last executing test programs: 36.21548785s ago: executing program 0 (id=1397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 30.707418436s ago: executing program 1 (id=1398): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2, 0x4}, 0x80, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0) 29.636330212s ago: executing program 0 (id=1399): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0x50, 0x0, 0x0) 27.0447437s ago: executing program 1 (id=1400): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x28, &(0x7f0000000400)={[{@max={'max', 0x3d, 0x3}}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020}, 0x2020) 25.267252345s ago: executing program 0 (id=1401): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x45ce, 0x4) recvmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x120, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88a2c87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) 24.541973826s ago: executing program 1 (id=1402): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000200)=0x2, 0x4) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) 18.370083397s ago: executing program 0 (id=1403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 13.119687261s ago: executing program 1 (id=1404): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2, 0x4}, 0x80, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0) 8.162288998s ago: executing program 0 (id=1405): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0x50, 0x0, 0x0) 4.638941803s ago: executing program 1 (id=1406): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x28, &(0x7f0000000400)={[{@max={'max', 0x3d, 0x3}}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020}, 0x2020) 1.238834773s ago: executing program 0 (id=1407): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) close(0xffffffffffffffff) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) close(r0) 0s ago: executing program 1 (id=1408): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000200)=0x2, 0x4) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:27433' (ED25519) to the list of known hosts. syzkaller login: [ 476.518677][ T3212] cgroup: Unknown subsys name 'net' [ 477.190004][ T3212] cgroup: Unknown subsys name 'cpuset' [ 477.357674][ T3212] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 552.596707][ T3212] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 680.986697][ T3225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.096681][ T3223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.186574][ T3225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.442921][ T3223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.284942][ T3225] hsr_slave_0: entered promiscuous mode [ 694.336797][ T3225] hsr_slave_1: entered promiscuous mode [ 696.344689][ T3223] hsr_slave_0: entered promiscuous mode [ 696.407741][ T3223] hsr_slave_1: entered promiscuous mode [ 696.460420][ T3223] debugfs: 'hsr0' already exists in 'hsr' [ 696.474551][ T3223] Cannot create hsr debugfs directory [ 706.449395][ T3225] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 706.820509][ T3225] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 707.103918][ T3225] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 707.975524][ T3225] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 711.626335][ T3223] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 711.977777][ T3223] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 712.830919][ T3223] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 713.129351][ T3223] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 733.640003][ T3225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.476846][ T3223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.520256][ T3225] veth0_vlan: entered promiscuous mode [ 790.126169][ T3225] veth1_vlan: entered promiscuous mode [ 793.950699][ T3225] veth0_macvtap: entered promiscuous mode [ 794.805369][ T3223] veth0_vlan: entered promiscuous mode [ 794.864871][ T3225] veth1_macvtap: entered promiscuous mode [ 795.883754][ T3223] veth1_vlan: entered promiscuous mode [ 798.085983][ T27] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.157509][ T27] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.249480][ T27] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.273227][ T27] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.659396][ T3223] veth0_macvtap: entered promiscuous mode [ 800.475164][ T3223] veth1_macvtap: entered promiscuous mode [ 803.428208][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.430031][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.570343][ T3233] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.654250][ T3233] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.115005][ T3225] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 853.937967][ T3860] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 904.839832][ T3904] netlink: 'syz.0.25': attribute type 22 has an invalid length. [ 905.075499][ T3904] netlink: 'syz.0.25': attribute type 22 has an invalid length. [ 912.189957][ T3908] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 952.175760][ T3925] Zero length message leads to an empty skb [ 952.213849][ T3925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'. [ 954.690472][ T3927] fuse: Bad value for 'fd' [ 971.366120][ T3938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'. [ 973.728178][ T3940] fuse: Bad value for 'fd' [ 985.075226][ T3951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.46'. [ 999.699180][ T3967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.52'. [ 1018.463267][ T3981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.59'. [ 1087.020538][ T4043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.82'. [ 1105.714466][ T4058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 1189.714644][ T4137] netlink: 72 bytes leftover after parsing attributes in process `syz.0.121'. [ 1208.803884][ T4150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.127'. [ 1223.978629][ T4171] netlink: 20 bytes leftover after parsing attributes in process `syz.1.137'. [ 1236.536130][ T4184] netlink: 20 bytes leftover after parsing attributes in process `syz.0.143'. [ 1251.546471][ T4199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.149'. [ 1406.375745][ T4360] fuse: Unknown parameter 'grou00000000000000000000' [ 1410.286628][ T4364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'. [ 1422.512896][ T4374] syzkaller0: entered allmulticast mode [ 1455.010675][ T4405] fuse: Unknown parameter 'group_i00000000000000000000' [ 1546.829917][ T4506] fuseblk: Bad value for 'fd' [ 1564.716887][ T4522] fuseblk: Bad value for 'fd' [ 1580.385909][ T4534] fuse: Bad value for 'user_id' [ 1580.388039][ T4534] fuse: Bad value for 'user_id' [ 1592.344986][ T4545] fuse: Bad value for 'user_id' [ 1592.346802][ T4545] fuse: Bad value for 'user_id' [ 1602.734356][ T4560] fuse: Bad value for 'fd' [ 1624.469368][ T4579] syzkaller0: entered allmulticast mode [ 1788.119882][ T4714] fuse: Bad value for 'fd' [ 1891.889570][ T4776] fuse: Bad value for 'fd' [ 1903.771040][ T4787] netlink: 24 bytes leftover after parsing attributes in process `syz.1.353'. [ 1934.545883][ T4802] netlink: 24 bytes leftover after parsing attributes in process `syz.0.359'. [ 1937.887648][ T4802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.359'. [ 2132.540441][ T4964] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2231.360820][ T5082] fuse: Unknown parameter 'fd0x0000000000000003' [ 2243.647598][ T5091] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2255.329786][ T5106] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2268.746171][ T5123] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2284.749760][ T5141] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2305.775698][ T5161] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2474.206469][ T5365] syz.1.549 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 2625.210387][ T5510] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2625.230096][ T5510] syzkaller1: linktype set to 774 [ 2726.510659][ T5610] Driver unsupported XDP return value 0 on prog (id 77) dev N/A, expect packet loss! [ 2791.204746][ T5672] autofs: Unknown parameter 'fd0x0000000000000000' [ 2885.510748][ T5788] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 2939.224713][ T5836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.716'. [ 2988.988404][ T4677] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 2989.317989][ T4677] usb 1-1: Using ep0 maxpacket: 8 [ 2989.510698][ T4677] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 2989.526115][ T4677] usb 1-1: config 179 has no interface number 0 [ 2989.528664][ T4677] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2989.530895][ T4677] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2989.545495][ T4677] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2989.547684][ T4677] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2989.549883][ T4677] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2989.563739][ T4677] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2989.565905][ T4677] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2990.073180][ T5889] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2993.875867][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input0 [ 2994.496855][ T4450] usb 1-1: USB disconnect, device number 2 [ 2994.503128][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2994.507161][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 3037.181061][ T5954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.744'. [ 3090.478318][ T5979] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3100.853779][ T32] audit: type=1326 audit(3099.610:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.1.757" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 3100.891007][ T32] audit: type=1326 audit(3099.660:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.1.757" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 3101.003224][ T32] audit: type=1326 audit(3099.760:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.1.757" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 3101.009604][ T32] audit: type=1326 audit(3099.780:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.1.757" exe="/syz-executor" sig=0 arch=c00000f3 syscall=198 compat=0 ip=0xdc402 code=0x7ffc0000 [ 3101.028032][ T32] audit: type=1326 audit(3099.790:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.1.757" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 3101.030578][ T32] audit: type=1326 audit(3099.800:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.1.757" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 3101.047975][ T32] audit: type=1326 audit(3099.820:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.1.757" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 3101.065532][ T32] audit: type=1326 audit(3099.840:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.1.757" exe="/syz-executor" sig=0 arch=c00000f3 syscall=203 compat=0 ip=0xdc402 code=0x7ffc0000 [ 3101.075092][ T32] audit: type=1326 audit(3099.850:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.1.757" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 3101.082685][ T32] audit: type=1326 audit(3099.830:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.1.757" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 3104.045227][ T5994] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3116.928226][ T6014] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3127.995164][ T4450] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 3128.377112][ T4450] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3128.380425][ T4450] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3128.414149][ T4450] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3128.417131][ T4450] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3128.418924][ T4450] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3128.660738][ T4450] usb 2-1: config 0 descriptor?? [ 3131.509097][ T4450] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 3131.823155][ T4450] usb 2-1: USB disconnect, device number 2 [ 3141.170288][ T6056] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3143.353161][ T6057] binder: BINDER_SET_CONTEXT_MGR already set [ 3143.355019][ T6057] binder: 6055:6057 ioctl 4018620d 2000000002c0 returned -16 [ 3143.512383][ T6057] binder: 6055:6057 ioctl c018620c 0 returned -14 [ 3143.565178][ T6057] binder: 6055:6057 ioctl c0306201 200000000680 returned -14 [ 3155.674406][ T4677] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 3156.002584][ T4677] usb 1-1: Using ep0 maxpacket: 16 [ 3156.230560][ T4677] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3156.835143][ T4677] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3156.836916][ T4677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3156.838328][ T4677] usb 1-1: Product: syz [ 3156.839230][ T4677] usb 1-1: Manufacturer: syz [ 3156.840291][ T4677] usb 1-1: SerialNumber: syz [ 3158.245552][ T4677] usb 1-1: 0:2 : does not exist [ 3158.589817][ T4677] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 3159.743556][ T4677] usb 1-1: USB disconnect, device number 3 [ 3161.890317][ T6089] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3174.255036][ T6100] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3191.485975][ T6134] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3212.718269][ T6152] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3229.407805][ T6167] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3244.957433][ T6182] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3246.475950][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 3247.086258][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3247.094425][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3247.096963][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 3247.957349][ T9] usb 1-1: New USB device found, idVendor=0025, idProduct=a4a1, bcdDevice= 0.40 [ 3247.959685][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3247.964392][ T9] usb 1-1: Product: syz [ 3247.966444][ T9] usb 1-1: Manufacturer: syz [ 3247.967991][ T9] usb 1-1: SerialNumber: syz [ 3251.815365][ T9] cdc_ncm 1-1:1.0: bind() failure [ 3252.278700][ T9] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 3252.369741][ T9] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 3252.444041][ T9] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 3252.831200][ T9] usb 1-1: USB disconnect, device number 4 [ 3337.777900][ T6250] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3353.456798][ T6266] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3369.204979][ T6280] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3387.340310][ T6299] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3457.169954][ T6374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.882'. [ 3463.567698][ T6378] process 'syz.1.883' launched './file0' with NULL argv: empty string added [ 3678.679371][ T6565] syz.0.948 uses obsolete (PF_INET,SOCK_PACKET) [ 3696.994111][ T6577] binder: 6575:6577 ioctl c0306201 200000000680 returned -14 [ 3703.188728][ T6581] netlink: 72 bytes leftover after parsing attributes in process `syz.0.956'. [ 3713.350931][ T6593] binder: BINDER_SET_CONTEXT_MGR already set [ 3713.365608][ T6593] binder: 6592:6593 ioctl 4018620d 2000000002c0 returned -16 [ 3803.503998][ T6677] binder: 6676:6677 ioctl c0306201 200000000680 returned -14 [ 3823.297628][ T6689] binder: 6688:6689 ioctl c0306201 200000000680 returned -14 [ 3838.104554][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 3838.457450][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 3838.467323][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 3838.469565][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3838.697841][ T9] usb 2-1: config 0 descriptor?? [ 3838.720930][ T6703] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3840.538460][ T9] usb 2-1: USB disconnect, device number 3 [ 3843.439480][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 3843.974673][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3843.977357][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3843.979472][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3843.985799][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3843.987936][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3844.154766][ T9] usb 1-1: config 0 descriptor?? [ 3845.485344][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 3845.486964][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 3845.488244][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 3845.489483][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 3845.606408][ T9] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 3845.926608][ T9] usb 1-1: USB disconnect, device number 5 [ 3940.287839][ T6825] binder: 6824:6825 ioctl 4018620d 0 returned -22 [ 3940.516943][ T6825] binder: 6824:6825 ioctl c0306201 200000000680 returned -14 [ 3947.398341][ T6831] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 3957.148661][ T6846] binder: 6845:6846 ioctl 4018620d 0 returned -22 [ 3957.695919][ T6846] binder: 6845:6846 ioctl c0306201 200000000680 returned -14 [ 3972.826877][ T6860] binder: BINDER_SET_CONTEXT_MGR already set [ 3972.828935][ T6860] binder: 6859:6860 ioctl 4018620d 2000000002c0 returned -16 [ 4015.885488][ T6896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1067'. [ 4058.736224][ T6949] binder: 6948:6949 ioctl c0306201 0 returned -14 [ 4060.497345][ T6949] binder: 6948:6949 ioctl c0306201 200000000680 returned -14 [ 4082.422617][ T6966] capability: warning: `syz.1.1089' uses deprecated v2 capabilities in a way that may be insecure [ 4185.950665][ T7024] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1107'. [ 4225.558187][ T7050] binder: 7049:7050 ioctl c0306201 200000000680 returned -14 [ 4270.748935][ T7072] binder: 7071:7072 ioctl c0306201 200000000680 returned -14 [ 4291.686149][ T7093] binder: 7092:7093 ioctl c0306201 200000000680 returned -14 [ 4300.629169][ T7097] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1132'. [ 4351.235029][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 4351.565016][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 4351.900450][ T9] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 4351.924287][ T9] usb 1-1: config 0 has no interface number 0 [ 4351.926613][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 4351.928838][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 4351.930933][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 4351.984569][ T9] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 4351.987542][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 4351.989577][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4352.354199][ T9] usb 1-1: config 0 descriptor?? [ 4353.149819][ T9] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 4356.497823][ T7099] usb 1-1: USB disconnect, device number 6 [ 4356.725147][ T7099] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 4403.577248][ T7212] bond0: (slave bond_slave_0): Releasing backup interface [ 4403.984814][ T7212] bond0: (slave bond_slave_1): Releasing backup interface [ 4406.434338][ T7212] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 4410.242839][ T7213] vlan0: entered promiscuous mode [ 4461.315844][ T7225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4461.546983][ T7225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4483.734825][ T7225] hsr_slave_0: entered promiscuous mode [ 4483.798685][ T7225] hsr_slave_1: entered promiscuous mode [ 4483.844021][ T7225] debugfs: 'hsr0' already exists in 'hsr' [ 4483.846298][ T7225] Cannot create hsr debugfs directory [ 4495.490047][ T7225] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4497.056673][ T7225] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4499.160706][ T7225] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4500.437357][ T7225] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4504.936819][ T7225] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 4505.090299][ T7225] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 4505.248871][ T7225] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 4505.454138][ T7225] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 4520.377399][ T7225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4523.946323][ T7099] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 4524.640331][ T7099] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 4524.645331][ T7099] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 4524.647956][ T7099] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 4524.649859][ T7099] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4525.081351][ T7576] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 4525.434273][ T7099] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 4544.880355][ T7099] usb 1-1: USB disconnect, device number 7 [ 4583.059460][ T7225] veth0_vlan: entered promiscuous mode [ 4583.554485][ T7225] veth1_vlan: entered promiscuous mode [ 4585.887008][ T7225] veth0_macvtap: entered promiscuous mode [ 4586.108547][ T7225] veth1_macvtap: entered promiscuous mode [ 4588.783352][ T7061] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4588.786592][ T7061] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4588.905891][ T7061] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4588.962328][ T7061] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4619.463282][ T7099] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 4619.746014][ T7099] usb 2-1: Using ep0 maxpacket: 8 [ 4619.856223][ T7099] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 4619.858107][ T7099] usb 2-1: config 0 has no interface number 0 [ 4619.859679][ T7099] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 4619.863606][ T7099] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 4619.867665][ T7099] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 4619.869440][ T7099] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 4619.880530][ T7099] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 4619.890882][ T7099] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4620.127712][ T7099] usb 2-1: config 0 descriptor?? [ 4620.564272][ T7099] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 4621.638237][ T7099] usb 2-1: USB disconnect, device number 4 [ 4622.036777][ T7099] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 4721.778603][ T7725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4722.178463][ T7725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4739.350401][ T7725] hsr_slave_0: entered promiscuous mode [ 4739.410413][ T7725] hsr_slave_1: entered promiscuous mode [ 4739.655601][ T7725] debugfs: 'hsr0' already exists in 'hsr' [ 4739.656874][ T7725] Cannot create hsr debugfs directory [ 4752.209072][ T7725] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4754.180116][ T7725] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4756.217070][ T7725] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4757.860800][ T7725] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4761.395757][ T7725] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 4761.750652][ T7725] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 4762.004005][ T7725] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 4762.198564][ T7725] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 4779.646046][ T7725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4845.138169][ T7725] veth0_vlan: entered promiscuous mode [ 4846.037309][ T7725] veth1_vlan: entered promiscuous mode [ 4849.685219][ T7725] veth0_macvtap: entered promiscuous mode [ 4849.888131][ T7725] veth1_macvtap: entered promiscuous mode [ 4852.429614][ T3792] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4852.506529][ T6290] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4852.544991][ T3792] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4852.547851][ T3792] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4881.717882][ T8130] No control pipe specified [ 4895.997681][ T8141] No control pipe specified [ 4901.754503][ T8146] syzkaller1: entered promiscuous mode [ 4901.755791][ T8146] syzkaller1: entered allmulticast mode [ 4912.585979][ T8155] binder: 8154:8155 ioctl c0306201 200000000680 returned -14 [ 4921.765799][ T7655] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 4922.077412][ T7655] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 4922.079919][ T7655] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 4922.090725][ T7655] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 4922.095379][ T7655] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4922.407417][ T8164] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 4922.759160][ T7655] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 4925.247165][ T7684] usb 2-1: USB disconnect, device number 5 [ 4928.180944][ T8198] binder: 8197:8198 ioctl c0306201 200000000680 returned -14 [ 4941.138380][ T8210] binder: 8209:8210 ioctl c0306201 200000000680 returned -14 [ 4956.335998][ T8225] binder: 8224:8225 ioctl c0306201 200000000680 returned -14 [ 4969.845373][ T8236] syzkaller1: entered promiscuous mode [ 4969.847590][ T8236] syzkaller1: entered allmulticast mode [ 4971.530595][ T8240] binder: 8239:8240 ioctl c0306201 200000000680 returned -14 [ 4976.703882][ T7656] hid-generic 0040:0010:7FFFFFFF.0004: item fetching failed at offset 0/9 [ 4976.770662][ T7656] hid-generic 0040:0010:7FFFFFFF.0004: probe with driver hid-generic failed with error -22 [ 4986.479953][ T8256] binder: 8254:8256 ioctl c0306201 0 returned -14 [ 5003.759201][ T7099] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 5004.530306][ T7099] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 5004.537439][ T7099] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 5004.539472][ T7099] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 5004.555240][ T7099] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 5004.564029][ T7099] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5004.809559][ T7099] usb 1-1: config 0 descriptor?? [ 5007.586545][ T7099] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 5008.073488][ T7099] usb 1-1: USB disconnect, device number 8 [ 5018.474339][ T7656] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 5018.926884][ T7656] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 5018.929494][ T7656] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 5018.958111][ T7656] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 5018.960402][ T7656] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5019.416796][ T8306] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 5019.719179][ T7656] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 5040.004570][ T7656] usb 2-1: USB disconnect, device number 6 [ 5055.727777][ T7160] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 5056.600878][ T7160] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 5056.629508][ T7160] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 5056.674886][ T7160] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 5056.677147][ T7160] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5057.187162][ T8360] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 5057.535952][ T7160] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 5066.479156][ T7656] usb 2-1: USB disconnect, device number 7 [ 5087.056836][ T7656] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 5087.590184][ T7656] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 5087.597476][ T7656] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 5087.599975][ T7656] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 5087.609281][ T7656] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5087.980613][ T8410] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 5088.515101][ T7656] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 5096.700525][ T8283] usb 1-1: USB disconnect, device number 9 [ 5099.677702][ T8444] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1322'. [ 5120.808544][ T8465] No control pipe specified [ 5133.954789][ T8477] No control pipe specified [ 5300.758711][ T8625] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1395'. [ 5339.825886][ T8668] BUG: sleeping function called from invalid context at fs/inode.c:1928 [ 5339.829322][ T8668] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 8668, name: syz.0.1407 [ 5339.831026][ T8668] preempt_count: 1, expected: 0 [ 5339.834453][ T8668] RCU nest depth: 0, expected: 0 [ 5339.835986][ T8668] 2 locks held by syz.0.1407/8668: [ 5339.837482][ T8668] #0: ffffaf801a0620e0 (&type->s_umount_key#57){+.+.}-{4:4}, at: deactivate_super+0x7e/0x98 [ 5339.845163][ T8668] #1: ffffaf801a062998 (&s->s_inode_list_lock){+.+.}-{3:3}, at: hook_sb_delete+0x12e/0xbde [ 5339.850126][ T8668] Preemption disabled at: [ 5339.850689][ T8668] [] hook_sb_delete+0x12e/0xbde [ 5339.856441][ T8668] CPU: 1 UID: 0 PID: 8668 Comm: syz.0.1407 Not tainted syzkaller #0 PREEMPT [ 5339.857164][ T8668] Hardware name: riscv-virtio,qemu (DT) [ 5339.857759][ T8668] Call Trace: [ 5339.858136][ T8668] [] dump_backtrace+0x2e/0x3c [ 5339.858841][ T8668] [] show_stack+0x30/0x3c [ 5339.859323][ T8668] [] dump_stack_lvl+0x12a/0x1a2 [ 5339.860030][ T8668] [] dump_stack+0x1c/0x24 [ 5339.860739][ T8668] [] __might_resched+0x59c/0x5f8 [ 5339.861432][ T8668] [] __might_sleep+0x86/0xca [ 5339.861988][ T8668] [] iput+0x3c/0xb22 [ 5339.862618][ T8668] [] hook_sb_delete+0x86e/0xbde [ 5339.863322][ T8668] [] security_sb_delete+0xac/0x184 [ 5339.863961][ T8668] [] generic_shutdown_super+0xba/0x37c [ 5339.864685][ T8668] [] kill_litter_super+0x74/0xb0 [ 5339.865436][ T8668] [] deactivate_locked_super+0xd8/0x19c [ 5339.866213][ T8668] [] deactivate_super+0x84/0x98 [ 5339.866939][ T8668] [] cleanup_mnt+0x1dc/0x3e6 [ 5339.867555][ T8668] [] __cleanup_mnt+0x1c/0x26 [ 5339.868135][ T8668] [] task_work_run+0x16a/0x25e [ 5339.868673][ T8668] [] exit_to_user_mode_loop+0x110/0x142 [ 5339.869179][ T8668] [] do_trap_ecall_u+0x3f8/0x53a [ 5339.869827][ T8668] [] handle_exception+0x15e/0x16a SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 5357.183342][ T5143] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5358.898287][ T5143] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5359.807281][ T5143] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5360.856324][ T5143] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0