f0000009e25500 x25: f7f000000c0c2f00 x24: f8f0000008a07cf8 [ 256.160713][ T5089] x23: f5f00000056ce800 x22: f5f00000056cece8 x21: f8f0000008a07800 [ 256.161249][ T5089] x20: 0000000000000000 x19: f8f0000008a079a0 x18: 00000000ffffffff [ 256.161775][ T5089] x17: 0000000000000000 x16: 0000000000000000 x15: ffff80008326bb4d [ 256.162290][ T5089] x14: 00000000000001e6 x13: 00000000fa83b2da x12: 0000b47083fe8d28 [ 256.162757][ T5089] x11: 00000000000000c0 x10: 2067be5e2d906016 x9 : d5fff942878a6267 [ 256.163337][ T5089] x8 : f7f0000005c96578 x7 : 0000000000000004 x6 : 0000000000000000 [ 256.164043][ T5089] x5 : fff000007f8b8188 x4 : 0000000000000001 x3 : f5f00000056cece8 [ 256.164524][ T5089] x2 : f7f0000005c95500 x1 : 0000000000000000 x0 : 0000000000000c00 [ 256.165212][ T5089] Call trace: [ 256.165792][ T5089] add_mtd_device+0x678/0x740 (P) [ 256.166447][ T5089] mtd_add_partition+0x110/0x208 [ 256.166812][ T5089] mtdchar_blkpg_ioctl+0xd0/0xf4 [ 256.167166][ T5089] mtdchar_ioctl+0x1b8/0xe14 [ 256.167430][ T5089] mtdchar_unlocked_ioctl+0x50/0x80 [ 256.167737][ T5089] __arm64_sys_ioctl+0xac/0x104 [ 256.168029][ T5089] invoke_syscall+0x54/0x10c [ 256.168322][ T5089] el0_svc_common.constprop.0+0x40/0xe0 [ 256.168618][ T5089] do_el0_svc+0x1c/0x34 [ 256.168868][ T5089] el0_svc+0x38/0x1fc [ 256.169144][ T5089] el0t_64_sync_handler+0xa0/0xf0 [ 256.169461][ T5089] el0t_64_sync+0x1a4/0x1a8 [ 256.170106][ T5089] ---[ end trace 0000000000000000 ]---