last executing test programs: 40.245082938s ago: executing program 0 (id=443): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 29.00584632s ago: executing program 1 (id=446): r0 = syz_io_uring_setup(0x4e84, &(0x7f0000000000)={0x0, 0x1384, 0x1, 0x1, 0x12b}, &(0x7f0000000080), &(0x7f00000000c0)) r1 = eventfd2(0x1e6c991e, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000180)=r1, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 22.717957051s ago: executing program 1 (id=447): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8004) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x840000000002, 0x3, 0x100) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x2004) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x4084, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r4], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x80) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 19.73214232s ago: executing program 0 (id=448): r0 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000000)=0x6568, 0x12) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x102, 0x0) 16.777590928s ago: executing program 1 (id=449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e2100000008f503400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}}, 0x0) close(r0) 15.613321316s ago: executing program 0 (id=450): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8004) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x840000000002, 0x3, 0x100) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x2004) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x4084, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r4], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 12.928801445s ago: executing program 1 (id=451): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000002c0)="ff", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) 11.238308519s ago: executing program 0 (id=452): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r2, 0x0, 0x0}, 0x10) 9.42850467s ago: executing program 1 (id=453): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8004) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x840000000002, 0x3, 0x100) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x2004) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x4084, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r4], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x80) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 5.043428673s ago: executing program 0 (id=454): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000000000000001000000090000000000000014"], 0x68}}], 0x2, 0x0) 2.203126593s ago: executing program 1 (id=455): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000003c0)="a0", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a0", 0x1}], 0x1}}], 0x2, 0x404c800) 0s ago: executing program 0 (id=456): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0xfa, &(0x7f0000000100)={@local, @random='?\x00', @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0xec, 0x164, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x36, 0x10, 0x7, 0x0, 0x67, {[@mptcp=@remove_addr={0x1e, 0xffffffffffffff70, 0x2, 0x0, "88391a84ed441d2486917d411bdd858b3945eb7bd74b3c76989b61cd1c3dca96f6015404000000fa2b86bdbac1834970ce2e08de17956124ca5ee57d308aea922869ee99052ca0cc15e589b578c40502623347eab29dd06a7e390033f18afdc223f22e540fcfffc82df86f1e876f0d74018986d4197c893a5072c75719294c8032d8ee1c9fcba8b0e13b58860d00fa15157cf689d0793fbee11750418fda225c64611be29f8d9e52170b4dcd456d1b63cc34e08fa254f3bbd0a800"/200}]}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:30736' (ED25519) to the list of known hosts. syzkaller login: [ 559.004213][ T3229] cgroup: Unknown subsys name 'net' [ 559.875291][ T3229] cgroup: Unknown subsys name 'cpuset' [ 560.063666][ T3229] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 638.884841][ T3229] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 773.387630][ T3239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.529936][ T3239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.531788][ T3237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.747706][ T3237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.600878][ T3239] hsr_slave_0: entered promiscuous mode [ 797.707627][ T3239] hsr_slave_1: entered promiscuous mode [ 799.680084][ T3237] hsr_slave_0: entered promiscuous mode [ 799.719024][ T3237] hsr_slave_1: entered promiscuous mode [ 799.759529][ T3237] debugfs: 'hsr0' already exists in 'hsr' [ 799.761962][ T3237] Cannot create hsr debugfs directory [ 809.732010][ T3239] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 809.986164][ T3239] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 810.222223][ T3239] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 811.097782][ T3239] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 812.492051][ T3237] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 812.827251][ T3237] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 813.048687][ T3237] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 813.307837][ T3237] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 833.046409][ T3239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.808082][ T3237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 902.875969][ T3239] veth0_vlan: entered promiscuous mode [ 903.870660][ T3239] veth1_vlan: entered promiscuous mode [ 904.145070][ T3237] veth0_vlan: entered promiscuous mode [ 905.288010][ T3237] veth1_vlan: entered promiscuous mode [ 907.642114][ T3239] veth0_macvtap: entered promiscuous mode [ 908.321303][ T3239] veth1_macvtap: entered promiscuous mode [ 909.915156][ T3237] veth0_macvtap: entered promiscuous mode [ 910.266680][ T3237] veth1_macvtap: entered promiscuous mode [ 912.361891][ T1057] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.584556][ T1057] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.588153][ T1057] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.778680][ T1057] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.858088][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.950121][ T3805] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.014216][ T3322] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.017187][ T3322] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.388161][ T3237] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 932.790720][ T3856] geneve2: entered promiscuous mode [ 932.800117][ T3856] geneve2: entered allmulticast mode [ 943.689774][ T3866] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5'. [ 947.079812][ T3869] netdevsim netdevsim1: Direct firmware load for þ failed with error -2 [ 947.087851][ T3869] netdevsim netdevsim1: Falling back to sysfs fallback for: þ [ 999.115140][ T3906] Zero length message leads to an empty skb [ 1025.556855][ T3920] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1064.771869][ T3946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.38'. [ 1064.815635][ T3946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.38'. [ 1064.819453][ T3946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.38'. [ 1077.369562][ T3958] Illegal XDP return value 4294967274 on prog (id 14) dev N/A, expect packet loss! [ 1078.604596][ T3960] netlink: 52 bytes leftover after parsing attributes in process `syz.0.44'. [ 1108.669056][ T3975] Invalid option length (938168) for dns_resolver key [ 1129.137356][ T3985] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1136.130169][ T3848] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1136.475852][ T3848] usb 1-1: Using ep0 maxpacket: 32 [ 1136.764682][ T3848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1136.768288][ T3848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1136.772122][ T3848] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1136.786299][ T3848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.220636][ T3848] usb 1-1: config 0 descriptor?? [ 1138.091125][ T3848] hub 1-1:0.0: USB hub found [ 1139.185154][ T3848] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1139.569019][ T3848] usbhid 1-1:0.0: can't add hid device: -71 [ 1139.594037][ T3848] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1139.896557][ T3848] usb 1-1: USB disconnect, device number 2 [ 1165.439443][ T4017] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1225.176428][ T3233] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1225.710004][ T3233] usb 2-1: Using ep0 maxpacket: 16 [ 1225.801308][ T3233] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1226.027200][ T3233] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 1226.029574][ T3233] usb 2-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 1226.044799][ T3233] usb 2-1: Product: syz [ 1226.046705][ T3233] usb 2-1: Manufacturer: syz [ 1226.048227][ T3233] usb 2-1: SerialNumber: syz [ 1226.371216][ T3233] usb 2-1: config 0 descriptor?? [ 1229.691508][ T3233] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1229.818615][ T3233] usb 2-1: USB disconnect, device number 2 [ 1241.128186][ T4093] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 1250.495998][ T4101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.85'. [ 1255.720014][ T4105] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 1261.269822][ T4109] binder: 4108:4109 ioctl 40046205 0 returned -22 [ 1262.311573][ T4111] comedi comedi3: comedi_parport: a I/O base address must be specified [ 1273.516191][ T4117] netlink: 'syz.0.93': attribute type 3 has an invalid length. [ 1289.897213][ T4126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.97'. [ 1290.468838][ T4126] netlink: 32 bytes leftover after parsing attributes in process `syz.1.97'. [ 1300.651362][ T4136] veth0_to_team: entered promiscuous mode [ 1302.210972][ T4137] lo speed is unknown, defaulting to 1000 [ 1302.258562][ T4137] lo speed is unknown, defaulting to 1000 [ 1302.589866][ T4137] lo speed is unknown, defaulting to 1000 [ 1303.132438][ T4137] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1303.708461][ T4137] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1307.630278][ T4137] lo speed is unknown, defaulting to 1000 [ 1308.795165][ T4137] lo speed is unknown, defaulting to 1000 [ 1331.057394][ T4158] lo speed is unknown, defaulting to 1000 [ 1331.059477][ T4158] lo speed is unknown, defaulting to 1000 [ 1331.075006][ T4158] lo speed is unknown, defaulting to 1000 [ 1332.225194][ T4158] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1333.871864][ T4158] lo speed is unknown, defaulting to 1000 [ 1334.162035][ T4158] lo speed is unknown, defaulting to 1000 [ 1368.140701][ T4183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.116'. [ 1457.300479][ T3231] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1457.798699][ T3231] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1457.801782][ T3231] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1457.828645][ T3231] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1457.830411][ T3231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.559556][ T3231] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1458.591884][ T3231] usb 1-1: invalid MIDI out EP 0 [ 1461.491125][ T3231] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1461.774401][ T4019] usb 1-1: USB disconnect, device number 3 [ 1475.918862][ T4283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.147'. [ 1516.090367][ T4317] netlink: 'syz.1.162': attribute type 21 has an invalid length. [ 1516.134656][ T4317] netlink: 128 bytes leftover after parsing attributes in process `syz.1.162'. [ 1516.137861][ T4317] netlink: 3 bytes leftover after parsing attributes in process `syz.1.162'. [ 1519.563688][ T4321] process 'syz.0.163' launched '/dev/fd/5' with NULL argv: empty string added [ 1519.712285][ T4321] mmap: syz.0.163 (4321) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1641.905323][ T3849] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1642.610806][ T3849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1642.624761][ T3849] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1643.638585][ T3849] usb 2-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 1643.640788][ T3849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.652235][ T3849] usb 2-1: Product: syz [ 1643.665097][ T3849] usb 2-1: Manufacturer: syz [ 1643.666704][ T3849] usb 2-1: SerialNumber: syz [ 1644.097791][ T3849] usb 2-1: config 0 descriptor?? [ 1645.536290][ T3849] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1647.107360][ T3849] usb 2-1: USB disconnect, device number 3 [ 1727.456873][ T4520] netlink: 'syz.1.230': attribute type 1 has an invalid length. [ 1727.458444][ T4520] netlink: 'syz.1.230': attribute type 2 has an invalid length. [ 1739.105931][ T4315] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1743.244869][ T4315] usb 2-1: Using ep0 maxpacket: 16 [ 1743.427529][ T4315] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1743.430153][ T4315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1743.469312][ T4315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1743.471794][ T4315] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1743.507412][ T4315] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1743.587876][ T4315] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1743.589978][ T4315] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1743.591236][ T4315] usb 2-1: Manufacturer: syz [ 1743.982110][ T4315] usb 2-1: config 0 descriptor?? [ 1752.010331][ T4315] rc_core: IR keymap rc-hauppauge not found [ 1752.029356][ T4315] Registered IR keymap rc-empty [ 1752.415318][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1752.436449][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1752.541392][ T4315] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1752.644974][ T4315] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input0 [ 1752.775917][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1752.806306][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1752.869636][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1752.919855][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1752.944628][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1752.990943][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1753.058526][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1753.118946][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1753.176122][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1753.214793][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1753.245069][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1753.581844][ T4315] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1753.605415][ T4315] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1753.844460][ T4315] usb 2-1: USB disconnect, device number 4 [ 1832.446343][ T4247] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1844.702158][ T4638] capability: warning: `syz.0.271' uses deprecated v2 capabilities in a way that may be insecure [ 1868.667590][ T4657] netlink: 'syz.1.279': attribute type 1 has an invalid length. [ 1868.669740][ T4657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'. [ 1891.197185][ T4674] rdma_op ffffaf801e68f1f0 conn xmit_rdma 0000000000000000 [ 1897.314462][ T4680] netlink: 20 bytes leftover after parsing attributes in process `syz.0.290'. [ 1911.538474][ T4696] random: crng reseeded on system resumption [ 1911.908120][ T4697] comedi: No check for data length of config insn id 6 is implemented [ 1911.909283][ T4697] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1911.930190][ T4697] comedi: Assuming n=419 is correct [ 1952.655767][ T31] audit: type=1326 audit(1951.280:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4722 comm="syz.1.309" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x7ffc0000 [ 1952.754666][ T31] audit: type=1326 audit(1951.430:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4722 comm="syz.1.309" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x7ffc0000 [ 1953.025973][ T31] audit: type=1326 audit(1951.680:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4722 comm="syz.1.309" exe="/syz-executor" sig=0 arch=c00000f3 syscall=278 compat=0 ip=0xdc02e code=0x7ffc0000 [ 1953.051203][ T31] audit: type=1326 audit(1951.730:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4722 comm="syz.1.309" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x7ffc0000 [ 1953.103735][ T31] audit: type=1326 audit(1951.750:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4722 comm="syz.1.309" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x7ffc0000 [ 1970.605881][ T4542] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1970.985963][ T4542] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1970.990427][ T4542] usb 2-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 1971.007811][ T4542] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1971.240063][ T4542] usb 2-1: config 0 descriptor?? [ 1973.520903][ T4542] logitech 0003:046D:CA03.0001: collection stack underflow [ 1973.535169][ T4542] logitech 0003:046D:CA03.0001: item 0 2 0 12 parsing failed [ 1973.621916][ T4542] logitech 0003:046D:CA03.0001: parse failed [ 1973.661521][ T4542] logitech 0003:046D:CA03.0001: probe with driver logitech failed with error -22 [ 1974.188429][ T4542] usb 2-1: USB disconnect, device number 5 [ 2000.560824][ T3996] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 2001.268103][ T3996] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2001.270477][ T3996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2001.934698][ T3996] usb 2-1: config 0 descriptor?? [ 2002.428702][ T3996] cp210x 2-1:0.0: cp210x converter detected [ 2005.121269][ T3996] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2005.444362][ T3996] usb 2-1: USB disconnect, device number 6 [ 2006.042263][ T3996] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2007.350153][ T3996] cp210x 2-1:0.0: device disconnected [ 2035.026391][ T4814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'. [ 2035.027963][ T4814] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 2063.401974][ T4834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'. [ 2075.939208][ T4844] netlink: 156 bytes leftover after parsing attributes in process `syz.1.345'. [ 2085.329839][ T4542] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2085.677534][ T4542] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2085.680937][ T4542] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2085.946133][ T4542] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2085.948598][ T4542] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2085.950389][ T4542] usb 2-1: Product: syz [ 2085.952471][ T4542] usb 2-1: Manufacturer: syz [ 2085.996014][ T4542] usb 2-1: SerialNumber: syz [ 2086.670045][ T4542] cdc_mbim 2-1:1.0: skipping garbage [ 2086.675818][ T4542] usb 2-1: selecting invalid altsetting 1 [ 2089.837930][ T4542] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 2089.856940][ T4542] cdc_mbim 2-1:1.0: bind() failure [ 2090.651559][ T4542] usb 2-1: USB disconnect, device number 7 [ 2092.766502][ T3231] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 2093.080550][ T3231] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2093.094814][ T3231] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2093.547863][ T3231] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2093.550211][ T3231] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2093.574621][ T3231] usb 1-1: Product: syz [ 2093.576586][ T3231] usb 1-1: Manufacturer: syz [ 2093.578134][ T3231] usb 1-1: SerialNumber: syz [ 2093.991530][ T3231] usb 1-1: config 0 descriptor?? [ 2094.405523][ T3231] usb 1-1: selecting invalid altsetting 0 [ 2097.150245][ T4869] snd-usb-audio 1-1:0.0: Runtime PM usage count underflow! [ 2097.235598][ T4315] usb 1-1: USB disconnect, device number 4 [ 2126.049370][ T4910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.357'. [ 2150.409514][ T4930] ªªªªªªÛœ}J¹ÖXÎ: renamed from lo (while UP) [ 2171.951554][ T3232] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2172.214659][ T3232] usb 2-1: Using ep0 maxpacket: 32 [ 2172.360579][ T3232] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2172.369821][ T3232] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 2172.371859][ T3232] usb 2-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2172.398543][ T3232] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2172.400551][ T3232] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 2172.402274][ T3232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2172.610717][ T3232] usb 2-1: config 0 descriptor?? [ 2175.196094][ T3232] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 2175.198658][ T3232] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 2175.200574][ T3232] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 2175.247968][ T3232] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 2175.250481][ T3232] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 2175.767527][ T3232] hid-thrustmaster 0003:044F:B65D.0002: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 2175.824048][ T3232] hid-thrustmaster 0003:044F:B65D.0002: setup data couldn't be sent [ 2175.860105][ C0] hid-thrustmaster 0003:044F:B65D.0002: URB to get model id failed with error -71 [ 2176.268898][ T3232] usb 2-1: USB disconnect, device number 8 [ 2183.095956][ T4323] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2183.731184][ T4323] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2183.743693][ T4323] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2183.926443][ T4323] usb 1-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.00 [ 2183.928799][ T4323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2183.930669][ T4323] usb 1-1: Product: syz [ 2183.932079][ T4323] usb 1-1: Manufacturer: syz [ 2183.966844][ T4323] usb 1-1: SerialNumber: syz [ 2184.381840][ T4323] usb 1-1: config 0 descriptor?? [ 2185.042245][ T4323] ums-jumpshot 1-1:0.0: USB Mass Storage device detected [ 2185.457759][ T4323] ums-jumpshot 1-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 2186.960157][ T4542] usb 1-1: USB disconnect, device number 5 [ 2330.306447][ T4315] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2330.621851][ T4315] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 2330.625526][ T4315] usb 2-1: config 0 has no interface number 0 [ 2330.628171][ T4315] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 255, changing to 11 [ 2330.630563][ T4315] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 59391, setting to 1024 [ 2330.637932][ T4315] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 2330.640137][ T4315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2330.911197][ T4315] usb 2-1: config 0 descriptor?? [ 2331.027578][ T5073] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2331.321342][ T4315] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input1 [ 2332.142174][ T4315] usb 2-1: USB disconnect, device number 9 [ 2377.918860][ T5118] netlink: 40 bytes leftover after parsing attributes in process `syz.1.425'. [ 2388.098587][ T5126] syz.1.428 uses obsolete (PF_INET,SOCK_PACKET) [ 2434.711501][ T4542] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2435.372196][ T4542] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2435.375691][ T4542] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 2435.377371][ T4542] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 2435.501257][ T4542] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2435.503454][ T4542] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2435.504589][ T4542] usb 1-1: Product: syz [ 2435.505749][ T4542] usb 1-1: Manufacturer: syz [ 2435.506836][ T4542] usb 1-1: SerialNumber: syz [ 2435.649463][ T4542] usb 1-1: config 0 descriptor?? [ 2435.698393][ T5156] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2435.701037][ T5156] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2435.798596][ T4542] usb 1-1: ucan: probing device on interface #0 [ 2436.944402][ T4542] usb 1-1: ucan: could not read protocol version, ret=-110 [ 2436.945737][ T4542] usb 1-1: ucan: probe failed; try to update the device firmware [ 2451.532281][ T3849] usb 1-1: USB disconnect, device number 6 [ 2458.169885][ T5183] netlink: 16 bytes leftover after parsing attributes in process `syz.1.449'. [ 3250.800697][ T33] INFO: task syz.1.455:5193 blocked for more than 421 seconds. [ 3254.371294][ T33] Not tainted syzkaller #0 [ 3260.668312][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3260.670727][ T33] task:syz.1.455 state:D stack:0 pid:5193 tgid:5193 ppid:3239 task_flags:0x440040 flags:0x00000002 [ 3265.806364][ T33] Call Trace: [ 3265.807306][ T33] [] __schedule+0x102c/0x451e [ 3265.809416][ T33] [] schedule+0xc4/0x35e [ 3265.810395][ T33] [] io_schedule+0x78/0xd4 [ 3265.811329][ T33] [] bit_wait_io+0x12/0xa2 [ 3265.812256][ T33] [] __wait_on_bit_lock+0x12c/0x204 [ 3270.261024][ T33] [] out_of_line_wait_on_bit_lock+0xce/0xf2 [ 3273.229400][ T33] [] __lock_buffer+0x6a/0x7e [ 3273.230899][ T33] [] do_get_write_access+0x848/0x136a [ 3273.232312][ T33] [] jbd2_journal_get_write_access+0x1c6/0x234 [ 3275.768920][ T33] [] __ext4_journal_get_write_access+0x68/0x316 [ 3275.772103][ T33] [] ext4_reserve_inode_write+0x124/0x266 [ 3280.476925][ T33] [] __ext4_mark_inode_dirty+0x1c6/0x90c [ 3280.479039][ T33] [] ext4_dirty_inode+0xb6/0x10c