last executing test programs: 4m19.450612006s ago: executing program 0 (id=339): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="0100", 0x2}], 0x1}, 0x4048841) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="04", 0x1}], 0x1}, 0x1) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/35, 0x30}], 0x1, 0x0, 0xffffffffffffff6f}, 0x2002) 4m19.349442978s ago: executing program 0 (id=342): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24000801) 4m19.214566615s ago: executing program 0 (id=345): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000001c0)=@x86={0x1, 0xa, 0xd, 0x0, 0x0, 0x80, 0x6, 0x10, 0xae, 0x0, 0x5, 0x1, 0x0, 0x1, 0x6, 0x1, 0x6, 0x4, 0x37, '\x00', 0x5, 0x8}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000140)={0x40001, 0x0, {[0x0, 0x8, 0x1800000000000000, 0x8, 0x400800, 0x400, 0xe56, 0x8]}}) 4m19.021049274s ago: executing program 0 (id=349): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) 4m18.971062058s ago: executing program 0 (id=350): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d01}]}) 4m18.157856246s ago: executing program 0 (id=355): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) modify_ldt$write2(0x11, &(0x7f0000000140)={0x9, 0x20000000, 0x400, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m17.700996689s ago: executing program 32 (id=355): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) modify_ldt$write2(0x11, &(0x7f0000000140)={0x9, 0x20000000, 0x400, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.648151114s ago: executing program 3 (id=4377): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) 1.193470699s ago: executing program 4 (id=4382): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8) 1.19216113s ago: executing program 1 (id=4383): syz_open_dev$sndpcmp(&(0x7f0000000000), 0x8, 0x30003) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) 1.106700344s ago: executing program 1 (id=4384): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16f) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1000) chdir(&(0x7f00000003c0)='./bus\x00') open$dir(&(0x7f0000000280)='./file0\x00', 0x40c00, 0x8) 1.099404423s ago: executing program 4 (id=4385): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd42, 0x800000001000005, 0xffffeffffffffff8, 0x1, 0xfffc, 0x200000000, 0x7, 0x8, 0xc, 0x2000000006, 0x200000000002, 0x0, 0x401, 0x0, 0x9, 0x10000008d], 0x8080000, 0x128657}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x8, 0x4) 1.005814355s ago: executing program 1 (id=4386): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_DELAY(r2, 0x80084121, &(0x7f0000000080)) 998.436163ms ago: executing program 1 (id=4387): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000100)="ac", 0x1) recvmmsg$unix(r1, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10001, 0x0) 864.5983ms ago: executing program 4 (id=4396): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x0, 0x0) r1 = getpgid(0x0) syz_pidfd_open(r1, 0x0) 759.19313ms ago: executing program 3 (id=4390): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e24, 0x8, @local, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_256={{0x304}, '\x00', "ec094e071cc80f218d360356a936a7e3971a8c35c47e580400", '\x00', "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xe6b2}], 0x1) 676.055812ms ago: executing program 3 (id=4392): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x888e}, @void, @eth={@empty, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@x25={0x805, {0x2, 0xb, 0xb}}}}}, 0x19) 672.70677ms ago: executing program 2 (id=4393): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r1 = fanotify_init(0x202, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r2 = dup2(r1, r0) read$FUSE(r2, &(0x7f0000001a40)={0x2020}, 0x2020) 597.121044ms ago: executing program 2 (id=4394): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x20009a9, 0x0) 473.513222ms ago: executing program 2 (id=4395): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 413.884909ms ago: executing program 3 (id=4397): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000140)=0x2, 0x4) 404.067784ms ago: executing program 2 (id=4398): r0 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x2) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x12, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}, 0x1}) 362.078354ms ago: executing program 3 (id=4399): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl(r1, 0x541b, 0x0) ioctl(r1, 0x5451, 0x0) 316.721748ms ago: executing program 4 (id=4400): socket$pppoe(0x18, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 306.267726ms ago: executing program 2 (id=4401): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006980)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/119, 0x77}, {&(0x7f00000001c0)=""/30, 0x1e}], 0x2}, 0x3}], 0x1, 0x40000000, 0x0) sendmsg$alg(r1, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x340000c1) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003600)=ANY=[], 0x3734}}, 0x840) 284.236543ms ago: executing program 3 (id=4402): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8003, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) 218.433249ms ago: executing program 4 (id=4403): socket$pppoe(0x18, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x7]}, 0x8) socket(0x10, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) 166.876391ms ago: executing program 4 (id=4404): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0xfffd, @random="c0c13c2baeb6", 'macvlan1\x00'}}, 0x1e) sendmmsg$sock(r0, &(0x7f0000001dc0), 0x40000a6, 0x48850) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x900, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4000850) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x1000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000180081054e81f782db0cb904021d080406037c09e8fe55a10a0015400400142603600e122f00050006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb5b277470703152b414f872766247a5025ccca9e0036", 0xa2}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x800) 106.531248ms ago: executing program 1 (id=4405): pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000040)=0x6bf1, 0x4) shutdown(r0, 0x1) 106.33241ms ago: executing program 2 (id=4406): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) 0s ago: executing program 1 (id=4407): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="64f3a49a2aa20eeb7d00b8000000000f23d80f21f835400000400f23f8f466baf80cb876d28082ef66bafc0cb0b2c4c1f9fa933f490000c4e2b928bc765862e16af20fe6d4f3d973fc0f07670f35", 0x4e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): er=0 [ 153.627051][ T5867] usb 2-1: config 0 descriptor?? [ 154.067851][ T5867] corsair-cpro 0003:1B1C:1D00.000D: unknown main item tag 0x0 [ 154.076788][ T5867] corsair-cpro 0003:1B1C:1D00.000D: unknown main item tag 0x0 [ 154.084377][ T5867] corsair-cpro 0003:1B1C:1D00.000D: item fetching failed at offset 2/5 [ 154.097069][ T5867] corsair-cpro 0003:1B1C:1D00.000D: probe with driver corsair-cpro failed with error -22 [ 154.160997][ T8773] syzkaller1: entered promiscuous mode [ 154.166793][ T8773] syzkaller1: entered allmulticast mode [ 154.270381][ T5897] usb 2-1: USB disconnect, device number 11 [ 155.559713][ T8811] syzkaller1: entered promiscuous mode [ 155.565491][ T8811] syzkaller1: entered allmulticast mode [ 155.737752][ T5867] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 155.884982][ T8834] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1246'. [ 155.900451][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.916282][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.945918][ T5867] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 155.962103][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.987522][ T5867] usb 4-1: config 0 descriptor?? [ 156.244638][ T8853] netlink: 16146 bytes leftover after parsing attributes in process `syz.4.1255'. [ 156.297692][ T8855] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1256'. [ 156.428263][ T5867] corsair-cpro 0003:1B1C:1D00.000E: unknown main item tag 0x0 [ 156.436688][ T5867] corsair-cpro 0003:1B1C:1D00.000E: unknown main item tag 0x0 [ 156.444537][ T5867] corsair-cpro 0003:1B1C:1D00.000E: item fetching failed at offset 2/5 [ 156.456858][ T5867] corsair-cpro 0003:1B1C:1D00.000E: probe with driver corsair-cpro failed with error -22 [ 156.627051][ T5897] usb 4-1: USB disconnect, device number 10 [ 156.776003][ T5880] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 156.930559][ T5880] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 156.938902][ T5880] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 156.949416][ T5880] usb 5-1: config 220 has no interface number 2 [ 156.955928][ T5880] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 156.969142][ T5880] usb 5-1: config 220 interface 0 has no altsetting 0 [ 156.976460][ T5880] usb 5-1: config 220 interface 76 has no altsetting 0 [ 156.983324][ T5880] usb 5-1: config 220 interface 1 has no altsetting 0 [ 156.992039][ T5880] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 157.001201][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.011981][ T5880] usb 5-1: Product: syz [ 157.016301][ T5880] usb 5-1: Manufacturer: syz [ 157.020942][ T5880] usb 5-1: SerialNumber: syz [ 157.243380][ T5880] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 157.250883][ T5880] uvcvideo 5-1:220.0: No valid video chain found. [ 157.257710][ T5880] usb 5-1: selecting invalid altsetting 0 [ 157.286285][ T5880] usb 5-1: selecting invalid altsetting 0 [ 157.292052][ T5880] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 157.303198][ T5880] usb 5-1: USB disconnect, device number 4 [ 157.405854][ T5867] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 157.446118][ T8892] input: syz0 as /devices/virtual/input/input34 [ 157.575836][ T5867] usb 2-1: Using ep0 maxpacket: 8 [ 157.587443][ T5867] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 157.599253][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.607977][ T5867] usb 2-1: Product: syz [ 157.612172][ T5867] usb 2-1: Manufacturer: syz [ 157.617183][ T5867] usb 2-1: SerialNumber: syz [ 157.625682][ T5867] usb 2-1: config 0 descriptor?? [ 157.638726][ T5867] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 157.736523][ T5880] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 157.889290][ T5880] usb 4-1: too many endpoints for config 0 interface 0 altsetting 4: 129, using maximum allowed: 30 [ 157.900499][ T5880] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 157.911679][ T5880] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 157.924827][ T5880] usb 4-1: config 0 interface 0 has no altsetting 0 [ 157.931811][ T5880] usb 4-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 157.940886][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.951608][ T5880] usb 4-1: config 0 descriptor?? [ 157.957508][ T8894] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 158.376461][ T5880] wacom 0003:056A:0325.000F: unknown main item tag 0x0 [ 158.389442][ T5880] wacom 0003:056A:0325.000F: hidraw0: USB HID v0.00 Device [HID 056a:0325] on usb-dummy_hcd.3-1/input0 [ 158.588340][ T5880] usb 4-1: USB disconnect, device number 11 [ 158.652941][ T5897] usb 2-1: USB disconnect, device number 12 [ 159.147155][ T8903] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 159.369736][ T8919] usb usb8: usbfs: process 8919 (syz.1.1283) did not claim interface 0 before use [ 159.483993][ T30] audit: type=1326 audit(1771352437.184:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.1.1287" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f685819c629 code=0x0 [ 159.898223][ T5897] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 160.078679][ T5897] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 160.088712][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.100506][ T5897] usb 5-1: config 0 descriptor?? [ 160.109477][ T5897] cp210x 5-1:0.0: cp210x converter detected [ 160.519396][ T5897] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 160.751649][ T5897] usb 5-1: cp210x converter now attached to ttyUSB0 [ 160.946668][ T5922] usb 5-1: USB disconnect, device number 5 [ 160.955153][ T5922] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 160.971873][ T5922] cp210x 5-1:0.0: device disconnected [ 160.997537][ T5897] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 161.157734][ T5897] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 161.166104][ T5897] usb 3-1: config 0 has no interface number 0 [ 161.172202][ T5897] usb 3-1: config 0 interface 41 has no altsetting 0 [ 161.183632][ T5897] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 161.192838][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.201251][ T5897] usb 3-1: Product: syz [ 161.205389][ T5897] usb 3-1: Manufacturer: syz [ 161.210083][ T5897] usb 3-1: SerialNumber: syz [ 161.216830][ T5897] usb 3-1: config 0 descriptor?? [ 161.631754][ T8998] binder: 8997:8998 ioctl c018620b 200000000280 returned -14 [ 161.778977][ T9007] sg_write: data in/out 327681/8 bytes for SCSI command 0x0-- guessing data in; [ 161.778977][ T9007] program syz.3.1324 not setting count and/or reply_len properly [ 162.097241][ T5835] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 162.165873][ T5880] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 162.238878][ T5897] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 162.252027][ T5897] usb 3-1: USB disconnect, device number 14 [ 162.262042][ T5835] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 162.271318][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.280282][ T5835] usb 5-1: Product: syz [ 162.284509][ T5835] usb 5-1: Manufacturer: syz [ 162.290287][ T5835] usb 5-1: SerialNumber: syz [ 162.328010][ T5880] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 162.337592][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.349043][ T5880] usb 2-1: config 0 descriptor?? [ 162.357845][ T5880] cp210x 2-1:0.0: cp210x converter detected [ 162.763580][ T5880] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 162.913527][ T5835] rtl8150 5-1:1.0: eth5: rtl8150 is detected [ 162.984844][ T5880] usb 2-1: cp210x converter now attached to ttyUSB0 [ 163.125156][ T5880] usb 5-1: USB disconnect, device number 6 [ 163.183979][ T24] usb 2-1: USB disconnect, device number 13 [ 163.216135][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 163.242630][ T24] cp210x 2-1:0.0: device disconnected [ 163.701294][ T9048] binder: 9047:9048 ioctl c018620b 200000000280 returned -14 [ 163.901868][ T9058] sg_write: data in/out 327681/8 bytes for SCSI command 0x0-- guessing data in; [ 163.901868][ T9058] program syz.4.1337 not setting count and/or reply_len properly [ 163.990098][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1340'. [ 164.072894][ T9071] Invalid argument reading file caps for ./file0 [ 164.192457][ T9078] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 164.212712][ T9078] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 164.316967][ T9084] sg_write: data in/out 327681/8 bytes for SCSI command 0x0-- guessing data in; [ 164.316967][ T9084] program syz.2.1351 not setting count and/or reply_len properly [ 164.442144][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1354'. [ 164.525545][ T9100] Invalid argument reading file caps for ./file0 [ 164.609130][ T9106] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 164.619001][ T9106] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 164.893916][ T9124] Invalid argument reading file caps for ./file0 [ 164.973019][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1369'. [ 164.991160][ T9128] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 165.020662][ T9128] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 165.296850][ T9155] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1384'. [ 165.605816][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 165.768820][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.779767][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.790808][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 165.803754][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 165.812885][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.822838][ T24] usb 4-1: config 0 descriptor?? [ 166.277130][ T24] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 166.475848][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 166.626317][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 166.637201][ T24] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 166.646690][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 166.654919][ T24] usb 2-1: Product: syz [ 166.659647][ T24] usb 2-1: Manufacturer: syz [ 166.670468][ T24] usb 2-1: SerialNumber: syz [ 166.677788][ T24] usb 2-1: config 0 descriptor?? [ 166.689445][ T24] gspca_main: sq905-2.14.0 probing 2770:9120 [ 167.283425][ T9216] syzkaller1: entered promiscuous mode [ 167.289532][ T9216] syzkaller1: entered allmulticast mode [ 167.568860][ C0] plantronics 0003:047F:FFFF.0010: usb_submit_urb(ctrl) failed: -1 [ 167.694575][ T24] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 167.704252][ T24] sq905 2-1:0.0: probe with driver sq905 failed with error -71 [ 167.717270][ T24] usb 2-1: USB disconnect, device number 14 [ 168.182682][ T9227] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 168.368085][ T803] usb 4-1: USB disconnect, device number 12 [ 168.691824][ T9261] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 169.085640][ T9268] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.103319][ T9271] syzkaller1: entered promiscuous mode [ 169.115779][ T9271] syzkaller1: entered allmulticast mode [ 169.315472][ T30] audit: type=1800 audit(1771352447.014:12): pid=9286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1441" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 169.378275][ T9288] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 169.656397][ T9306] autofs: Bad value for 'fd' [ 169.827029][ T9300] mmap: syz.4.1447 (9300) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 169.958288][ T9311] syzkaller1: entered promiscuous mode [ 169.963820][ T9311] syzkaller1: entered allmulticast mode [ 170.380109][ T9337] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1463'. [ 171.205822][ T803] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 171.368624][ T803] usb 4-1: Using ep0 maxpacket: 8 [ 171.375809][ T5867] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 171.388435][ T803] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 171.398289][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 171.406920][ T803] usb 4-1: Product: syz [ 171.411089][ T803] usb 4-1: Manufacturer: syz [ 171.419302][ T803] usb 4-1: SerialNumber: syz [ 171.429577][ T803] usb 4-1: config 0 descriptor?? [ 171.442256][ T803] gspca_main: sq905-2.14.0 probing 2770:9120 [ 171.525158][ T30] audit: type=1800 audit(1771352449.224:13): pid=9385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1486" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 171.569894][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.581413][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.593393][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.606583][ T5867] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.615659][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.636434][ T5867] usb 5-1: config 0 descriptor?? [ 171.935833][ T5880] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 172.068223][ T5867] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 172.091725][ T5880] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 172.107511][ T5880] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 172.117060][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 172.125066][ T5880] usb 2-1: SerialNumber: syz [ 172.451082][ T803] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 172.458796][ T803] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 172.470076][ T803] usb 4-1: USB disconnect, device number 13 [ 172.760953][ T5880] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 173.159687][ T5897] usb 2-1: USB disconnect, device number 15 [ 173.189282][ T5897] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 173.201010][ T9411] autofs: Bad value for 'fd' [ 173.363576][ T9421] netlink: 'syz.2.1494': attribute type 21 has an invalid length. [ 173.373704][ T9421] netlink: 'syz.2.1494': attribute type 22 has an invalid length. [ 173.377274][ C0] plantronics 0003:047F:FFFF.0011: usb_submit_urb(ctrl) failed: -1 [ 173.471098][ T30] audit: type=1800 audit(1771352451.174:14): pid=9427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1495" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 173.909774][ T9456] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 174.172183][ T5867] usb 5-1: USB disconnect, device number 7 [ 174.397453][ T9486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 174.625949][ T5920] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 174.787515][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.824197][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.842325][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.856931][ T5920] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.866199][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.868277][ T9515] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 174.884167][ T5920] usb 3-1: config 0 descriptor?? [ 175.314950][ T5920] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 176.526046][ C1] plantronics 0003:047F:FFFF.0012: usb_submit_urb(ctrl) failed: -1 [ 177.306864][ T5897] usb 3-1: USB disconnect, device number 15 [ 177.412986][ T9580] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1555'. [ 178.975826][ T5835] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 179.125800][ T5835] usb 4-1: Using ep0 maxpacket: 16 [ 179.132396][ T5835] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 179.144066][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 179.157902][ T5835] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 179.167065][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.175030][ T5835] usb 4-1: Product: syz [ 179.179209][ T5835] usb 4-1: Manufacturer: syz [ 179.183796][ T5835] usb 4-1: SerialNumber: syz [ 179.190423][ T5835] usb 4-1: config 0 descriptor?? [ 179.201435][ T5835] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 179.210655][ T5835] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 179.802093][ T5835] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 179.809913][ T5835] em28xx 4-1:0.0: Config register raw data: 0x73 [ 179.818475][ T5835] em28xx 4-1:0.0: I2S Audio (3 sample rate(s)) [ 179.824648][ T5835] em28xx 4-1:0.0: No AC97 audio processor [ 179.836286][ T9555] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 180.224625][ T5835] usb 4-1: USB disconnect, device number 14 [ 180.485963][ T5880] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 180.650813][ T5880] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 180.660119][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.671817][ T5880] usb 2-1: config 0 descriptor?? [ 180.688054][ T5880] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 181.266039][ T5835] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 181.437554][ T5835] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 181.459064][ T5835] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 181.489269][ T5835] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 181.493881][ T5880] gspca_sunplus: reg_w_riv err -71 [ 181.500563][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.515120][ T5880] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 181.523767][ T5835] usb 3-1: Product: syz [ 181.528568][ T5835] usb 3-1: Manufacturer: syz [ 181.533342][ T5835] usb 3-1: SerialNumber: syz [ 181.535626][ T5880] usb 2-1: USB disconnect, device number 16 [ 181.566726][ T5835] usb 3-1: config 0 descriptor?? [ 181.574851][ T9663] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 181.590356][ T9663] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 181.735798][ T803] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 181.812312][ T9663] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 181.828775][ T9663] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 181.898982][ T803] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.915753][ T803] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.946929][ T803] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 181.964035][ T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 181.972590][ T803] usb 5-1: SerialNumber: syz [ 182.205240][ T803] usb 5-1: 0:2 : does not exist [ 182.266746][ T5835] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 182.316757][ T803] usb 5-1: USB disconnect, device number 8 [ 182.377525][ T5931] udevd[5931]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.478924][ T5835] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 182.492709][ T9696] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 182.499423][ T9696] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 182.510556][ T9696] vhci_hcd vhci_hcd.0: Device attached [ 182.519139][ T5835] usb 3-1: USB disconnect, device number 16 [ 182.547759][ T9697] vhci_hcd: connection closed [ 182.555830][ T82] vhci_hcd vhci_hcd.1: stop threads [ 182.579632][ T82] vhci_hcd vhci_hcd.1: release socket [ 182.585098][ T82] vhci_hcd vhci_hcd.1: disconnect device [ 183.180648][ T9720] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1616'. [ 183.505945][ T9742] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1627'. [ 183.867188][ T9760] block nbd3: shutting down sockets [ 184.178551][ T9776] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 184.686902][ T82] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 184.742343][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807aa1b400: rx timeout, send abort [ 184.751100][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807aa1b400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 185.941393][ T9838] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1670'. [ 186.143131][ T9847] block nbd2: shutting down sockets [ 186.755142][ T9875] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1684'. [ 186.983552][ T9881] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 187.455650][ T9895] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 187.639413][ T9901] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1696'. [ 187.936525][ T1162] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 188.045796][ T5880] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 188.218021][ T5880] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.235800][ T5880] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.253781][ T5880] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 188.277156][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 188.295905][ T5880] usb 2-1: SerialNumber: syz [ 188.577629][ T5880] usb 2-1: 0:2 : does not exist [ 188.727337][ T5880] usb 2-1: USB disconnect, device number 17 [ 188.790403][ T5931] udevd[5931]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.875834][ T5920] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 189.051610][ T5920] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 189.072688][ T5920] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.100964][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 189.126707][ T5920] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 189.146047][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.170622][ T5920] usb 4-1: config 0 descriptor?? [ 189.409080][ T5920] usbhid 4-1:0.0: can't add hid device: -71 [ 189.415077][ T5920] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 189.425282][ T5920] usb 4-1: USB disconnect, device number 15 [ 189.941035][ T9965] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1730'. [ 190.318403][ T9987] netlink: 'syz.1.1740': attribute type 3 has an invalid length. [ 190.852927][T10022] netlink: 'syz.2.1746': attribute type 10 has an invalid length. [ 190.861155][T10022] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1746'. [ 190.965811][ T5867] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 191.128274][ T5867] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 191.138293][ T5867] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.161859][ T5867] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 191.182088][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.410709][ T5867] usb 2-1: usb_control_msg returned -32 [ 191.419185][ T5867] usbtmc 2-1:16.0: can't read capabilities [ 191.515865][ T5920] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 191.625797][ T5880] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 191.669157][ T5920] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 191.678326][ T5920] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 191.686620][ T5920] usb 4-1: Product: syz [ 191.691065][ T5920] usb 4-1: Manufacturer: syz [ 191.695661][ T5920] usb 4-1: SerialNumber: syz [ 191.702316][ T5920] usb 4-1: config 0 descriptor?? [ 191.709127][ T5920] ch341 4-1:0.0: ch341-uart converter detected [ 191.766436][T10044] usbtmc 2-1:16.0: usbtmc_ioctl_request failed -32 [ 191.774896][ T5897] usb 2-1: USB disconnect, device number 18 [ 191.786369][ T5880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.798477][ T5880] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 191.809525][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.823090][ T5880] usb 3-1: config 0 descriptor?? [ 191.833067][ T5880] pwc: Askey VC010 type 2 USB webcam detected. [ 192.233944][ T5880] pwc: recv_control_msg error -32 req 02 val 2b00 [ 192.242277][ T5880] pwc: recv_control_msg error -32 req 02 val 2700 [ 192.249617][ T5880] pwc: recv_control_msg error -32 req 02 val 2c00 [ 192.459322][ T5880] pwc: recv_control_msg error -71 req 04 val 1300 [ 192.469633][ T5880] pwc: recv_control_msg error -71 req 04 val 1400 [ 192.476646][ T5880] pwc: recv_control_msg error -71 req 02 val 2000 [ 192.483739][ T5880] pwc: recv_control_msg error -71 req 02 val 2100 [ 192.490975][ T5880] pwc: recv_control_msg error -71 req 04 val 1500 [ 192.500187][ T5880] pwc: recv_control_msg error -71 req 02 val 2500 [ 192.510400][ T5880] pwc: recv_control_msg error -71 req 02 val 2400 [ 192.522312][ T5880] pwc: recv_control_msg error -71 req 02 val 2600 [ 192.531358][ T5880] pwc: recv_control_msg error -71 req 02 val 2900 [ 192.539771][ T5880] pwc: recv_control_msg error -71 req 02 val 2800 [ 192.547262][ T5880] pwc: recv_control_msg error -71 req 04 val 1100 [ 192.554167][ T5880] pwc: recv_control_msg error -71 req 04 val 1200 [ 192.562666][ T5880] pwc: Registered as video103. [ 192.572279][ T5880] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input38 [ 192.602477][ T5880] usb 3-1: USB disconnect, device number 17 [ 192.718912][ T5920] ch341-uart ttyUSB0: failed to read break control: -71 [ 192.728744][ T5920] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 192.740691][ T5920] usb 4-1: USB disconnect, device number 16 [ 192.748821][ T5920] ch341 4-1:0.0: device disconnected [ 193.464379][T10078] netlink: 642 bytes leftover after parsing attributes in process `syz.3.1778'. [ 193.790485][T10097] batadv_slave_0: entered promiscuous mode [ 193.799772][T10096] batadv_slave_0: left promiscuous mode [ 193.916758][T10102] netlink: 642 bytes leftover after parsing attributes in process `syz.2.1781'. [ 194.136861][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.143323][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.429938][T10052] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 195.563500][T10117] batadv_slave_0: entered promiscuous mode [ 195.573354][T10115] batadv_slave_0: left promiscuous mode [ 195.925778][ T5920] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 195.975138][T10146] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.085783][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 196.095408][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.121215][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.132003][ T5920] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 196.142458][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.153181][ T5920] usb 3-1: config 0 descriptor?? [ 196.161921][ T5920] hub 3-1:0.0: USB hub found [ 196.166720][ T5880] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 196.207873][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 196.214867][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 196.230171][T10157] input: syz0 as /devices/virtual/input/input39 [ 196.300457][T10159] syzkaller1: entered promiscuous mode [ 196.306547][T10159] syzkaller1: entered allmulticast mode [ 196.336157][ T5880] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 196.345059][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.355357][ T5880] usb 2-1: config 0 has no interfaces? [ 196.361216][ T5880] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 196.370734][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.381366][ T5920] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 196.393324][ T5880] usb 2-1: config 0 descriptor?? [ 196.613055][ T5920] hid-generic 0003:046D:C31C.0013: item fetching failed at offset 0/1 [ 196.631033][ T5920] hid-generic 0003:046D:C31C.0013: probe with driver hid-generic failed with error -22 [ 196.645259][ T5835] usb 2-1: USB disconnect, device number 19 [ 196.916059][ T5835] usb 3-1: USB disconnect, device number 18 [ 196.976123][ T5867] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 197.169245][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 197.180665][ T5867] usb 4-1: config 0 has an invalid interface number: 240 but max is 0 [ 197.191903][ T5867] usb 4-1: config 0 has no interface number 0 [ 197.203586][ T5867] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 197.213940][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.227832][ T5867] usb 4-1: Product: syz [ 197.232060][ T5867] usb 4-1: Manufacturer: syz [ 197.239392][ T5867] usb 4-1: SerialNumber: syz [ 197.247343][ T5867] usb 4-1: config 0 descriptor?? [ 197.260868][ T5867] gspca_main: spca508-2.14.0 probing 041e:4018 [ 197.462097][ T5867] gspca_spca508: reg_read err -32 [ 197.470680][ T5867] gspca_spca508: reg_read err -32 [ 197.479415][ T5867] gspca_spca508: reg_read err -32 [ 197.485183][ T5867] gspca_spca508: reg_read err -32 [ 197.692875][ T5867] gspca_spca508: reg write: error -71 [ 197.703435][ T5867] spca508 4-1:0.240: probe with driver spca508 failed with error -71 [ 197.706317][T10208] syzkaller1: entered promiscuous mode [ 197.717958][T10208] syzkaller1: entered allmulticast mode [ 197.729544][ T5867] usb 4-1: USB disconnect, device number 17 [ 198.055860][ T5920] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 198.205757][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 198.213292][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.225490][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.235656][ T5920] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 198.255753][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.285626][ T5920] usb 5-1: config 0 descriptor?? [ 198.316973][ T5920] hub 5-1:0.0: USB hub found [ 198.534290][ T5920] hub 5-1:0.0: 1 port detected [ 199.015792][ T5922] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 199.075973][ T803] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 199.153814][ T5920] hub 5-1:0.0: activate --> -90 [ 199.177755][ T5922] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.190711][ T5922] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 199.200429][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.216560][ T5922] usb 2-1: config 0 descriptor?? [ 199.237230][ T5922] pwc: Askey VC010 type 2 USB webcam detected. [ 199.277194][ T803] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64 [ 199.305765][ T803] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 199.326113][ T803] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a0f, bcdDevice= 0.00 [ 199.335747][ T803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.358425][ T803] usb 3-1: config 0 descriptor?? [ 199.364134][T10245] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 199.557654][ T5920] usb 5-1-port1: config error [ 199.577911][ T5920] usb 5-1-port1: cannot disable (err = -71) [ 199.587122][ T5920] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 199.594122][ T5920] usb 5-1-port1: connect-debounce failed [ 199.594711][ T5835] usb 5-1: USB disconnect, device number 9 [ 199.649367][ T5922] pwc: recv_control_msg error -32 req 02 val 2b00 [ 199.661817][ T5922] pwc: recv_control_msg error -32 req 02 val 2700 [ 199.669163][ T5922] pwc: recv_control_msg error -32 req 02 val 2c00 [ 199.705799][ T5867] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 199.802578][ T803] hid-corsair-void 0003:1B1C:0A0F.0014: hidraw0: USB HID vff.ff Device [HID 1b1c:0a0f] on usb-dummy_hcd.2-1/input0 [ 199.858227][ T5867] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.870232][ T5867] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 199.881679][ T5922] pwc: recv_control_msg error -71 req 04 val 1300 [ 199.900356][ T5922] pwc: recv_control_msg error -71 req 04 val 1400 [ 199.902402][ T5867] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 199.907470][ T5922] pwc: recv_control_msg error -71 req 02 val 2000 [ 199.916363][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.923856][ T5922] pwc: recv_control_msg error -71 req 02 val 2100 [ 199.932737][ T5867] usb 4-1: Product: syz [ 199.938028][ T5922] pwc: recv_control_msg error -71 req 04 val 1500 [ 199.948987][ T5867] usb 4-1: Manufacturer: syz [ 199.949460][ T5922] pwc: recv_control_msg error -71 req 02 val 2500 [ 199.953619][ T5867] usb 4-1: SerialNumber: syz [ 199.961151][ T5922] pwc: recv_control_msg error -71 req 02 val 2400 [ 199.973521][ T5922] pwc: recv_control_msg error -71 req 02 val 2600 [ 199.980912][ T5922] pwc: recv_control_msg error -71 req 02 val 2900 [ 199.988578][ T5922] pwc: recv_control_msg error -71 req 02 val 2800 [ 199.998366][ T5922] pwc: recv_control_msg error -71 req 04 val 1100 [ 200.001080][ T5867] cdc_mbim 4-1:1.0: skipping garbage [ 200.006156][ T5920] usb 3-1: USB disconnect, device number 19 [ 200.010335][ T803] hid-corsair-void 0003:1B1C:0A0F.0014: failed to request firmware (reason: -71) [ 200.021258][ T5922] pwc: recv_control_msg error -71 req 04 val 1200 [ 200.027454][ T5835] hid-corsair-void 0003:1B1C:0A0F.0014: failed to request battery (reason: -71) [ 200.053216][ T5922] pwc: Registered as video103. [ 200.068996][ T5922] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input40 [ 200.115992][ T5922] usb 2-1: USB disconnect, device number 20 [ 200.248022][T10247] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 200.596012][T10265] input: syz0 as /devices/virtual/input/input41 [ 200.725835][ T5835] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 200.863174][T10247] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 200.871353][ T5867] cdc_mbim 4-1:1.0: dwNtbInMaxSize=64 is too small. Using 2048 [ 200.880826][ T5867] cdc_mbim 4-1:1.0: setting rx_max = 2048 [ 200.891308][ T5835] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 200.901787][ T5835] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 200.913938][ T5835] usb 5-1: Product: syz [ 200.918906][ T5835] usb 5-1: Manufacturer: syz [ 200.923537][ T5835] usb 5-1: SerialNumber: syz [ 200.932723][ T5835] usb 5-1: config 0 descriptor?? [ 200.942124][ T5835] ch341 5-1:0.0: ch341-uart converter detected [ 201.072445][ T5867] cdc_mbim 4-1:1.0: setting tx_max = 184 [ 201.081396][ T5867] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 201.093980][ T5867] wwan wwan0: port wwan0mbim0 attached [ 201.112890][ T5867] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 5a:85:c4:60:97:9a [ 201.303230][ T5920] usb 4-1: USB disconnect, device number 18 [ 201.314121][ T5920] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 201.399515][ T5920] wwan wwan0: port wwan0mbim0 disconnected [ 201.964345][ T5835] ch341-uart ttyUSB0: failed to read break control: -71 [ 201.990762][ T5835] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 202.017865][ T5835] usb 5-1: USB disconnect, device number 10 [ 202.036697][ T5835] ch341 5-1:0.0: device disconnected [ 202.169438][T10328] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1872'. [ 202.178815][T10330] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 202.242247][T10332] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 202.875903][ T5867] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 203.035810][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 203.035824][ T5922] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 203.050518][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.062913][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.072789][ T5867] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 203.082195][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.093120][ T5867] usb 4-1: config 0 descriptor?? [ 203.100945][ T5867] hub 4-1:0.0: USB hub found [ 203.187447][ T5922] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 203.198508][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.209499][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.219321][ T5922] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 203.233881][ T5922] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 203.243029][ T5922] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 203.251301][ T5922] usb 5-1: Manufacturer: syz [ 203.258834][ T5922] usb 5-1: config 0 descriptor?? [ 203.307994][ T5867] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 203.447961][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1892'. [ 203.532272][ T5867] hid-generic 0003:046D:C31C.0015: item fetching failed at offset 0/1 [ 203.556738][ T5867] hid-generic 0003:046D:C31C.0015: probe with driver hid-generic failed with error -22 [ 203.688601][ T5922] appleir 0003:05AC:8243.0016: unknown main item tag 0x0 [ 203.718373][ T5922] appleir 0003:05AC:8243.0016: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 203.856025][ T5922] usb 4-1: USB disconnect, device number 19 [ 203.934199][T10396] Invalid ELF header magic: != ELF [ 204.411686][T10418] Invalid ELF header magic: != ELF [ 204.448636][T10422] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 204.502167][T10426] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1914'. [ 204.536567][ T5922] usb 5-1: USB disconnect, device number 11 [ 204.552193][T10428] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 204.665803][ T5867] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 204.825799][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 204.838491][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.858742][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.868990][ T5867] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 204.901205][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.921990][ T5867] usb 4-1: config 0 descriptor?? [ 204.939259][ T5867] hub 4-1:0.0: USB hub found [ 205.165835][ T5867] hub 4-1:0.0: 1 port detected [ 205.775814][ T5867] hub 4-1:0.0: activate --> -90 [ 206.177456][ T5835] usb 4-1: USB disconnect, device number 20 [ 206.183834][ T5867] usb 4-1-port1: config error [ 206.595936][ T5835] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 206.755759][ T5835] usb 5-1: Using ep0 maxpacket: 8 [ 206.768412][ T5835] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 206.806602][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.814636][ T5835] usb 5-1: Product: syz [ 206.825196][ T5835] usb 5-1: Manufacturer: syz [ 206.837167][ T5835] usb 5-1: SerialNumber: syz [ 206.863083][ T5835] usb 5-1: config 0 descriptor?? [ 207.078685][ T5835] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 207.155829][ T5880] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 207.323959][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64 [ 207.355875][ T5880] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 207.371800][ T5880] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a0f, bcdDevice= 0.00 [ 207.381116][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.393302][ T5880] usb 4-1: config 0 descriptor?? [ 207.399258][T10504] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 207.705834][ T5920] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 207.755864][ T5922] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 207.822769][ T5880] hid-corsair-void 0003:1B1C:0A0F.0017: hidraw0: USB HID vff.ff Device [HID 1b1c:0a0f] on usb-dummy_hcd.3-1/input0 [ 207.857854][ T5920] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.871384][ T5920] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 207.886246][ T5920] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 207.895754][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.903775][ T5920] usb 2-1: Product: syz [ 207.908564][ T5920] usb 2-1: Manufacturer: syz [ 207.913409][ T5920] usb 2-1: SerialNumber: syz [ 207.919281][ T5922] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 207.931247][ T5922] usb 3-1: config 0 interface 0 has no altsetting 0 [ 207.943059][ T5920] cdc_mbim 2-1:1.0: skipping garbage [ 207.951241][ T5922] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 207.960544][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.972999][ T5922] usb 3-1: Product: syz [ 207.977423][ T5922] usb 3-1: Manufacturer: syz [ 207.982081][ T5922] usb 3-1: SerialNumber: syz [ 207.989481][ T5922] usb 3-1: config 0 descriptor?? [ 207.996812][ T5922] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 208.004508][ T5922] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 208.014307][ T5922] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 208.022214][ T5922] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 208.025306][ T5867] usb 4-1: USB disconnect, device number 21 [ 208.030139][ T5897] hid-corsair-void 0003:1B1C:0A0F.0017: failed to request battery (reason: -71) [ 208.030266][ T5880] hid-corsair-void 0003:1B1C:0A0F.0017: failed to request firmware (reason: -71) [ 208.030431][ T5922] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 208.030561][ T5922] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 208.077853][ T5922] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 208.088224][ T5922] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 208.100465][ T5922] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 208.108636][ T5922] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 208.116353][ T5922] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 208.123954][ T5922] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 208.132693][ T5922] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 208.145460][T10520] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 208.145786][ T5922] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 208.236823][ T5867] usb 3-1: USB disconnect, device number 20 [ 208.255260][ T5867] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 208.269609][ T5867] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 208.284967][ T5867] keyspan 3-1:0.0: device disconnected [ 208.296162][ T5835] usb write operation failed. (-71) [ 208.306680][ T5835] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 208.319113][ T5835] dvbdev: DVB: registering new adapter (Terratec H7) [ 208.327169][ T5835] usb 5-1: media controller created [ 208.332710][ T5835] usb read operation failed. (-71) [ 208.338380][ T5835] usb write operation failed. (-71) [ 208.349827][ T5835] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 208.361267][ T5835] usb 5-1: USB disconnect, device number 12 [ 208.777092][T10520] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 208.784668][ T5920] cdc_mbim 2-1:1.0: dwNtbInMaxSize=64 is too small. Using 2048 [ 208.803868][ T5920] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 209.015900][ T5920] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 209.038093][ T5920] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 209.068442][ T5920] wwan wwan0: port wwan0mbim0 attached [ 209.105764][ T5920] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 5a:9f:18:b2:d7:f4 [ 209.191153][T10558] input: syz1 as /devices/virtual/input/input42 [ 209.268658][ T5920] usb 2-1: USB disconnect, device number 21 [ 209.282526][ T5920] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 209.381505][ T5920] wwan wwan0: port wwan0mbim0 disconnected [ 209.955802][ T5867] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 209.977990][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1976'. [ 210.127225][ T5867] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 210.164140][ T5867] usb 4-1: config 0 interface 0 has no altsetting 0 [ 210.195363][T10600] evm: overlay not supported [ 210.196451][ T5867] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 210.217976][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.230359][ T5867] usb 4-1: Product: syz [ 210.234572][ T5867] usb 4-1: Manufacturer: syz [ 210.245760][ T5867] usb 4-1: SerialNumber: syz [ 210.257483][ T5867] usb 4-1: config 0 descriptor?? [ 210.280712][ T5867] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 210.316484][ T5867] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 210.338366][ T5867] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 210.383966][ T5867] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 210.404373][ T5867] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 210.413821][ T5867] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 210.422479][ T5867] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 210.435458][ T5867] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 210.462215][ T5867] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 210.470628][ T5867] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 210.479392][ T5867] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 210.499988][ T5867] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 210.516819][ T5867] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 210.530708][ T5867] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 210.553275][ T5867] usb 4-1: USB disconnect, device number 22 [ 210.592960][ T5867] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 210.605914][ T5922] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 210.641888][ T5867] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 210.653317][ T5867] keyspan 4-1:0.0: device disconnected [ 210.780416][ T5922] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 210.798032][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.809998][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.819992][ T5922] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 210.836963][ T5922] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 210.848722][ T5922] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 210.857185][ T5922] usb 2-1: Manufacturer: syz [ 210.867530][ T5922] usb 2-1: config 0 descriptor?? [ 211.292908][ T5922] appleir 0003:05AC:8243.0018: unknown main item tag 0x0 [ 211.317024][ T5922] appleir 0003:05AC:8243.0018: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 211.958381][T10662] syzkaller1: entered promiscuous mode [ 211.964049][T10662] syzkaller1: entered allmulticast mode [ 212.110959][ T5922] usb 2-1: USB disconnect, device number 22 [ 212.178630][ T5835] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 212.208220][ T5835] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 212.399322][ T5867] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 212.572773][ T5867] usb 5-1: config 0 has no interfaces? [ 212.592240][ T5867] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.601470][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 212.609550][ T5867] usb 5-1: SerialNumber: syz [ 212.623501][ T5867] usb 5-1: config 0 descriptor?? [ 212.918604][ T5867] usb 5-1: USB disconnect, device number 13 [ 214.281644][T10726] syzkaller1: entered promiscuous mode [ 214.288306][T10726] syzkaller1: entered allmulticast mode [ 214.611293][T10744] 9pnet: p9_errstr2errno: server reported unknown error -tun [ 215.166031][ T5835] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 215.185798][ T5922] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 215.317225][ T5835] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.328833][ T5835] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 215.338768][ T5835] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 215.349758][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 215.355796][ T5922] usb 4-1: Using ep0 maxpacket: 16 [ 215.359154][ T5835] usb 3-1: SerialNumber: syz [ 215.388098][ T5922] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.399541][ T5922] usb 4-1: config 0 interface 0 has no altsetting 0 [ 215.415766][ T5922] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 215.424857][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.438820][ T5922] usb 4-1: config 0 descriptor?? [ 215.601833][ T5835] usb 3-1: 0:2 : does not exist [ 215.643921][ T5835] usb 3-1: USB disconnect, device number 21 [ 215.681822][ T5931] udevd[5931]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.893147][ T5922] nzxt-smart2 0003:1E71:2009.001A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 216.097922][T10802] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2063'. [ 216.197289][T10804] syzkaller1: entered promiscuous mode [ 216.204066][T10804] syzkaller1: entered allmulticast mode [ 216.296534][ T5880] usb 4-1: USB disconnect, device number 23 [ 217.464555][T10830] netlink: 'syz.3.2077': attribute type 21 has an invalid length. [ 217.474390][T10830] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2077'. [ 218.391139][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.401115][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.409411][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.422329][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.430663][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.567386][T10846] chnl_net:caif_netlink_parms(): no params data found [ 218.625840][ T5880] psmouse serio3: Failed to reset mouse on : -5 [ 218.649283][T10846] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.657158][T10846] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.664523][T10846] bridge_slave_0: entered allmulticast mode [ 218.672179][T10846] bridge_slave_0: entered promiscuous mode [ 218.680498][T10846] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.688060][T10846] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.695277][T10846] bridge_slave_1: entered allmulticast mode [ 218.702861][T10846] bridge_slave_1: entered promiscuous mode [ 218.735568][T10846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.751067][T10846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.783578][T10846] team0: Port device team_slave_0 added [ 218.792223][T10846] team0: Port device team_slave_1 added [ 218.838430][T10846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.845429][T10846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.873783][T10846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.887926][T10846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.894862][T10846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.922490][T10846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.988908][T10846] hsr_slave_0: entered promiscuous mode [ 218.996873][T10846] hsr_slave_1: entered promiscuous mode [ 219.006672][T10846] debugfs: 'hsr0' already exists in 'hsr' [ 219.012412][T10846] Cannot create hsr debugfs directory [ 219.309212][T10846] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.450044][T10846] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.523144][T10846] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.667126][T10846] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.929248][T10846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 219.954282][T10846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 219.979943][T10846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 219.997280][T10846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 220.095605][T10846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.119411][T10846] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.131813][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.139003][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.153908][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.161086][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.332109][T10846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.383747][T10846] veth0_vlan: entered promiscuous mode [ 220.397264][T10846] veth1_vlan: entered promiscuous mode [ 220.430754][T10846] veth0_macvtap: entered promiscuous mode [ 220.441881][T10846] veth1_macvtap: entered promiscuous mode [ 220.469935][T10846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.484067][T10846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.501761][ T1162] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.511491][ T1162] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.522021][ T1162] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.531567][ T1162] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.535899][ T5830] Bluetooth: hci2: command tx timeout [ 220.605238][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.619948][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.644672][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.652825][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.805963][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 221.842719][ T5922] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 221.887032][ T5922] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 222.105825][ T5922] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 222.247720][T10968] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.269281][ T5922] usb 3-1: config 0 has no interfaces? [ 222.276352][ T5922] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 222.285527][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 222.305785][ T5922] usb 3-1: SerialNumber: syz [ 222.319943][ T5922] usb 3-1: config 0 descriptor?? [ 222.380713][T10972] program syz.4.2131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.396193][ T5880] misc userio: Buffer overflowed, userio client isn't keeping up [ 222.606192][ T51] Bluetooth: hci2: command tx timeout [ 222.617925][ T5867] usb 3-1: USB disconnect, device number 22 [ 222.677264][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 222.846175][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 222.854918][ T9] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.868347][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 222.875010][ T9] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 222.884138][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.897186][ T9] usb 2-1: config 0 descriptor?? [ 223.180962][T11001] program syz.2.2142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.339814][ T9] nzxt-smart2 0003:1E71:2009.001C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 223.347760][T11011] syzkaller1: entered promiscuous mode [ 223.357102][T11011] syzkaller1: entered allmulticast mode [ 223.408315][T11014] kvm: user requested TSC rate below hardware speed [ 223.481174][ T5880] input: PS/2 Generic Mouse as /devices/serio3/input/input43 [ 223.736843][ T5880] psmouse serio3: Failed to enable mouse on [ 223.753696][ T5867] usb 2-1: USB disconnect, device number 23 [ 223.840606][ T5880] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 223.867950][ T5880] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 224.086663][ T5880] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 224.247234][ T5880] usb 4-1: config 0 has no interfaces? [ 224.254976][ T5880] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 224.264049][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 224.272212][ T5880] usb 4-1: SerialNumber: syz [ 224.281301][ T5880] usb 4-1: config 0 descriptor?? [ 224.565041][ T5880] usb 4-1: USB disconnect, device number 24 [ 224.686179][ T51] Bluetooth: hci2: command tx timeout [ 225.264129][T11063] netlink: 'syz.1.2166': attribute type 4 has an invalid length. [ 225.300300][T11063] netlink: 'syz.1.2166': attribute type 4 has an invalid length. [ 226.056066][T11100] kvm: user requested TSC rate below hardware speed [ 226.658065][T11136] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2198'. [ 226.680249][T11136] netlink: 'syz.4.2198': attribute type 4 has an invalid length. [ 226.706805][ T9] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 226.766212][ T51] Bluetooth: hci2: command tx timeout [ 226.887286][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.906934][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.921664][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 226.931023][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.155468][ T9] usb 4-1: usb_control_msg returned -32 [ 227.164867][ T9] usbtmc 4-1:16.0: can't read capabilities [ 227.701701][T11184] syzkaller1: entered promiscuous mode [ 227.708277][T11184] syzkaller1: entered allmulticast mode [ 228.237456][T11208] IPv4: Oversized IP packet from 127.202.26.0 [ 229.095980][ T5835] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 229.265774][ T5835] usb 5-1: Using ep0 maxpacket: 32 [ 229.274542][ T5835] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 229.286970][ T5835] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 229.296395][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 229.304563][ T5835] usb 5-1: Product: syz [ 229.309836][ T5835] usb 5-1: Manufacturer: syz [ 229.315361][ T5835] usb 5-1: SerialNumber: syz [ 229.328488][ T5835] usb 5-1: config 0 descriptor?? [ 229.334249][T11226] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 229.487984][ T9] usb 4-1: USB disconnect, device number 25 [ 229.571504][ T5835] usb 5-1: USB disconnect, device number 14 [ 229.809124][T11253] syzkaller1: entered promiscuous mode [ 229.814965][T11253] syzkaller1: entered allmulticast mode [ 230.220621][T11273] kvm: MONITOR instruction emulated as NOP! [ 230.249564][ T30] audit: type=1326 audit(1771352507.954:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.4.2254" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe11c59c629 code=0x0 [ 230.300575][T11280] IPv4: Oversized IP packet from 127.202.26.0 [ 230.487566][T11290] raw_sendmsg: syz.1.2260 forgot to set AF_INET. Fix it! [ 231.126403][ T9] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 231.307614][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.324417][ T9] usb 2-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 231.355781][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.375860][ T9] usb 2-1: config 0 descriptor?? [ 231.809978][ T9] cherry 0003:046A:0023.001E: hidraw0: USB HID v10.00 Device [HID 046a:0023] on usb-dummy_hcd.1-1/input0 [ 232.001817][ T5867] usb 2-1: USB disconnect, device number 24 [ 232.219150][T11349] trusted_key: syz.4.2285 sent an empty control message without MSG_MORE. [ 233.429518][T11389] input: syz0 as /devices/virtual/input/input44 [ 234.752658][T11451] input: syz0 as /devices/virtual/input/input45 [ 235.456249][ T5835] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 235.585842][ T5922] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 235.635738][ T5835] usb 2-1: Using ep0 maxpacket: 32 [ 235.646882][ T5835] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 235.655065][ T5835] usb 2-1: config 0 has no interface number 0 [ 235.662673][ T5835] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 235.675611][ T5835] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 235.684914][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.694412][ T5835] usb 2-1: Product: syz [ 235.699140][ T5835] usb 2-1: Manufacturer: syz [ 235.703794][ T5835] usb 2-1: SerialNumber: syz [ 235.711931][ T5835] usb 2-1: config 0 descriptor?? [ 235.718271][T11476] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.746783][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 235.754218][ T5922] usb 3-1: config 0 interface 0 has no altsetting 0 [ 235.763661][ T5922] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 235.773022][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.782043][ T5922] usb 3-1: Product: syz [ 235.790444][ T5922] usb 3-1: Manufacturer: syz [ 235.795058][ T5922] usb 3-1: SerialNumber: syz [ 235.806517][ T5922] usb 3-1: config 0 descriptor?? [ 235.936036][T11476] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 236.085878][ T803] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 236.218531][ T5922] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 236.235879][ T803] usb 4-1: Using ep0 maxpacket: 16 [ 236.242679][ T803] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 236.251667][ T803] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.262171][ T803] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.275007][ T803] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 236.286033][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.294083][ T803] usb 4-1: Product: syz [ 236.298641][ T803] usb 4-1: Manufacturer: syz [ 236.303261][ T803] usb 4-1: SerialNumber: syz [ 236.734973][ T803] usb 4-1: 0:2 : does not exist [ 236.840295][ T9] usb 3-1: USB disconnect, device number 23 [ 236.960928][ T5835] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 236.988286][ T5835] asix 2-1:0.188: probe with driver asix failed with error -71 [ 237.011037][ T5835] usb 2-1: USB disconnect, device number 25 [ 237.373571][ T803] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 237.518238][ T803] usb 4-1: USB disconnect, device number 26 [ 238.836811][T11601] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 239.038142][T11607] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 239.044835][T11607] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 239.651700][T11643] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2398'. [ 239.795572][T11650] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 240.495881][ T5949] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 240.655784][ T5949] usb 3-1: Using ep0 maxpacket: 16 [ 240.664590][ T5949] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 240.674736][ T5949] usb 3-1: config 1 has no interface number 1 [ 240.681323][ T5949] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 240.705708][ T5949] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 240.718809][ T5949] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 240.729754][ T5835] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 240.743250][ T5949] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 240.757274][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.765280][ T5949] usb 3-1: Product: syz [ 240.771279][ T5949] usb 3-1: Manufacturer: syz [ 240.777072][ T5949] usb 3-1: SerialNumber: syz [ 240.899383][ T5835] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 240.908678][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.916706][ T5835] usb 5-1: Product: syz [ 240.920896][ T5835] usb 5-1: Manufacturer: syz [ 240.925520][ T5835] usb 5-1: SerialNumber: syz [ 241.192918][ T5949] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 241.828490][ C0] Unknown status report in ack skb [ 241.954466][ T5835] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 241.961511][ T5835] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 242.004138][ T5949] usb 3-1: 2:1: cannot get freq at ep 0x82 [ 242.116579][ T5949] usb 3-1: USB disconnect, device number 24 [ 242.174610][ T5835] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 242.209369][T11739] overlayfs: failed to clone lowerpath [ 242.223296][T11739] overlayfs: failed to clone lowerpath [ 242.242008][ T5835] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 242.297964][ T5835] usb 5-1: USB disconnect, device number 15 [ 242.305356][ T5835] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 242.539523][T11755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 242.637393][T11760] netlink: 679 bytes leftover after parsing attributes in process `syz.3.2449'. [ 242.820680][T11777] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 242.827170][T11777] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 243.045797][ T5835] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 243.195769][ T5835] usb 3-1: Using ep0 maxpacket: 32 [ 243.204580][ T5835] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 243.212921][ T5835] usb 3-1: config 0 has no interface number 0 [ 243.219116][ T5835] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 243.231030][ T5835] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 243.240126][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.248429][ T5835] usb 3-1: Product: syz [ 243.252596][ T5835] usb 3-1: Manufacturer: syz [ 243.257425][ T5835] usb 3-1: SerialNumber: syz [ 243.265206][ T5835] usb 3-1: config 0 descriptor?? [ 243.273481][ T5835] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 243.283894][ T5835] em28xx 3-1:0.132: Video interface 132 found: [ 243.677411][ T5835] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 244.092842][T11797] overlayfs: failed to clone upperpath [ 244.296092][ T5835] em28xx 3-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 244.313616][ T5835] em28xx 3-1:0.132: failed to read eeprom (err=-5) [ 244.322482][ T5835] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 244.387439][ T5835] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 244.395999][ T5835] em28xx 3-1:0.132: analog set to bulk mode. [ 244.402060][ T5867] em28xx 3-1:0.132: Registering V4L2 extension [ 244.420224][ T5835] usb 3-1: USB disconnect, device number 25 [ 244.446697][ T5835] em28xx 3-1:0.132: Disconnecting em28xx [ 244.616295][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 244.621708][ T5867] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 244.643244][ T5867] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 244.659088][ T5867] em28xx 3-1:0.132: No AC97 audio processor [ 244.676033][ T5867] usb 3-1: Decoder not found [ 244.680664][ T5867] em28xx 3-1:0.132: failed to create media graph [ 244.700845][ T5867] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 244.721445][ T5867] em28xx 3-1:0.132: Remote control support is not available for this card. [ 244.731455][ T5835] em28xx 3-1:0.132: Closing input extension [ 244.752347][ T5835] em28xx 3-1:0.132: Freeing device [ 244.776893][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 244.791195][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 244.806076][ T9] usb 5-1: config 179 has no interface number 0 [ 244.814505][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 244.830632][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 244.861283][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 244.877609][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 244.889695][ T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 244.904209][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 244.913932][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.931206][T11811] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 245.186178][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input46 [ 245.385919][T11811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.402408][T11811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.661539][ T9] usb 5-1: USB disconnect, device number 16 [ 245.661627][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 245.661670][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 246.516011][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 246.695964][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 246.703354][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 246.718671][ T9] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 246.743832][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.766799][ T9] usb 5-1: Product: syz [ 246.771005][ T9] usb 5-1: Manufacturer: syz [ 246.775600][ T9] usb 5-1: SerialNumber: syz [ 246.790334][ T9] usb 5-1: config 0 descriptor?? [ 247.207724][ T9] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 247.415880][ T5922] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 247.568554][ T5922] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 247.579710][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.590765][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.600965][ T5922] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 247.615095][ T5922] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 247.632683][ T5922] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 247.644629][ T5922] usb 3-1: Manufacturer: syz [ 247.653529][ T5922] usb 3-1: config 0 descriptor?? [ 247.850015][ T9] usb 5-1: USB disconnect, device number 17 [ 248.079816][ T5922] appleir 0003:05AC:8243.001F: unknown main item tag 0x0 [ 248.120719][ T5922] appleir 0003:05AC:8243.001F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 248.263013][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 248.269877][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 248.326343][ T9] libceph: connect (1)[c::]:6789 error -101 [ 248.332371][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 248.541556][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 248.554332][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 248.597129][ T9] libceph: connect (1)[c::]:6789 error -101 [ 248.604547][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 248.694301][T11950] netlink: 'syz.4.2518': attribute type 9 has an invalid length. [ 248.703235][T11950] netlink: 'syz.4.2518': attribute type 11 has an invalid length. [ 248.711725][T11950] netlink: 'syz.4.2518': attribute type 12 has an invalid length. [ 248.719891][T11950] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.2518'. [ 248.732200][T11950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2518'. [ 249.066518][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 249.072841][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 249.080761][T11927] ceph: No mds server is up or the cluster is laggy [ 249.089272][T11922] ceph: No mds server is up or the cluster is laggy [ 249.118209][ T9] libceph: connect (1)[c::]:6789 error -101 [ 249.124785][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 249.633657][T11989] bridge0: entered allmulticast mode [ 249.640003][T11989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2533'. [ 249.650203][T11989] bridge_slave_1: left allmulticast mode [ 249.657737][T11989] bridge_slave_1: left promiscuous mode [ 249.665353][T11989] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.677347][T11989] bridge_slave_0: left allmulticast mode [ 249.682990][T11989] bridge_slave_0: left promiscuous mode [ 249.689278][T11989] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.717275][T11989] bridge0 (unregistering): left allmulticast mode [ 250.547217][ T5867] usb 3-1: USB disconnect, device number 26 [ 250.986183][ T5922] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 251.147714][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.158841][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.168793][ T5922] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 251.178067][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.190144][ T5922] usb 5-1: config 0 descriptor?? [ 251.613560][ T5922] pyra 0003:1E7D:2CF6.0020: unknown main item tag 0x0 [ 251.621561][ T5922] pyra 0003:1E7D:2CF6.0020: unknown main item tag 0x0 [ 251.628631][ T5922] pyra 0003:1E7D:2CF6.0020: unknown main item tag 0x0 [ 251.635435][ T5922] pyra 0003:1E7D:2CF6.0020: unknown main item tag 0x0 [ 251.642335][ T5922] pyra 0003:1E7D:2CF6.0020: unknown main item tag 0x0 [ 251.652057][ T5922] pyra 0003:1E7D:2CF6.0020: unknown main item tag 0x0 [ 251.658977][ T5922] pyra 0003:1E7D:2CF6.0020: unknown main item tag 0x0 [ 251.667777][ T5922] pyra 0003:1E7D:2CF6.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 252.001251][T12059] netlink: 'syz.1.2563': attribute type 9 has an invalid length. [ 252.014045][T12059] netlink: 'syz.1.2563': attribute type 11 has an invalid length. [ 252.025566][T12059] netlink: 'syz.1.2563': attribute type 12 has an invalid length. [ 252.034181][T12059] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.2563'. [ 252.044316][T12059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2563'. [ 252.423339][ T5922] pyra 0003:1E7D:2CF6.0020: couldn't init struct pyra_device [ 252.443950][ T5922] pyra 0003:1E7D:2CF6.0020: couldn't install mouse [ 252.472705][ T5922] pyra 0003:1E7D:2CF6.0020: probe with driver pyra failed with error -71 [ 252.501913][ T5922] usb 5-1: USB disconnect, device number 18 [ 253.323311][ T58] Bluetooth: hci4: Frame reassembly failed (-84) [ 253.330241][T12115] Bluetooth: hci4: Frame reassembly failed (-84) [ 253.896714][T12126] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.2592'. [ 254.934833][T12152] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2599'. [ 255.201741][T12167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2607'. [ 255.325822][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 255.326950][ T5830] Bluetooth: hci4: command 0x1003 tx timeout [ 255.573252][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.583430][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.060379][ T5835] IPVS: starting estimator thread 0... [ 257.168778][T12217] IPVS: using max 33 ests per chain, 79200 per kthread [ 257.186882][T12224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2631'. [ 257.375133][T12238] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.2639'. [ 258.476183][T12178] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 259.335754][ T803] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 259.413935][T12320] could not open pipe file descriptor [ 259.507209][ T803] usb 3-1: not running at top speed; connect to a high speed hub [ 259.526575][ T803] usb 3-1: config 3 has an invalid interface number: 47 but max is 1 [ 259.534697][ T803] usb 3-1: config 3 has no interface number 0 [ 259.553629][ T803] usb 3-1: config 3 interface 1 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 259.576654][ T803] usb 3-1: config 3 interface 1 has no altsetting 0 [ 259.594758][ T803] usb 3-1: config 3 interface 47 has no altsetting 0 [ 259.621015][ T803] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=43.bd [ 259.639794][ T803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.661538][ T803] usb 3-1: Product: syz [ 259.672842][ T803] usb 3-1: Manufacturer: syz [ 259.678340][ T803] usb 3-1: SerialNumber: syz [ 259.961835][ T803] usb 3-1: selecting invalid altsetting 0 [ 260.096754][ T803] usb 3-1: USB disconnect, device number 27 [ 260.929348][T12389] netlink: 'syz.4.2713': attribute type 39 has an invalid length. [ 261.534035][ T30] audit: type=1326 audit(1771352539.234:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12407 comm="syz.4.2714" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe11c59c629 code=0x0 [ 262.876686][ T803] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 263.038242][ T803] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 263.049138][ T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.060081][ T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.071783][ T803] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 263.087171][ T803] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 263.097141][ T803] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 263.105199][ T803] usb 5-1: Manufacturer: syz [ 263.113141][ T803] usb 5-1: config 0 descriptor?? [ 263.527680][ T803] appleir 0003:05AC:8243.0021: unknown main item tag 0x0 [ 263.538981][ T803] appleir 0003:05AC:8243.0021: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 263.710264][T12444] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2729'. [ 263.852437][T12384] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 265.887604][ T5922] usb 5-1: USB disconnect, device number 19 [ 266.616931][T12582] netlink: 'syz.2.2788': attribute type 9 has an invalid length. [ 266.655226][T12582] netlink: 'syz.2.2788': attribute type 11 has an invalid length. [ 266.694264][T12582] netlink: 'syz.2.2788': attribute type 12 has an invalid length. [ 266.724610][T12582] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.2788'. [ 266.764980][T12582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2788'. [ 267.486148][ T803] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 267.697069][ T803] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 267.708297][ T803] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 267.727785][ T803] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 267.740511][ T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.777720][T12597] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 267.794685][ T803] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 267.999686][ T803] usb 5-1: USB disconnect, device number 20 [ 268.475618][T12631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2808'. [ 268.856143][T12638] 9pnet: p9_errstr2errno: server reported unknown error  [ 268.989477][T12645] netlink: 'syz.4.2814': attribute type 9 has an invalid length. [ 269.004631][T12645] netlink: 'syz.4.2814': attribute type 11 has an invalid length. [ 269.019029][T12645] netlink: 'syz.4.2814': attribute type 12 has an invalid length. [ 269.044773][T12645] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.2814'. [ 269.058494][T12646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.069312][T12645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2814'. [ 269.300297][T12648] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 270.049195][T12669] netlink: 'syz.1.2824': attribute type 9 has an invalid length. [ 270.065842][T12669] netlink: 'syz.1.2824': attribute type 11 has an invalid length. [ 270.079925][T12669] netlink: 'syz.1.2824': attribute type 12 has an invalid length. [ 270.096019][T12669] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.2824'. [ 270.126486][T12669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2824'. [ 270.237967][T12672] overlayfs: failed to clone lowerpath [ 270.496807][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 270.502968][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 270.786163][ T803] libceph: connect (1)[c::]:6789 error -101 [ 270.792382][ T803] libceph: mon0 (1)[c::]:6789 connect error [ 271.226188][T12680] ceph: No mds server is up or the cluster is laggy [ 271.345027][T12710] tls_set_device_offload_rx: netdev not found [ 272.181298][T12754] fuse: Bad value for 'fd' [ 274.337460][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 274.343584][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 274.379961][ T5867] libceph: connect (1)[b::]:6789 error -101 [ 274.387490][ T5867] libceph: mon0 (1)[b::]:6789 connect error [ 274.607202][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 274.613217][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 274.647440][ T5867] libceph: connect (1)[b::]:6789 error -101 [ 274.653538][ T5867] libceph: mon0 (1)[b::]:6789 connect error [ 275.126074][ T9] libceph: connect (1)[c::]:6789 error -101 [ 275.132347][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 275.148872][T12836] ceph: No mds server is up or the cluster is laggy [ 275.155894][T12839] ceph: No mds server is up or the cluster is laggy [ 275.166126][ T803] libceph: connect (1)[b::]:6789 error -101 [ 275.172162][ T803] libceph: mon0 (1)[b::]:6789 connect error [ 275.221474][T12843] ceph: No mds server is up or the cluster is laggy [ 276.394065][ T9] libceph: connect (1)[c::]:6789 error -101 [ 276.405917][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 276.676625][ T9] libceph: connect (1)[c::]:6789 error -101 [ 276.684921][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 277.185940][ T5949] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 277.199175][T12903] ceph: No mds server is up or the cluster is laggy [ 277.208918][ T9] libceph: connect (1)[c::]:6789 error -101 [ 277.214980][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 277.389337][T12972] batadv_slave_0: entered promiscuous mode [ 277.397730][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.412175][T12971] batadv_slave_0: left promiscuous mode [ 277.421308][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.442209][ T5949] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 277.452729][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.468529][ T5949] usb 3-1: config 0 descriptor?? [ 277.735899][ T803] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 277.894066][ T5949] corsair-cpro 0003:1B1C:1D00.0022: unknown main item tag 0x0 [ 277.902124][ T5949] corsair-cpro 0003:1B1C:1D00.0022: unknown main item tag 0x0 [ 277.911848][ T5949] corsair-cpro 0003:1B1C:1D00.0022: unknown main item tag 0x0 [ 277.919632][ T5949] corsair-cpro 0003:1B1C:1D00.0022: unknown main item tag 0x0 [ 277.927517][ T5949] corsair-cpro 0003:1B1C:1D00.0022: unknown main item tag 0x0 [ 277.935432][ T803] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 277.945465][ T803] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 277.956264][ T5949] corsair-cpro 0003:1B1C:1D00.0022: hidraw0: USB HID v0.00 Device [HID 1b1c:1d00] on usb-dummy_hcd.2-1/input0 [ 277.971245][ T803] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 277.980608][ T803] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 277.991628][ T803] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 278.004409][ T803] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 278.016528][ T803] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 278.024608][ T803] usb 5-1: Product: syz [ 278.028923][ T803] usb 5-1: Manufacturer: syz [ 278.041178][ T5949] corsair-cpro 0003:1B1C:1D00.0022: probe with driver corsair-cpro failed with error -38 [ 278.056601][ T803] cdc_wdm 5-1:1.0: skipping garbage [ 278.063631][ T803] cdc_wdm 5-1:1.0: skipping garbage [ 278.070471][ T803] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 278.077142][ T803] cdc_wdm 5-1:1.0: Unknown control protocol [ 278.096878][ T5922] usb 3-1: USB disconnect, device number 28 [ 278.321828][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 278.328605][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 278.337792][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 278.344399][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 278.351691][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 278.358281][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 278.364528][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 278.371120][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 278.377402][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 278.384003][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 278.390272][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 278.396874][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 278.403216][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 278.409814][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 278.416252][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 278.422847][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 278.429520][ T5922] usb 5-1: USB disconnect, device number 21 [ 278.435887][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 278.442467][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 278.448518][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 278.803559][T13002] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 279.174506][T13026] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2963'. [ 279.559577][T13056] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2976'. [ 279.668466][T13060] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2036668960 (4073337920 ns) > initial count (1044739206 ns). Using initial count to start timer. [ 279.926688][ T5922] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 280.085923][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 280.098789][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.110103][ T5922] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 280.123403][ T5922] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 280.132774][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.145934][ T5922] usb 5-1: config 0 descriptor?? [ 280.243315][T13087] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2989'. [ 280.258322][T13085] ptrace attach of "./syz-executor exec"[13088] was attempted by "./syz-executor exec"[13085] [ 280.287800][T13090] netlink: 'syz.1.2992': attribute type 2 has an invalid length. [ 280.296110][T13090] netlink: 'syz.1.2992': attribute type 1 has an invalid length. [ 280.303869][T13090] netlink: 'syz.1.2992': attribute type 8 has an invalid length. [ 280.313323][T13090] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2992'. [ 280.360211][ T30] audit: type=1326 audit(1771352558.064:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13091 comm="syz.2.2993" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ac1b9c629 code=0x0 [ 280.438709][T13097] Invalid ELF header magic: != ELF [ 280.587430][ T5922] HID 045e:07da: Invalid code 65791 type 1 [ 280.597518][ T5922] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0023/input/input47 [ 280.630438][ T5922] microsoft 0003:045E:07DA.0023: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 281.219753][T13112] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3001'. [ 281.378617][T13120] netlink: 'syz.3.3005': attribute type 2 has an invalid length. [ 281.396910][T13120] netlink: 'syz.3.3005': attribute type 1 has an invalid length. [ 281.398350][ T5949] usb 5-1: USB disconnect, device number 22 [ 281.404664][T13120] netlink: 'syz.3.3005': attribute type 8 has an invalid length. [ 281.404683][T13120] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3005'. [ 281.907443][ T5949] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 282.070122][ T5949] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 282.091560][ T5949] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 282.113762][ T5949] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 282.125134][ T5949] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 282.139186][ T5949] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 282.158368][ T5949] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 282.168156][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 282.176585][ T5949] usb 3-1: Product: syz [ 282.181556][ T5949] usb 3-1: Manufacturer: syz [ 282.196851][ T5949] cdc_wdm 3-1:1.0: skipping garbage [ 282.204370][ T5949] cdc_wdm 3-1:1.0: skipping garbage [ 282.216398][ T5949] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 282.222382][ T5949] cdc_wdm 3-1:1.0: Unknown control protocol [ 282.293679][T13166] netlink: 'syz.3.3024': attribute type 1 has an invalid length. [ 282.302236][T13166] netlink: 16110 bytes leftover after parsing attributes in process `syz.3.3024'. [ 282.472114][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 282.478747][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 282.486570][ T5922] usb 3-1: USB disconnect, device number 29 [ 282.492495][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 282.852429][T13153] ceph: No mds server is up or the cluster is laggy [ 282.853281][T13160] ceph: No mds server is up or the cluster is laggy [ 283.893501][T13228] block nbd2: NBD_DISCONNECT [ 283.903333][T13223] block nbd2: Disconnected due to user request. [ 283.915760][T13223] block nbd2: shutting down sockets [ 284.076535][T13239] netlink: 'syz.2.3053': attribute type 1 has an invalid length. [ 284.084299][T13239] netlink: 16110 bytes leftover after parsing attributes in process `syz.2.3053'. [ 284.930424][T13284] "syz.1.3074" (13284) uses obsolete ecb(arc4) skcipher [ 284.968234][ T30] audit: type=1326 audit(1771352562.674:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13293 comm="syz.3.3077" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2d5d9c629 code=0x0 [ 285.420515][T13307] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 285.866980][T13336] fuse: Bad value for 'fd' [ 287.910619][T13430] overlayfs: failed to clone upperpath [ 289.577300][T13509] netlink: 'syz.4.3165': attribute type 4 has an invalid length. [ 289.615349][T13509] netlink: 'syz.4.3165': attribute type 4 has an invalid length. [ 290.649682][T13543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3176'. [ 291.539201][T13570] tls_set_device_offload: netdev not found [ 291.981027][T13593] 9pnet: p9_errstr2errno: server reported unknown error ./file0 [ 293.159716][T13647] overlayfs: failed to clone upperpath [ 294.265590][T13698] overlayfs: failed to clone upperpath [ 294.363358][ T51] Bluetooth: hci1: unexpected event for opcode 0x043d [ 294.995008][T13744] fuse: Bad value for 'fd' [ 295.441111][ T30] audit: type=1800 audit(1771352573.144:19): pid=13778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3273" name="nullb0" dev="tmpfs" ino=4298 res=0 errno=0 [ 295.908642][T13799] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3282'. [ 296.984375][T13836] 9pnet: p9_errstr2errno: server reported unknown error di0 [ 297.366696][T13869] overlayfs: failed to clone upperpath [ 297.379290][T13869] overlayfs: failed to clone upperpath [ 297.805181][T13901] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3327'. [ 298.004286][T13914] tipc: Started in network mode [ 298.012810][T13914] tipc: Node identity 4, cluster identity 4711 [ 298.019197][T13914] tipc: Node number set to 4 [ 298.033332][ T58] tipc: Subscription rejected, illegal request [ 298.240817][T13922] fuse: Bad value for 'fd' [ 298.283883][T13925] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.3338'. [ 299.943700][T13990] TCP: TCP_TX_DELAY enabled [ 301.635314][T14045] netlink: 'syz.4.3388': attribute type 9 has an invalid length. [ 301.643198][T14045] netlink: 'syz.4.3388': attribute type 11 has an invalid length. [ 301.663708][T14048] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3389'. [ 301.680744][T14045] netlink: 'syz.4.3388': attribute type 12 has an invalid length. [ 301.705879][T14045] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.3388'. [ 301.719861][T14048] netlink: 'syz.2.3389': attribute type 10 has an invalid length. [ 301.728382][T14048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.739441][T14045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3388'. [ 301.752914][T14048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.794342][T14048] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 301.844022][T14060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.864543][T14060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.888708][T14060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.934551][T14060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.261371][T14079] tipc: Started in network mode [ 302.275316][T14079] tipc: Node identity 4, cluster identity 4711 [ 302.295858][T14079] tipc: Node number set to 4 [ 302.311387][ T1162] tipc: Subscription rejected, illegal request [ 303.378856][T14131] "syz.2.3425" (14131) uses obsolete ecb(arc4) skcipher [ 303.663962][T14157] "syz.3.3436" (14157) uses obsolete ecb(arc4) skcipher [ 304.158618][T14185] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3448'. [ 304.169323][T14185] netlink: 'syz.4.3448': attribute type 10 has an invalid length. [ 304.177747][T14185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.197610][T14185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.210909][T14185] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 305.309639][T14201] ceph: No mds server is up or the cluster is laggy [ 305.400503][T14232] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3467'. [ 305.426495][T14232] gretap0: entered promiscuous mode [ 305.470481][T14232] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3467'. [ 305.483215][T14232] 0ªî{X¹¦: renamed from gretap0 [ 305.493447][T14232] 0ªî{X¹¦: left promiscuous mode [ 305.498905][T14232] 0ªî{X¹¦: entered allmulticast mode [ 305.509102][T14232] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 306.037828][ T5922] IPVS: starting estimator thread 0... [ 306.125909][T14272] IPVS: using max 38 ests per chain, 91200 per kthread [ 306.255485][T14276] overlayfs: failed to clone lowerpath [ 306.324491][ T58] IPVS: stop unused estimator thread 0... [ 306.724253][T14300] netlink: 9896 bytes leftover after parsing attributes in process `syz.2.3499'. [ 307.159424][T14320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3507'. [ 307.180434][T14320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3507'. [ 307.297773][T14330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3510'. [ 308.080154][T14368] overlayfs: failed to clone lowerpath [ 308.738081][T14397] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3536'. [ 309.253288][T14416] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 309.364114][T14423] netlink: 'syz.2.3546': attribute type 3 has an invalid length. [ 309.667792][T14436] netlink: 'syz.2.3552': attribute type 9 has an invalid length. [ 309.687142][T14436] netlink: 'syz.2.3552': attribute type 11 has an invalid length. [ 309.695005][T14436] netlink: 'syz.2.3552': attribute type 12 has an invalid length. [ 309.735589][T14436] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.3552'. [ 309.993318][T14455] netlink: 'syz.2.3561': attribute type 9 has an invalid length. [ 310.002508][T14455] netlink: 'syz.2.3561': attribute type 11 has an invalid length. [ 310.014864][T14455] netlink: 'syz.2.3561': attribute type 12 has an invalid length. [ 310.028268][T14455] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.3561'. [ 310.056080][T14455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3561'. [ 310.741925][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3578'. [ 310.766023][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3578'. [ 310.808668][ T5922] IPVS: starting estimator thread 0... [ 310.899709][T14497] IPVS: using max 37 ests per chain, 88800 per kthread [ 311.253347][ T1162] IPVS: stop unused estimator thread 0... [ 311.366976][T14517] netlink: 'syz.4.3586': attribute type 9 has an invalid length. [ 311.395351][T14517] netlink: 'syz.4.3586': attribute type 11 has an invalid length. [ 311.403384][T14517] netlink: 'syz.4.3586': attribute type 12 has an invalid length. [ 311.929645][ T1158] bridge_slave_1: left allmulticast mode [ 311.947563][ T1158] bridge_slave_1: left promiscuous mode [ 311.953406][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.977693][ T1158] bridge_slave_0: left allmulticast mode [ 311.983372][ T1158] bridge_slave_0: left promiscuous mode [ 311.989922][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.219988][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.230818][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.240850][ T1158] bond0 (unregistering): Released all slaves [ 312.250079][T14557] Zero length message leads to an empty skb [ 312.462065][T14578] __nla_validate_parse: 2 callbacks suppressed [ 312.462083][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3613'. [ 312.478460][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3613'. [ 312.612157][ T1158] hsr_slave_0: left promiscuous mode [ 312.618297][ T1158] hsr_slave_1: left promiscuous mode [ 312.624809][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.632330][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.640827][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.648898][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.674011][ T1158] veth1_macvtap: left promiscuous mode [ 312.679763][ T1158] veth0_macvtap: left promiscuous mode [ 313.018348][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 313.050792][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 313.366132][T14608] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.3622'. [ 313.375845][T14608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3622'. [ 313.410826][ T1158] IPVS: stop unused estimator thread 0... [ 314.189351][T14652] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3643'. [ 314.386092][T14661] smc: net device bond0 applied user defined pnetid SYZ2 [ 314.394821][T14661] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3647'. [ 314.428294][T14661] smc: removing net device bond0 with user defined pnetid SYZ2 [ 314.444078][T14661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.492815][T14661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.513394][T14661] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 314.547136][T14661] bond0 (unregistering): Released all slaves [ 314.761741][T14678] validate_nla: 5 callbacks suppressed [ 314.761761][T14678] netlink: 'syz.2.3655': attribute type 9 has an invalid length. [ 314.788303][T14678] netlink: 'syz.2.3655': attribute type 11 has an invalid length. [ 314.826248][T14678] netlink: 'syz.2.3655': attribute type 12 has an invalid length. [ 314.862428][T14678] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.3655'. [ 314.882266][T14678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3655'. [ 314.985220][T14687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3659'. [ 314.999058][T14687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3659'. [ 316.025052][T14720] overlayfs: failed to clone upperpath [ 316.788450][T14752] netlink: 'syz.4.3686': attribute type 29 has an invalid length. [ 316.797859][T14752] netlink: 'syz.4.3686': attribute type 29 has an invalid length. [ 316.888579][T14758] overlayfs: failed to clone upperpath [ 317.014591][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.023093][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.808226][T14852] fuse: Bad value for 'fd' [ 319.322408][T14891] netlink: 'syz.2.3730': attribute type 39 has an invalid length. [ 319.532084][T14905] __nla_validate_parse: 2 callbacks suppressed [ 319.532096][T14905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3737'. [ 319.960961][ T30] audit: type=1326 audit(1771352597.664:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14915 comm="syz.2.3740" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ac1b9c629 code=0x0 [ 319.971372][T14921] 9p: Unknown uid 00000000004294967295 [ 322.618898][T14993] tipc: Enabling of bearer rejected, failed to enable media [ 322.699575][T14997] 9pnet_fd: p9_fd_create_tcp (14997): problem connecting socket to 127.0.0.1 [ 323.444880][T15030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3784'. [ 324.181762][T15074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3803'. [ 325.563857][T15128] netlink: 'syz.3.3827': attribute type 9 has an invalid length. [ 325.580473][T15128] netlink: 'syz.3.3827': attribute type 11 has an invalid length. [ 325.598090][T15128] netlink: 'syz.3.3827': attribute type 12 has an invalid length. [ 325.606875][T15128] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.3827'. [ 325.617153][T15128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3827'. [ 326.138937][T15163] netlink: 'syz.4.3842': attribute type 9 has an invalid length. [ 326.170975][T15163] netlink: 'syz.4.3842': attribute type 11 has an invalid length. [ 326.185769][T15163] netlink: 'syz.4.3842': attribute type 12 has an invalid length. [ 326.199419][T15163] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.3842'. [ 326.218133][T15163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3842'. [ 326.295081][ T30] audit: type=1800 audit(1771352603.994:21): pid=15166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3844" name="nullb0" dev="tmpfs" ino=3700 res=0 errno=0 [ 326.361974][T15169] overlayfs: failed to clone upperpath [ 327.282407][T15209] netlink: 1335 bytes leftover after parsing attributes in process `syz.2.3862'. [ 327.969998][T15252] fuse: Bad value for 'fd' [ 328.363893][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3888'. [ 328.383227][T15271] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3888'. [ 328.406408][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3888'. [ 328.954130][ T30] audit: type=1800 audit(1771352606.634:22): pid=15312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3906" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 329.576218][T15348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3921'. [ 329.761318][T15358] veth1_to_bridge: entered promiscuous mode [ 329.768255][T15358] veth1_to_bridge: left promiscuous mode [ 332.397556][T15485] netlink: 'syz.4.3979': attribute type 1 has an invalid length. [ 332.444510][T15477] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3977'. [ 332.636026][T15477] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3977'. [ 332.761184][T15499] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3984'. [ 333.296909][T15515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3991'. [ 333.382360][T15521] Invalid ELF header magic: != ELF [ 333.390331][T15521] Invalid ELF header magic: != ELF [ 333.432036][T15523] netlink: 'syz.3.3995': attribute type 3 has an invalid length. [ 333.639102][T15538] sctp: [Deprecated]: syz.3.4001 (pid 15538) Use of int in max_burst socket option. [ 333.639102][T15538] Use struct sctp_assoc_value instead [ 333.868315][T15554] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 333.927670][T15556] @0Ù: renamed from bond_slave_1 (while UP) [ 334.554720][T15563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4011'. [ 334.654952][T15567] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4013'. [ 335.757651][T15614] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.4034'. [ 335.797420][T15616] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4035'. [ 335.808319][T15616] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4035'. [ 335.891232][T15621] netlink: 'syz.2.4037': attribute type 9 has an invalid length. [ 335.900637][T15621] netlink: 'syz.2.4037': attribute type 11 has an invalid length. [ 335.915692][T15621] netlink: 'syz.2.4037': attribute type 12 has an invalid length. [ 335.933756][T15621] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.4037'. [ 336.344592][T15641] netlink: 'syz.1.4041': attribute type 9 has an invalid length. [ 336.355770][T15641] netlink: 'syz.1.4041': attribute type 11 has an invalid length. [ 336.365148][T15641] netlink: 'syz.1.4041': attribute type 12 has an invalid length. [ 336.811330][ T30] audit: type=1326 audit(1771352614.514:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15670 comm="syz.3.4053" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2d5d9c629 code=0x0 [ 338.533705][T15735] fuse: Bad value for 'fd' [ 340.300279][ T30] audit: type=1326 audit(1771352618.004:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15813 comm="syz.1.4112" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f685819c629 code=0x0 [ 340.621980][T15823] infiniband: Added to hash: ib_dev=ffff88807a768000 (0)() ndev=ffff888048352000 (259)(lo) [ 340.635598][T15823] lo speed is unknown, defaulting to 1000 [ 340.645376][T15823] lo speed is unknown, defaulting to 1000 [ 340.654098][T15823] lo speed is unknown, defaulting to 1000 [ 340.848191][ T5922] lo speed is unknown, defaulting to 1000 [ 340.854275][T15823] infiniband syz0: set active [ 340.859766][T15823] infiniband syz0: added lo [ 340.882601][T15823] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 340.900040][T15823] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 340.918816][T15823] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 340.975210][T15823] RDS/IB: syz0: added [ 340.981495][T15823] smc: adding ib device syz0 with port count 1 [ 340.993533][T15823] smc: ib device syz0 port 1 has no pnetid [ 341.004946][ T5922] lo speed is unknown, defaulting to 1000 [ 341.019417][T15823] lo speed is unknown, defaulting to 1000 [ 341.334515][T15823] lo speed is unknown, defaulting to 1000 [ 341.597684][T15823] lo speed is unknown, defaulting to 1000 [ 341.831301][T15859] overlayfs: failed to clone upperpath [ 341.866569][T15823] lo speed is unknown, defaulting to 1000 [ 341.881968][ T30] audit: type=1326 audit(1771352619.584:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.2.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac1b9c629 code=0x7ffc0000 [ 341.935735][ T30] audit: type=1326 audit(1771352619.614:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.2.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac1b9c629 code=0x7ffc0000 [ 341.975912][ T30] audit: type=1326 audit(1771352619.614:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.2.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0ac1b9c629 code=0x7ffc0000 [ 342.008602][ T30] audit: type=1326 audit(1771352619.614:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.2.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac1b9c629 code=0x7ffc0000 [ 342.057155][ T30] audit: type=1326 audit(1771352619.614:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.2.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac1b9c629 code=0x7ffc0000 [ 342.075836][T15864] netlink: 'syz.2.4130': attribute type 29 has an invalid length. [ 342.081145][ T30] audit: type=1326 audit(1771352619.614:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.2.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f0ac1b9c629 code=0x7ffc0000 [ 342.109858][ T30] audit: type=1326 audit(1771352619.614:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.2.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac1b9c629 code=0x7ffc0000 [ 342.125918][T15864] netlink: 'syz.2.4130': attribute type 29 has an invalid length. [ 342.133804][ T30] audit: type=1326 audit(1771352619.614:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.2.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0ac1b9c629 code=0x7ffc0000 [ 342.195947][T15864] __nla_validate_parse: 4 callbacks suppressed [ 342.195967][T15864] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4130'. [ 342.223797][ T30] audit: type=1326 audit(1771352619.614:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.2.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac1b9c629 code=0x7ffc0000 [ 342.247045][ T30] audit: type=1326 audit(1771352619.614:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.2.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0ac1b9c629 code=0x7ffc0000 [ 342.440512][T15874] netlink: 'syz.3.4135': attribute type 11 has an invalid length. [ 343.028668][T15904] netlink: 'syz.2.4147': attribute type 4 has an invalid length. [ 343.052286][T15904] netlink: 'syz.2.4147': attribute type 4 has an invalid length. [ 343.097575][T15906] netlink: 'syz.2.4148': attribute type 1 has an invalid length. [ 343.105492][T15906] netlink: 'syz.2.4148': attribute type 4 has an invalid length. [ 343.113319][T15906] netlink: 15294 bytes leftover after parsing attributes in process `syz.2.4148'. [ 343.386037][T15919] netlink: 'syz.1.4153': attribute type 10 has an invalid length. [ 343.438270][T15919] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 343.524559][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 343.530814][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 343.625934][T15928] ceph: No mds server is up or the cluster is laggy [ 344.206311][T15953] overlayfs: failed to clone upperpath [ 344.688894][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 346.644541][T16021] netlink: 'syz.1.4199': attribute type 5 has an invalid length. [ 346.655292][T16021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4199'. [ 347.875313][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807a768000 (14)(syz0) rdma_ndev=ffff888048352000 (262)(lo) cookie=ffff8880467ee000 (11)(l2tpeth0) start [ 347.904596][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807a768000 (14)(syz0) rdma_ndev=ffff888048352000 (262)(lo) cookie=ffff8880467ee000 (4)(l2tpeth0) end [ 347.950565][T16078] overlayfs: failed to clone upperpath [ 348.704764][T16128] infiniband: Added to hash: ib_dev=ffff888074e94000 (0)() ndev=ffff888011e14000 (127)(lo) [ 348.717483][T16128] infiniband: Removed from hash: ib_dev=ffff888074e94000 (0)() ndev=ffff888011e14000 (127)(lo) [ 348.729405][T16128] rdma_rxe: rxe_newlink: failed to add lo [ 349.782150][T16170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4263'. [ 350.089578][T16191] sctp: [Deprecated]: syz.2.4273 (pid 16191) Use of int in maxseg socket option. [ 350.089578][T16191] Use struct sctp_assoc_value instead [ 350.369306][T16207] overlayfs: failed to clone upperpath [ 350.488514][T16210] overlayfs: failed to clone upperpath [ 351.029384][T16235] netlink: 'syz.2.4293': attribute type 9 has an invalid length. [ 351.053650][T16235] netlink: 'syz.2.4293': attribute type 11 has an invalid length. [ 351.063468][T16235] netlink: 'syz.2.4293': attribute type 12 has an invalid length. [ 351.072496][T16235] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.4293'. [ 351.100823][T16235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4293'. [ 351.814310][T16278] overlayfs: failed to clone upperpath [ 352.049739][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 352.049758][ T30] audit: type=1804 audit(1771352629.754:40): pid=16290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4317" name="file1" dev="tmpfs" ino=5141 res=1 errno=0 [ 352.289000][ T48] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807a768000 (14)(syz0) rdma_ndev=ffff888048352000 (261)(lo) cookie=ffff888060586000 (5)(l2tpeth0) start [ 352.314476][ T48] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807a768000 (14)(syz0) rdma_ndev=ffff888048352000 (261)(lo) cookie=ffff888060586000 (3)(l2tpeth0) end [ 352.333114][T16298] netlink: 566 bytes leftover after parsing attributes in process `syz.1.4322'. [ 352.451644][T16305] netlink: 'syz.1.4324': attribute type 9 has an invalid length. [ 352.478052][T16305] netlink: 'syz.1.4324': attribute type 11 has an invalid length. [ 352.487205][T16305] netlink: 'syz.1.4324': attribute type 12 has an invalid length. [ 352.495853][T16305] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.4324'. [ 352.506540][T16305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4324'. [ 352.518542][T16307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4326'. [ 352.532853][T16307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4326'. [ 352.616754][T16309] overlayfs: failed to clone upperpath [ 353.040883][T16331] lo speed is unknown, defaulting to 1000 [ 353.948334][ T82] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807a768000 (14)(syz0) rdma_ndev=ffff888048352000 (261)(lo) cookie=ffff88807b81e000 (11)(erspan0) start [ 353.999687][T16358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4349'. [ 354.004650][ T82] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807a768000 (14)(syz0) rdma_ndev=ffff888048352000 (261)(lo) cookie=ffff88807b81e000 (4)(erspan0) end [ 354.013321][T16358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4349'. [ 354.050312][ T82] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807a768000 (14)(syz0) rdma_ndev=ffff888048352000 (261)(lo) cookie=ffff888034cc4000 (3)(gretap0) start [ 354.069600][ T82] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807a768000 (14)(syz0) rdma_ndev=ffff888048352000 (261)(lo) cookie=ffff888034cc4000 (3)(gretap0) end [ 354.356911][T16372] nbd: nbd64 already in use [ 354.623333][T15757] udevd[15757]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 354.734591][T16394] netlink: 'syz.4.4362': attribute type 9 has an invalid length. [ 354.742795][T16394] netlink: 'syz.4.4362': attribute type 11 has an invalid length. [ 354.750729][T16394] netlink: 'syz.4.4362': attribute type 12 has an invalid length. [ 354.834837][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807a768000 (14)(syz0) rdma_ndev=ffff888048352000 (261)(lo) cookie=ffff888031694000 (11)(l2tpeth0) start [ 354.851986][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807a768000 (14)(syz0) rdma_ndev=ffff888048352000 (261)(lo) cookie=ffff888031694000 (4)(l2tpeth0) end [ 355.039985][ T51] Bluetooth: hci1: unexpected event for opcode 0x2010 [ 355.822023][T16442] overlayfs: failed to clone upperpath [ 356.634584][T16481] netlink: 'syz.4.4400': attribute type 4 has an invalid length. [ 356.827050][T16492] netlink: 'syz.4.4404': attribute type 10 has an invalid length. [ 356.859367][T16492] veth1_vlan: entered allmulticast mode [ 356.916748][T16495] ------------[ cut here ]------------ [ 356.922255][T16495] old_ns_root->mnt_id_unique != 1 [ 356.922286][T16495] WARNING: fs/namespace.c:3112 at vfs_open_tree+0xf35/0xfb0, CPU#0: syz.2.4406/16495 [ 356.936980][T16495] Modules linked in: [ 356.940927][T16495] CPU: 0 UID: 0 PID: 16495 Comm: syz.2.4406 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.952002][T16495] Tainted: [L]=SOFTLOCKUP [ 356.956399][T16495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 356.967032][T16495] RIP: 0010:vfs_open_tree+0xf35/0xfb0 [ 356.972446][T16495] Code: 39 78 ff 49 bf 00 00 00 00 00 fc ff df e9 1e fb ff ff e8 9e 39 78 ff 4d 63 ee 4c 8b 64 24 08 e9 64 ff ff ff e8 8c 39 78 ff 90 <0f> 0b 90 e9 d1 f5 ff ff e8 7e 39 78 ff 90 0f 0b 90 e9 18 f6 ff ff [ 356.992332][T16495] RSP: 0018:ffffc90003ed7d80 EFLAGS: 00010283 [ 356.998510][T16495] RAX: ffffffff824db904 RBX: 000000008000048e RCX: 0000000000080000 [ 357.006607][T16495] RDX: ffffc9000d685000 RSI: 00000000000000a7 RDI: 00000000000000a8 [ 357.014603][T16495] RBP: ffffc90003ed7eb0 R08: ffffffff8e7fa2eb R09: 1ffffffff1cff45d [ 357.022685][T16495] R10: dffffc0000000000 R11: fffffbfff1cff45e R12: ffff888048a5f880 [ 357.030734][T16495] R13: 0000000000009902 R14: ffff88801efa2501 R15: dffffc0000000000 [ 357.034920][T16492] team0: Device veth1_vlan failed to register rx_handler [ 357.038867][T16495] FS: 00007f0abfdf66c0(0000) GS:ffff888124fff000(0000) knlGS:0000000000000000 [ 357.054888][T16495] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.061554][T16495] CR2: 0000200000000640 CR3: 0000000026806000 CR4: 00000000003526f0 [ 357.069909][T16495] Call Trace: [ 357.073238][T16495] [ 357.076405][T16495] ? __pfx_vfs_open_tree+0x10/0x10 [ 357.081555][T16495] ? _raw_spin_unlock+0x28/0x50 [ 357.086511][T16495] ? alloc_fd+0x64b/0x6c0 [ 357.090891][T16495] __x64_sys_open_tree+0x96/0x110 [ 357.096022][T16495] do_syscall_64+0x14d/0xf80 [ 357.100636][T16495] ? trace_irq_disable+0x3b/0x150 [ 357.105752][T16495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.111851][T16495] ? clear_bhb_loop+0x40/0x90 [ 357.116625][T16495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.122541][T16495] RIP: 0033:0x7f0ac1b9c629 [ 357.127129][T16495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.146832][T16495] RSP: 002b:00007f0abfdf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 357.155273][T16495] RAX: ffffffffffffffda RBX: 00007f0ac1e15fa0 RCX: 00007f0ac1b9c629 [ 357.163375][T16495] RDX: 0000000000009902 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 357.171631][T16495] RBP: 00007f0ac1c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 357.179833][T16495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.187885][T16495] R13: 00007f0ac1e16038 R14: 00007f0ac1e15fa0 R15: 00007fffd2d08898 [ 357.195962][T16495] [ 357.198995][T16495] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 357.206287][T16495] CPU: 0 UID: 0 PID: 16495 Comm: syz.2.4406 Tainted: G L syzkaller #0 PREEMPT(full) [ 357.217226][T16495] Tainted: [L]=SOFTLOCKUP [ 357.221543][T16495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 357.232028][T16495] Call Trace: [ 357.235305][T16495] [ 357.238232][T16495] vpanic+0x56c/0xa60 [ 357.242231][T16495] ? __pfx__printk+0x10/0x10 [ 357.246816][T16495] ? __pfx_vpanic+0x10/0x10 [ 357.251317][T16495] ? is_bpf_text_address+0x292/0x2b0 [ 357.256602][T16495] ? is_bpf_text_address+0x26/0x2b0 [ 357.261812][T16495] panic+0xc5/0xd0 [ 357.265538][T16495] ? __pfx_panic+0x10/0x10 [ 357.269966][T16495] __warn+0x315/0x4f0 [ 357.273954][T16495] ? vfs_open_tree+0xf35/0xfb0 [ 357.278719][T16495] ? vfs_open_tree+0xf35/0xfb0 [ 357.283484][T16495] __report_bug+0x29a/0x540 [ 357.287997][T16495] ? vfs_open_tree+0xf35/0xfb0 [ 357.292757][T16495] ? __pfx___report_bug+0x10/0x10 [ 357.297783][T16495] ? ida_alloc_range+0x832/0x870 [ 357.302728][T16495] ? __pfx_ida_alloc_range+0x10/0x10 [ 357.308064][T16495] ? vfs_open_tree+0xf35/0xfb0 [ 357.312830][T16495] report_bug+0x16a/0x220 [ 357.317162][T16495] ? vfs_open_tree+0xf35/0xfb0 [ 357.321921][T16495] ? vfs_open_tree+0xf37/0xfb0 [ 357.326682][T16495] handle_bug+0x98/0x200 [ 357.330925][T16495] exc_invalid_op+0x1a/0x50 [ 357.335427][T16495] asm_exc_invalid_op+0x1a/0x20 [ 357.340286][T16495] RIP: 0010:vfs_open_tree+0xf35/0xfb0 [ 357.345677][T16495] Code: 39 78 ff 49 bf 00 00 00 00 00 fc ff df e9 1e fb ff ff e8 9e 39 78 ff 4d 63 ee 4c 8b 64 24 08 e9 64 ff ff ff e8 8c 39 78 ff 90 <0f> 0b 90 e9 d1 f5 ff ff e8 7e 39 78 ff 90 0f 0b 90 e9 18 f6 ff ff [ 357.365291][T16495] RSP: 0018:ffffc90003ed7d80 EFLAGS: 00010283 [ 357.371360][T16495] RAX: ffffffff824db904 RBX: 000000008000048e RCX: 0000000000080000 [ 357.379332][T16495] RDX: ffffc9000d685000 RSI: 00000000000000a7 RDI: 00000000000000a8 [ 357.387304][T16495] RBP: ffffc90003ed7eb0 R08: ffffffff8e7fa2eb R09: 1ffffffff1cff45d [ 357.395270][T16495] R10: dffffc0000000000 R11: fffffbfff1cff45e R12: ffff888048a5f880 [ 357.403238][T16495] R13: 0000000000009902 R14: ffff88801efa2501 R15: dffffc0000000000 [ 357.411215][T16495] ? vfs_open_tree+0xf34/0xfb0 [ 357.415993][T16495] ? __pfx_vfs_open_tree+0x10/0x10 [ 357.421097][T16495] ? _raw_spin_unlock+0x28/0x50 [ 357.425954][T16495] ? alloc_fd+0x64b/0x6c0 [ 357.430291][T16495] __x64_sys_open_tree+0x96/0x110 [ 357.435316][T16495] do_syscall_64+0x14d/0xf80 [ 357.439900][T16495] ? trace_irq_disable+0x3b/0x150 [ 357.444924][T16495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.450987][T16495] ? clear_bhb_loop+0x40/0x90 [ 357.455673][T16495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.461568][T16495] RIP: 0033:0x7f0ac1b9c629 [ 357.465977][T16495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.485580][T16495] RSP: 002b:00007f0abfdf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 357.494004][T16495] RAX: ffffffffffffffda RBX: 00007f0ac1e15fa0 RCX: 00007f0ac1b9c629 [ 357.501972][T16495] RDX: 0000000000009902 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 357.509940][T16495] RBP: 00007f0ac1c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 357.517907][T16495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.525875][T16495] R13: 00007f0ac1e16038 R14: 00007f0ac1e15fa0 R15: 00007fffd2d08898 [ 357.533856][T16495] [ 357.537250][T16495] Kernel Offset: disabled [ 357.541565][T16495] Rebooting in 86400 seconds..