last executing test programs: 14m21.359603839s ago: executing program 2 (id=11355): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xf, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0xffffffffffffffff, &(0x7f0000000080)=0x28) 14m21.226288829s ago: executing program 2 (id=11359): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x70bd29, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x10040000}, 0x20000000) 14m21.089727975s ago: executing program 2 (id=11361): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 14m20.924130682s ago: executing program 2 (id=11364): r0 = socket$caif_stream(0x25, 0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000005280)='macvtap0\x00', 0x10) connect$caif(r0, &(0x7f0000005b00)=@rfm={0x25, 0x1, "045b49844c0f565fc9e51537fe276ead"}, 0x18) 14m20.826182804s ago: executing program 2 (id=11366): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) 14m20.744877907s ago: executing program 2 (id=11368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'u32\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 14m4.611775187s ago: executing program 32 (id=11368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'u32\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 34.981160952s ago: executing program 0 (id=19799): syz_usb_connect(0x0, 0x36, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f00000006c0)=[@uexit={0x0, 0x18, 0xce}, @cpuid={0x2, 0x18, {0x0, 0x10}}, @cpuid={0x2, 0x18, {0xab8, 0x401}}, @code={0x1, 0x5d, {"640f07440f0766b813018ec8264c0fc7ad00000100b9800000c00f3235000400000f30c4a135691e730048b864000000000000000f23c80f21f8350400c0000f23f8c401e9d0c4c4411914c2"}}, @code={0x1, 0x50, {"66ba2100ecb904080000b800980000ba000000000f30c4813658f40f01cb4c0fc79fa8404c87f20f07f20fc27b00ae66b808010f00d066baa10066ed670f30"}}], 0xf5}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x7c, 0x0, @multicast1}}}}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 29.337849658s ago: executing program 4 (id=19812): sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 26.307426782s ago: executing program 0 (id=19816): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x331002, 0x0) r2 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) fsmount(r2, 0x0, 0x91) syz_open_procfs(0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x28040) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r3 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, 0x0, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000001000)=ANY=[], 0x0) r4 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r4, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) 24.769117226s ago: executing program 3 (id=19819): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x5e9, &(0x7f0000000480)={0x0, 0x9e6e, 0x1000, 0x2}, 0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="58000000100001040000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a24001280110001006272696467655f736c617665000000000c0005800500090041000000140003006272696467655f736c6176655f300000a854fc20f1c83f6082b47e52089564e3a1ed22a4046fc7f5dcd1994e8f9b6afa71a6675022d8303cd9441c239b637d6882e816bcd2717d527cbd9ddb2f3c18420f1e4b60fca8141740026cfe6b592f8f543804f2eafe19301f6fa3ee4c7522"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 24.469360003s ago: executing program 3 (id=19821): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, 0x0, 0x0, 0xffffffffffffffff) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) bpf$MAP_CREATE(0x0, 0x0, 0x48) 22.892000569s ago: executing program 3 (id=19823): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) 22.447476946s ago: executing program 4 (id=19827): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x88000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xf, 0x10, 0x0, &(0x7f0000000200)='GPL\x00', 0x6, 0x1000, &(0x7f0000032680)=""/4096, 0x41100, 0xbc16a17751e7d86b, '\x00', 0x0, @fallback=0x3, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0x3, 0x1, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5cc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 19.400471349s ago: executing program 1 (id=19833): socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 19.395192813s ago: executing program 4 (id=19834): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) shmat(0x0, &(0x7f0000859000/0x4000)=nil, 0x6000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) ppoll(&(0x7f0000000080)=[{r4, 0x141}], 0x1, 0x0, 0x0, 0x0) 19.043195646s ago: executing program 0 (id=19836): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r0, &(0x7f0000000280)=[{'VOLUME', @void}], 0x7) syz_usb_connect(0x1, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b"], 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 17.247008345s ago: executing program 4 (id=19837): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) 15.772543282s ago: executing program 3 (id=19841): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xd, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$key(0xf, 0x3, 0x2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x20000800, 0x1000, 0x1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 13.950967135s ago: executing program 3 (id=19843): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x480c5) close(0xffffffffffffffff) r1 = syz_open_dev$I2C(0x0, 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) readv(r2, 0x0, 0x0) tkill(r3, 0xb) 11.635995845s ago: executing program 0 (id=19851): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x3e57}, {0x6}]}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x11e) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 10.01230453s ago: executing program 0 (id=19855): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000006580)={0x2020}, 0x2020) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 6.473953526s ago: executing program 1 (id=19859): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r4, r4, 0xc, 0x1, &(0x7f00000009c0)="16", 0x9, 0x1, 0x10cf, 0x5505, 0x8b, 0x1, 0x0, 'syz0\x00'}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r6, 0x3, {0x2, 0x0, 0x2}, 0xfd}, 0x18) sendmsg$sock(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002700)=[{0x0}], 0x1}, 0x4008040) open(&(0x7f0000000280)='.\x00', 0x0, 0x4) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) 6.090180477s ago: executing program 0 (id=19860): openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x20800, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000069, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000001c0), 0x10, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="04000000340300", @ANYRES64, @ANYRES64, @ANYBLOB="02001af1010000000300"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x276f, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r5 = syz_usb_connect(0x3, 0x36, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x8, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 4.816762036s ago: executing program 3 (id=19865): socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f0000000000), 0xf, 0x101800) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r0, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 4.131242154s ago: executing program 1 (id=19869): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x6}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xfffffbffffffffff, 0x800, 0x101, 0xfffffffffffffffe}, {0x2, 0x6}, 0x70bd2a, 0x3501, 0x2, 0x4, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000) 2.487463364s ago: executing program 1 (id=19871): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_off}]}) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new0default'], 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, 0x0, 0x0) ppoll(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0) setrlimit(0x7, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x7c, 0xfa00, {0x2002, &(0x7f00000000c0), 0x2, 0xa}}, 0x20) r2 = gettid() fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000540)={0x1, 0x0, 0x8, 0x9, r2}) 2.083661929s ago: executing program 5 (id=19874): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x20043, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r6) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r7, 0x1, 0x3, 0x100000, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1, 0x734}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x9084) 1.965473743s ago: executing program 5 (id=19875): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x3, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth1_virt_wifi\x00', &(0x7f0000000040)=@ethtool_eee={0x44, 0x1, 0x3, 0x400, 0x3, 0x7, 0x15ac, 0xf, [0x4, 0x8]}}) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x8, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0xa, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c57, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x9, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x400, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0xffff8001, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0x388000, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xfff, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xf, 0xd86, 0x2, 0x4, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x200004, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x8, 0x8, 0x86, 0x3, 0x3038, 0xff, 0xb, 0x2, 0x2, 0x2, 0x7, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x7, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x3, 0x5, 0x1b, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x80000000], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x10000016, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x3, 0x100, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0x40b1e, 0xd7, 0x200, 0xffff3441, 0x4]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.740460065s ago: executing program 5 (id=19876): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket(0x23, 0x80805, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_CAPBSET_READ(0x59616d61, 0xffffffff) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x8) listen(r0, 0x0) 1.645034822s ago: executing program 5 (id=19877): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 1.637176776s ago: executing program 4 (id=19878): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) shutdown(r0, 0x1) 1.386281936s ago: executing program 1 (id=19879): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket(0x22, 0x2, 0x3) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000100)) get_mempolicy(0x0, 0x0, 0x1, &(0x7f0000ffe000/0x2000)=nil, 0x4) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\//\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$inet(0x2, 0x4, 0x7ff) r2 = socket(0x18, 0x0, 0x1) accept4$inet6(r2, 0x0, 0x0, 0x80000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) inotify_init() capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x9}) chroot(&(0x7f0000000300)='.\x00') r3 = socket$l2tp6(0xa, 0x2, 0x73) socket(0x25, 0x1, 0x5a3) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) kernel console output (not intermixed with test programs): bcdDevice=49.8e [ 1221.721700][ T3906] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1221.721721][ T3906] usb 1-1: Product: syz [ 1221.721735][ T3906] usb 1-1: Manufacturer: syz [ 1221.721748][ T3906] usb 1-1: SerialNumber: syz [ 1221.848185][ T6040] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.848226][ T6040] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1221.848272][ T6040] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1221.848301][ T6040] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.853044][ T6040] usb 5-1: config 0 descriptor?? [ 1221.938849][ T3906] usb 1-1: config 0 descriptor?? [ 1221.971507][T10618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1221.975701][T10618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1222.009777][ T3906] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1222.020050][ T5939] usbhid 6-1:0.0: can't add hid device: -71 [ 1222.020201][ T5939] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1222.030148][T10605] Process accounting paused [ 1222.053926][ T5939] usb 6-1: USB disconnect, device number 38 [ 1222.204701][ T9] usb 1-1: USB disconnect, device number 29 [ 1222.215996][ T9] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1222.369459][ T6040] cm6533_jd 0003:0D8C:0022.005D: unknown main item tag 0x0 [ 1222.369597][ T6040] cm6533_jd 0003:0D8C:0022.005D: unknown main item tag 0x0 [ 1222.374691][ T6040] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.005D/input/input110 [ 1222.412530][ T6040] cm6533_jd 0003:0D8C:0022.005D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 1222.443055][ T5939] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 1222.584291][ T10] usb 5-1: USB disconnect, device number 36 [ 1222.606919][ T5939] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1222.607697][ T5939] usb 2-1: not running at top speed; connect to a high speed hub [ 1222.609046][ T5939] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1222.609073][ T5939] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1222.612796][ T5939] usb 2-1: string descriptor 0 read error: -22 [ 1222.612923][ T5939] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1222.612943][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.625148][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1222.704022][ T5939] usb 2-1: 0:2 : does not exist [ 1222.797633][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1222.801207][ T9] usb 4-1: config 0 has an invalid interface number: 183 but max is 0 [ 1222.801237][ T9] usb 4-1: config 0 has no interface number 0 [ 1222.801368][ T9] usb 4-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 1222.833790][ T9] usb 4-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 1222.836229][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.837315][ T9] usb 4-1: Product: syz [ 1222.837368][ T9] usb 4-1: Manufacturer: syz [ 1222.838121][ T9] usb 4-1: SerialNumber: syz [ 1222.909062][ T9] usb 4-1: config 0 descriptor?? [ 1222.911187][T10630] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1223.178652][ T9] net1080 4-1:0.183: probe with driver net1080 failed with error -71 [ 1223.204959][ T9] usb 4-1: USB disconnect, device number 40 [ 1223.607646][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1223.653449][ T5939] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1223.703154][ T5939] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1223.718178][ T5939] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 1223.791972][ T5939] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1223.806446][ T5939] usb 2-1: USB disconnect, device number 23 [ 1224.421716][ T5939] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1224.593453][ T5939] usb 5-1: Using ep0 maxpacket: 16 [ 1224.600059][ T5939] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1224.600093][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.600125][ T5939] usb 5-1: Product: syz [ 1224.600142][ T5939] usb 5-1: Manufacturer: syz [ 1224.600158][ T5939] usb 5-1: SerialNumber: syz [ 1224.635650][ T5939] usb 5-1: config 0 descriptor?? [ 1224.680243][ T5939] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1225.833672][ T5939] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 1225.861871][ T5939] usb 5-1: USB disconnect, device number 37 [ 1226.240553][ T37] audit: type=1400 audit(3913903938.223:6739): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10704 comm="syz.1.17153" dest=20001 [ 1227.291027][ T37] audit: type=1326 audit(3913903939.205:6740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10728 comm="syz.4.17163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5126cf749 code=0x7ffc0000 [ 1227.291510][ T37] audit: type=1326 audit(3913903939.205:6741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10728 comm="syz.4.17163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5126cf749 code=0x7ffc0000 [ 1227.294333][ T37] audit: type=1326 audit(3913903939.205:6742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10728 comm="syz.4.17163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd5126cf749 code=0x7ffc0000 [ 1227.294479][ T37] audit: type=1326 audit(3913903939.205:6743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10728 comm="syz.4.17163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5126cf749 code=0x7ffc0000 [ 1227.294795][ T37] audit: type=1326 audit(3913903939.205:6744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10728 comm="syz.4.17163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5126cf749 code=0x7ffc0000 [ 1227.295426][ T37] audit: type=1326 audit(3913903939.205:6745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10728 comm="syz.4.17163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fd5126cf749 code=0x7ffc0000 [ 1227.296943][ T37] audit: type=1326 audit(3913903939.205:6746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10728 comm="syz.4.17163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5126cf749 code=0x7ffc0000 [ 1227.297796][ T37] audit: type=1326 audit(3913903939.205:6747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10728 comm="syz.4.17163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5126cf749 code=0x7ffc0000 [ 1227.300801][ T37] audit: type=1326 audit(3913903939.214:6748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10728 comm="syz.4.17163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fd5126cf749 code=0x7ffc0000 [ 1227.954955][T10738] netlink: 'syz.1.17167': attribute type 12 has an invalid length. [ 1227.954980][T10738] netlink: 'syz.1.17167': attribute type 29 has an invalid length. [ 1227.954996][T10738] netlink: 148 bytes leftover after parsing attributes in process `syz.1.17167'. [ 1227.955025][T10738] netlink: 'syz.1.17167': attribute type 1 has an invalid length. [ 1227.955040][T10738] netlink: 43 bytes leftover after parsing attributes in process `syz.1.17167'. [ 1228.351222][ T3906] kernel write not supported for file /zero (pid: 3906 comm: kworker/1:1) [ 1228.613183][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17177'. [ 1228.613226][T10760] netlink: 'syz.5.17177': attribute type 20 has an invalid length. [ 1228.613242][T10760] netlink: 'syz.5.17177': attribute type 21 has an invalid length. [ 1230.250312][ T3906] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1230.410653][ T3906] usb 1-1: Using ep0 maxpacket: 16 [ 1230.454939][ T3906] usb 1-1: config 0 has an invalid interface number: 28 but max is 0 [ 1230.454972][ T3906] usb 1-1: config 0 has no interface number 0 [ 1230.455027][ T3906] usb 1-1: config 0 interface 28 altsetting 8 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1230.455058][ T3906] usb 1-1: config 0 interface 28 has no altsetting 0 [ 1230.486220][ T3906] usb 1-1: Dual-Role OTG device on HNP port [ 1230.495976][ T3906] usb 1-1: New USB device found, idVendor=12d1, idProduct=937e, bcdDevice=af.67 [ 1230.496009][ T3906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.496031][ T3906] usb 1-1: Product: syz [ 1230.496048][ T3906] usb 1-1: Manufacturer: syz [ 1230.496065][ T3906] usb 1-1: SerialNumber: syz [ 1230.555112][ T3906] usb 1-1: config 0 descriptor?? [ 1230.570989][ T3906] hub 1-1:0.28: bad descriptor, ignoring hub [ 1230.571036][ T3906] hub 1-1:0.28: probe with driver hub failed with error -5 [ 1230.572925][ T3906] option 1-1:0.28: GSM modem (1-port) converter detected [ 1230.970878][ T9] usb 1-1: USB disconnect, device number 30 [ 1230.983690][ T9] option 1-1:0.28: device disconnected [ 1231.503366][T10860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17222'. [ 1231.811733][T10874] netlink: 'syz.0.17230': attribute type 4 has an invalid length. [ 1231.811762][T10874] netlink: 17 bytes leftover after parsing attributes in process `syz.0.17230'. [ 1231.853192][ T9] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1232.023700][ T9] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1232.023736][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.059779][ T9] usb 6-1: config 0 descriptor?? [ 1232.086805][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1232.295723][ T9] gp8psk: usb in 128 operation failed. [ 1232.511388][ T9] gp8psk: usb in 146 operation failed. [ 1232.511412][ T9] gp8psk: failed to get FW version [ 1232.512380][ T9] gp8psk: FPGA Version = 229 [ 1232.727715][ T9] gp8psk: usb in 138 operation failed. [ 1232.727741][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1232.727778][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1232.777739][ T9] usb 6-1: USB disconnect, device number 39 [ 1233.554037][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 1233.554061][ T37] audit: type=1326 audit(3913903945.050:6759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10901 comm="syz.1.17241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5f11f749 code=0x7ffc0000 [ 1233.928222][T29220] Bluetooth: hci5: command 0x0405 tx timeout [ 1233.932370][T10910] netlink: 'syz.0.17245': attribute type 1 has an invalid length. [ 1234.055562][T10914] netlink: 3 bytes leftover after parsing attributes in process `syz.1.17247'. [ 1234.093890][T10914] 0ªX¹¦À: renamed from caif0 [ 1234.251736][T10914] 0ªX¹¦À: entered allmulticast mode [ 1234.251760][T10914] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1234.603802][T10929] Invalid argument reading file caps for ./file0 [ 1234.757901][T10936] syzkaller1: entered promiscuous mode [ 1234.757930][T10936] syzkaller1: entered allmulticast mode [ 1235.026346][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1235.189446][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1235.192246][ T9] usb 4-1: config 252 has an invalid interface number: 121 but max is 0 [ 1235.192276][ T9] usb 4-1: config 252 has no interface number 0 [ 1235.192311][ T9] usb 4-1: config 252 interface 121 has no altsetting 0 [ 1235.194910][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=651b, bcdDevice=a2.1e [ 1235.194941][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.194964][ T9] usb 4-1: Product: syz [ 1235.194980][ T9] usb 4-1: Manufacturer: syz [ 1235.194998][ T9] usb 4-1: SerialNumber: syz [ 1235.497869][ T5878] usb 4-1: USB disconnect, device number 41 [ 1235.850515][ T5878] kernel write not supported for file /snd/seq (pid: 5878 comm: kworker/1:5) [ 1237.434199][ T5878] kernel read not supported for file /cpu/0/msr (pid: 5878 comm: kworker/1:5) [ 1239.084022][ T5878] kernel read not supported for file 7263/task/7264/auxv (pid: 5878 comm: kworker/1:5) [ 1239.151322][T11049] netlink: 104 bytes leftover after parsing attributes in process `syz.0.17305'. [ 1239.659844][T29220] Bluetooth: hci5: command 0x0405 tx timeout [ 1239.660298][T11010] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1240.083415][ T37] audit: type=1400 audit(3913903951.156:6760): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11066 comm="syz.1.17314" daddr=fc01:: [ 1240.084148][ T37] audit: type=1400 audit(3913903951.156:6761): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11066 comm="syz.1.17314" daddr=fc02::1 [ 1240.097650][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1240.122002][ T5939] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1240.261204][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.261233][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1240.262991][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1240.263026][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1240.263048][ T9] usb 5-1: SerialNumber: syz [ 1240.311498][ T5939] usb 1-1: Using ep0 maxpacket: 8 [ 1240.321640][ T5939] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1240.334025][ T5939] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1240.334066][ T5939] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1240.334092][ T5939] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1240.334118][ T5939] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1240.334173][ T5939] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1240.334198][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.568239][ T5939] usb 1-1: GET_CAPABILITIES returned 0 [ 1240.568292][ T5939] usbtmc 1-1:16.0: can't read capabilities [ 1240.574285][ T9] usb 5-1: 0:2 : does not exist [ 1240.578103][ T9] usb 5-1: unit 1 not found! [ 1240.628544][ T9] usb 5-1: USB disconnect, device number 38 [ 1241.756437][ T37] audit: type=1400 audit(3913903952.727:6762): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11117 comm="syz.4.17337" daddr=::ffff:172.20.20.0 [ 1241.991235][ T3906] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1242.150755][ T3906] usb 4-1: Using ep0 maxpacket: 32 [ 1242.153213][ T3906] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1242.153246][ T3906] usb 4-1: config 0 has no interface number 0 [ 1242.153308][ T3906] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1242.195990][ T3906] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1242.196027][ T3906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.196058][ T3906] usb 4-1: Product: syz [ 1242.196074][ T3906] usb 4-1: Manufacturer: syz [ 1242.196091][ T3906] usb 4-1: SerialNumber: syz [ 1242.238650][ T3906] usb 4-1: config 0 descriptor?? [ 1242.291321][ T3906] smsc75xx v1.0.0 [ 1242.383394][T11128] loop6: detected capacity change from 0 to 7 [ 1242.540652][T11128] Dev loop6: unable to read RDB block 7 [ 1242.540780][T11128] loop6: unable to read partition table [ 1242.540908][T11132] netlink: 'syz.4.17344': attribute type 2 has an invalid length. [ 1242.541200][T11128] loop6: partition table beyond EOD, truncated [ 1242.541284][T11128] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1242.758564][T11135] netlink: 'syz.4.17344': attribute type 2 has an invalid length. [ 1242.758679][T11135] !: left promiscuous mode [ 1242.791128][ T5878] usb 1-1: USB disconnect, device number 31 [ 1242.934467][ T3906] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1242.934502][ T3906] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1243.151496][ T3906] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1243.151531][ T3906] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1243.151552][ T3906] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1243.151577][ T3906] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1243.165302][ T3906] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1243.231684][ T3906] usb 4-1: USB disconnect, device number 42 [ 1243.632494][T11153] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1243.823010][T11148] overlayfs: conflicting lowerdir path [ 1244.322380][T11181] mac80211_hwsim hwsim40 wlan0: entered promiscuous mode [ 1244.402879][T11181] macvtap2: entered allmulticast mode [ 1244.402911][T11181] mac80211_hwsim hwsim40 wlan0: entered allmulticast mode [ 1244.527726][T11181] mac80211_hwsim hwsim40 wlan0: left allmulticast mode [ 1244.545816][T11181] mac80211_hwsim hwsim40 wlan0: left promiscuous mode [ 1245.028563][ T5878] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1245.190499][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 1245.192969][ T5878] usb 1-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1245.193013][ T5878] usb 1-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 1245.193040][ T5878] usb 1-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1245.193063][ T5878] usb 1-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 1245.203121][ T5878] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1245.203167][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.203529][ T5878] usb 1-1: Product: syz [ 1245.203592][ T5878] usb 1-1: Manufacturer: syz [ 1245.203638][ T5878] usb 1-1: SerialNumber: syz [ 1245.304359][ T5878] hso 1-1:6.0: Can't find BULK OUT endpoint [ 1245.504603][T11217] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17382'. [ 1245.512789][ T5878] usb 1-1: USB disconnect, device number 32 [ 1245.533456][T11219] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17383'. [ 1245.929546][T11230] bridge0: port 4(dummy0) entered blocking state [ 1245.934993][T11230] bridge0: port 4(dummy0) entered disabled state [ 1245.978243][T11230] dummy0: entered allmulticast mode [ 1246.048293][ T5878] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1246.077051][T11230] dummy0: entered promiscuous mode [ 1246.291008][ T5878] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1246.291212][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.291236][ T5878] usb 5-1: Product: syz [ 1246.291252][ T5878] usb 5-1: Manufacturer: syz [ 1246.291269][ T5878] usb 5-1: SerialNumber: syz [ 1246.365180][ T5878] usb 5-1: config 0 descriptor?? [ 1246.418795][T11231] dummy0: left allmulticast mode [ 1246.418832][T11231] dummy0: left promiscuous mode [ 1246.486079][T11231] bridge0: port 4(dummy0) entered disabled state [ 1246.639070][ T5878] hso 5-1:0.0: Failed to find BULK IN ep [ 1246.659509][ T5878] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1246.792232][T11211] lo speed is unknown, defaulting to 1000 [ 1246.883485][ T5878] usb 5-1: USB disconnect, device number 39 [ 1247.725028][T11258] netlink: 320 bytes leftover after parsing attributes in process `syz.4.17396'. [ 1250.740683][ T37] audit: type=1400 audit(3913903961.125:6763): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11305 comm="syz.0.17415" daddr=fc01:: dest=20128 [ 1250.764741][ T5939] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1250.944353][ T5939] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1250.944387][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.949663][ T5939] usb 5-1: config 0 descriptor?? [ 1250.979345][ T5939] cp210x 5-1:0.0: cp210x converter detected [ 1251.383840][ T5939] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1251.416563][ T5939] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1251.445424][T11320] Process accounting resumed [ 1251.606561][ T5878] usb 5-1: USB disconnect, device number 40 [ 1251.630440][ T5878] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1251.744811][ T5939] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1251.761475][ T5878] cp210x 5-1:0.0: device disconnected [ 1251.924696][ T5939] usb 6-1: Using ep0 maxpacket: 8 [ 1251.927115][ T5939] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1251.927268][ T5939] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1251.927311][ T5939] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1251.927341][ T5939] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1251.927374][ T5939] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1251.927429][ T5939] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1251.927457][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.203634][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1253.295240][ T37] audit: type=1326 audit(3913903963.519:6764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11367 comm="syz.0.17443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f9d3f749 code=0x7ffc0000 [ 1253.310918][ T37] audit: type=1326 audit(3913903963.528:6765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11367 comm="syz.0.17443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f95f9d3f749 code=0x7ffc0000 [ 1253.349341][ T37] audit: type=1326 audit(3913903963.528:6766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11367 comm="syz.0.17443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f9d3f749 code=0x7ffc0000 [ 1253.383199][T11371] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1253.404394][ T37] audit: type=1326 audit(3913903963.584:6767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11367 comm="syz.0.17443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f9d3f749 code=0x7ffc0000 [ 1253.525659][T11372] delete_channel: no stack [ 1253.933030][ T37] audit: type=1400 audit(3913903964.099:6768): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11389 comm="syz.1.17453" dest=20004 [ 1254.113183][T11395] Process accounting resumed [ 1254.713719][ T5878] usb 6-1: USB disconnect, device number 40 [ 1254.887142][T29220] Bluetooth: hci4: command 0x1003 tx timeout [ 1254.892157][ T5805] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1255.167072][T11436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17473'. [ 1255.315574][ T5878] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1255.475184][ T5878] usb 5-1: Using ep0 maxpacket: 16 [ 1255.482147][ T5878] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1255.482183][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.482205][ T5878] usb 5-1: Product: syz [ 1255.482223][ T5878] usb 5-1: Manufacturer: syz [ 1255.482240][ T5878] usb 5-1: SerialNumber: syz [ 1255.491055][ T5878] usb 5-1: config 0 descriptor?? [ 1255.550939][ T5878] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1255.552700][ T5878] usb 5-1: Detected FT232H [ 1255.582532][ T3906] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1255.718431][ T5878] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1255.747190][ T3906] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.747223][ T3906] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1255.751996][ T3906] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1255.752032][ T3906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1255.752145][ T3906] usb 6-1: SerialNumber: syz [ 1256.071043][ T3906] usb 6-1: 0:2 : does not exist [ 1256.198835][ T5878] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1256.211820][ T3906] usb 6-1: USB disconnect, device number 41 [ 1256.413894][ T9] usb 5-1: USB disconnect, device number 41 [ 1256.472987][T11469] netlink: 3 bytes leftover after parsing attributes in process `syz.0.17487'. [ 1256.473028][T11469] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17487'. [ 1256.473050][T11469] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17487'. [ 1256.557527][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1256.558958][ T9] ftdi_sio 5-1:0.0: device disconnected [ 1257.977817][T11507] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17504'. [ 1258.332236][T11521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17511'. [ 1258.332273][T11521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17511'. [ 1258.421585][T11523] input: syz0 as /devices/virtual/input/input111 [ 1258.421614][T11523] input: failed to attach handler leds to device input111, error: -6 [ 1258.950233][ T5939] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1259.148608][ T5939] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1259.148675][ T5939] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1259.148702][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.163245][ T5939] usb 4-1: config 0 descriptor?? [ 1259.285988][ T5939] pwc: Askey VC010 type 2 USB webcam detected. [ 1259.357538][ T3906] hid-generic 00A0:0006:0003.005E: unknown main item tag 0x0 [ 1259.357572][ T3906] hid-generic 00A0:0006:0003.005E: unknown main item tag 0x0 [ 1259.357603][ T3906] hid-generic 00A0:0006:0003.005E: unknown main item tag 0x0 [ 1259.357627][ T3906] hid-generic 00A0:0006:0003.005E: unknown main item tag 0x0 [ 1259.357650][ T3906] hid-generic 00A0:0006:0003.005E: unknown main item tag 0x0 [ 1259.357674][ T3906] hid-generic 00A0:0006:0003.005E: unknown main item tag 0x0 [ 1259.357697][ T3906] hid-generic 00A0:0006:0003.005E: unknown main item tag 0x0 [ 1259.357737][ T3906] hid-generic 00A0:0006:0003.005E: unknown main item tag 0x0 [ 1259.357760][ T3906] hid-generic 00A0:0006:0003.005E: unknown main item tag 0x0 [ 1259.357782][ T3906] hid-generic 00A0:0006:0003.005E: unknown main item tag 0x0 [ 1259.508934][ T3906] hid-generic 00A0:0006:0003.005E: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1259.703983][ T5939] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1259.752849][ T9] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1259.979209][ T9] usb 2-1: config 0 has an invalid interface number: 212 but max is 0 [ 1259.979233][ T9] usb 2-1: config 0 has no interface number 0 [ 1259.979258][ T9] usb 2-1: config 0 interface 212 has no altsetting 0 [ 1260.033338][ T9] usb 2-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ca.e6 [ 1260.033428][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.033451][ T9] usb 2-1: Product: syz [ 1260.033466][ T9] usb 2-1: Manufacturer: syz [ 1260.033483][ T9] usb 2-1: SerialNumber: syz [ 1260.142914][ T5939] pwc: recv_control_msg error -71 req 04 val 1000 [ 1260.143461][ T5939] pwc: recv_control_msg error -71 req 04 val 1300 [ 1260.144156][ T5939] pwc: recv_control_msg error -71 req 04 val 1400 [ 1260.147915][ T5939] pwc: recv_control_msg error -71 req 02 val 2000 [ 1260.158657][ T5939] pwc: recv_control_msg error -71 req 02 val 2100 [ 1260.174183][ T5939] pwc: recv_control_msg error -71 req 04 val 1500 [ 1260.176995][ T5939] pwc: recv_control_msg error -71 req 02 val 2500 [ 1260.178358][ T5939] pwc: recv_control_msg error -71 req 02 val 2400 [ 1260.184643][ T5939] pwc: recv_control_msg error -71 req 02 val 2600 [ 1260.185469][ T5939] pwc: recv_control_msg error -71 req 02 val 2900 [ 1260.186910][ T5939] pwc: recv_control_msg error -71 req 02 val 2800 [ 1260.222877][ T5939] pwc: recv_control_msg error -71 req 04 val 1100 [ 1260.228611][ T5939] pwc: recv_control_msg error -71 req 04 val 1200 [ 1260.288578][ T9] usb 2-1: config 0 descriptor?? [ 1260.333012][ T5939] pwc: Registered as video103. [ 1260.336171][ T5939] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input112 [ 1260.356473][ T9] HFC-S_USB 2-1:0.212: probe with driver HFC-S_USB failed with error -5 [ 1260.437055][ T5939] usb 4-1: USB disconnect, device number 43 [ 1260.579359][ T9] usb 2-1: USB disconnect, device number 24 [ 1261.097238][ T37] audit: type=1400 audit(3913903970.813:6769): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11589 comm="syz.3.17542" daddr=fc01::1 dest=2 [ 1261.097781][ T37] audit: type=1400 audit(3913903970.813:6770): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11589 comm="syz.3.17542" daddr=fc01::1 [ 1261.618933][T11607] netlink: 96 bytes leftover after parsing attributes in process `syz.3.17550'. [ 1261.698839][ T5939] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1261.861374][ T5939] usb 2-1: Using ep0 maxpacket: 32 [ 1261.864297][ T5939] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1261.868446][ T5939] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 1261.868477][ T5939] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.868499][ T5939] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1261.868520][ T5939] usb 2-1: config 128 has no interface number 0 [ 1261.868570][ T5939] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 1261.868600][ T5939] usb 2-1: config 128 interface 127 has no altsetting 0 [ 1261.877385][ T5939] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1261.877559][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.877615][ T5939] usb 2-1: Product: syz [ 1261.877658][ T5939] usb 2-1: Manufacturer: syz [ 1261.877700][ T5939] usb 2-1: SerialNumber: syz [ 1261.949744][T11603] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1262.033292][T11616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17554'. [ 1262.308520][ T5939] usb 2-1: USB disconnect, device number 25 [ 1262.772293][T11631] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17561'. [ 1263.901318][ T5939] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1264.093337][ T5939] usb 6-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 1264.093388][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.119003][ T5939] usb 6-1: config 0 descriptor?? [ 1264.200673][ T5977] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1264.361367][ T5977] usb 5-1: Using ep0 maxpacket: 32 [ 1264.364097][ T5977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1264.364196][ T5977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1264.364222][ T5977] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1264.364249][ T5977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1264.370183][ T5977] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1264.370280][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.370304][ T5977] usb 5-1: Product: syz [ 1264.370320][ T5977] usb 5-1: Manufacturer: syz [ 1264.370337][ T5977] usb 5-1: SerialNumber: syz [ 1264.481139][ T5977] usb 5-1: config 0 descriptor?? [ 1264.520522][ T5977] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input113 [ 1264.565779][ T5939] logitech 0003:046D:C298.005F: item fetching failed at offset 3/5 [ 1264.566624][ T5939] logitech 0003:046D:C298.005F: parse failed [ 1264.566736][ T5939] logitech 0003:046D:C298.005F: probe with driver logitech failed with error -22 [ 1264.804128][ T5977] usb 6-1: USB disconnect, device number 42 [ 1264.824418][ T37] audit: type=1400 audit(3913903974.301:6771): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11692 comm="syz.0.17587" dest=20004 [ 1264.898217][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17588'. [ 1264.898245][T11696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17588'. [ 1264.898275][T11696] netlink: 'syz.3.17588': attribute type 6 has an invalid length. [ 1264.899937][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17588'. [ 1264.899963][T11696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17588'. [ 1264.899992][T11696] netlink: 'syz.3.17588': attribute type 6 has an invalid length. [ 1264.965653][ T10] usb 5-1: USB disconnect, device number 42 [ 1265.145099][T11703] sock: sock_timestamping_bind_phc: sock not bind to device [ 1266.790033][ T37] audit: type=1400 audit(3913903976.144:6772): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11731 comm="syz.3.17605" daddr=2001::2 dest=20000 [ 1267.035269][ T3906] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1267.194919][ T3906] usb 2-1: Using ep0 maxpacket: 16 [ 1267.197402][ T3906] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1267.197435][ T3906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.221662][ T3906] usb 2-1: config 0 descriptor?? [ 1267.305180][ T3906] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1268.378207][ T3906] usb 2-1: USB disconnect, device number 26 [ 1268.693425][T11758] Invalid ELF header magic: != ELF [ 1269.213079][ T37] audit: type=1400 audit(3913904234.389:6773): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11769 comm="syz.5.17622" [ 1270.465349][T11802] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000) [ 1270.680159][T11808] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.17640'. [ 1270.788551][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1270.948913][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1270.951830][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.951871][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1270.951912][ T10] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1270.951937][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.008550][ T10] usb 1-1: config 0 descriptor?? [ 1271.257516][ T10] usb 1-1: string descriptor 0 read error: -71 [ 1271.280256][ T10] usb 1-1: USB disconnect, device number 33 [ 1271.879400][ T5878] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1272.051724][ T5878] usb 4-1: config 0 has no interfaces? [ 1272.068031][ T5878] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1272.068054][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.068070][ T5878] usb 4-1: Product: syz [ 1272.068080][ T5878] usb 4-1: Manufacturer: syz [ 1272.068091][ T5878] usb 4-1: SerialNumber: syz [ 1272.137910][ T5878] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1272.137939][ T5878] r8152-cfgselector 4-1: config 0 descriptor?? [ 1272.421937][ T3906] r8152-cfgselector 4-1: USB disconnect, device number 44 [ 1273.235007][T11859] netlink: 'syz.5.17662': attribute type 13 has an invalid length. [ 1273.235034][T11859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17662'. [ 1273.287022][ T1044] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1273.287205][T11859] netlink: 'syz.5.17662': attribute type 13 has an invalid length. [ 1273.287225][T11859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17662'. [ 1273.287296][ T1044] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1273.287338][ T1044] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1273.287378][ T1044] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1273.398359][ T10] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1273.561200][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1273.561241][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1273.561282][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1273.561307][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.619265][T11854] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1273.636355][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1273.854975][ T10] usb 5-1: USB disconnect, device number 43 [ 1273.987718][T11875] netlink: 104 bytes leftover after parsing attributes in process `syz.5.17667'. [ 1274.761667][ T37] audit: type=1326 audit(3913904239.588:6774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11893 comm="syz.5.17677" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9db510f749 code=0x0 [ 1274.854535][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17679'. [ 1275.088371][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1275.248809][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1275.280740][ T10] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1275.280776][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.280798][ T10] usb 2-1: Product: syz [ 1275.280814][ T10] usb 2-1: Manufacturer: syz [ 1275.280830][ T10] usb 2-1: SerialNumber: syz [ 1275.299433][ T10] usb 2-1: config 0 descriptor?? [ 1275.308617][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1276.035521][ T5977] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1276.190196][ T5977] usb 1-1: Using ep0 maxpacket: 32 [ 1276.208161][ T5977] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1276.208265][ T5977] usb 1-1: config 0 has no interface number 0 [ 1276.208317][ T5977] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1276.238860][ T5977] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1276.238891][ T5977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.238972][ T5977] usb 1-1: Product: syz [ 1276.238991][ T5977] usb 1-1: Manufacturer: syz [ 1276.239008][ T5977] usb 1-1: SerialNumber: syz [ 1276.312926][ T5977] usb 1-1: config 0 descriptor?? [ 1276.314141][T11924] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1276.551782][T11924] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1276.631682][ T10] gspca_ov534_9: reg_w failed -71 [ 1276.774679][T11941] syzkaller0: mtu greater than device maximum [ 1276.938094][ T10] gspca_ov534_9: Unknown sensor 0000 [ 1276.938282][ T10] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 1276.985287][ T10] usb 2-1: USB disconnect, device number 27 [ 1277.650761][ T5977] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1277.651057][ T5977] asix 1-1:0.188: probe with driver asix failed with error -71 [ 1277.689475][ T5977] usb 1-1: USB disconnect, device number 34 [ 1278.816907][ T37] audit: type=1400 audit(3913904243.384:6775): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11996 comm="syz.0.17722" daddr=::ffff:0.0.0.0 dest=20003 [ 1280.321126][ T5977] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1280.488936][ T5977] usb 5-1: Using ep0 maxpacket: 32 [ 1280.491346][ T5977] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 1280.491375][ T5977] usb 5-1: config 2 has no interface number 0 [ 1280.491426][ T5977] usb 5-1: config 2 interface 88 has no altsetting 0 [ 1280.494880][ T5977] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 1280.494909][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.494931][ T5977] usb 5-1: Product: syz [ 1280.494947][ T5977] usb 5-1: Manufacturer: syz [ 1280.494963][ T5977] usb 5-1: SerialNumber: syz [ 1280.613490][T12045] tipc: Enabled bearer , priority 4 [ 1281.788871][ T5878] tipc: Node number set to 939524096 [ 1282.042925][ T5977] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1282.043223][ T5977] asix 5-1:2.88: probe with driver asix failed with error -71 [ 1282.082737][ T5977] usb 5-1: USB disconnect, device number 44 [ 1284.130562][ T5878] IPVS: starting estimator thread 0... [ 1284.221966][T12128] IPVS: using max 10 ests per chain, 24000 per kthread [ 1284.261237][T12132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17779'. [ 1284.413796][T12130] 8021q: adding VLAN 0 to HW filter on device .` [ 1284.475931][T12130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1284.517248][ T5878] lo speed is unknown, defaulting to 1000 [ 1284.517298][ T5878] syz1: Port: 1 Link ACTIVE [ 1284.712678][T12137] pim6reg: entered allmulticast mode [ 1284.721187][ T5878] lo speed is unknown, defaulting to 1000 [ 1285.368318][T12171] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1286.695694][T12187] Process accounting paused [ 1286.897646][T12216] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1287.129257][T12226] netlink: 'syz.0.17816': attribute type 1 has an invalid length. [ 1287.221538][T12226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1287.279930][T12232] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1287.299992][T12235] netlink: 'syz.1.17820': attribute type 9 has an invalid length. [ 1287.300016][T12235] netlink: 'syz.1.17820': attribute type 11 has an invalid length. [ 1287.300031][T12235] netlink: 'syz.1.17820': attribute type 12 has an invalid length. [ 1287.300048][T12235] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.17820'. [ 1287.300243][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17820'. [ 1287.351176][T12232] bond0: (slave batadv2): making interface the new active one [ 1287.353766][T12232] bond0: (slave batadv2): Enslaving as an active interface with an up link [ 1287.584393][T12237] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1287.939346][ T37] audit: type=1400 audit(3913904251.911:6776): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12257 comm="syz.1.17829" dest=20004 [ 1288.392766][ T5977] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1288.553143][ T5977] usb 5-1: Using ep0 maxpacket: 32 [ 1288.555604][ T5977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1288.555640][ T5977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1288.555682][ T5977] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1288.555707][ T5977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.560575][ T5977] usb 5-1: config 0 descriptor?? [ 1288.614689][ T5977] hub 5-1:0.0: USB hub found [ 1288.793366][ T5977] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1288.832863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 1288.833076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 1288.895744][ T5878] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1288.897890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1288.898015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1289.058166][ T5878] usb 4-1: Using ep0 maxpacket: 16 [ 1289.062263][ T5878] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1289.062294][ T5878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.062316][ T5878] usb 4-1: config 0 has no interface number 0 [ 1289.108932][ T5878] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1289.108966][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.108981][ T5878] usb 4-1: Product: syz [ 1289.110001][ T5878] usb 4-1: Manufacturer: syz [ 1289.110029][ T5878] usb 4-1: SerialNumber: syz [ 1289.138014][ T5878] usb 4-1: config 0 descriptor?? [ 1289.159024][ T5878] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1289.303700][ T5878] snd-usb-audio 4-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 1289.401634][ T5878] usb 4-1: USB disconnect, device number 45 [ 1289.482268][ T5977] hid-generic 0003:046D:C31C.0060: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 1289.523329][ T5977] usb 5-1: USB disconnect, device number 45 [ 1290.350864][T12298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17845'. [ 1290.650361][ T6040] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1290.682541][T12305] vivid-000: disconnect [ 1290.714386][T12296] tipc: Cannot configure node identity twice [ 1290.810407][ T6040] usb 1-1: Using ep0 maxpacket: 32 [ 1290.817181][ T6040] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1290.817213][ T6040] usb 1-1: config 0 has no interface number 0 [ 1290.817260][ T6040] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1290.868577][ T5878] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1290.869296][ T6040] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1290.869389][ T6040] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.869413][ T6040] usb 1-1: Product: syz [ 1290.869434][ T6040] usb 1-1: Manufacturer: syz [ 1290.869445][ T6040] usb 1-1: SerialNumber: syz [ 1290.878361][ T6040] usb 1-1: config 0 descriptor?? [ 1290.924618][T12304] vivid-000: reconnect [ 1290.971495][ T6040] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1290.971538][ T6040] em28xx 1-1:0.132: Video interface 132 found: [ 1291.036857][ T5878] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1291.036945][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.072333][ T5878] usb 5-1: config 0 descriptor?? [ 1291.363608][ T6040] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 1291.810755][ T6040] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 1291.810832][ T6040] em28xx 1-1:0.132: board has no eeprom [ 1291.942244][T12328] SQUASHFS error: Failed to read block 0x0: -5 [ 1292.027533][ T37] audit: type=1400 audit(3913904255.726:6777): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12330 comm="syz.3.17859" daddr=2001::2 dest=19996 [ 1292.028144][ T37] audit: type=1400 audit(3913904255.726:6778): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12330 comm="syz.3.17859" daddr=2001:: [ 1292.083013][ T6040] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1292.083038][ T6040] em28xx 1-1:0.132: analog set to bulk mode. [ 1292.087712][ T3906] em28xx 1-1:0.132: Registering V4L2 extension [ 1292.150967][ T6040] usb 1-1: USB disconnect, device number 35 [ 1292.170991][ T6040] em28xx 1-1:0.132: Disconnecting em28xx [ 1292.406559][ T5878] usb 5-1: Cannot set autoneg [ 1292.406842][ T5878] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1292.437328][ T5878] usb 5-1: USB disconnect, device number 46 [ 1292.498541][T12343] netlink: 'syz.1.17862': attribute type 12 has an invalid length. [ 1292.498567][T12343] netlink: 'syz.1.17862': attribute type 29 has an invalid length. [ 1292.498591][T12343] netlink: 'syz.1.17862': attribute type 1 has an invalid length. [ 1292.498607][T12343] netlink: 'syz.1.17862': attribute type 2 has an invalid length. [ 1292.498622][T12343] netlink: 244 bytes leftover after parsing attributes in process `syz.1.17862'. [ 1292.498766][T12343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.610434][ T3906] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 1292.610462][ T3906] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 1292.610478][ T3906] em28xx 1-1:0.132: No AC97 audio processor [ 1292.616962][ T3906] usb 1-1: Decoder not found [ 1292.616985][ T3906] em28xx 1-1:0.132: failed to create media graph [ 1292.638740][ T3906] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 1292.645150][ T3906] em28xx 1-1:0.132: Remote control support is not available for this card. [ 1292.650275][ T6040] em28xx 1-1:0.132: Closing input extension [ 1292.691497][ T6040] em28xx 1-1:0.132: Freeing device [ 1292.773381][T12347] input: syz1 as /devices/virtual/input/input114 [ 1293.594443][T12338] uprobe: syz.5.17861:12338 failed to unregister, leaking uprobe [ 1293.903468][ T5977] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 1294.068824][ T5977] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 1294.068855][ T5977] usb 5-1: config 0 has no interface number 0 [ 1294.087189][ T5977] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1294.087222][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.087244][ T5977] usb 5-1: Product: syz [ 1294.087259][ T5977] usb 5-1: Manufacturer: syz [ 1294.087275][ T5977] usb 5-1: SerialNumber: syz [ 1294.129442][ T5977] usb 5-1: config 0 descriptor?? [ 1294.234897][T12397] netlink: 'syz.3.17885': attribute type 1 has an invalid length. [ 1294.554375][T12399] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1294.577198][T12399] bond2: (slave batadv1): making interface the new active one [ 1294.579366][T12399] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 1294.764492][T12405] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1294.794416][T12405] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1294.845865][ T5977] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1294.845899][ T5977] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -32 [ 1294.846154][ T5977] asix 5-1:0.251: probe with driver asix failed with error -32 [ 1294.887573][ T5977] usb 5-1: USB disconnect, device number 47 [ 1295.145637][T12405] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 1295.610685][ T37] audit: type=1326 audit(3913904259.083:6779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12419 comm="syz.5.17894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db510f749 code=0x7ffc0000 [ 1295.610752][ T37] audit: type=1326 audit(3913904259.083:6780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12419 comm="syz.5.17894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db510f749 code=0x7ffc0000 [ 1295.610803][ T37] audit: type=1326 audit(3913904259.083:6781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12419 comm="syz.5.17894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db510f749 code=0x7ffc0000 [ 1295.610855][ T37] audit: type=1326 audit(3913904259.083:6782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12419 comm="syz.5.17894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db510f749 code=0x7ffc0000 [ 1295.610905][ T37] audit: type=1326 audit(3913904259.083:6783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12419 comm="syz.5.17894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f9db510f749 code=0x7ffc0000 [ 1295.733962][ T37] audit: type=1326 audit(3913904259.176:6784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12419 comm="syz.5.17894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9db5142005 code=0x7ffc0000 [ 1295.735567][ T37] audit: type=1326 audit(3913904259.204:6785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12419 comm="syz.5.17894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9db5142005 code=0x7ffc0000 [ 1295.739075][ T37] audit: type=1326 audit(3913904259.204:6786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12419 comm="syz.5.17894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9db5142005 code=0x7ffc0000 [ 1295.746778][ T37] audit: type=1326 audit(3913904259.213:6787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12419 comm="syz.5.17894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9db5142005 code=0x7ffc0000 [ 1295.756024][ T37] audit: type=1326 audit(3913904259.223:6788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12419 comm="syz.5.17894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9db5142005 code=0x7ffc0000 [ 1296.491978][T12441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17900'. [ 1296.616458][T12441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1297.089109][T12456] tmpfs: Unsupported parameter 'huge' [ 1297.212874][T12458] evm: overlay not supported [ 1297.732099][T12481] Invalid ELF header magic: != ELF [ 1298.429458][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 1299.040076][T12504] ceph: No mds server is up or the cluster is laggy [ 1299.040120][T12507] ceph: No mds server is up or the cluster is laggy [ 1301.035156][ T6040] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1301.088342][T12579] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1301.194685][ T6040] usb 4-1: Using ep0 maxpacket: 32 [ 1301.199608][ T6040] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1301.199656][ T6040] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1301.199695][ T6040] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1301.199722][ T6040] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.229850][ T6040] usb 4-1: config 0 descriptor?? [ 1301.302669][ T37] kauditd_printk_skb: 166 callbacks suppressed [ 1301.302690][ T37] audit: type=1400 audit(3913904264.412:6955): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12582 comm="syz.1.17959" daddr=::ffff:127.0.0.1 [ 1301.589889][ T6040] usbhid 4-1:0.0: can't add hid device: -71 [ 1301.590027][ T6040] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1301.620174][ T6040] usb 4-1: USB disconnect, device number 46 [ 1301.998352][ T6040] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1302.158046][ T6040] usb 2-1: Using ep0 maxpacket: 8 [ 1302.161195][ T6040] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.161256][ T6040] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1302.161281][ T6040] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.216135][ T6040] usb 2-1: config 0 descriptor?? [ 1302.239357][ T6040] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1303.529868][ T6040] gspca_vc032x: reg_w err -71 [ 1303.529964][ T6040] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 1303.546358][ T6040] usb 2-1: USB disconnect, device number 28 [ 1303.948219][ T37] audit: type=1400 audit(3913904266.880:6956): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12659 comm="syz.5.17992" [ 1304.235863][T12672] "syz.4.17997" (12672) uses obsolete ecb(arc4) skcipher [ 1304.639491][ T3906] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1304.800341][ T3906] usb 1-1: Using ep0 maxpacket: 32 [ 1304.802884][ T3906] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1304.802915][ T3906] usb 1-1: config 0 has no interface number 0 [ 1304.802966][ T3906] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1304.805626][ T3906] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1304.805659][ T3906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.805682][ T3906] usb 1-1: Product: syz [ 1304.805698][ T3906] usb 1-1: Manufacturer: syz [ 1304.805715][ T3906] usb 1-1: SerialNumber: syz [ 1304.896353][ T3906] usb 1-1: config 0 descriptor?? [ 1304.903801][ T3906] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1304.903941][ T3906] em28xx 1-1:0.132: Video interface 132 found: [ 1305.196177][T12695] 9pnet: p9_errstr2errno: server reported unknown error [ 1305.335415][ T3906] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 1305.360490][T12698] input: syz0 as /devices/virtual/input/input115 [ 1305.561559][ T3906] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1305.561593][ T3906] em28xx 1-1:0.132: board has no eeprom [ 1305.631220][ T3906] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1305.631253][ T3906] em28xx 1-1:0.132: analog set to bulk mode. [ 1305.663130][ T5873] em28xx 1-1:0.132: Registering V4L2 extension [ 1305.673005][ T3906] usb 1-1: USB disconnect, device number 36 [ 1305.689549][ T3906] em28xx 1-1:0.132: Disconnecting em28xx [ 1306.204491][ T5873] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 1306.204520][ T5873] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 1306.204535][ T5873] em28xx 1-1:0.132: No AC97 audio processor [ 1306.260200][ T5873] usb 1-1: Decoder not found [ 1306.260223][ T5873] em28xx 1-1:0.132: failed to create media graph [ 1306.260260][ T5873] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 1306.261909][ T5873] em28xx 1-1:0.132: Remote control support is not available for this card. [ 1306.263317][ T3906] em28xx 1-1:0.132: Closing input extension [ 1306.328122][ T3906] em28xx 1-1:0.132: Freeing device [ 1307.502076][ T5805] block nbd0: Receive control failed (result -32) [ 1307.575439][T12734] nbd0: detected capacity change from 0 to 63 [ 1307.576535][T12736] block nbd0: NBD_DISCONNECT [ 1307.576567][T12736] block nbd0: Send disconnect failed -32 [ 1307.576587][T12736] block nbd0: shutting down sockets [ 1307.813636][T12762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18032'. [ 1307.813662][T12762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18032'. [ 1307.813692][T12762] netlink: 'syz.3.18032': attribute type 6 has an invalid length. [ 1307.813707][T12762] netlink: 'syz.3.18032': attribute type 5 has an invalid length. [ 1307.815427][T12762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18032'. [ 1307.815448][T12762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18032'. [ 1307.815474][T12762] netlink: 'syz.3.18032': attribute type 6 has an invalid length. [ 1307.815489][T12762] netlink: 'syz.3.18032': attribute type 5 has an invalid length. [ 1307.924139][T12761] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1307.933314][ T5805] Bluetooth: hci5: command 0x0405 tx timeout [ 1307.949453][ T6040] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1307.949479][ T6040] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 1307.954207][T12765] netlink: 104 bytes leftover after parsing attributes in process `syz.3.18034'. [ 1308.365265][ T5977] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 1308.523881][ T5977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 1259, setting to 64 [ 1308.533734][ T5977] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 1308.533825][ T5977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.533890][ T5977] usb 1-1: Product: syz [ 1308.533933][ T5977] usb 1-1: Manufacturer: syz [ 1308.533977][ T5977] usb 1-1: SerialNumber: syz [ 1308.575969][ T5977] usb 1-1: config 0 descriptor?? [ 1308.586156][T12767] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1308.639755][ T5977] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input116 [ 1308.997025][ T1208] Bluetooth: (null): Too short H5 packet [ 1309.000730][ T1208] Bluetooth: (null): Invalid header checksum [ 1309.690688][ T9] usb 1-1: USB disconnect, device number 37 [ 1310.316912][T12825] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1310.334732][T12825] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1310.457653][ T6040] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1310.490002][ T5878] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 1310.499789][T29220] Bluetooth: hci4: command 0x1003 tx timeout [ 1310.503822][ T5805] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1310.620381][ T6040] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1310.620449][ T6040] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1310.621931][ T6040] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1310.621960][ T6040] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1310.621982][ T6040] usb 1-1: Manufacturer: syz [ 1310.626562][ T6040] usb 1-1: config 0 descriptor?? [ 1310.742640][ T5878] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 1310.742672][ T5878] usb 4-1: config 0 has no interface number 0 [ 1310.745284][ T5878] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1310.745314][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.745334][ T5878] usb 4-1: Product: syz [ 1310.783399][ T5878] usb 4-1: Manufacturer: syz [ 1310.783421][ T5878] usb 4-1: SerialNumber: syz [ 1310.798697][ T5878] usb 4-1: config 0 descriptor?? [ 1310.907076][ T6040] rc_core: IR keymap rc-hauppauge not found [ 1310.907100][ T6040] Registered IR keymap rc-empty [ 1310.913864][ T37] audit: type=1326 audit(3913904273.388:6957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12829 comm="syz.1.18064" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a5f11f749 code=0x0 [ 1310.954213][ T6040] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1310.975353][ T6040] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input117 [ 1310.992447][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 1310.998715][ T6040] usb 1-1: USB disconnect, device number 38 [ 1311.266090][ T5878] usb 4-1: Firmware: major: 215, minor: 38, hardware type: UNKNOWN (191) [ 1311.484581][ T5878] usb 4-1: failed to fetch extended address, random address set [ 1311.484607][ T5878] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1311.484789][ T5878] atusb 4-1:0.128: probe with driver atusb failed with error -524 [ 1311.489460][ T5878] usb 4-1: USB disconnect, device number 47 [ 1311.948437][T12846] netlink: 'syz.0.18069': attribute type 1 has an invalid length. [ 1312.103957][T12846] bond4: option mode: invalid value (64) [ 1312.158524][T12846] bond4 (unregistering): Released all slaves [ 1313.733861][ T37] audit: type=1400 audit(3913904276.034:6958): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12890 comm="syz.3.18085" daddr=2001:: dest=34 [ 1313.986195][ T37] audit: type=1400 audit(3913904276.259:6959): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12900 comm="syz.0.18089" daddr=::ffff:0.0.0.0 dest=20002 [ 1314.597127][T12922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18097'. [ 1315.374983][T12940] IPv4: Oversized IP packet from 127.202.26.0 [ 1315.878409][T12949] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18109'. [ 1315.904690][T12951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18110'. [ 1315.904727][T12951] netlink: 'syz.4.18110': attribute type 9 has an invalid length. [ 1316.133586][ T37] audit: type=1400 audit(3913904278.259:6960): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12958 comm="syz.5.18114" daddr=::ffff:0.0.0.0 dest=20000 [ 1316.201245][T12955] ptrace attach of "./syz-executor exec"[5799] was attempted by ""[12955] [ 1316.460725][ T37] audit: type=1326 audit(3913904278.577:6961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12973 comm="syz.4.18121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5126cf749 code=0x7ffc0000 [ 1316.461008][ T37] audit: type=1326 audit(3913904278.577:6962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12973 comm="syz.4.18121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5126cf749 code=0x7ffc0000 [ 1316.461804][ T37] audit: type=1326 audit(3913904278.577:6963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12973 comm="syz.4.18121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd5126cf749 code=0x7ffc0000 [ 1316.462305][ T37] audit: type=1326 audit(3913904278.577:6964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12973 comm="syz.4.18121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5126cf749 code=0x7ffc0000 [ 1316.462849][ T37] audit: type=1326 audit(3913904278.577:6965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12973 comm="syz.4.18121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd5126cf749 code=0x7ffc0000 [ 1316.463167][ T37] audit: type=1326 audit(3913904278.577:6966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12973 comm="syz.4.18121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5126cf749 code=0x7ffc0000 [ 1316.463705][ T37] audit: type=1326 audit(3913904278.577:6967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12973 comm="syz.4.18121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fd5126cf749 code=0x7ffc0000 [ 1316.464231][ T37] audit: type=1326 audit(3913904278.577:6968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12973 comm="syz.4.18121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5126cf749 code=0x7ffc0000 [ 1317.548662][ T5878] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1317.711554][ T5878] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1317.711586][ T5878] usb 6-1: config 0 has no interface number 0 [ 1317.711638][ T5878] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1317.711668][ T5878] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1317.711710][ T5878] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1317.711736][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.727216][ T5878] usb 6-1: config 0 descriptor?? [ 1318.251513][ T5878] prodikeys 0003:041E:2801.0061: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.5-1/input1 [ 1318.289038][ T5878] hid_prodikeys: hid-prodikeys: failed to find output report [ 1318.289038][ T5878] [ 1318.449059][ T5977] usb 6-1: USB disconnect, device number 43 [ 1318.720829][ T37] audit: type=1804 audit(3913904280.672:6969): pid=13027 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.18143" name="file0" dev="ramfs" ino=150257 res=1 errno=0 [ 1318.908671][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1319.010395][T13031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18145'. [ 1319.010438][T13031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18145'. [ 1319.986655][T13007] Process accounting resumed [ 1320.758761][T13081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18168'. [ 1321.682085][ T5977] hid_parser_main: 5 callbacks suppressed [ 1321.682112][ T5977] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 1321.705607][ T5977] hid-generic 0000:0000:0000.0062: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1322.382078][ T5878] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1322.564452][ T5878] usb 4-1: Using ep0 maxpacket: 16 [ 1322.566591][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1322.566627][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1322.566652][ T5878] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1322.566695][ T5878] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1322.566720][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.571530][ T5878] usb 4-1: config 0 descriptor?? [ 1323.027224][ T5878] shield 0003:0955:7214.0063: unknown main item tag 0x0 [ 1323.027269][ T5878] shield 0003:0955:7214.0063: unknown main item tag 0x0 [ 1323.027297][ T5878] shield 0003:0955:7214.0063: unknown main item tag 0x0 [ 1323.027325][ T5878] shield 0003:0955:7214.0063: unknown main item tag 0x0 [ 1323.027353][ T5878] shield 0003:0955:7214.0063: unknown main item tag 0x0 [ 1323.032970][ T5878] input: HID 0955:7214 Haptics as /devices/virtual/input/input118 [ 1323.236257][ T5878] shield 0003:0955:7214.0063: Registered Thunderstrike controller [ 1323.236650][ T5878] shield 0003:0955:7214.0063: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 1323.277708][T13120] netlink: 'syz.3.18185': attribute type 2 has an invalid length. [ 1323.277733][T13120] netlink: 244 bytes leftover after parsing attributes in process `syz.3.18185'. [ 1323.383216][ T5878] usb 4-1: USB disconnect, device number 48 [ 1323.403324][ T3906] shield 0003:0955:7214.0063: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1323.404431][ T3906] shield 0003:0955:7214.0063: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1323.404508][ T3906] shield 0003:0955:7214.0063: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1323.404583][ T3906] shield 0003:0955:7214.0063: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1323.537720][ T5873] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1323.700008][ T5873] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1323.700038][ T5873] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1323.702526][ T5873] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1323.702555][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.702570][ T5873] usb 5-1: Product: syz [ 1323.702581][ T5873] usb 5-1: Manufacturer: syz [ 1323.702592][ T5873] usb 5-1: SerialNumber: syz [ 1323.789378][T13160] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18203'. [ 1323.924884][ T5873] usb 5-1: 0:2 : does not exist [ 1323.929316][ T5873] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1323.983321][ T5873] usb 5-1: USB disconnect, device number 48 [ 1324.051182][T13167] netlink: 96 bytes leftover after parsing attributes in process `syz.3.18206'. [ 1325.719091][ T5977] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1325.879247][ T5977] usb 6-1: Using ep0 maxpacket: 32 [ 1325.881753][ T5977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1325.881787][ T5977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1325.881829][ T5977] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1325.881855][ T5977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.886412][ T5977] usb 6-1: config 0 descriptor?? [ 1326.340652][ T5977] ft260 0003:0403:6030.0064: unknown main item tag 0x7 [ 1326.363324][T13220] netlink: 96 bytes leftover after parsing attributes in process `syz.3.18226'. [ 1326.541832][ T5977] ft260 0003:0403:6030.0064: chip code: 6424 8183 [ 1326.738864][ T37] audit: type=1400 audit(3913904288.189:6970): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=13226 comm="syz.1.18229" dest=24097 [ 1326.761963][ T5977] ft260 0003:0403:6030.0064: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 1326.976501][ T5977] ft260 0003:0403:6030.0064: failed to retrieve status: -32, no wakeup [ 1327.200285][ T5977] ft260 0003:0403:6030.0064: failed to reset I2C controller: -71 [ 1327.265821][ T5977] usb 6-1: USB disconnect, device number 44 [ 1327.846003][T13258] trusted_key: syz.5.18243 sent an empty control message without MSG_MORE. [ 1327.964855][ T5977] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1328.074423][T13265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18246'. [ 1328.113953][T13267] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18247'. [ 1328.140624][ T5977] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1328.140775][ T5977] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1328.145917][ T5977] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1328.145950][ T5977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.145972][ T5977] usb 1-1: Product: syz [ 1328.145988][ T5977] usb 1-1: Manufacturer: syz [ 1328.146004][ T5977] usb 1-1: SerialNumber: syz [ 1328.746863][T13270] nbd1: detected capacity change from 0 to 63 [ 1328.747318][T13272] block nbd1: NBD_DISCONNECT [ 1328.832534][T13272] block nbd1: Disconnected due to user request. [ 1328.833097][T13272] block nbd1: shutting down sockets [ 1329.109711][ T5977] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 1329.116633][ T5977] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 1329.139643][ T5977] cdc_ncm 1-1:1.0: bind() failure [ 1329.161643][ T5977] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1329.161693][ T5977] cdc_ncm 1-1:1.1: bind() failure [ 1329.181849][ T5977] usb 1-1: USB disconnect, device number 39 [ 1329.436394][ T5939] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1329.612254][ T5939] usb 5-1: Using ep0 maxpacket: 8 [ 1329.614573][ T5939] usb 5-1: config 0 has an invalid interface number: 101 but max is 12 [ 1329.614603][ T5939] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1329.614628][ T5939] usb 5-1: config 0 has no interface number 0 [ 1329.614664][ T5939] usb 5-1: too many endpoints for config 0 interface 101 altsetting 115: 51, using maximum allowed: 30 [ 1329.614714][ T5939] usb 5-1: config 0 interface 101 altsetting 115 has 0 endpoint descriptors, different from the interface descriptor's value: 51 [ 1329.614745][ T5939] usb 5-1: config 0 interface 101 has no altsetting 0 [ 1329.617595][ T5939] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1329.617628][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.617651][ T5939] usb 5-1: Product: syz [ 1329.617667][ T5939] usb 5-1: Manufacturer: syz [ 1329.617684][ T5939] usb 5-1: SerialNumber: syz [ 1329.637374][ T5939] usb 5-1: config 0 descriptor?? [ 1329.992716][ T5939] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1330.936859][ T5939] gspca_zc3xx: reg_w_i err -71 [ 1331.558576][ T5939] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1331.558688][ T5939] gspca_zc3xx 5-1:0.101: probe with driver gspca_zc3xx failed with error -71 [ 1331.563836][ T5939] usb 5-1: USB disconnect, device number 49 [ 1332.187548][T13331] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 1332.433630][T13341] netlink: 32 bytes leftover after parsing attributes in process `syz.4.18275'. [ 1332.914941][T13358] netlink: 'syz.4.18281': attribute type 1 has an invalid length. [ 1333.145269][T13358] bond5: entered promiscuous mode [ 1333.148530][T13358] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1333.363353][T13361] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1333.383974][T13361] bond5: (slave bond6): making interface the new active one [ 1333.401219][T13361] bond6: entered promiscuous mode [ 1333.407319][T13361] bond5: (slave bond6): Enslaving as an active interface with an up link [ 1334.807864][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18306'. [ 1334.808059][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18306'. [ 1334.829446][ T9] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 1334.900308][T13420] bridge0: entered promiscuous mode [ 1334.901160][T13420] bridge0: left promiscuous mode [ 1335.012957][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.012988][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1335.013061][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1335.013107][ T9] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1335.013132][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.019775][T13406] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1335.022932][ T9] hub 2-1:1.0: bad descriptor, ignoring hub [ 1335.022974][ T9] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1335.095781][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 1335.095805][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 1335.109599][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1335.109623][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 1335.954926][T13447] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1336.058166][ T5878] usb 2-1: USB disconnect, device number 29 [ 1336.368750][ T37] audit: type=1800 audit(3913904297.156:6971): pid=13455 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.18323" name="bus" dev="overlay" ino=6998 res=0 errno=0 [ 1336.368815][ T37] audit: type=1400 audit(3913904297.156:6972): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=13458 comm="syz.3.18326" [ 1336.503346][T13462] loop2: detected capacity change from 0 to 7 [ 1336.522191][T13462] Dev loop2: unable to read RDB block 7 [ 1336.522245][T13462] loop2: unable to read partition table [ 1336.522489][T13462] loop2: partition table beyond EOD, truncated [ 1336.522509][T13462] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1336.693912][ T37] audit: type=1400 audit(3913904297.492:6973): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=13465 comm="syz.0.18324" daddr=::ffff:0.0.0.0 dest=20002 [ 1336.805542][T13471] input: syz1 as /devices/virtual/input/input119 [ 1336.987132][ T5878] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 1337.017557][ T37] audit: type=1400 audit(3913904297.801:6974): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=13473 comm="syz.1.18331" daddr=2001::2 dest=20003 [ 1337.018535][ T37] audit: type=1400 audit(3913904297.801:6975): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=13473 comm="syz.1.18331" daddr=2001::1 dest=20002 [ 1337.126668][T13478] kvm: emulating exchange as write [ 1337.144427][T13480] netlink: 'syz.1.18333': attribute type 9 has an invalid length. [ 1337.144450][T13480] netlink: 'syz.1.18333': attribute type 11 has an invalid length. [ 1337.144463][T13480] netlink: 'syz.1.18333': attribute type 12 has an invalid length. [ 1337.144479][T13480] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.18333'. [ 1337.144732][T13480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18333'. [ 1337.150212][ T5878] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1337.150255][ T5878] usb 1-1: can't read configurations, error -71 [ 1338.982485][T13524] tipc: Failed to remove unknown binding: 66,1,1/0:4180711562/4180711564 [ 1338.982515][T13524] tipc: Failed to remove unknown binding: 66,1,1/0:4180711562/4180711564 [ 1339.487342][ T37] audit: type=1326 audit(3913904300.110:6976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13543 comm="syz.5.18360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db510f749 code=0x7ffc0000 [ 1339.488363][ T37] audit: type=1326 audit(3913904300.110:6977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13543 comm="syz.5.18360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db510f749 code=0x7ffc0000 [ 1339.493700][ T37] audit: type=1326 audit(3913904300.110:6978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13543 comm="syz.5.18360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db510f749 code=0x7ffc0000 [ 1339.493767][ T37] audit: type=1326 audit(3913904300.110:6979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13543 comm="syz.5.18360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9db510f749 code=0x7ffc0000 [ 1339.493819][ T37] audit: type=1326 audit(3913904300.110:6980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13543 comm="syz.5.18360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db510f749 code=0x7ffc0000 [ 1341.709361][ T5873] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1341.887748][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 1341.897531][ T5873] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1341.907850][ T5873] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1341.907928][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.907985][ T5873] usb 4-1: Product: syz [ 1341.908035][ T5873] usb 4-1: Manufacturer: syz [ 1341.908079][ T5873] usb 4-1: SerialNumber: syz [ 1341.968924][ T5873] usb 4-1: config 0 descriptor?? [ 1341.984387][ T5873] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1341.985644][ T5873] usb 4-1: Detected FT232R [ 1342.200856][ T5873] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1342.421505][ T5873] ftdi_sio 4-1:0.0: GPIO initialisation failed: -5 [ 1342.425782][ T5873] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1342.645839][ T5939] usb 4-1: USB disconnect, device number 49 [ 1342.662251][ T5939] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1342.662582][ T5939] ftdi_sio 4-1:0.0: device disconnected [ 1343.248516][ T5939] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1343.291159][ T5977] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1343.382625][T13631] overlayfs: statfs failed on './file0' [ 1343.418144][ T5939] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1343.418178][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1343.418203][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1343.418226][ T5939] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1343.418269][ T5939] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1343.418293][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.485317][ T5977] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1343.485351][ T5977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.517082][ T5977] usb 2-1: config 0 descriptor?? [ 1343.517623][ T5939] usb 1-1: config 0 descriptor?? [ 1343.755713][ T5977] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1344.067524][ T5977] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1344.067553][ T5977] [drm] Initialized udl on minor 2 [ 1344.087214][ T5939] plantronics 0003:047F:FFFF.0065: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1344.203653][ T5977] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1344.209869][ T5977] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1344.439301][ T5977] usb 2-1: USB disconnect, device number 30 [ 1344.440608][ T5939] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1344.440844][ T5939] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1344.661402][T13673] A link change request failed with some changes committed already. Interface ªªªªªªÛœ}J¹ÖXÎ may have been left with an inconsistent configuration, please check. [ 1345.045141][ T5939] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1345.209197][ T5939] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.209260][ T5939] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1345.209289][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.250665][ T5939] usb 4-1: config 0 descriptor?? [ 1345.268196][ T5939] pwc: Askey VC010 type 2 USB webcam detected. [ 1345.706922][ T5939] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1345.717700][ T5939] pwc: recv_control_msg error -32 req 02 val 2700 [ 1345.731899][ T5939] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1345.733970][ T5939] pwc: recv_control_msg error -32 req 04 val 1000 [ 1345.949425][ T5939] pwc: recv_control_msg error -71 req 04 val 1400 [ 1345.950259][ T5939] pwc: recv_control_msg error -71 req 02 val 2000 [ 1345.953805][ T5939] pwc: recv_control_msg error -71 req 02 val 2100 [ 1345.960892][ T5939] pwc: recv_control_msg error -71 req 04 val 1500 [ 1345.998268][ T5939] pwc: recv_control_msg error -71 req 02 val 2500 [ 1346.000078][ T5939] pwc: recv_control_msg error -71 req 02 val 2400 [ 1346.000984][ T5939] pwc: recv_control_msg error -71 req 02 val 2600 [ 1346.001535][ T5939] pwc: recv_control_msg error -71 req 02 val 2900 [ 1346.045458][ T5939] pwc: recv_control_msg error -71 req 02 val 2800 [ 1346.046276][ T5939] pwc: recv_control_msg error -71 req 04 val 1100 [ 1346.047465][ T5939] pwc: recv_control_msg error -71 req 04 val 1200 [ 1346.083027][ T5939] pwc: Registered as video103. [ 1346.091826][ T5939] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input121 [ 1346.123617][ T5939] usb 4-1: USB disconnect, device number 50 [ 1346.306025][ T5873] usb 1-1: USB disconnect, device number 42 [ 1346.326421][ T5977] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 1346.342679][ T37] kauditd_printk_skb: 29 callbacks suppressed [ 1346.342699][ T37] audit: type=1400 audit(3913904306.524:7010): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=13691 comm="syz.4.18420" dest=20001 [ 1346.442831][ T5977] hid-generic 0000:0000:0000.0066: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1346.512120][T13697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18422'. [ 1346.564892][T13697] erspan0: entered promiscuous mode [ 1346.565373][T13697] macvtap1: entered promiscuous mode [ 1346.565653][T13697] macvtap1: entered allmulticast mode [ 1346.565670][T13697] erspan0: entered allmulticast mode [ 1346.804023][T13698] erspan0: left allmulticast mode [ 1346.804295][T13698] erspan0: left promiscuous mode [ 1348.638943][T13754] overlayfs: failed to clone upperpath [ 1348.800433][T13758] netlink: 'syz.0.18451': attribute type 4 has an invalid length. [ 1348.912112][ T5873] lo speed is unknown, defaulting to 1000 [ 1348.912145][ T5873] syz1: Port: 1 Link DOWN [ 1348.946346][ T5873] lo speed is unknown, defaulting to 1000 [ 1350.013489][T13760] lo speed is unknown, defaulting to 1000 [ 1350.185110][T13784] overlayfs: failed to clone upperpath [ 1350.577413][T13791] GUP no longer grows the stack in syz.4.18464 (13791): 200000005000-200000008000 (200000004000) [ 1350.577456][T13791] CPU: 0 UID: 0 PID: 13791 Comm: syz.4.18464 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1350.577486][T13791] Tainted: [L]=SOFTLOCKUP [ 1350.577495][T13791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1350.577510][T13791] Call Trace: [ 1350.577520][T13791] [ 1350.577530][T13791] dump_stack_lvl+0xe8/0x150 [ 1350.577571][T13791] fixup_user_fault+0x64a/0x700 [ 1350.577611][T13791] fault_in_user_writeable+0x72/0xe0 [ 1350.577651][T13791] futex_lock_pi+0x765/0xa70 [ 1350.577684][T13791] ? __pfx_futex_lock_pi+0x10/0x10 [ 1350.577738][T13791] ? __pfx_futex_wake_mark+0x10/0x10 [ 1350.577768][T13791] ? __pfx_futex_wake+0x10/0x10 [ 1350.577789][T13791] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 1350.577823][T13791] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 1350.577858][T13791] do_futex+0x292/0x420 [ 1350.577899][T13791] ? __pfx_do_futex+0x10/0x10 [ 1350.577934][T13791] ? __vm_munmap+0x2c1/0x380 [ 1350.577969][T13791] __se_sys_futex+0x36f/0x400 [ 1350.578010][T13791] ? __pfx___se_sys_futex+0x10/0x10 [ 1350.578045][T13791] ? rcu_is_watching+0x15/0xb0 [ 1350.578074][T13791] ? __x64_sys_futex+0x21/0xf0 [ 1350.578112][T13791] do_syscall_64+0xec/0xf80 [ 1350.578135][T13791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.578157][T13791] ? trace_irq_disable+0x37/0x100 [ 1350.578182][T13791] ? clear_bhb_loop+0x60/0xb0 [ 1350.578211][T13791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.578233][T13791] RIP: 0033:0x7fd5126cf749 [ 1350.578254][T13791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1350.578274][T13791] RSP: 002b:00007fd510936038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1350.578307][T13791] RAX: ffffffffffffffda RBX: 00007fd512925fa0 RCX: 00007fd5126cf749 [ 1350.578324][T13791] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 1350.578340][T13791] RBP: 00007fd512753f91 R08: 0000000000000000 R09: 0000000000000000 [ 1350.578354][T13791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1350.578369][T13791] R13: 00007fd512926038 R14: 00007fd512925fa0 R15: 00007fff87740c78 [ 1350.578406][T13791] [ 1350.624402][ T37] audit: type=1326 audit(3913904310.517:7011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13794 comm="syz.3.18465" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55bce3f749 code=0x0 [ 1351.480791][T13815] netlink: 28 bytes leftover after parsing attributes in process `syz.5.18473'. [ 1351.793336][T13820] netlink: 64 bytes leftover after parsing attributes in process `syz.5.18475'. [ 1352.735866][ T5873] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1352.896107][ T5873] usb 1-1: Using ep0 maxpacket: 8 [ 1352.898175][ T5873] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.898203][ T5873] usb 1-1: config 0 has no interfaces? [ 1352.900934][ T5873] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1352.900964][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.900987][ T5873] usb 1-1: Product: syz [ 1352.901004][ T5873] usb 1-1: Manufacturer: syz [ 1352.901021][ T5873] usb 1-1: SerialNumber: syz [ 1352.904963][ T5873] usb 1-1: config 0 descriptor?? [ 1353.081163][T13760] Process accounting paused [ 1353.270120][ T9] usb 1-1: USB disconnect, device number 43 [ 1353.842154][T13864] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1354.717826][T13886] netlink: 64 bytes leftover after parsing attributes in process `syz.1.18502'. [ 1354.950566][T13862] lo speed is unknown, defaulting to 1000 [ 1355.825382][ T37] audit: type=1400 audit(3913904315.379:7012): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=13908 comm="syz.5.18513" dest=2 [ 1356.123864][T13914] overlayfs: failed to clone lowerpath [ 1356.388171][T13917] veth0: entered promiscuous mode [ 1356.389716][T13917] syz_tun: entered promiscuous mode [ 1356.632279][T13921] uprobe: syz.4.18518:13921 failed to unregister, leaking uprobe [ 1356.791548][T13916] syz_tun: left promiscuous mode [ 1356.792920][T13916] veth0: left promiscuous mode [ 1357.455028][T13928] team0: entered promiscuous mode [ 1357.455048][T13928] bond0: entered promiscuous mode [ 1357.585475][T13928] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1358.007587][ T9] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1358.178800][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1358.181227][ T9] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1358.181258][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.200265][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1358.241441][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1358.399883][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1358.399998][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1358.400026][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.438344][ T10] usb 2-1: config 0 descriptor?? [ 1358.902412][ T10] lua 0003:1E7D:2C2E.0067: unbalanced collection at end of report description [ 1358.905472][ T10] lua 0003:1E7D:2C2E.0067: parse failed [ 1358.925326][ T10] lua 0003:1E7D:2C2E.0067: probe with driver lua failed with error -22 [ 1359.140817][ T3906] usb 2-1: USB disconnect, device number 31 [ 1359.315585][ T9] gspca_nw80x: reg_w err -71 [ 1359.315691][ T9] nw80x 5-1:3.0: probe with driver nw80x failed with error -71 [ 1359.322366][ T9] usb 5-1: USB disconnect, device number 51 [ 1359.770787][ T37] audit: type=1400 audit(3913904319.072:7013): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=13984 comm="syz.5.18544" dest=20001 [ 1360.005895][T13993] netlink: 'syz.5.18546': attribute type 4 has an invalid length. [ 1360.113193][T13997] netlink: 44 bytes leftover after parsing attributes in process `syz.0.18549'. [ 1360.252755][T14002] netlink: 'syz.1.18550': attribute type 83 has an invalid length. [ 1360.345737][T14008] all: renamed from bridge_slave_0 [ 1362.820465][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1362.994647][ T10] usb 1-1: config 0 has an invalid interface number: 73 but max is 0 [ 1362.994680][ T10] usb 1-1: config 0 has no interface number 0 [ 1362.999360][ T10] usb 1-1: New USB device found, idVendor=06f8, idProduct=300c, bcdDevice=39.64 [ 1362.999393][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.999416][ T10] usb 1-1: Product: syz [ 1362.999433][ T10] usb 1-1: Manufacturer: syz [ 1362.999449][ T10] usb 1-1: SerialNumber: syz [ 1363.053258][ T10] usb 1-1: config 0 descriptor?? [ 1363.069601][ T10] uvcvideo 1-1:0.73: Found Unit with invalid ID 0 [ 1363.312556][ T10] uvcvideo 1-1:0.73: probe with driver uvcvideo failed with error -22 [ 1363.322165][ T10] usb 1-1: USB disconnect, device number 44 [ 1363.649270][T14077] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18581'. [ 1363.650353][T14077] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18581'. [ 1363.709038][T14080] overlayfs: failed to clone upperpath [ 1365.162045][T14115] overlayfs: failed to clone upperpath [ 1366.029733][ T37] audit: type=1804 audit(3913904324.897:7014): pid=14136 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.18604" name="file0" dev="tmpfs" ino=7436 res=1 errno=0 [ 1367.184670][ T37] audit: type=1400 audit(3913904326.010:7015): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=14165 comm="syz.5.18615" dest=20001 [ 1367.433227][ T37] audit: type=1400 audit(3913904326.244:7016): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=14175 comm="syz.3.18620" dest=20004 [ 1367.611500][ T5092] failed while handling packet from 1:16384 [ 1367.785309][ T37] audit: type=1400 audit(3913904326.571:7017): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=14187 comm="syz.3.18624" [ 1368.684281][T14211] syz_tun: entered allmulticast mode [ 1370.727242][ T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1370.915409][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1370.915464][ T10] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1370.915487][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.960671][ T10] usb 1-1: config 0 descriptor?? [ 1370.985124][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 1371.080906][ T3906] page_pool_release_retry() stalled pool shutdown: id 112, 1 inflight 60 sec [ 1371.440040][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1371.452603][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 1371.455057][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1371.457192][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 1371.458472][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 1371.523561][T14286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18663'. [ 1371.679955][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 1371.681905][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 1371.683108][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 1371.683608][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 1371.684298][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 1371.686225][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 1371.726315][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 1371.726838][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 1371.727542][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 1371.728014][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 1371.756857][ T10] pwc: Registered as video103. [ 1371.771635][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input122 [ 1371.795227][ T10] usb 1-1: USB disconnect, device number 45 [ 1372.442795][ T4082] Bluetooth: hci4: Frame reassembly failed (-84) [ 1374.080748][T14337] lo speed is unknown, defaulting to 1000 [ 1374.088475][T14361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18690'. [ 1374.586014][T29220] Bluetooth: hci4: command 0xfc11 tx timeout [ 1374.589962][ T5805] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1376.641380][ T37] audit: type=1400 audit(3913904334.827:7018): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="veth1" object="_" requested=w pid=14408 comm="syz.5.18708" saddr=fc01::2 src=20003 daddr=fe80::aa dest=16385 [ 1377.063528][T14421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18713'. [ 1377.180784][T14428] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.18714'. [ 1377.180812][T14428] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18714'. [ 1377.253928][T14425] serio: Serial port ttyS3 [ 1377.969458][T14431] lo speed is unknown, defaulting to 1000 [ 1378.641347][ T37] audit: type=1400 audit(3913904336.716:7019): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=14450 comm="syz.5.18724" [ 1378.731306][T14453] netlink: 'syz.1.18725': attribute type 10 has an invalid length. [ 1378.732808][T14453] bond0: (slave wlan1): Opening slave failed [ 1379.327297][T14474] netlink: 'syz.1.18734': attribute type 1 has an invalid length. [ 1379.567932][T14474] bond6: entered promiscuous mode [ 1379.568381][T14474] bond6: entered allmulticast mode [ 1379.580058][T14474] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1379.711149][T14479] erspan2: entered allmulticast mode [ 1379.904760][T14479] bond6: (slave erspan2): making interface the new active one [ 1379.914873][T14479] erspan2: entered promiscuous mode [ 1380.066865][T14479] bond6: (slave erspan2): Enslaving as an active interface with an up link [ 1380.932164][T14469] lo speed is unknown, defaulting to 1000 [ 1382.322754][T14527] netlink: 'syz.3.18752': attribute type 1 has an invalid length. [ 1382.433082][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18751'. [ 1382.661636][T14527] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1382.811952][T14531] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1383.000035][T14534] bond3: entered promiscuous mode [ 1383.000068][T14534] bond3: entered allmulticast mode [ 1383.260474][T14545] netlink: 'syz.3.18755': attribute type 1 has an invalid length. [ 1383.571722][T14545] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1383.807427][T14547] bond4: (slave veth3): Enslaving as an active interface with a down link [ 1383.917509][T14548] bond4: (slave dummy0): making interface the new active one [ 1383.950610][T14548] dummy0: entered promiscuous mode [ 1383.951062][T14548] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 1384.543693][T14577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18766'. [ 1384.600658][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1385.453486][T14587] fuse: Bad value for 'fd' [ 1385.654018][T14589] fuse: Bad value for 'fd' [ 1385.701807][T14559] Process accounting resumed [ 1386.474294][ T37] audit: type=1400 audit(3913904344.037:7020): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=14606 comm="syz.5.18780" daddr=fc01:: [ 1386.693495][T14611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18782'. [ 1386.885696][T14616] binder: 14615:14616 ioctl c0306201 0 returned -14 [ 1387.474031][T14631] wireguard0: entered promiscuous mode [ 1387.474063][T14631] wireguard0: entered allmulticast mode [ 1390.127108][T14704] syzkaller1: entered promiscuous mode [ 1390.127140][T14704] syzkaller1: entered allmulticast mode [ 1390.286264][T14711] fuse: Bad value for 'fd' [ 1391.272874][ T37] audit: type=1400 audit(3913904348.506:7021): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=14743 comm="syz.3.18836" dest=20002 [ 1391.585359][T14750] overlayfs: failed to clone upperpath [ 1393.742280][T14808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18863'. [ 1394.447321][ T5873] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1394.525665][ T37] audit: type=1400 audit(3913904351.573:7022): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=14829 comm="syz.5.18871" dest=2 [ 1394.607451][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 1394.609422][ T5873] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1394.609451][ T5873] usb 1-1: config 0 has no interface number 0 [ 1394.609527][ T5873] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1394.623764][ T5873] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1394.623799][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.623821][ T5873] usb 1-1: Product: syz [ 1394.623837][ T5873] usb 1-1: Manufacturer: syz [ 1394.623854][ T5873] usb 1-1: SerialNumber: syz [ 1394.685925][ T5873] usb 1-1: config 0 descriptor?? [ 1394.701978][ T5873] smsc75xx v1.0.0 [ 1395.335986][ T5873] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1395.336012][ T5873] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1395.726569][T14857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18882'. [ 1396.287626][T14857] hsr_slave_1 (unregistering): left promiscuous mode [ 1396.329191][T14862] overlayfs: failed to clone lowerpath [ 1396.416210][ T4091] dummy0: left promiscuous mode [ 1396.431630][ T5873] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1396.431663][ T5873] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 1396.431685][ T5873] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1396.431994][ T5873] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 1396.480670][ T5873] usb 1-1: USB disconnect, device number 46 [ 1401.206199][T14931] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 1402.619689][T14971] netlink: 64 bytes leftover after parsing attributes in process `syz.4.18924'. [ 1402.655059][T14971] syzkaller1: entered promiscuous mode [ 1402.655087][T14971] syzkaller1: entered allmulticast mode [ 1402.749752][ T37] audit: type=1400 audit(3913904359.258:7023): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=14973 comm="syz.3.18926" daddr=::ffff:172.20.20.187 dest=3 [ 1403.479566][T14986] netlink: 44 bytes leftover after parsing attributes in process `syz.3.18931'. [ 1403.535267][T14987] netlink: 44 bytes leftover after parsing attributes in process `syz.3.18931'. [ 1404.456664][T15009] binder: 15006:15009 ioctl 4018620d 0 returned -22 [ 1404.635240][T15012] overlayfs: failed to clone upperpath [ 1404.999701][ T37] audit: type=1326 audit(3913904361.362:7024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15018 comm="syz.5.18945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db510f749 code=0x7ffc0000 [ 1404.999769][ T37] audit: type=1326 audit(3913904361.362:7025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15018 comm="syz.5.18945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f9db510f749 code=0x7ffc0000 [ 1404.999823][ T37] audit: type=1326 audit(3913904361.362:7026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15018 comm="syz.5.18945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db510f749 code=0x7ffc0000 [ 1405.083011][ T37] audit: type=1326 audit(3913904361.362:7027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15018 comm="syz.5.18945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db510f749 code=0x7ffc0000 [ 1405.083254][ T37] audit: type=1326 audit(3913904361.437:7028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15018 comm="syz.5.18945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9db510f749 code=0x7ffc0000 [ 1405.084236][ T37] audit: type=1326 audit(3913904361.437:7029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15018 comm="syz.5.18945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db510f749 code=0x7ffc0000 [ 1405.084298][ T37] audit: type=1326 audit(3913904361.437:7030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15018 comm="syz.5.18945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db510f749 code=0x7ffc0000 [ 1405.084425][ T37] audit: type=1326 audit(3913904361.437:7031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15018 comm="syz.5.18945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9db510f749 code=0x7ffc0000 [ 1405.084596][ T37] audit: type=1326 audit(3913904361.437:7032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15018 comm="syz.5.18945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db510f749 code=0x7ffc0000 [ 1406.388634][T15070] fuse: Bad value for 'fd' [ 1406.811733][T15084] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1407.301057][T15090] overlayfs: failed to clone upperpath [ 1407.743021][T15097] netlink: 'syz.5.18970': attribute type 5 has an invalid length. [ 1408.586715][T15113] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1408.833937][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 1408.833959][ T37] audit: type=1400 audit(3913904364.953:7037): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=15114 comm="syz.4.18979" daddr=2001::2 dest=20011 [ 1409.008418][T15125] fuse: Bad value for 'fd' [ 1412.821364][ T37] audit: type=1400 audit(3913904368.683:7038): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=15177 comm="syz.1.19001" dest=20000 [ 1414.388233][T15191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19005'. [ 1414.576531][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1414.769828][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1414.769865][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1414.769889][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 1414.769934][ T9] usb 2-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 1414.769959][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.774362][ T9] usb 2-1: config 0 descriptor?? [ 1415.347564][ T9] smartjoyplus 0003:0B43:0003.0068: collection stack underflow [ 1415.347599][ T9] smartjoyplus 0003:0B43:0003.0068: item 0 4 0 12 parsing failed [ 1415.348284][ T9] smartjoyplus 0003:0B43:0003.0068: parse failed [ 1415.348355][ T9] smartjoyplus 0003:0B43:0003.0068: probe with driver smartjoyplus failed with error -22 [ 1415.585682][ T10] usb 2-1: USB disconnect, device number 32 [ 1415.688705][ T37] audit: type=1400 audit(3913904371.357:7039): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=15192 comm="syz.0.19006" daddr=fe80::13 [ 1416.468507][ T5873] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1416.632933][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1416.633008][ T5873] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1416.633155][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.647808][ T5873] usb 5-1: config 0 descriptor?? [ 1416.866002][T15230] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19022'. [ 1416.906831][ T5873] usbhid 5-1:0.0: can't add hid device: -71 [ 1416.906929][ T5873] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1416.924224][ T5873] usb 5-1: USB disconnect, device number 52 [ 1417.208134][T15238] fuse: Bad value for 'fd' [ 1417.370705][T15244] netlink: 'syz.3.19029': attribute type 4 has an invalid length. [ 1417.370732][T15244] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.19029'. [ 1417.452457][ T5873] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1417.584561][T15248] kvm: pic: single mode not supported [ 1417.612519][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 1417.619463][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1417.619517][ T5873] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1417.619543][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.669052][ T5873] usb 5-1: config 0 descriptor?? [ 1417.734410][ T5873] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1417.747131][ T5873] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1418.192684][T15250] Process accounting paused [ 1419.473921][ T5873] usb 5-1: USB disconnect, device number 53 [ 1419.478056][ T5873] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1419.877824][T15331] fuse: Bad value for 'fd' [ 1420.062990][T15339] fuse: Bad value for 'fd' [ 1420.682017][ T3906] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1420.821035][ T3906] usb 1-1: device descriptor read/64, error -71 [ 1420.903027][T15359] overlayfs: failed to clone upperpath [ 1420.986099][T15363] netlink: 'syz.1.19085': attribute type 1 has an invalid length. [ 1421.046631][T15363] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1421.152992][ T3906] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1421.295705][ T3906] usb 1-1: device descriptor read/64, error -71 [ 1421.409397][ T3906] usb usb1-port1: attempt power cycle [ 1421.418005][T15363] bond7: (slave dummy0): making interface the new active one [ 1421.615358][T15363] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 1421.754672][T15365] bond7: entered allmulticast mode [ 1421.754769][T15365] dummy0: entered allmulticast mode [ 1422.532502][ T3906] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1422.553796][ T3906] usb 1-1: device descriptor read/8, error -71 [ 1422.810421][ T3906] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1422.834589][ T3906] usb 1-1: device descriptor read/8, error -71 [ 1422.879447][T15397] netlink: 'syz.3.19097': attribute type 4 has an invalid length. [ 1422.957801][ T3906] usb usb1-port1: unable to enumerate USB device [ 1430.331499][T15565] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 1430.331856][T15565] kvm: requested 32685 ns i8254 timer period limited to 200000 ns [ 1430.359834][T15565] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 1430.382766][T15565] kvm: requested 27657 ns i8254 timer period limited to 200000 ns [ 1432.758777][ T5977] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1434.821798][ T5977] usb 1-1: Using ep0 maxpacket: 32 [ 1434.843887][ T5977] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 1434.843926][ T5977] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x2 has an invalid bInterval 248, changing to 11 [ 1434.843955][ T5977] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1434.843997][ T5977] usb 1-1: New USB device found, idVendor=0738, idProduct=1713, bcdDevice= 0.00 [ 1434.844022][ T5977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.918565][ T5977] usb 1-1: config 0 descriptor?? [ 1435.408006][ T5977] saitek 0003:0738:1713.0069: hidraw0: USB HID v0.00 Device [HID 0738:1713] on usb-dummy_hcd.0-1/input0 [ 1436.278248][ T5977] usb 1-1: USB disconnect, device number 51 [ 1439.998892][ T37] audit: type=1804 audit(3913904394.087:7040): pid=15781 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.19257" name="/newroot/3803/file7/file0" dev="tmpfs" ino=19233 res=1 errno=0 [ 1440.512964][ T37] audit: type=1400 audit(3913904394.573:7041): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=15799 comm="syz.1.19264" dest=20002 [ 1440.741007][T15808] syz_tun: entered allmulticast mode [ 1440.806418][T15810] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1440.806456][T15810] overlayfs: failed to set xattr on upper [ 1440.806467][T15810] overlayfs: ...falling back to redirect_dir=nofollow. [ 1440.806476][T15810] overlayfs: ...falling back to index=off. [ 1440.806486][T15810] overlayfs: ...falling back to uuid=null. [ 1440.858891][T15811] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 1443.845054][ T37] audit: type=1400 audit(3913904397.678:7042): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=15877 comm="syz.3.19296" [ 1445.256652][T15899] lo speed is unknown, defaulting to 1000 [ 1449.959371][T15951] Can't find ip_set type hash:ip,port,ne [ 1450.983879][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1454.689535][T16016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19352'. [ 1455.145127][T16035] netlink: 43 bytes leftover after parsing attributes in process `syz.1.19360'. [ 1455.145223][T16035] tipc: Enabling of bearer rejected, failed to enable media [ 1455.464588][T16043] netlink: 'syz.4.19363': attribute type 12 has an invalid length. [ 1459.936532][T16086] lo speed is unknown, defaulting to 1000 [ 1478.756999][T16305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19456'. [ 1479.268337][T16326] input: syz0 as /devices/virtual/input/input123 [ 1482.572794][ T37] audit: type=1400 audit(3913904433.142:7043): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=16364 comm="syz.4.19476" daddr=fe80::aa dest=65534 [ 1484.499528][ T5977] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1484.660047][ T5977] usb 1-1: Using ep0 maxpacket: 32 [ 1484.662663][ T5977] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1484.662692][ T5977] usb 1-1: config 0 has no interface number 0 [ 1484.662744][ T5977] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1484.666626][ T5977] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1484.666657][ T5977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.666680][ T5977] usb 1-1: Product: syz [ 1484.666697][ T5977] usb 1-1: Manufacturer: syz [ 1484.666713][ T5977] usb 1-1: SerialNumber: syz [ 1484.731738][ T5977] usb 1-1: config 0 descriptor?? [ 1484.749772][ T5977] smsc75xx v1.0.0 [ 1484.991752][T16413] binder: 16410:16413 ioctl c0306201 200000000680 returned -14 [ 1485.416652][ T5977] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1485.416687][ T5977] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1487.556494][ T5977] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1487.556520][ T5977] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1487.556536][ T5977] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1487.556744][ T5977] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 1489.466055][ T5873] usb 1-1: USB disconnect, device number 52 [ 1491.261087][ T37] audit: type=1804 audit(3913904442.025:7044): pid=16492 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.19523" name="/newroot/3843/file0" dev="tmpfs" ino=19455 res=1 errno=0 [ 1491.270766][T16492] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 1491.270840][T16492] ref_ctr increment failed for inode: 0x4bff offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88809e3b2640 [ 1491.272554][T16487] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 1491.272609][T16487] ref_ctr decrement failed for inode: 0x4bff offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88809e3b2640 [ 1491.272742][T16487] uprobe: syz.0.19523:16487 failed to unregister, leaking uprobe [ 1501.976286][T16580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19553'. [ 1516.072612][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1517.934995][T16687] JFS: discard option not supported on device [ 1517.941856][T16687] Mount JFS Failure: -22 [ 1517.941872][T16687] jfs_mount failed w/return code = -22 [ 1520.958889][T16706] fuse: Bad value for 'fd' [ 1538.249453][ T37] audit: type=1400 audit(3913904485.951:7045): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=16850 comm="syz.3.19634" daddr=2001:: [ 1541.278447][T16804] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1541.458125][T16804] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1541.458157][T16804] usb 1-1: config 0 has no interfaces? [ 1541.458189][T16804] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1541.458215][T16804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.503246][T16804] usb 1-1: config 0 descriptor?? [ 1541.803981][T16804] usb 1-1: USB disconnect, device number 53 [ 1550.211745][ T5873] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1550.382976][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 1550.389968][ T5873] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1550.390004][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1550.426862][ T5873] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1550.426897][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.426920][ T5873] usb 5-1: Product: syz [ 1550.426937][ T5873] usb 5-1: Manufacturer: syz [ 1550.426954][ T5873] usb 5-1: SerialNumber: syz [ 1550.472033][ T5873] usb 5-1: config 0 descriptor?? [ 1550.570253][ T5873] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1550.570288][ T5873] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1551.652768][ T5873] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1551.653803][ T5873] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1554.755311][ T5873] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 1554.769494][ T5873] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 1554.794412][ T5873] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1554.794864][ T5873] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1554.795265][ T5873] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1554.797232][ T5873] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1555.075145][T16804] usb 5-1: USB disconnect, device number 54 [ 1558.630701][ T37] audit: type=1326 audit(3913904505.006:7046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17021 comm="syz.5.19710" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9db510f749 code=0x0 [ 1571.996982][ T37] audit: type=1326 audit(3913904517.498:7047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17126 comm="syz.1.19743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5f11f749 code=0x7ffc0000 [ 1571.997141][ T37] audit: type=1326 audit(3913904517.507:7048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17126 comm="syz.1.19743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5f11f749 code=0x7ffc0000 [ 1572.001881][ T37] audit: type=1326 audit(3913904517.507:7049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17126 comm="syz.1.19743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f0a5f11f749 code=0x7ffc0000 [ 1572.002023][ T37] audit: type=1326 audit(3913904517.507:7050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17126 comm="syz.1.19743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5f11f749 code=0x7ffc0000 [ 1572.002183][ T37] audit: type=1326 audit(3913904517.507:7051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17126 comm="syz.1.19743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5f11f749 code=0x7ffc0000 [ 1572.007130][ T37] audit: type=1326 audit(3913904517.507:7052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17126 comm="syz.1.19743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a5f11f749 code=0x7ffc0000 [ 1572.039758][ T37] audit: type=1326 audit(3913904517.507:7053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17126 comm="syz.1.19743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5f11f749 code=0x7ffc0000 [ 1572.039825][ T37] audit: type=1326 audit(3913904517.517:7054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17126 comm="syz.1.19743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a5f11f749 code=0x7ffc0000 [ 1572.039875][ T37] audit: type=1326 audit(3913904517.517:7055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17126 comm="syz.1.19743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5f11f749 code=0x7ffc0000 [ 1572.093714][ T37] audit: type=1326 audit(3913904517.601:7056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17126 comm="syz.1.19743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5f11f749 code=0x7ffc0000 [ 1573.132769][T17139] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19746'. [ 1582.394012][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1582.403408][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1586.507182][T17210] overlayfs: failed to clone lowerpath [ 1591.552461][T17259] netlink: 'syz.0.19783': attribute type 4 has an invalid length. [ 1603.778232][T17339] can0: slcan on ttyS3. [ 1605.088212][T17341] can0 (unregistered): slcan off ttyS3. [ 1605.480093][T17349] kvm: kvm [17348]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800 [ 1605.496817][T17349] kvm: kvm [17348]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x800 [ 1606.969425][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 1606.969448][ T37] audit: type=1400 audit(3913904549.447:7069): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=17358 comm="syz.3.19814" daddr=::ffff:172.20.20.170 dest=20004 [ 1610.008986][T17378] netlink: 56 bytes leftover after parsing attributes in process `syz.3.19819'. [ 1617.699164][ T5873] usb 1-1: new low-speed USB device number 54 using dummy_hcd [ 1617.942564][ T5873] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1617.942597][ T5873] usb 1-1: config 0 has no interfaces? [ 1617.942621][ T5873] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1617.942649][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.816058][ T5873] usb 1-1: config 0 descriptor?? [ 1622.885838][T16804] usb 1-1: USB disconnect, device number 54 [ 1627.612012][T17474] fuse: Bad value for 'fd' [ 1628.839394][ T5977] libceph: connect (1)[c::]:6789 error -101 [ 1628.839570][ T5977] libceph: mon0 (1)[c::]:6789 connect error [ 1628.867019][ T5977] libceph: connect (1)[c::]:6789 error -101 [ 1628.867171][ T5977] libceph: mon0 (1)[c::]:6789 connect error [ 1628.867234][T17487] ceph: No mds server is up or the cluster is laggy [ 1632.251671][T17518] trusted_key: encrypted_key: insufficient parameters specified [ 1632.252669][T17518] netlink: 132 bytes leftover after parsing attributes in process `syz.1.19871'. [ 1632.628346][T17503] lo speed is unknown, defaulting to 1000 [ 1634.687895][T17542] [ 1634.687907][T17542] ====================================================== [ 1634.687914][T17542] WARNING: possible circular locking dependency detected [ 1634.687928][T17542] syzkaller #0 Tainted: G L [ 1634.687937][T17542] ------------------------------------------------------ [ 1634.687944][T17542] syz.4.19881/17542 is trying to acquire lock: [ 1634.687953][T17542] ffff8880338e9058 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_write+0x160/0x1460 [ 1634.687995][T17542] [ 1634.687995][T17542] but task is already holding lock: [ 1634.688000][T17542] ffff88806f580928 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x70e/0xe20 [ 1634.688034][T17542] [ 1634.688034][T17542] which lock already depends on the new lock. [ 1634.688034][T17542] [ 1634.688040][T17542] [ 1634.688040][T17542] the existing dependency chain (in reverse order) is: [ 1634.688046][T17542] [ 1634.688046][T17542] -> #2 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 1634.688067][T17542] mutex_lock_nested+0x5a/0x1d0 [ 1634.688088][T17542] autofs_notify_daemon+0x70e/0xe20 [ 1634.688101][T17542] autofs_wait+0x11f7/0x1900 [ 1634.688114][T17542] autofs_mount_wait+0x16b/0x390 [ 1634.688127][T17542] autofs_d_automount+0x64f/0x820 [ 1634.688151][T17542] __traverse_mounts+0x301/0x5e0 [ 1634.688166][T17542] step_into_slowpath+0x469/0x7d0 [ 1634.688182][T17542] path_lookupat+0x433/0x8c0 [ 1634.688197][T17542] filename_lookup+0x212/0x570 [ 1634.688213][T17542] kern_path+0x35/0x50 [ 1634.688228][T17542] lookup_bdev+0xc0/0x280 [ 1634.688248][T17542] resume_store+0x169/0x480 [ 1634.688264][T17542] kernfs_fop_write_iter+0x3b0/0x540 [ 1634.688281][T17542] vfs_write+0x5d5/0xb40 [ 1634.688302][T17542] ksys_write+0x14b/0x260 [ 1634.688322][T17542] do_syscall_64+0xec/0xf80 [ 1634.688335][T17542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.688351][T17542] [ 1634.688351][T17542] -> #1 (&of->mutex){+.+.}-{4:4}: [ 1634.688371][T17542] mutex_lock_nested+0x5a/0x1d0 [ 1634.688390][T17542] kernfs_fop_write_iter+0x1df/0x540 [ 1634.688407][T17542] iter_file_splice_write+0x977/0x10b0 [ 1634.688422][T17542] do_splice+0xc8e/0x1680 [ 1634.688437][T17542] __se_sys_splice+0x2e1/0x460 [ 1634.688453][T17542] do_syscall_64+0xec/0xf80 [ 1634.688467][T17542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.688482][T17542] [ 1634.688482][T17542] -> #0 (&pipe->mutex){+.+.}-{4:4}: [ 1634.688502][T17542] __lock_acquire+0x15a6/0x2cf0 [ 1634.688522][T17542] lock_acquire+0x107/0x340 [ 1634.688541][T17542] mutex_lock_nested+0x5a/0x1d0 [ 1634.688560][T17542] anon_pipe_write+0x160/0x1460 [ 1634.688573][T17542] __kernel_write_iter+0x48a/0x920 [ 1634.688594][T17542] __kernel_write+0xef/0x150 [ 1634.688614][T17542] autofs_notify_daemon+0x721/0xe20 [ 1634.688628][T17542] autofs_wait+0x11f7/0x1900 [ 1634.688641][T17542] autofs_mount_wait+0x16b/0x390 [ 1634.688653][T17542] autofs_d_automount+0x64f/0x820 [ 1634.688677][T17542] __traverse_mounts+0x301/0x5e0 [ 1634.688692][T17542] step_into_slowpath+0x469/0x7d0 [ 1634.688708][T17542] path_lookupat+0x433/0x8c0 [ 1634.688728][T17542] filename_lookup+0x212/0x570 [ 1634.688744][T17542] kern_path+0x35/0x50 [ 1634.688759][T17542] lookup_bdev+0xc0/0x280 [ 1634.688778][T17542] resume_store+0x169/0x480 [ 1634.688794][T17542] kernfs_fop_write_iter+0x3b0/0x540 [ 1634.688811][T17542] vfs_write+0x5d5/0xb40 [ 1634.688831][T17542] ksys_write+0x14b/0x260 [ 1634.688851][T17542] do_syscall_64+0xec/0xf80 [ 1634.688865][T17542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.688879][T17542] [ 1634.688879][T17542] other info that might help us debug this: [ 1634.688879][T17542] [ 1634.688884][T17542] Chain exists of: [ 1634.688884][T17542] &pipe->mutex --> &of->mutex --> &sbi->pipe_mutex [ 1634.688884][T17542] [ 1634.688909][T17542] Possible unsafe locking scenario: [ 1634.688909][T17542] [ 1634.688914][T17542] CPU0 CPU1 [ 1634.688918][T17542] ---- ---- [ 1634.688923][T17542] lock(&sbi->pipe_mutex); [ 1634.688934][T17542] lock(&of->mutex); [ 1634.688945][T17542] lock(&sbi->pipe_mutex); [ 1634.688956][T17542] lock(&pipe->mutex); [ 1634.688966][T17542] [ 1634.688966][T17542] *** DEADLOCK *** [ 1634.688966][T17542] [ 1634.688971][T17542] 5 locks held by syz.4.19881/17542: [ 1634.688980][T17542] #0: ffff88804c4feb28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x253/0x320 [ 1634.689018][T17542] #1: ffff888035890480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1634.689069][T17542] #2: ffff88806db81478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1634.689107][T17542] #3: ffff88814169a878 (kn->active#67){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1634.689148][T17542] #4: ffff88806f580928 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x70e/0xe20 [ 1634.689184][T17542] [ 1634.689184][T17542] stack backtrace: [ 1634.689196][T17542] CPU: 0 UID: 0 PID: 17542 Comm: syz.4.19881 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1634.689218][T17542] Tainted: [L]=SOFTLOCKUP [ 1634.689224][T17542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1634.689236][T17542] Call Trace: [ 1634.689242][T17542] [ 1634.689249][T17542] dump_stack_lvl+0xe8/0x150 [ 1634.689272][T17542] print_circular_bug+0x2e2/0x300 [ 1634.689289][T17542] check_noncircular+0x12e/0x150 [ 1634.689317][T17542] __lock_acquire+0x15a6/0x2cf0 [ 1634.689340][T17542] ? unwind_next_frame+0xa5/0x23d0 [ 1634.689361][T17542] ? rcu_is_watching+0x15/0xb0 [ 1634.689377][T17542] ? unwind_next_frame+0xa5/0x23d0 [ 1634.689397][T17542] ? unwind_next_frame+0xa5/0x23d0 [ 1634.689418][T17542] ? rcu_is_watching+0x15/0xb0 [ 1634.689431][T17542] ? __kasan_check_byte+0x12/0x40 [ 1634.689456][T17542] ? unwind_next_frame+0xa5/0x23d0 [ 1634.689476][T17542] ? rcu_is_watching+0x15/0xb0 [ 1634.689493][T17542] ? anon_pipe_write+0x160/0x1460 [ 1634.689507][T17542] lock_acquire+0x107/0x340 [ 1634.689527][T17542] ? anon_pipe_write+0x160/0x1460 [ 1634.689544][T17542] ? anon_pipe_write+0x160/0x1460 [ 1634.689561][T17542] ? anon_pipe_write+0x160/0x1460 [ 1634.689575][T17542] mutex_lock_nested+0x5a/0x1d0 [ 1634.689595][T17542] ? anon_pipe_write+0x160/0x1460 [ 1634.689609][T17542] ? is_bpf_text_address+0x26/0x2b0 [ 1634.689635][T17542] anon_pipe_write+0x160/0x1460 [ 1634.689649][T17542] ? __kernel_text_address+0xd/0x40 [ 1634.689674][T17542] ? unwind_get_return_address+0x4d/0x90 [ 1634.689695][T17542] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1634.689716][T17542] ? arch_stack_walk+0xfc/0x150 [ 1634.689747][T17542] ? stack_trace_save+0x9c/0xe0 [ 1634.689767][T17542] ? __pfx_stack_trace_save+0x10/0x10 [ 1634.689786][T17542] ? __pfx_anon_pipe_write+0x10/0x10 [ 1634.689802][T17542] ? check_path+0x21/0x40 [ 1634.689831][T17542] __kernel_write_iter+0x48a/0x920 [ 1634.689854][T17542] ? __pfx_anon_pipe_write+0x10/0x10 [ 1634.689870][T17542] ? __pfx___kernel_write_iter+0x10/0x10 [ 1634.689895][T17542] ? __asan_memset+0x22/0x50 [ 1634.689915][T17542] ? iov_iter_kvec+0xb8/0x180 [ 1634.689941][T17542] __kernel_write+0xef/0x150 [ 1634.689963][T17542] ? __pfx___kernel_write+0x10/0x10 [ 1634.689989][T17542] ? lockdep_hardirqs_on+0x7b/0x110 [ 1634.690003][T17542] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1634.690019][T17542] ? mutex_lock_nested+0x154/0x1d0 [ 1634.690039][T17542] ? autofs_notify_daemon+0x70e/0xe20 [ 1634.690056][T17542] autofs_notify_daemon+0x721/0xe20 [ 1634.690074][T17542] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 1634.690103][T17542] ? __rt_spin_lock_init+0x3e/0x50 [ 1634.690120][T17542] ? autofs_wait+0xe22/0x1900 [ 1634.690136][T17542] autofs_wait+0x11f7/0x1900 [ 1634.690155][T17542] ? __pfx_autofs_wait+0x10/0x10 [ 1634.690171][T17542] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1634.690192][T17542] ? reacquire_held_locks+0x104/0x190 [ 1634.690217][T17542] ? rt_spin_lock+0x1c1/0x3e0 [ 1634.690239][T17542] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1634.690261][T17542] ? rt_spin_unlock+0x150/0x200 [ 1634.690284][T17542] autofs_mount_wait+0x16b/0x390 [ 1634.690300][T17542] autofs_d_automount+0x64f/0x820 [ 1634.690328][T17542] __traverse_mounts+0x301/0x5e0 [ 1634.690348][T17542] step_into_slowpath+0x469/0x7d0 [ 1634.690368][T17542] ? __pfx_step_into_slowpath+0x10/0x10 [ 1634.690385][T17542] ? lookup_slow+0x5e/0x70 [ 1634.690404][T17542] ? up_read+0x23/0x40 [ 1634.690421][T17542] path_lookupat+0x433/0x8c0 [ 1634.690445][T17542] filename_lookup+0x212/0x570 [ 1634.690464][T17542] ? __pfx_filename_lookup+0x10/0x10 [ 1634.690490][T17542] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1634.690511][T17542] ? kmem_cache_alloc_noprof+0x1e4/0x6c0 [ 1634.690534][T17542] ? getname_kernel+0x146/0x2f0 [ 1634.690551][T17542] ? getname_kernel+0x20e/0x2f0 [ 1634.690568][T17542] kern_path+0x35/0x50 [ 1634.690585][T17542] lookup_bdev+0xc0/0x280 [ 1634.690606][T17542] ? trace_kmalloc+0x1f/0xb0 [ 1634.690627][T17542] ? __pfx_lookup_bdev+0x10/0x10 [ 1634.690647][T17542] ? kstrndup+0xbf/0x160 [ 1634.690668][T17542] resume_store+0x169/0x480 [ 1634.690684][T17542] ? sysfs_file_kobj+0x1a/0x230 [ 1634.690705][T17542] ? __pfx_resume_store+0x10/0x10 [ 1634.690730][T17542] ? sysfs_file_kobj+0x1a/0x230 [ 1634.690750][T17542] ? sysfs_file_kobj+0x1a/0x230 [ 1634.690768][T17542] ? sysfs_file_kobj+0x1a/0x230 [ 1634.690789][T17542] ? sysfs_file_kobj+0x1e4/0x230 [ 1634.690809][T17542] ? sysfs_kf_write+0x166/0x260 [ 1634.690832][T17542] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1634.690853][T17542] kernfs_fop_write_iter+0x3b0/0x540 [ 1634.690873][T17542] vfs_write+0x5d5/0xb40 [ 1634.690897][T17542] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1634.690917][T17542] ? __pfx_vfs_write+0x10/0x10 [ 1634.690939][T17542] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1634.690955][T17542] ? lockdep_hardirqs_on+0x7b/0x110 [ 1634.690971][T17542] ? mutex_lock_nested+0x154/0x1d0 [ 1634.690991][T17542] ? fdget_pos+0x253/0x320 [ 1634.691011][T17542] ksys_write+0x14b/0x260 [ 1634.691034][T17542] ? __pfx_ksys_write+0x10/0x10 [ 1634.691061][T17542] do_syscall_64+0xec/0xf80 [ 1634.691076][T17542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.691091][T17542] ? trace_irq_disable+0x37/0x100 [ 1634.691109][T17542] ? clear_bhb_loop+0x60/0xb0 [ 1634.691127][T17542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.691142][T17542] RIP: 0033:0x7fd5126cf749 [ 1634.691157][T17542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1634.691171][T17542] RSP: 002b:00007fd510936038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1634.691188][T17542] RAX: ffffffffffffffda RBX: 00007fd512925fa0 RCX: 00007fd5126cf749 [ 1634.691200][T17542] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003 [ 1634.691211][T17542] RBP: 00007fd512753f91 R08: 0000000000000000 R09: 0000000000000000 [ 1634.691221][T17542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1634.691231][T17542] R13: 00007fd512926038 R14: 00007fd512925fa0 R15: 00007fff87740c78 [ 1634.691251][T17542] [ 1634.780789][T17542] PM: Image not found (code -22)