last executing test programs: 6.123003912s ago: executing program 4 (id=19758): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 4.953966936s ago: executing program 3 (id=19780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 4.75747111s ago: executing program 0 (id=19785): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = dup(r4) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r6, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 3.789977693s ago: executing program 2 (id=19790): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x61, 0x0, 0x61, 0x2e, 0x71]}}, 0x0, 0x2b, 0x0, 0x1}, 0x28) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x836, '\x00', 0x0, r0, 0x1, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r1, 0x0, 0x0}, 0x10) 3.669399539s ago: executing program 2 (id=19791): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc286, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000002c0)={0x0, 0x11, 0x6, {0x6, 0x23, "ff7dbd0b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.095936499s ago: executing program 3 (id=19792): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x3b, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1e, 0x9, 0x78, 0x3, 0x7fffffff, 0xd, 0x2, 0x2, 0xca9e}}}}]}, 0x58}}, 0x4000010) 2.846049032s ago: executing program 4 (id=19793): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) 2.691573334s ago: executing program 0 (id=19794): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x5, &(0x7f0000000100)) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)='S', 0x1}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$inet6(0xa, 0x5, 0x1) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f00000000c0)=0x1e, 0x4) dup(0xffffffffffffffff) socket$inet6_icmp(0xa, 0x2, 0x3a) close_range(r3, 0xffffffffffffffff, 0x0) 2.018891015s ago: executing program 4 (id=19796): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) 1.90995006s ago: executing program 2 (id=19797): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ecdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) recvfrom(r0, 0x0, 0x0, 0x42, 0x0, 0x0) 1.873820187s ago: executing program 2 (id=19798): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x2000) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 1.848897038s ago: executing program 4 (id=19799): unshare(0x26020400) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f00000013c0)=[{0x0, 0x80101}, {&(0x7f0000000100)="a7", 0x1}], 0x2, 0x1) 1.462209809s ago: executing program 2 (id=19800): syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x3ff, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0) 1.419622606s ago: executing program 3 (id=19801): r0 = socket$kcm(0x10, 0x2, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x7800) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 1.418904626s ago: executing program 4 (id=19802): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008001}, 0x880) 1.287850702s ago: executing program 4 (id=19804): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = dup(r4) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r6, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 1.204305498s ago: executing program 3 (id=19805): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x34, r1, 0x505, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x34}}, 0x5040) 1.049112893s ago: executing program 0 (id=19806): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) 998.047118ms ago: executing program 1 (id=19807): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000001500)={0x5, 0xff, 0x0, 0x7f, 0x11, "60da9be1777e1af0"}) write(r0, &(0x7f0000000400)="1546b2000000000000008043f3526b93f78ada17aefbbfc13bc889a3a46e8f0e809292ee0739f4f20800b179aad0100050d4dfcb015b5978ad729ba371ae85600b9cdc1b6d796fb1fa4cb40c9da57ed2a7ea62f2cfa40e7b06861870d29a2d0f938e157f404b88f30d", 0x69) 949.679327ms ago: executing program 0 (id=19808): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x20000010, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x1, 0xfffe, 0x5, 0x3, 0x1, 0x100}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) 854.572499ms ago: executing program 0 (id=19809): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x16c5, r0, 0x500}, 0x38) 665.920239ms ago: executing program 0 (id=19810): r0 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001bc0)={0x2c, 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="00033c0000003c03d8c94155b75c87d82aebe75e29007a"], 0x0, 0x0, 0x0}, 0x0) 655.665863ms ago: executing program 3 (id=19811): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x2fd, 0xffff, 0x101, 0x300}}) 638.80216ms ago: executing program 1 (id=19812): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x44, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x6}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_LIMIT={0x0, 0x2, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x1}, @TCA_FQ_CODEL_INTERVAL={0x4, 0x3, 0x3}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x3}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0xfdab, 0xa, 0xaa}]}}]}, 0x78}}, 0x4000010) 440.85001ms ago: executing program 3 (id=19813): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) mount$fuseblk(&(0x7f0000000240), 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB='_id=\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYRES8=r0]) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) socket$inet6(0xa, 0x80003, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x7, @mcast2, 0x4}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000020000000017000000010000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa118000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b60000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) 342.07902ms ago: executing program 1 (id=19814): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) close(0x3) 323.127995ms ago: executing program 1 (id=19815): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x300}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x110}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 179.796953ms ago: executing program 1 (id=19816): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x2000) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 79.62784ms ago: executing program 1 (id=19817): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/uts\x00') setuid(0xee01) setns(r0, 0x4000000) 0s ago: executing program 2 (id=19818): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) io_setup(0x5, &(0x7f0000000100)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)='S', 0x1}], 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$inet6(0xa, 0x5, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000000c0)=0x1e, 0x4) dup(r2) socket$inet6_icmp(0xa, 0x2, 0x3a) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 013421][ T4550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13738'. [ 1356.410895][ T4564] loop7: detected capacity change from 0 to 7 [ 1356.488311][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1356.488486][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1356.568671][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1356.568711][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1356.568982][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1356.569011][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1356.569231][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1356.569258][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1356.569748][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1356.569779][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1356.572539][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1356.572569][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1356.572802][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1356.572827][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1356.572906][ T4365] ldm_validate_partition_table(): Disk read failed. [ 1356.573055][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1356.573080][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1356.581629][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1356.581663][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1356.581922][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1356.581947][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1356.582218][ T4365] Dev loop7: unable to read RDB block 0 [ 1356.582977][ T4365] loop7: unable to read partition table [ 1356.583221][ T4365] loop7: partition table beyond EOD, truncated [ 1356.595258][ T4567] loop7: detected capacity change from 7 to 0 [ 1357.865857][ T4610] @: renamed from vlan0 (while UP) [ 1358.586911][ T4649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13785'. [ 1363.623182][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1363.623253][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1364.070733][ T4794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13853'. [ 1366.990116][T22108] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 1367.145498][T22108] usb 3-1: config 16 has an invalid interface number: 236 but max is 0 [ 1367.145525][T22108] usb 3-1: config 16 has no interface number 0 [ 1367.153137][T22108] usb 3-1: string descriptor 0 read error: -22 [ 1367.153317][T22108] usb 3-1: New USB device found, idVendor=2040, idProduct=c61a, bcdDevice=f4.96 [ 1367.153340][T22108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.830489][T22108] usb 3-1: USB disconnect, device number 19 [ 1368.441237][ T4913] overlayfs: failed to resolve './bus': -2 [ 1372.305287][ T5005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13947'. [ 1373.099890][ T5018] netlink: 'syz.3.13953': attribute type 4 has an invalid length. [ 1373.209608][T22108] lo speed is unknown, defaulting to 1000 [ 1373.209644][T22108] syz0: Port: 1 Link DOWN [ 1373.595250][ T5036] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1374.142685][ T5059] fuse: Invalid rootmode [ 1376.817902][ C0] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1378.147644][ T5149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14009'. [ 1378.940111][ T5809] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1379.110112][ T5809] usb 5-1: Using ep0 maxpacket: 16 [ 1379.116006][ T5809] usb 5-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 1379.116057][ T5809] usb 5-1: config 0 interface 0 altsetting 32 has an invalid descriptor for endpoint zero, skipping [ 1379.116078][ T5809] usb 5-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1379.116103][ T5809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1379.116135][ T5809] usb 5-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 1379.116156][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.187315][ T5809] usb 5-1: config 0 descriptor?? [ 1379.208689][ T5809] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1379.406611][T22108] usb 5-1: USB disconnect, device number 16 [ 1379.655243][ T5218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14039'. [ 1379.783700][ T5226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14042'. [ 1379.877770][ T5231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14044'. [ 1380.861820][ T5278] fuseblk: Bad value for 'fd' [ 1383.827113][ C0] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1384.310703][ T5320] netlink: 120 bytes leftover after parsing attributes in process `syz.2.14087'. [ 1384.310734][ T5320] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14087'. [ 1384.384383][ T5327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14088'. [ 1385.880423][ C0] vkms_vblank_simulate: vblank timer overrun [ 1386.650296][ T5809] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1386.800073][ T5809] usb 3-1: Using ep0 maxpacket: 16 [ 1386.802886][ T5809] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1386.802912][ T5809] usb 3-1: config 0 has no interface number 0 [ 1386.802968][ T5809] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1386.802993][ T5809] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1386.807042][ T5809] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1386.807069][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.807086][ T5809] usb 3-1: Product: syz [ 1386.807099][ T5809] usb 3-1: Manufacturer: syz [ 1386.807112][ T5809] usb 3-1: SerialNumber: syz [ 1386.886126][ T5809] usb 3-1: config 0 descriptor?? [ 1386.887338][ T5385] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1386.908983][ T5809] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 1387.105609][ T1523] usb 3-1: USB disconnect, device number 20 [ 1387.466798][ T5421] netlink: 156 bytes leftover after parsing attributes in process `syz.4.14132'. [ 1387.466826][ T5421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14132'. [ 1388.021424][ T5452] netlink: 'syz.4.14147': attribute type 4 has an invalid length. [ 1388.077057][ T5459] netlink: 'syz.4.14147': attribute type 4 has an invalid length. [ 1389.119336][ T5517] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1389.185667][ T5520] overlayfs: failed to resolve './file1': -2 [ 1391.390913][ T5638] netlink: 'syz.0.14226': attribute type 4 has an invalid length. [ 1391.391202][ T5638] netlink: 'syz.0.14226': attribute type 4 has an invalid length. [ 1396.059368][ T37] kauditd_printk_skb: 254 callbacks suppressed [ 1396.059387][ T37] audit: type=1326 audit(1796825421.493:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5779 comm="syz.0.14292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1396.059534][ T37] audit: type=1326 audit(1796825421.493:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5779 comm="syz.0.14292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1396.060537][ T37] audit: type=1326 audit(1796825421.503:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5779 comm="syz.0.14292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1396.060580][ T37] audit: type=1326 audit(1796825421.503:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5779 comm="syz.0.14292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1396.061011][ T37] audit: type=1326 audit(1796825421.503:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5779 comm="syz.0.14292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1396.066842][ T37] audit: type=1326 audit(1796825421.503:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5779 comm="syz.0.14292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1396.066892][ T37] audit: type=1326 audit(1796825421.503:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5779 comm="syz.0.14292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1396.066935][ T37] audit: type=1326 audit(1796825421.503:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5779 comm="syz.0.14292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1396.066978][ T37] audit: type=1326 audit(1796825421.503:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5779 comm="syz.0.14292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1396.067021][ T37] audit: type=1326 audit(1796825421.503:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5779 comm="syz.0.14292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1396.130419][ C0] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1396.295880][ T5787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14293'. [ 1397.690797][ T5810] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14297'. [ 1397.722320][ T5812] tipc: Failed to remove unknown binding: 66,1,1/4:2047532694/2047532696 [ 1397.722359][ T5812] tipc: Failed to remove unknown binding: 66,1,1/4:2047532694/2047532696 [ 1398.414543][ T5876] netlink: 120 bytes leftover after parsing attributes in process `syz.2.14315'. [ 1398.414575][ T5876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14315'. [ 1401.248491][ T5953] netlink: 288 bytes leftover after parsing attributes in process `syz.4.14343'. [ 1402.090886][ T5987] netlink: 'syz.4.14359': attribute type 4 has an invalid length. [ 1405.038459][ T6087] lo speed is unknown, defaulting to 1000 [ 1407.579059][ T6127] netlink: 'syz.4.14417': attribute type 4 has an invalid length. [ 1410.073911][ T6158] fuse: Bad value for 'group_id' [ 1410.073931][ T6158] fuse: Bad value for 'group_id' [ 1418.233207][ T6300] netlink: 84 bytes leftover after parsing attributes in process `syz.0.14487'. [ 1418.233232][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14487'. [ 1419.722364][ T6341] input: syz0 as /devices/virtual/input/input13 [ 1421.105182][ C0] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1423.215387][ T6423] netlink: 3744 bytes leftover after parsing attributes in process `syz.4.14541'. [ 1423.660855][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.660924][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.065768][ T6459] netlink: 120 bytes leftover after parsing attributes in process `syz.4.14557'. [ 1424.065799][ T6459] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14557'. [ 1424.672312][ T6486] ptrace attach of "./syz-executor exec"[6489] was attempted by "./syz-executor exec"[6486] [ 1429.516410][ T6570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14607'. [ 1430.163619][ T6599] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14619'. [ 1431.441823][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14620'. [ 1431.441849][ T6612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1431.441873][ T6612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1431.597701][ T6612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1431.597729][ T6612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1431.892757][ T6631] overlayfs: missing 'lowerdir' [ 1433.084745][ T37] kauditd_printk_skb: 52 callbacks suppressed [ 1433.084772][ T37] audit: type=1800 audit(1796825458.523:1669): pid=6687 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.14657" name="nullb0" dev="tmpfs" ino=17606 res=0 errno=0 [ 1433.270069][ T1523] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1433.424190][ T1523] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1433.425250][ T1523] usb 1-1: no configurations [ 1433.425266][ T1523] usb 1-1: can't read configurations, error -22 [ 1434.936841][ T37] audit: type=1326 audit(1796825460.373:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6739 comm="syz.3.14678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1434.937392][ T37] audit: type=1326 audit(1796825460.373:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6739 comm="syz.3.14678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1434.937673][ T37] audit: type=1326 audit(1796825460.373:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6739 comm="syz.3.14678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1435.089864][ T37] audit: type=1326 audit(1796825460.523:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6739 comm="syz.3.14678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1435.123175][ T37] audit: type=1326 audit(1796825460.563:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6739 comm="syz.3.14678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1437.122174][ T6817] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14715'. [ 1437.122429][ T6817] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14715'. [ 1437.263715][ T6823] fuse: Bad value for 'group_id' [ 1437.263734][ T6823] fuse: Bad value for 'group_id' [ 1442.516437][ T37] audit: type=1326 audit(1796825467.953:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6914 comm="syz.4.14758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1442.516490][ T37] audit: type=1326 audit(1796825467.953:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6914 comm="syz.4.14758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1442.516928][ T37] audit: type=1326 audit(1796825467.953:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6914 comm="syz.4.14758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1442.517531][ T37] audit: type=1326 audit(1796825467.953:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6914 comm="syz.4.14758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1442.517807][ T37] audit: type=1326 audit(1796825467.953:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6914 comm="syz.4.14758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1442.519272][ T37] audit: type=1326 audit(1796825467.953:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6914 comm="syz.4.14758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1442.531514][ T37] audit: type=1326 audit(1796825467.973:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6914 comm="syz.4.14758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1442.539399][ T37] audit: type=1326 audit(1796825467.973:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6914 comm="syz.4.14758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1442.540483][ T37] audit: type=1326 audit(1796825467.983:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6914 comm="syz.4.14758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1442.540627][ T37] audit: type=1326 audit(1796825467.983:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6914 comm="syz.4.14758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1442.851519][ T6922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14762'. [ 1443.247238][ T6933] lo speed is unknown, defaulting to 1000 [ 1444.479350][ T6955] tipc: Failed to remove unknown binding: 66,1,1/4:591826239/591826241 [ 1444.479390][ T6955] tipc: Failed to remove unknown binding: 66,1,1/4:591826239/591826241 [ 1444.910163][T22096] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1445.063992][T22096] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1445.064020][T22096] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.064039][T22096] usb 3-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 1445.064059][T22096] usb 3-1: config 220 has no interface number 1 [ 1445.064114][T22096] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1445.064132][T22096] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1445.067266][T22096] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1445.067292][T22096] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.067311][T22096] usb 3-1: Product: syz [ 1445.067324][T22096] usb 3-1: Manufacturer: syz [ 1445.067338][T22096] usb 3-1: SerialNumber: syz [ 1445.421889][T22096] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1445.421978][T22096] uvcvideo 3-1:220.0: No valid video chain found. [ 1445.463487][T22096] usb 3-1: USB disconnect, device number 21 [ 1447.481639][ T7076] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1450.238704][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 1450.238723][ T37] audit: type=1326 audit(1796825475.673:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7131 comm="syz.2.14860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1451.354165][ T7172] overlayfs: failed to resolve './file1': -2 [ 1452.773627][ T37] audit: type=1804 audit(1796825478.213:1692): pid=7243 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.14912" name="bus" dev="ramfs" ino=168587 res=1 errno=0 [ 1452.775864][ T7243] Invalid ELF header magic: != ELF [ 1453.997261][ T7305] overlayfs: missing 'lowerdir' [ 1454.337281][ T7320] netlink: 'syz.3.14936': attribute type 4 has an invalid length. [ 1454.856594][ T7345] netlink: 'syz.4.14958': attribute type 4 has an invalid length. [ 1457.795400][ T37] audit: type=1326 audit(1796825483.233:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7429 comm="syz.0.14998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1457.801484][ T37] audit: type=1326 audit(1796825483.233:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7429 comm="syz.0.14998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1458.768061][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15020'. [ 1458.768086][ T7477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15020'. [ 1458.768110][ T7477] netlink: 'syz.0.15020': attribute type 20 has an invalid length. [ 1458.838444][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15020'. [ 1458.838468][ T7477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15020'. [ 1458.838492][ T7477] netlink: 'syz.0.15020': attribute type 20 has an invalid length. [ 1458.839105][ T1482] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1458.909213][ T1482] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1458.909332][ T1482] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1458.909368][ T1482] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1460.613432][ T7518] netlink: 'syz.4.15040': attribute type 4 has an invalid length. [ 1460.861537][ T7520] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20004 [ 1460.869882][T22096] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 1461.707747][T22096] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1461.707779][T22096] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1461.707820][T22096] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1461.707842][T22096] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.980641][T22096] usb 3-1: GET_CAPABILITIES returned 0 [ 1461.980687][T22096] usbtmc 3-1:16.0: can't read capabilities [ 1462.362099][ T7528] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1462.835724][ T5809] usb 3-1: USB disconnect, device number 22 [ 1463.286468][ T7573] netlink: 'syz.4.15063': attribute type 4 has an invalid length. [ 1463.286875][ T7573] netlink: 'syz.4.15063': attribute type 4 has an invalid length. [ 1463.543196][ T7583] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1464.633198][ T7617] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15078'. [ 1465.598485][ T7631] netlink: 'syz.2.15085': attribute type 4 has an invalid length. [ 1465.619506][ T7631] netlink: 'syz.2.15085': attribute type 4 has an invalid length. [ 1465.717918][ T7633] input: syz0 as /devices/virtual/input/input14 [ 1466.093065][ T7648] fuse: Bad value for 'fd' [ 1466.215860][ T37] audit: type=1326 audit(1796825491.653:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7654 comm="syz.3.15092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1466.216220][ T37] audit: type=1326 audit(1796825491.653:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7654 comm="syz.3.15092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1466.216811][ T37] audit: type=1326 audit(1796825491.653:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7654 comm="syz.3.15092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc65d58df10 code=0x7ffc0000 [ 1466.217398][ T37] audit: type=1326 audit(1796825491.653:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7654 comm="syz.3.15092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc65d58df10 code=0x7ffc0000 [ 1466.218068][ T37] audit: type=1326 audit(1796825491.653:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7654 comm="syz.3.15092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1466.218368][ T37] audit: type=1326 audit(1796825491.653:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7654 comm="syz.3.15092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1466.433783][ T37] audit: type=1326 audit(1796825491.653:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7654 comm="syz.3.15092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1466.434108][ T37] audit: type=1326 audit(1796825491.873:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7654 comm="syz.3.15092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1466.434405][ T37] audit: type=1326 audit(1796825491.873:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7654 comm="syz.3.15092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1466.449533][ T37] audit: type=1326 audit(1796825491.883:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7654 comm="syz.3.15092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1469.067661][ T7699] overlayfs: failed to resolve './file0': -2 [ 1469.494437][ T7721] netlink: 112 bytes leftover after parsing attributes in process `syz.2.15124'. [ 1469.730431][ C0] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1472.346760][ T7801] netlink: 'syz.4.15160': attribute type 4 has an invalid length. [ 1474.988671][ T7870] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15190'. [ 1476.445390][ T7911] netlink: 'syz.4.15210': attribute type 4 has an invalid length. [ 1478.223037][ T7939] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15223'. [ 1479.144310][ T7967] lo speed is unknown, defaulting to 1000 [ 1483.694225][ T8059] netlink: 120 bytes leftover after parsing attributes in process `syz.2.15273'. [ 1483.694259][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15273'. [ 1484.905968][ T8096] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1485.098860][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.098930][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.516568][ T8113] fuse: Bad value for 'group_id' [ 1485.516587][ T8113] fuse: Bad value for 'group_id' [ 1487.240947][ T8162] fuse: Bad value for 'group_id' [ 1487.240968][ T8162] fuse: Bad value for 'group_id' [ 1487.601489][ T8185] ip6tnl0: Caught tx_queue_len zero misconfig [ 1487.700185][ T1523] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1487.886226][ T1523] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.886291][ T1523] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1487.886315][ T1523] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.942028][ T1523] usb 1-1: config 0 descriptor?? [ 1487.958196][ T1523] pwc: Askey VC010 type 2 USB webcam detected. [ 1488.144116][ T8197] overlayfs: failed to clone upperpath [ 1488.355402][ T1523] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1488.360467][ T1523] pwc: recv_control_msg error -32 req 02 val 2700 [ 1488.361133][ T1523] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1488.361952][ T1523] pwc: recv_control_msg error -32 req 04 val 1000 [ 1488.362636][ T1523] pwc: recv_control_msg error -32 req 04 val 1300 [ 1488.363299][ T1523] pwc: recv_control_msg error -32 req 04 val 1400 [ 1488.364042][ T1523] pwc: recv_control_msg error -32 req 02 val 2000 [ 1488.364719][ T1523] pwc: recv_control_msg error -32 req 02 val 2100 [ 1488.365376][ T1523] pwc: recv_control_msg error -32 req 04 val 1500 [ 1488.366084][ T1523] pwc: recv_control_msg error -32 req 02 val 2500 [ 1488.367423][ T1523] pwc: recv_control_msg error -32 req 02 val 2400 [ 1488.368093][ T1523] pwc: recv_control_msg error -32 req 02 val 2600 [ 1488.370330][ T1523] pwc: recv_control_msg error -32 req 02 val 2900 [ 1488.400193][ T1523] pwc: recv_control_msg error -32 req 02 val 2800 [ 1488.608485][ T1523] pwc: recv_control_msg error -71 req 04 val 1200 [ 1488.653580][ T1523] pwc: Registered as video103. [ 1488.656865][ T1523] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 1488.677970][ T1523] usb 1-1: USB disconnect, device number 17 [ 1489.683258][ T8257] 9pnet_fd: Insufficient options for proto=fd [ 1493.274799][ T8351] veth0: entered promiscuous mode [ 1493.290082][ T5809] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1493.452779][ T5809] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.452805][ T5809] usb 1-1: config 0 has no interfaces? [ 1493.455978][ T5809] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1493.456004][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.456023][ T5809] usb 1-1: Product: syz [ 1493.456037][ T5809] usb 1-1: Manufacturer: syz [ 1493.456050][ T5809] usb 1-1: SerialNumber: syz [ 1493.509242][ T5809] usb 1-1: config 0 descriptor?? [ 1493.542520][ T8350] veth0: left promiscuous mode [ 1493.733732][T22096] usb 1-1: USB disconnect, device number 18 [ 1496.250144][ T1523] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1496.412666][ T1523] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1496.412693][ T1523] usb 5-1: config 0 has no interfaces? [ 1496.430591][ T1523] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1496.430619][ T1523] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.430637][ T1523] usb 5-1: Product: syz [ 1496.430651][ T1523] usb 5-1: Manufacturer: syz [ 1496.430664][ T1523] usb 5-1: SerialNumber: syz [ 1496.437401][ T1523] usb 5-1: config 0 descriptor?? [ 1497.673033][ T1523] usb 5-1: USB disconnect, device number 17 [ 1498.150262][ T8481] lo speed is unknown, defaulting to 1000 [ 1498.644494][ T8504] fuse: Bad value for 'user_id' [ 1498.644514][ T8504] fuse: Bad value for 'user_id' [ 1500.531446][ T8536] can: request_module (can-proto-0) failed. [ 1501.006282][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15486'. [ 1502.729439][ T8591] netlink: 'syz.2.15503': attribute type 4 has an invalid length. [ 1503.931835][ T8640] netlink: 'syz.4.15526': attribute type 4 has an invalid length. [ 1505.092149][ T8690] lo speed is unknown, defaulting to 1000 [ 1505.422986][ T8704] netlink: 156 bytes leftover after parsing attributes in process `syz.2.15553'. [ 1505.423011][ T8704] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15553'. [ 1508.316475][ T8789] 9pnet_fd: Insufficient options for proto=fd [ 1508.629160][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 1508.629178][ T37] audit: type=1326 audit(1796825534.063:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.0.15599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1508.629370][ T37] audit: type=1326 audit(1796825534.063:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.0.15599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1508.686094][ T37] audit: type=1326 audit(1796825534.123:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.0.15599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1508.686412][ T37] audit: type=1326 audit(1796825534.123:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.0.15599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1508.686681][ T37] audit: type=1326 audit(1796825534.123:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.0.15599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1508.687221][ T37] audit: type=1326 audit(1796825534.123:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.0.15599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1508.687858][ T37] audit: type=1326 audit(1796825534.123:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.0.15599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1508.688156][ T37] audit: type=1326 audit(1796825534.123:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.0.15599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1508.691884][ T37] audit: type=1326 audit(1796825534.133:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.0.15599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1508.692820][ T37] audit: type=1326 audit(1796825534.133:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.0.15599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1514.829912][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15675'. [ 1514.840558][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15675'. [ 1516.735797][ T9012] overlayfs: missing 'lowerdir' [ 1519.162567][ T9086] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1519.162586][ T9086] overlayfs: missing 'lowerdir' [ 1524.910218][T22108] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1525.066160][T22108] usb 5-1: config 0 has no interfaces? [ 1525.074508][T22108] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1525.074537][T22108] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1525.074558][T22108] usb 5-1: Product: syz [ 1525.074571][T22108] usb 5-1: Manufacturer: syz [ 1525.074584][T22108] usb 5-1: SerialNumber: syz [ 1525.128769][T22108] usb 5-1: config 0 descriptor?? [ 1525.439895][ C1] vkms_vblank_simulate: vblank timer overrun [ 1525.645945][ C1] vkms_vblank_simulate: vblank timer overrun [ 1525.773085][ T9225] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1525.789535][ C1] vkms_vblank_simulate: vblank timer overrun [ 1526.850624][ C1] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1527.244146][ T9251] fuse: Bad value for 'group_id' [ 1527.244164][ T9251] fuse: Bad value for 'group_id' [ 1527.721667][ T1523] usb 5-1: USB disconnect, device number 18 [ 1528.131068][ T5809] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 1528.132780][ C1] vkms_vblank_simulate: vblank timer overrun [ 1528.236514][ T9284] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1528.247368][ T9284] overlayfs: overlapping lowerdir path [ 1528.253639][ C1] vkms_vblank_simulate: vblank timer overrun [ 1528.644444][ C1] vkms_vblank_simulate: vblank timer overrun [ 1528.848066][ T9281] overlayfs: missing 'lowerdir' [ 1528.912723][ T5809] usb 1-1: config 0 has no interfaces? [ 1528.912760][ T5809] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1528.912783][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.918940][ T5809] usb 1-1: config 0 descriptor?? [ 1528.923502][ C1] vkms_vblank_simulate: vblank timer overrun [ 1528.996056][ T9293] netlink: 104 bytes leftover after parsing attributes in process `syz.4.15815'. [ 1529.224577][T22108] usb 1-1: USB disconnect, device number 19 [ 1529.531076][ C1] vkms_vblank_simulate: vblank timer overrun [ 1530.831994][ T9323] 9pnet_virtio: no channels available for device syz [ 1532.130943][ T9337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15831'. [ 1532.559769][ T9354] lo speed is unknown, defaulting to 1000 [ 1533.200427][ T9368] 9pnet: Could not find request transport: f [ 1533.540373][ T5809] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 1533.657360][ T9393] overlayfs: missing 'lowerdir' [ 1533.703464][ T5809] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1533.704060][ T5809] usb 3-1: not running at top speed; connect to a high speed hub [ 1533.705491][ T5809] usb 3-1: config 0 has no interfaces? [ 1533.708067][ T5809] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 1533.708091][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.708108][ T5809] usb 3-1: Product: syz [ 1533.708121][ T5809] usb 3-1: Manufacturer: syz [ 1533.708133][ T5809] usb 3-1: SerialNumber: syz [ 1533.768031][ T5809] usb 3-1: config 0 descriptor?? [ 1533.996957][T22096] usb 3-1: USB disconnect, device number 23 [ 1534.047745][ T9407] binder: 9406:9407 ioctl 4018620d 0 returned -22 [ 1542.406077][ T9562] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15926'. [ 1542.818067][ T9570] netlink: 104 bytes leftover after parsing attributes in process `syz.4.15928'. [ 1543.734679][ T9574] input: syz0 as /devices/virtual/input/input17 [ 1544.621112][ T9611] overlayfs: overlapping lowerdir path [ 1544.710074][ T9612] overlayfs: failed to verify upper (3145/file0, ino=19172, err=-116) [ 1544.710132][ T9612] overlayfs: failed to verify index dir 'upper' xattr [ 1544.710140][ T9612] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 1546.534522][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.534619][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.880134][ T1522] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 1548.032533][ T1522] usb 3-1: config 0 has no interfaces? [ 1548.032577][ T1522] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1548.032599][ T1522] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.063236][ T1522] usb 3-1: config 0 descriptor?? [ 1548.274891][T22096] usb 3-1: USB disconnect, device number 24 [ 1551.741719][ T9802] wg2: Caught tx_queue_len zero misconfig [ 1552.997235][ T9818] netlink: 104 bytes leftover after parsing attributes in process `syz.2.16039'. [ 1555.762077][ T9866] lo speed is unknown, defaulting to 1000 [ 1558.289826][ T9973] overlayfs: missing 'lowerdir' [ 1561.970107][ T5809] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1562.123164][ T5809] usb 3-1: Using ep0 maxpacket: 8 [ 1563.134049][ T5809] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1563.135177][ T5809] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1563.135210][ T5809] usb 3-1: can't read configurations, error -71 [ 1563.502655][T10074] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1563.959393][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16160'. [ 1564.534199][T10107] binder: 10106:10107 ioctl c0306201 0 returned -14 [ 1565.677945][T22108] IPVS: starting estimator thread 0... [ 1565.760334][T10120] IPVS: using max 7 ests per chain, 16800 per kthread [ 1570.000093][ T37] kauditd_printk_skb: 40 callbacks suppressed [ 1570.000111][ T37] audit: type=1800 audit(1796825595.433:1765): pid=10181 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.16197" name="bus" dev="tmpfs" ino=20049 res=0 errno=0 [ 1572.097737][T10259] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1574.449199][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16260'. [ 1575.202683][T10354] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1577.844725][T10414] sctp: [Deprecated]: syz.2.16306 (pid 10414) Use of int in max_burst socket option deprecated. [ 1577.844725][T10414] Use struct sctp_assoc_value instead [ 1577.875371][T10414] vlan0: entered allmulticast mode [ 1577.875392][T10414] bond0: entered allmulticast mode [ 1577.878218][T10414] : entered allmulticast mode [ 1577.878243][T10414] bond_slave_1: entered allmulticast mode [ 1578.234059][T10435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16315'. [ 1579.721908][T10469] overlayfs: missing 'lowerdir' [ 1580.187748][ T37] audit: type=1326 audit(1796825605.623:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10491 comm="syz.0.16340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1580.188027][ T37] audit: type=1326 audit(1796825605.623:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10491 comm="syz.0.16340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1580.188675][ T37] audit: type=1326 audit(1796825605.623:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10491 comm="syz.0.16340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1580.189085][ T37] audit: type=1326 audit(1796825605.623:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10491 comm="syz.0.16340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1580.189368][ T37] audit: type=1326 audit(1796825605.623:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10491 comm="syz.0.16340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1580.190835][ T37] audit: type=1326 audit(1796825605.623:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10491 comm="syz.0.16340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1580.191536][ T37] audit: type=1326 audit(1796825605.633:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10491 comm="syz.0.16340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1580.191807][ T37] audit: type=1326 audit(1796825605.633:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10491 comm="syz.0.16340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1580.192632][ T37] audit: type=1326 audit(1796825605.633:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10491 comm="syz.0.16340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1580.194700][ T37] audit: type=1326 audit(1796825605.633:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10491 comm="syz.0.16340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1583.507299][T10620] netlink: 92 bytes leftover after parsing attributes in process `syz.2.16398'. [ 1585.641723][T10650] binder: 10649:10650 unknown command 0 [ 1585.641745][T10650] binder: 10649:10650 ioctl c0306201 200000000080 returned -22 [ 1589.286002][T10712] overlayfs: missing 'lowerdir' [ 1590.737239][T10731] lo speed is unknown, defaulting to 1000 [ 1591.280545][T10742] netlink: 56 bytes leftover after parsing attributes in process `syz.3.16448'. [ 1591.833248][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16455'. [ 1593.298444][T10778] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1596.228330][T10863] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1596.228351][T10863] overlayfs: missing 'lowerdir' [ 1603.798885][T11015] netlink: 156 bytes leftover after parsing attributes in process `syz.0.16564'. [ 1603.798911][T11015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16564'. [ 1603.798926][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16564'. [ 1604.837858][T11046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16577'. [ 1604.858058][T11046] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1605.018496][T11056] netlink: 'syz.2.16581': attribute type 4 has an invalid length. [ 1608.136560][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.136633][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.046281][T11158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16624'. [ 1609.046305][T11158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16624'. [ 1609.046331][T11158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16624'. [ 1609.068058][ T43] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1609.068343][ T43] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1609.068384][ T43] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1609.068419][ T43] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1609.071330][T11158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16624'. [ 1609.071357][T11158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16624'. [ 1609.071381][T11158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16624'. [ 1609.382926][T11165] overlayfs: failed to resolve './file0': -2 [ 1609.661732][T11179] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1610.078036][T11203] binder: Bad value for 'max' [ 1610.575855][T11230] binder: Binderfs stats mode cannot be changed during a remount [ 1611.171631][T11255] netlink: 104 bytes leftover after parsing attributes in process `syz.2.16670'. [ 1613.324849][T11317] fuseblk: Unknown parameter 'r' [ 1614.225959][ T37] kauditd_printk_skb: 15 callbacks suppressed [ 1614.225978][ T37] audit: type=1326 audit(1796825639.663:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11363 comm="syz.0.16721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1614.226272][ T37] audit: type=1326 audit(1796825639.663:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11363 comm="syz.0.16721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1614.245149][ T37] audit: type=1326 audit(1796825639.683:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11363 comm="syz.0.16721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1614.245203][ T37] audit: type=1326 audit(1796825639.683:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11363 comm="syz.0.16721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1614.245248][ T37] audit: type=1326 audit(1796825639.683:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11363 comm="syz.0.16721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1614.246851][ T37] audit: type=1326 audit(1796825639.683:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11363 comm="syz.0.16721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1614.249461][ T37] audit: type=1326 audit(1796825639.683:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11363 comm="syz.0.16721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1614.249511][ T37] audit: type=1326 audit(1796825639.683:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11363 comm="syz.0.16721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1614.249552][ T37] audit: type=1326 audit(1796825639.683:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11363 comm="syz.0.16721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1614.249594][ T37] audit: type=1326 audit(1796825639.683:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11363 comm="syz.0.16721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1614.705069][T11379] netlink: 104 bytes leftover after parsing attributes in process `syz.4.16728'. [ 1617.256304][T11406] 9pnet_fd: Insufficient options for proto=fd [ 1622.584035][T11559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16804'. [ 1623.002471][T11564] netlink: 120 bytes leftover after parsing attributes in process `syz.3.16806'. [ 1625.523113][ T37] kauditd_printk_skb: 40 callbacks suppressed [ 1625.523132][ T37] audit: type=1326 audit(1796825650.963:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11601 comm="syz.3.16815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1625.523294][ T37] audit: type=1326 audit(1796825650.963:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11601 comm="syz.3.16815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1625.523576][ T37] audit: type=1326 audit(1796825650.963:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11601 comm="syz.3.16815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1625.524109][ T37] audit: type=1326 audit(1796825650.963:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11601 comm="syz.3.16815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1625.524279][ T37] audit: type=1326 audit(1796825650.963:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11601 comm="syz.3.16815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1625.524447][ T37] audit: type=1326 audit(1796825650.963:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11601 comm="syz.3.16815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1625.524597][ T37] audit: type=1326 audit(1796825650.963:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11601 comm="syz.3.16815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1625.524953][ T37] audit: type=1326 audit(1796825650.963:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11601 comm="syz.3.16815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1625.525091][ T37] audit: type=1326 audit(1796825650.963:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11601 comm="syz.3.16815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1625.525288][ T37] audit: type=1326 audit(1796825650.963:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11601 comm="syz.3.16815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1627.926425][T11651] netlink: 104 bytes leftover after parsing attributes in process `syz.2.16840'. [ 1632.655623][T11716] lo speed is unknown, defaulting to 1000 [ 1635.830397][ T5809] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1635.986357][ T5809] usb 5-1: config 0 has no interfaces? [ 1635.997466][ T5809] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1635.997495][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.997513][ T5809] usb 5-1: Product: syz [ 1635.997527][ T5809] usb 5-1: Manufacturer: syz [ 1635.997540][ T5809] usb 5-1: SerialNumber: syz [ 1636.039529][ T5809] usb 5-1: config 0 descriptor?? [ 1636.262044][ T5809] usb 5-1: USB disconnect, device number 19 [ 1637.040432][T11843] vlan0: entered promiscuous mode [ 1637.040455][T11843] bridge0: entered promiscuous mode [ 1637.040656][T11843] vlan0: entered allmulticast mode [ 1637.040670][T11843] bridge0: entered allmulticast mode [ 1640.656158][T11923] netlink: 76 bytes leftover after parsing attributes in process `syz.2.16959'. [ 1640.657695][T11923] netlink: 76 bytes leftover after parsing attributes in process `syz.2.16959'. [ 1640.860116][ T5809] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1641.240344][ T5809] usb 1-1: Using ep0 maxpacket: 16 [ 1641.244027][ T5809] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1641.245559][ T5809] usb 1-1: config 11 has too many interfaces: 183, using maximum allowed: 32 [ 1641.245584][ T5809] usb 1-1: config 11 has an invalid descriptor of length 72, skipping remainder of the config [ 1641.245602][ T5809] usb 1-1: config 11 has 0 interfaces, different from the descriptor's value: 183 [ 1641.248632][ T5809] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1641.248657][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.248674][ T5809] usb 1-1: Product: syz [ 1641.248686][ T5809] usb 1-1: Manufacturer: syz [ 1641.248698][ T5809] usb 1-1: SerialNumber: syz [ 1642.038426][T11959] netlink: 104 bytes leftover after parsing attributes in process `syz.4.16976'. [ 1642.300158][ T5809] usb 1-1: USB disconnect, device number 20 [ 1652.065184][T12140] lo speed is unknown, defaulting to 1000 [ 1654.088373][T12195] lo speed is unknown, defaulting to 1000 [ 1654.965943][T12221] binder: 12220:12221 ioctl ae01 0 returned -22 [ 1655.475674][T12238] lo speed is unknown, defaulting to 1000 [ 1655.820297][T12243] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 1657.615340][T12270] overlayfs: missing 'lowerdir' [ 1663.020361][ T37] kauditd_printk_skb: 32 callbacks suppressed [ 1663.020382][ T37] audit: type=1326 audit(1796825688.383:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12342 comm="syz.4.17129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1663.020431][ T37] audit: type=1326 audit(1796825688.383:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12342 comm="syz.4.17129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1663.020474][ T37] audit: type=1326 audit(1796825688.393:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12342 comm="syz.4.17129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1663.020517][ T37] audit: type=1326 audit(1796825688.393:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12342 comm="syz.4.17129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1663.020564][ T37] audit: type=1326 audit(1796825688.393:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12342 comm="syz.4.17129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1663.020605][ T37] audit: type=1326 audit(1796825688.403:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12342 comm="syz.4.17129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1663.093608][ T37] audit: type=1326 audit(1796825688.493:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12342 comm="syz.4.17129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1663.093713][ T37] audit: type=1326 audit(1796825688.493:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12342 comm="syz.4.17129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1663.964266][T12348] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1663.964309][T12348] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1663.964336][T12348] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1664.165082][T12359] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1665.588922][ C0] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1666.098584][T12375] netlink: 'syz.2.17134': attribute type 13 has an invalid length. [ 1669.118729][T12436] fuseblk: Bad value for 'fd' [ 1669.416358][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.416436][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1672.671492][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17190'. [ 1672.939721][T12520] netlink: 156 bytes leftover after parsing attributes in process `syz.4.17197'. [ 1673.570271][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 1674.930927][T12576] netlink: 'syz.0.17221': attribute type 1 has an invalid length. [ 1676.640795][T12636] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1676.864393][T12646] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1677.947066][ C0] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1678.606975][ T37] audit: type=1326 audit(1796825703.993:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12667 comm="syz.2.17265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1678.607347][ T37] audit: type=1326 audit(1796825703.993:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12667 comm="syz.2.17265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1678.607435][ T37] audit: type=1326 audit(1796825703.993:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12667 comm="syz.2.17265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1678.607529][ T37] audit: type=1326 audit(1796825704.003:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12667 comm="syz.2.17265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1678.607628][ T37] audit: type=1326 audit(1796825704.013:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12667 comm="syz.2.17265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1678.607916][ T37] audit: type=1326 audit(1796825704.023:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12667 comm="syz.2.17265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1679.144877][ T37] audit: type=1326 audit(1796825704.563:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12667 comm="syz.2.17265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1679.145277][ T37] audit: type=1326 audit(1796825704.563:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12667 comm="syz.2.17265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1679.641406][ T37] audit: type=1800 audit(1796825705.073:1899): pid=12685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.17270" name="nullb0" dev="tmpfs" ino=17606 res=0 errno=0 [ 1681.292444][T12743] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1681.725913][T12752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17303'. [ 1683.392015][T12773] overlayfs: missing 'lowerdir' [ 1688.616094][T12859] netlink: 104 bytes leftover after parsing attributes in process `syz.4.17348'. [ 1692.399333][T12938] syzkaller0: Caught tx_queue_len zero misconfig [ 1694.295236][T12983] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17400'. [ 1694.295264][T12983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17400'. [ 1694.327414][T12983] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17400'. [ 1694.327435][T12983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17400'. [ 1695.009731][T13041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17431'. [ 1695.009752][T13041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17431'. [ 1695.009778][T13041] netlink: 'syz.4.17431': attribute type 20 has an invalid length. [ 1695.072082][ T7296] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1695.072303][ T7296] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1695.072349][ T7296] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1695.072383][ T7296] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1695.075861][T13041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17431'. [ 1695.075879][T13041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17431'. [ 1695.075904][T13041] netlink: 'syz.4.17431': attribute type 20 has an invalid length. [ 1696.493039][T13096] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1696.493098][T13096] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1697.511844][ T37] audit: type=1326 audit(1796825722.953:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13124 comm="syz.4.17469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1697.512713][ T37] audit: type=1326 audit(1796825722.953:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13124 comm="syz.4.17469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1697.512761][ T37] audit: type=1326 audit(1796825722.953:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13124 comm="syz.4.17469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1697.514815][ T37] audit: type=1326 audit(1796825722.953:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13124 comm="syz.4.17469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1697.514863][ T37] audit: type=1326 audit(1796825722.953:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13124 comm="syz.4.17469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1699.234521][T13175] sit0: left promiscuous mode [ 1699.234547][T13175] sit0: left allmulticast mode [ 1699.272963][T13174] overlayfs: missing 'workdir' [ 1699.825057][T13205] 9pnet_fd: Insufficient options for proto=fd [ 1700.053836][T13222] veth0: entered promiscuous mode [ 1700.054468][T13222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17513'. [ 1700.243827][T13222] veth0 (unregistering): left promiscuous mode [ 1700.282893][T22096] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1700.433143][T22096] usb 3-1: config 0 has no interfaces? [ 1700.435959][T22096] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1700.435987][T22096] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.436006][T22096] usb 3-1: Product: syz [ 1700.436019][T22096] usb 3-1: Manufacturer: syz [ 1700.436033][T22096] usb 3-1: SerialNumber: syz [ 1700.443540][T22096] usb 3-1: config 0 descriptor?? [ 1701.516818][ T5809] usb 3-1: USB disconnect, device number 27 [ 1703.112000][T13293] tipc: Failed to remove unknown binding: 66,1,1/4:2249311392/2249311394 [ 1703.112039][T13293] tipc: Failed to remove unknown binding: 66,1,1/4:2249311392/2249311394 [ 1703.365398][T13305] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1703.365416][T13305] overlayfs: missing 'lowerdir' [ 1704.911627][T13354] overlayfs: overlapping lowerdir path [ 1705.166020][T13355] overlayfs: failed to verify upper (3584/file0, ino=21839, err=-116) [ 1705.166213][T13355] overlayfs: failed to verify index dir 'upper' xattr [ 1705.166250][T13355] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 1707.757122][ T37] audit: type=1326 audit(1796825733.183:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13367 comm="syz.3.17577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1707.757177][ T37] audit: type=1326 audit(1796825733.193:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13367 comm="syz.3.17577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1707.761388][ T37] audit: type=1326 audit(1796825733.203:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13367 comm="syz.3.17577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1707.761670][ T37] audit: type=1326 audit(1796825733.203:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13367 comm="syz.3.17577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1707.762083][ T37] audit: type=1326 audit(1796825733.203:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13367 comm="syz.3.17577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1707.762334][ T37] audit: type=1326 audit(1796825733.203:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13367 comm="syz.3.17577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1707.762617][ T37] audit: type=1326 audit(1796825733.203:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13367 comm="syz.3.17577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1707.762947][ T37] audit: type=1326 audit(1796825733.203:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13367 comm="syz.3.17577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1707.763294][ T37] audit: type=1326 audit(1796825733.203:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13367 comm="syz.3.17577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1707.767028][ T37] audit: type=1326 audit(1796825733.203:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13367 comm="syz.3.17577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc65d58f6c9 code=0x7ffc0000 [ 1708.139767][T13401] lo speed is unknown, defaulting to 1000 [ 1709.971814][T13436] lo speed is unknown, defaulting to 1000 [ 1710.994110][T13448] netlink: 'syz.0.17609': attribute type 3 has an invalid length. [ 1710.999910][T13448] netlink: 'syz.0.17609': attribute type 3 has an invalid length. [ 1716.242845][T13511] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1716.242856][T13511] overlayfs: missing 'lowerdir' [ 1717.039607][T13542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17652'. [ 1717.039623][T13542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17652'. [ 1717.039640][T13542] netlink: 'syz.0.17652': attribute type 20 has an invalid length. [ 1717.040780][T13542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17652'. [ 1717.040800][T13542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17652'. [ 1717.040823][T13542] netlink: 'syz.0.17652': attribute type 20 has an invalid length. [ 1719.570542][T22096] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1719.734521][T22096] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1719.734579][T22096] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1719.734631][T22096] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1719.734653][T22096] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.790390][T22096] usb 5-1: config 0 descriptor?? [ 1719.799662][T22096] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1720.028577][T22096] usb 5-1: USB disconnect, device number 20 [ 1720.346661][T13622] fuseblk: Unknown parameter '0xffffffffffffffff' [ 1723.836720][T13708] veth1_to_bond: entered allmulticast mode [ 1723.838769][T13708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17721'. [ 1724.286661][T13727] loop5: detected capacity change from 0 to 7 [ 1724.325525][T13708] bond0: (slave bond_slave_1): Releasing backup interface [ 1724.591131][T13708] bond_slave_1 (unregistering): left allmulticast mode [ 1725.463662][T13727] Dev loop5: unable to read RDB block 7 [ 1725.463718][T13727] loop5: unable to read partition table [ 1725.463971][T13727] loop5: partition table beyond EOD, truncated [ 1725.464023][T13727] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 1727.182239][T13758] overlayfs: missing 'lowerdir' [ 1728.124121][T13784] input: syz0 as /devices/virtual/input/input18 [ 1731.121334][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.121407][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.866217][T13885] netlink: 104 bytes leftover after parsing attributes in process `syz.2.17797'. [ 1735.877585][T13976] gfs2: error -5 reading superblock [ 1739.269938][T14039] overlayfs: failed to clone lowerpath [ 1739.426192][T14040] overlayfs: failed to clone lowerpath [ 1740.420809][T14056] overlayfs: failed to resolve './file0': -2 [ 1750.291738][T14168] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1751.280135][ T5809] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1751.292281][T14186] lo speed is unknown, defaulting to 1000 [ 1751.430386][ T5809] usb 1-1: Using ep0 maxpacket: 8 [ 1751.432952][ T5809] usb 1-1: config index 0 descriptor too short (expected 29970, got 18) [ 1751.432977][ T5809] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1751.432995][ T5809] usb 1-1: config 0 has no interfaces? [ 1751.437023][ T5809] usb 1-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 1751.437051][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.437070][ T5809] usb 1-1: Product: syz [ 1751.437083][ T5809] usb 1-1: Manufacturer: syz [ 1751.437095][ T5809] usb 1-1: SerialNumber: syz [ 1751.464572][ T5809] usb 1-1: config 0 descriptor?? [ 1751.754510][T22096] usb 1-1: USB disconnect, device number 21 [ 1752.158371][T14227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17932'. [ 1755.342778][T14289] netlink: 104 bytes leftover after parsing attributes in process `syz.2.17958'. [ 1755.507827][T14295] lo speed is unknown, defaulting to 1000 [ 1760.487664][T14349] overlayfs: missing 'lowerdir' [ 1762.163622][T14380] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1762.163641][T14380] overlayfs: missing 'lowerdir' [ 1768.990642][T14572] overlayfs: missing 'lowerdir' [ 1769.049120][T14576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18080'. [ 1774.193130][T14721] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18131'. [ 1774.600037][T14721] workqueue: Failed to create a rescuer kthread for wq "nbd63-recv": -EINTR [ 1774.604018][T14721] block (null): Could not allocate knbd recv work queue. [ 1775.201750][T14738] lo speed is unknown, defaulting to 1000 [ 1775.662448][T14721] nbd: failed to add new device [ 1779.332299][T14850] netlink: 104 bytes leftover after parsing attributes in process `syz.3.18192'. [ 1781.068316][T14878] netlink: 104 bytes leftover after parsing attributes in process `syz.4.18204'. [ 1781.461240][ T37] kauditd_printk_skb: 20 callbacks suppressed [ 1781.461260][ T37] audit: type=1800 audit(1796825806.883:1935): pid=14889 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.18210" name="blkio.bfq.group_wait_time" dev="overlay" ino=22429 res=0 errno=0 [ 1782.831449][ T37] audit: type=1326 audit(1796825808.233:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14911 comm="syz.4.18220" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcd00c5f6c9 code=0x0 [ 1784.202892][T14927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18224'. [ 1787.175210][ T37] audit: type=1326 audit(1796825812.613:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14963 comm="syz.2.18239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1787.175262][ T37] audit: type=1326 audit(1796825812.613:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14963 comm="syz.2.18239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1787.176424][ T37] audit: type=1326 audit(1796825812.613:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14963 comm="syz.2.18239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1787.176472][ T37] audit: type=1326 audit(1796825812.613:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14963 comm="syz.2.18239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1787.176513][ T37] audit: type=1326 audit(1796825812.613:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14963 comm="syz.2.18239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1787.177719][ T37] audit: type=1326 audit(1796825812.613:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14963 comm="syz.2.18239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1787.177765][ T37] audit: type=1326 audit(1796825812.613:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14963 comm="syz.2.18239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1787.177807][ T37] audit: type=1326 audit(1796825812.613:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14963 comm="syz.2.18239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1787.182460][ T37] audit: type=1326 audit(1796825812.613:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14963 comm="syz.2.18239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1787.182712][ T37] audit: type=1326 audit(1796825812.613:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14963 comm="syz.2.18239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1788.535318][ T3640] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1788.608654][T14994] bridge_slave_1: entered allmulticast mode [ 1792.294705][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.294803][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1794.083962][T15089] 9pnet_fd: Insufficient options for proto=fd [ 1794.220549][T14266] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1796.473354][T15133] lo speed is unknown, defaulting to 1000 [ 1797.939035][T15154] lo speed is unknown, defaulting to 1000 [ 1799.330883][T14266] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1799.400432][T15199] netlink: 104 bytes leftover after parsing attributes in process `syz.3.18329'. [ 1801.105717][T15231] overlayfs: missing 'lowerdir' [ 1802.424128][T15259] netlink: 104 bytes leftover after parsing attributes in process `syz.4.18357'. [ 1803.371751][T15278] lo speed is unknown, defaulting to 1000 [ 1803.873323][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 1803.873339][ T37] audit: type=1326 audit(1796825829.313:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15300 comm="syz.2.18374" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbcf9e0f6c9 code=0x0 [ 1805.090551][T14504] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1808.639628][T15356] netlink: 104 bytes leftover after parsing attributes in process `syz.3.18398'. [ 1810.232958][ T7296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1814.341877][ T61] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1814.434108][T15474] bridge_slave_0: left promiscuous mode [ 1814.434393][T15474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1814.486329][T15478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18443'. [ 1814.513650][T15474] bridge_slave_1: left promiscuous mode [ 1814.514039][T15474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1814.732127][T15474] bond0: (slave bond_slave_0): Releasing backup interface [ 1814.771895][T15474] bond_slave_0: left promiscuous mode [ 1814.814967][T15474] bond0: (slave bond_slave_1): Releasing backup interface [ 1814.906357][T15474] bond_slave_1: left promiscuous mode [ 1815.020526][T15474] team0: Port device team_slave_0 removed [ 1815.074713][T15474] team0: Port device team_slave_1 removed [ 1815.078041][T15474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1815.078068][T15474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1815.115488][T15474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1815.115518][T15474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1815.168278][T15474] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1816.657730][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1817.577237][T15520] lo speed is unknown, defaulting to 1000 [ 1817.852356][T15519] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1819.364776][T15554] fuseblk: Unknown parameter '0xffffffffffffffff' [ 1819.478721][T15546] 8021q: adding VLAN 0 to HW filter on device team0 [ 1819.550398][T15546] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1819.661367][T15553] lo speed is unknown, defaulting to 1000 [ 1821.717624][T15600] netlink: 104 bytes leftover after parsing attributes in process `syz.4.18494'. [ 1821.734422][T15596] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1822.263651][T15607] overlayfs: missing 'lowerdir' [ 1822.834590][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1825.314347][T15653] netlink: 104 bytes leftover after parsing attributes in process `syz.2.18518'. [ 1825.677793][T15663] netlink: 'syz.0.18521': attribute type 4 has an invalid length. [ 1825.677814][T15663] netlink: 'syz.0.18521': attribute type 5 has an invalid length. [ 1825.677826][T15663] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.18521'. [ 1827.120152][T15678] netlink: 'syz.2.18528': attribute type 28 has an invalid length. [ 1827.120174][T15678] netlink: 'syz.2.18528': attribute type 4 has an invalid length. [ 1827.120187][T15678] netlink: 136 bytes leftover after parsing attributes in process `syz.2.18528'. [ 1827.815358][T15684] fuseblk: Unknown parameter '0xffffffffffffffff' [ 1827.913860][T15686] netlink: 104 bytes leftover after parsing attributes in process `syz.4.18530'. [ 1828.130653][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1828.265963][T15699] netlink: 104 bytes leftover after parsing attributes in process `syz.0.18535'. [ 1834.313360][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1835.995105][T15852] dummy0: entered allmulticast mode [ 1835.995946][T15851] dummy0: left allmulticast mode [ 1838.036388][T15883] tipc: Enabling of bearer rejected, already enabled [ 1839.454645][ C1] vkms_vblank_simulate: vblank timer overrun [ 1840.053030][ C1] vkms_vblank_simulate: vblank timer overrun [ 1840.224260][ T7296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1840.966344][ C1] vkms_vblank_simulate: vblank timer overrun [ 1842.004641][T15926] netlink: 'syz.0.18631': attribute type 4 has an invalid length. [ 1842.015762][T15926] netlink: 'syz.0.18631': attribute type 4 has an invalid length. [ 1844.044918][ C1] vkms_vblank_simulate: vblank timer overrun [ 1846.110400][T14504] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1847.176807][T15964] gfs2: gfs2 mount does not exist [ 1849.870687][ T37] audit: type=1800 audit(1796825875.263:1952): pid=15996 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.18656" name="blkio.bfq.group_wait_time" dev="overlay" ino=23367 res=0 errno=0 [ 1851.370791][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1851.530300][T16021] input: syz0 as /devices/virtual/input/input19 [ 1853.187977][ T37] audit: type=1326 audit(1796825878.113:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16029 comm="syz.2.18666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1853.188904][ T37] audit: type=1326 audit(1796825878.113:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16029 comm="syz.2.18666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1853.189228][ T37] audit: type=1326 audit(1796825878.133:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16029 comm="syz.2.18666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1853.189546][ T37] audit: type=1326 audit(1796825878.133:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16029 comm="syz.2.18666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1853.189753][ T37] audit: type=1326 audit(1796825878.143:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16029 comm="syz.2.18666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1853.200184][ T37] audit: type=1326 audit(1796825878.153:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16029 comm="syz.2.18666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1853.200643][ T37] audit: type=1326 audit(1796825878.153:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16029 comm="syz.2.18666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1853.201575][ T37] audit: type=1326 audit(1796825878.153:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16029 comm="syz.2.18666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1853.201895][ T37] audit: type=1326 audit(1796825878.163:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16029 comm="syz.2.18666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1853.737722][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.737802][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.184826][T16111] netlink: 'syz.4.18692': attribute type 3 has an invalid length. [ 1858.192313][T16111] netlink: 'syz.4.18692': attribute type 3 has an invalid length. [ 1859.297941][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 1859.297961][ T37] audit: type=1326 audit(1796825884.723:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16109 comm="syz.0.18694" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f985585f6c9 code=0x0 [ 1860.974047][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1863.802300][T16174] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1863.802316][T16174] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1863.802355][T16174] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1866.692689][ C1] vkms_vblank_simulate: vblank timer overrun [ 1866.694319][ T1482] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1867.313957][ C1] vkms_vblank_simulate: vblank timer overrun [ 1867.940042][ C1] vkms_vblank_simulate: vblank timer overrun [ 1869.084999][T16204] 9pnet_fd: Insufficient options for proto=fd [ 1872.667137][ T1482] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1873.331192][T16219] smc: net device ip_vti0 applied user defined pnetid SYZ0 [ 1877.429278][T16256] tipc: Enabling of bearer rejected, already enabled [ 1878.191518][T14266] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1880.947540][T16275] lo speed is unknown, defaulting to 1000 [ 1882.955374][T16294] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1882.955409][T16294] overlayfs: failed to set xattr on upper [ 1882.955418][T16294] overlayfs: ...falling back to redirect_dir=nofollow. [ 1882.955425][T16294] overlayfs: ...falling back to index=off. [ 1882.955432][T16294] overlayfs: ...falling back to uuid=null. [ 1883.167487][T16295] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 1886.293284][T14266] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1888.209733][T16310] tty tty24: ldisc open failed (-12), clearing slot 23 [ 1889.429472][T16326] veth0_vlan: entered allmulticast mode [ 1889.612907][T16327] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1892.449417][ T1482] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1896.309241][T16379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18774'. [ 1896.472672][T16379] vlan0: entered allmulticast mode [ 1898.029314][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1898.964869][T16396] bridge0: port 1(gretap0) entered blocking state [ 1898.971430][T16396] bridge0: port 1(gretap0) entered disabled state [ 1898.985331][T16396] gretap0: entered allmulticast mode [ 1899.062545][T16396] gretap0: entered promiscuous mode [ 1899.146045][T16396] bridge0: port 1(gretap0) entered blocking state [ 1899.150320][T16396] bridge0: port 1(gretap0) entered forwarding state [ 1899.567132][T16399] netlink: 48 bytes leftover after parsing attributes in process `syz.2.18781'. [ 1900.149431][T16401] block device autoloading is deprecated and will be removed. [ 1901.368369][ C1] vkms_vblank_simulate: vblank timer overrun [ 1901.774001][ C1] vkms_vblank_simulate: vblank timer overrun [ 1901.947398][ C1] vkms_vblank_simulate: vblank timer overrun [ 1902.878314][ C1] vkms_vblank_simulate: vblank timer overrun [ 1903.086461][ C1] vkms_vblank_simulate: vblank timer overrun [ 1903.625104][ C1] vkms_vblank_simulate: vblank timer overrun [ 1903.658498][ T7296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1904.925067][ C1] vkms_vblank_simulate: vblank timer overrun [ 1905.207463][ C1] vkms_vblank_simulate: vblank timer overrun [ 1905.381934][ T37] audit: type=1326 audit(1796825930.823:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16438 comm="syz.4.18798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1905.381989][ T37] audit: type=1326 audit(1796825930.823:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16438 comm="syz.4.18798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1905.382177][ T37] audit: type=1326 audit(1796825930.823:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16438 comm="syz.4.18798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1905.382356][ T37] audit: type=1326 audit(1796825930.823:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16438 comm="syz.4.18798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1905.383495][ T37] audit: type=1326 audit(1796825930.823:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16438 comm="syz.4.18798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1905.383524][ T37] audit: type=1326 audit(1796825930.823:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16438 comm="syz.4.18798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1905.383547][ T37] audit: type=1326 audit(1796825930.823:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16438 comm="syz.4.18798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1905.383570][ T37] audit: type=1326 audit(1796825930.823:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16438 comm="syz.4.18798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1905.387870][ T37] audit: type=1326 audit(1796825930.823:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16438 comm="syz.4.18798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1905.388450][ T37] audit: type=1326 audit(1796825930.823:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16438 comm="syz.4.18798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1906.127189][ C1] vkms_vblank_simulate: vblank timer overrun [ 1906.367840][ C1] vkms_vblank_simulate: vblank timer overrun [ 1907.121583][T16467] cgroup: noprefix used incorrectly [ 1908.790383][T16485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1908.793582][T16485] 8021q: adding VLAN 0 to HW filter on device team0 [ 1908.801998][T16485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1910.190224][ T159] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1910.466371][T16485] bridge_slave_1: left allmulticast mode [ 1910.482492][T16485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1910.485586][T16485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1910.491479][T16485] veth1_to_hsr: entered promiscuous mode [ 1910.494027][T16485] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1910.494048][T16485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1910.772561][T16485] net veth1_virt_wifi virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1910.774980][T16485] veth1_macvtap: left promiscuous mode [ 1910.776651][T16485] veth0_macvtap: left promiscuous mode [ 1910.778188][T16500] tmpfs: Bad value for 'mpol' [ 1910.778296][T16485] veth1_macvtap: entered promiscuous mode [ 1910.797468][T16485] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1910.806222][T16485] sit1: left allmulticast mode [ 1910.840695][T16485] sit2: left allmulticast mode [ 1910.844302][T16485] geneve2: left promiscuous mode [ 1910.844325][T16485] geneve2: left allmulticast mode [ 1910.886995][T16485] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1910.892211][T16485] macvlan0: left allmulticast mode [ 1910.892232][T16485] veth1_to_hsr: left allmulticast mode [ 1910.901479][T16485] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1910.904819][T16485] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1910.906984][T16485] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1910.911010][T16485] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1910.915469][T16485] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1911.063897][T12709] lo speed is unknown, defaulting to 1000 [ 1911.063929][T12709] syz0: Port: 1 Link ACTIVE [ 1911.236257][ T3640] bridge0: port 1(veth7) entered blocking state [ 1911.236411][ T3640] bridge0: port 1(veth7) entered forwarding state [ 1911.239023][ T3640] bridge0: port 2(veth9) entered blocking state [ 1911.239149][ T3640] bridge0: port 2(veth9) entered forwarding state [ 1911.293738][ T1482] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1911.293773][ T1482] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.331524][ T1482] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1911.331559][ T1482] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.331742][ T1482] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1911.331768][ T1482] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.331952][ T1482] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1911.331978][ T1482] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.569816][ T37] kauditd_printk_skb: 30 callbacks suppressed [ 1911.569834][ T37] audit: type=1804 audit(1796825937.003:2011): pid=16514 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.18824" name="bus" dev="ramfs" ino=212586 res=1 errno=0 [ 1911.741774][ T3640] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1911.742158][ T3640] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1911.772383][T12709] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1911.820329][T12709] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1912.360306][T14213] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1915.177146][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.177243][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.933456][T16601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18862'. [ 1916.050283][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1917.263214][T16641] overlayfs: failed to clone upperpath [ 1917.311185][T16646] binder: Binderfs stats mode cannot be changed during a remount [ 1921.213960][T16676] netlink: 272 bytes leftover after parsing attributes in process `syz.2.18892'. [ 1921.480153][ T5809] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1921.640253][ T5809] usb 1-1: Using ep0 maxpacket: 16 [ 1921.721437][ T5809] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1921.721473][ T5809] usb 1-1: config 0 has no interface number 0 [ 1921.723568][ T5809] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1921.723584][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1921.723594][ T5809] usb 1-1: Product: syz [ 1921.723600][ T5809] usb 1-1: Manufacturer: syz [ 1921.723607][ T5809] usb 1-1: SerialNumber: syz [ 1921.727393][ T5809] usb 1-1: config 0 descriptor?? [ 1921.744644][ T5809] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1921.936009][ T5809] gspca_spca1528: reg_w err -71 [ 1921.960417][ T5809] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 1921.966879][ T5809] usb 1-1: USB disconnect, device number 22 [ 1922.480930][ T37] audit: type=1326 audit(1796825947.923:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16719 comm="syz.4.18913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1922.480987][ T37] audit: type=1326 audit(1796825947.923:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16719 comm="syz.4.18913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1922.492970][ T37] audit: type=1326 audit(1796825947.933:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16719 comm="syz.4.18913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1922.500127][ T37] audit: type=1326 audit(1796825947.933:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16719 comm="syz.4.18913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1922.500176][ T37] audit: type=1326 audit(1796825947.933:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16719 comm="syz.4.18913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1922.643606][T16727] vlan0: left promiscuous mode [ 1922.643630][T16727] bridge0: left promiscuous mode [ 1922.643825][T16727] vlan0: left allmulticast mode [ 1922.643839][T16727] bridge0: left allmulticast mode [ 1922.770141][T14213] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1922.836527][T16739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18921'. [ 1922.927072][T14213] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1922.927101][T14213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1922.927121][T14213] usb 3-1: Product: syz [ 1922.927134][T14213] usb 3-1: Manufacturer: syz [ 1922.927147][T14213] usb 3-1: SerialNumber: syz [ 1923.285499][T14213] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1923.611462][T16759] ip_vti0: left promiscuous mode [ 1923.632391][T16759] ip6_vti0: left promiscuous mode [ 1923.635039][T16759] ip6_vti0: left allmulticast mode [ 1923.998628][T16759] bridge_slave_1: left allmulticast mode [ 1924.065065][T16759] bond1: left promiscuous mode [ 1924.065089][T16759] bond1: left allmulticast mode [ 1924.067257][T16759] veth3: left promiscuous mode [ 1924.073670][T16759] vlan3: left allmulticast mode [ 1924.073688][T16759] bridge_slave_0: left allmulticast mode [ 1924.220905][ T12] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1924.221192][ T12] bond1: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 1924.221213][ T12] bond1: (slave veth3): making interface the new active one [ 1924.225439][ T12] bond1: active interface up! [ 1924.438646][T10059] kernel read not supported for file /8608/net/netstat (pid: 10059 comm: kworker/0:0) [ 1924.494028][T12709] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1924.794458][ C1] usb 3-1: ath: unknown panic pattern! [ 1925.412715][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1925.940369][T12709] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1925.941302][T12709] ath9k_htc: Failed to initialize the device [ 1925.997722][T16797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18950'. [ 1926.251878][ T37] audit: type=1326 audit(1796825951.693:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16807 comm="syz.0.18955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1926.251930][ T37] audit: type=1326 audit(1796825951.693:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16807 comm="syz.0.18955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1926.256744][ T37] audit: type=1326 audit(1796825951.693:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16807 comm="syz.0.18955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1926.256792][ T37] audit: type=1326 audit(1796825951.693:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16807 comm="syz.0.18955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1926.256834][ T37] audit: type=1326 audit(1796825951.693:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16807 comm="syz.0.18955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985585f6c9 code=0x7ffc0000 [ 1926.772843][T16818] macvlan1: entered promiscuous mode [ 1926.773099][T16818] macvlan1: entered allmulticast mode [ 1926.773113][T16818] veth1_vlan: entered allmulticast mode [ 1926.940864][T14213] usb 3-1: USB disconnect, device number 28 [ 1926.988372][T14213] usb 3-1: ath9k_htc: USB layer deinitialized [ 1926.998395][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 1928.923724][T16889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18993'. [ 1928.923777][T16889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1931.662025][T16913] ip6_vti0: left promiscuous mode [ 1931.662052][T16913] ip6_vti0: left allmulticast mode [ 1932.606784][T16922] netlink: 'syz.0.19006': attribute type 1 has an invalid length. [ 1932.606807][T16922] netlink: 'syz.0.19006': attribute type 11 has an invalid length. [ 1932.606821][T16922] netlink: 224 bytes leftover after parsing attributes in process `syz.0.19006'. [ 1932.754145][T16913] net veth1_virt_wifi virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1932.756926][T16913] veth0_vlan: left allmulticast mode [ 1932.860431][T16927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1932.890643][T16913] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1932.908217][T16913] sit3: left allmulticast mode [ 1932.910766][T16913] syzkaller0: left promiscuous mode [ 1932.910789][T16913] syzkaller0: left allmulticast mode [ 1932.914063][T16913] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1932.915003][T16913] : entered promiscuous mode [ 1932.915032][T16913] bond0: entered promiscuous mode [ 1932.915478][T16913] macvtap1: left promiscuous mode [ 1932.915491][T16913] bond0: left promiscuous mode [ 1932.915860][T16913] macvtap1: left allmulticast mode [ 1932.923259][T16913] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1932.925554][T16913] vlan0: left allmulticast mode [ 1932.925572][T16913] bond0: left allmulticast mode [ 1932.925583][T16913] : left allmulticast mode [ 1933.159836][T16933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1933.280062][ T37] audit: type=1326 audit(1796825958.713:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16935 comm="syz.2.19012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1933.280112][ T37] audit: type=1326 audit(1796825958.713:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16935 comm="syz.2.19012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1933.317678][ T37] audit: type=1326 audit(1796825958.753:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16935 comm="syz.2.19012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1933.317919][ T37] audit: type=1326 audit(1796825958.753:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16935 comm="syz.2.19012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1933.318069][ T37] audit: type=1326 audit(1796825958.753:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16935 comm="syz.2.19012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf9e0f6c9 code=0x7ffc0000 [ 1933.749591][T16950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1933.963917][T16954] netlink: zone id is out of range [ 1934.330516][T16960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1935.002381][T16979] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19036'. [ 1936.207840][T16994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1936.273337][T16997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19043'. [ 1936.273371][T16997] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19043'. [ 1936.310327][T16997] ip6gretap0: entered allmulticast mode [ 1936.996267][T17023] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1937.100164][T14213] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1937.261610][T14213] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1937.263135][T14213] usb 1-1: config 6 has an invalid interface number: 200 but max is 0 [ 1937.263158][T14213] usb 1-1: config 6 has no interface number 0 [ 1937.263205][T14213] usb 1-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1937.263230][T14213] usb 1-1: config 6 interface 200 has no altsetting 0 [ 1937.266782][T14213] usb 1-1: string descriptor 0 read error: -22 [ 1937.266941][T14213] usb 1-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 1937.266963][T14213] usb 1-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 1937.296358][T14213] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 1937.602706][T14213] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1937.609343][T14213] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 1937.609448][T14213] usb 1-1: media controller created [ 1937.705538][T14213] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1937.839858][T14213] dvb-usb: bulk message failed: -71 (6/0) [ 1937.848991][T14213] dvb-usb: bulk message failed: -71 (6/0) [ 1937.849134][T14213] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 1937.857228][T14213] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21 [ 1937.877864][T14213] dvb-usb: schedule remote query interval to 150 msecs. [ 1937.877894][T14213] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 1937.918054][T14213] usb 1-1: USB disconnect, device number 23 [ 1938.022467][T17039] Driver unsupported XDP return value 0 on prog (id 779) dev N/A, expect packet loss! [ 1938.383534][T14213] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 1938.837149][T17114] netlink: 'syz.0.19099': attribute type 1 has an invalid length. [ 1939.133353][T17130] netlink: 'syz.2.19105': attribute type 1 has an invalid length. [ 1939.133375][T17130] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19105'. [ 1939.336897][T17128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19104'. [ 1939.336923][T17128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1942.642609][T17199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19138'. [ 1942.642637][T17199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19138'. [ 1943.922895][T17249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19161'. [ 1943.922919][T17249] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19161'. [ 1943.960177][T14213] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1943.970998][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1944.116698][T14213] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1944.118242][T14213] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1944.137199][T14213] usb 3-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.40 [ 1944.137229][T14213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.137248][T14213] usb 3-1: Product: syz [ 1944.137261][T14213] usb 3-1: Manufacturer: syz [ 1944.137274][T14213] usb 3-1: SerialNumber: syz [ 1944.190745][T17257] netlink: 60 bytes leftover after parsing attributes in process `syz.4.19165'. [ 1944.422275][T14213] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input22 [ 1944.457367][ T5154] bcm5974 3-1:1.0: could not read from device [ 1944.613940][T14213] usb 3-1: USB disconnect, device number 29 [ 1945.133505][T17279] lo speed is unknown, defaulting to 1000 [ 1946.936957][T17337] libceph: resolve '0..' (ret=-3): failed [ 1947.767719][T17370] netlink: 666 bytes leftover after parsing attributes in process `syz.4.19214'. [ 1950.784920][T17420] openvswitch: netlink: Message has 1 unknown bytes. [ 1950.784957][T17420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1954.038056][T17491] bond3: Removing last arp target with arp_interval on [ 1954.052120][T17491] bond3: entered allmulticast mode [ 1954.054102][T17491] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1954.243907][T17498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19275'. [ 1954.483642][T17507] openvswitch: netlink: Message has 4 unknown bytes. [ 1956.220216][T12709] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 1956.372492][T12709] usb 1-1: config 0 has an invalid interface number: 207 but max is 0 [ 1956.372520][T12709] usb 1-1: config 0 has no interface number 0 [ 1956.375469][T12709] usb 1-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 1956.375496][T12709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1956.375514][T12709] usb 1-1: Product: syz [ 1956.375527][T12709] usb 1-1: Manufacturer: syz [ 1956.375540][T12709] usb 1-1: SerialNumber: syz [ 1956.437053][T12709] usb 1-1: config 0 descriptor?? [ 1956.449829][T12709] qmi_wwan 1-1:0.207: bogus CDC Union: master=0, slave=1 [ 1956.649308][T12709] qmi_wwan 1-1:0.207: probe with driver qmi_wwan failed with error -22 [ 1956.862050][T12709] usb 1-1: USB disconnect, device number 24 [ 1957.332799][T17579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19307'. [ 1957.614693][T17584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19313'. [ 1958.385622][T17600] usb usb8: usbfs: process 17600 (syz.0.19320) did not claim interface 0 before use [ 1958.971430][ T37] audit: type=1326 audit(1796825984.413:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17614 comm="syz.4.19328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1958.971482][ T37] audit: type=1326 audit(1796825984.413:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17614 comm="syz.4.19328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1959.024468][ T37] audit: type=1326 audit(1796825984.463:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17614 comm="syz.4.19328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1959.024519][ T37] audit: type=1326 audit(1796825984.463:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17614 comm="syz.4.19328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1959.024560][ T37] audit: type=1326 audit(1796825984.463:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17614 comm="syz.4.19328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd00c5f6c9 code=0x7ffc0000 [ 1959.039770][T17619] C: renamed from team_slave_0 (while UP) [ 1959.143150][T17619] netlink: 'syz.0.19329': attribute type 1 has an invalid length. [ 1959.143173][T17619] netlink: 152 bytes leftover after parsing attributes in process `syz.0.19329'. [ 1959.143286][T17619] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1961.135991][T17670] syz.0.19350 (17670): /proc/17669/oom_adj is deprecated, please use /proc/17669/oom_score_adj instead. [ 1961.447602][T17679] netlink: 200 bytes leftover after parsing attributes in process `syz.0.19353'. [ 1961.607122][T17687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1961.859038][ C0] vkms_vblank_simulate: vblank timer overrun [ 1961.918167][T17706] netlink: 'syz.3.19362': attribute type 4 has an invalid length. [ 1962.252472][T17728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19379'. [ 1962.318404][ T37] audit: type=1326 audit(1796825987.753:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17732 comm="syz.0.19380" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f985585f6c9 code=0x0 [ 1962.430340][ T5809] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1962.590149][ T5809] usb 3-1: Using ep0 maxpacket: 16 [ 1962.593146][ T5809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1962.593177][ T5809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1962.593216][ T5809] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1962.593237][ T5809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1962.599568][ T5809] usb 3-1: config 0 descriptor?? [ 1963.041463][ T5809] corsair 0003:1B1C:1B02.0006: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 1963.221376][ T5809] corsair 0003:1B1C:1B02.0006: Failed to get K90 initial state (error -71). [ 1963.233471][ T5809] usb 3-1: USB disconnect, device number 30 [ 1963.472772][T17774] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19398'. [ 1963.951092][T17785] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19404'. [ 1963.961558][ C0] vkms_vblank_simulate: vblank timer overrun [ 1964.159489][ C0] vkms_vblank_simulate: vblank timer overrun [ 1964.868074][ C0] vkms_vblank_simulate: vblank timer overrun [ 1965.963697][ C0] vkms_vblank_simulate: vblank timer overrun [ 1966.044844][T17827] netlink: 44 bytes leftover after parsing attributes in process `syz.0.19419'. [ 1966.044872][T17827] netlink: 43 bytes leftover after parsing attributes in process `syz.0.19419'. [ 1966.044888][T17827] netlink: 'syz.0.19419': attribute type 6 has an invalid length. [ 1966.044901][T17827] netlink: 'syz.0.19419': attribute type 5 has an invalid length. [ 1966.044914][T17827] netlink: 43 bytes leftover after parsing attributes in process `syz.0.19419'. [ 1966.186422][T17832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1966.341590][ C0] vkms_vblank_simulate: vblank timer overrun [ 1968.622224][T17891] netlink: 32 bytes leftover after parsing attributes in process `syz.3.19446'. [ 1968.770178][T12709] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 1968.922906][T12709] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1968.922936][T12709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1968.928107][T12709] usb 1-1: config 0 descriptor?? [ 1968.933343][T12709] cp210x 1-1:0.0: cp210x converter detected [ 1969.935941][T12709] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1969.939545][T12709] usb 1-1: USB disconnect, device number 25 [ 1969.953534][T12709] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1970.100853][T12709] cp210x 1-1:0.0: device disconnected [ 1970.671810][T12709] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 1970.827168][T12709] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1970.827196][T12709] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1970.827247][T12709] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1970.827269][T12709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1970.869744][T12709] usb 3-1: config 0 descriptor?? [ 1970.884889][T12709] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1970.884940][T12709] dvb-usb: bulk message failed: -22 (3/0) [ 1970.909896][T12709] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1970.919601][T12709] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1970.919661][T12709] usb 3-1: media controller created [ 1970.941755][T12709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1970.959585][T12709] dvb-usb: bulk message failed: -22 (6/0) [ 1970.959667][T12709] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1970.980875][T12709] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input23 [ 1970.984056][T12709] dvb-usb: schedule remote query interval to 150 msecs. [ 1970.984077][T12709] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1971.129654][T17938] dvb-usb: bulk message failed: -22 (2/0) [ 1971.129843][T17938] dvb-usb: bulk message failed: -22 (4/0) [ 1971.140099][ T5809] usb 3-1: USB disconnect, device number 31 [ 1971.324421][ T5809] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1971.620386][T10059] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 1971.774276][T10059] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1971.774328][T10059] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1971.774355][T10059] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1971.774376][T10059] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1971.774416][T10059] usb 1-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 1971.774438][T10059] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1971.788646][T10059] usb 1-1: config 0 descriptor?? [ 1972.237351][T10059] asus 0003:048D:CE50.0007: unknown main item tag 0x0 [ 1972.237387][T10059] asus 0003:048D:CE50.0007: unknown main item tag 0x0 [ 1972.237413][T10059] asus 0003:048D:CE50.0007: unknown main item tag 0x0 [ 1972.237438][T10059] asus 0003:048D:CE50.0007: unknown main item tag 0x0 [ 1972.237463][T10059] asus 0003:048D:CE50.0007: unknown main item tag 0x0 [ 1972.250248][T10059] asus 0003:048D:CE50.0007: hidraw0: USB HID v0.00 Device [HID 048d:ce50] on usb-dummy_hcd.0-1/input0 [ 1972.250279][T10059] asus 0003:048D:CE50.0007: Asus input not registered [ 1972.253309][T10059] asus 0003:048D:CE50.0007: probe with driver asus failed with error -12 [ 1972.426186][T10059] usb 1-1: USB disconnect, device number 26 [ 1972.479082][T18004] fido_id[18004]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1973.070179][T12709] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1973.077652][T18041] netlink: 'syz.4.19516': attribute type 1 has an invalid length. [ 1973.226632][T12709] usb 3-1: Using ep0 maxpacket: 32 [ 1973.228878][T12709] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1973.228901][T12709] usb 3-1: config 0 has no interface number 0 [ 1973.264234][T12709] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1973.264272][T12709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.264291][T12709] usb 3-1: Product: syz [ 1973.264304][T12709] usb 3-1: Manufacturer: syz [ 1973.264317][T12709] usb 3-1: SerialNumber: syz [ 1973.269838][T12709] usb 3-1: config 0 descriptor?? [ 1973.316168][T12709] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1973.316207][T12709] usb 3-1: selecting invalid altsetting 1 [ 1973.316225][T12709] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1973.354935][T12709] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1973.355406][T12709] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1973.355458][T12709] usb 3-1: media controller created [ 1973.413022][T12709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1974.258109][T18065] batadv_slave_1: entered promiscuous mode [ 1974.530760][T12709] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1974.530832][T12709] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1974.534379][T18026] usb 3-1: dvb_usb_ce6230: I2C read not implemented [ 1974.561684][T12709] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1974.630927][T12709] usb 3-1: USB disconnect, device number 32 [ 1974.640758][T10059] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1974.790583][T10059] usb 1-1: Using ep0 maxpacket: 32 [ 1974.792876][T10059] usb 1-1: config 0 has an invalid interface number: 247 but max is 0 [ 1974.792902][T10059] usb 1-1: config 0 has no interface number 0 [ 1974.795667][T10059] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1974.795695][T10059] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1974.795714][T10059] usb 1-1: Product: syz [ 1974.795728][T10059] usb 1-1: Manufacturer: syz [ 1974.814890][T10059] usb 1-1: config 0 descriptor?? [ 1974.961488][T18097] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1974.963155][ T61] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1974.973812][T18097] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1975.819667][T18130] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19549'. [ 1976.174035][ T5809] usb 1-1: USB disconnect, device number 27 [ 1976.999850][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.999920][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.075720][T18155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19571'. [ 1977.785119][T18196] netlink: 816 bytes leftover after parsing attributes in process `syz.4.19587'. [ 1978.529588][T18235] xt_l2tp: unknown flags: 51 [ 1979.837055][ C0] vkms_vblank_simulate: vblank timer overrun [ 1979.878256][T18274] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1980.736506][ C0] vkms_vblank_simulate: vblank timer overrun [ 1980.873827][ C0] vkms_vblank_simulate: vblank timer overrun [ 1981.795560][ C0] vkms_vblank_simulate: vblank timer overrun [ 1982.150822][T18324] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 1982.152124][T18323] IPVS: stopping backup sync thread 18324 ... [ 1982.660157][T14213] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 1983.056576][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1983.068383][T18326] orangefs_mount: mount request failed with -4 [ 1983.070254][T14213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1983.070298][T14213] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1983.070319][T14213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1983.075975][T14213] usb 1-1: config 0 descriptor?? [ 1983.529408][T14213] nintendo 0003:057E:200E.0008: unknown main item tag 0x0 [ 1983.529445][T14213] nintendo 0003:057E:200E.0008: unknown main item tag 0x0 [ 1983.557038][T14213] nintendo 0003:057E:200E.0008: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.0-1/input0 [ 1983.632435][T14213] nintendo 0003:057E:200E.0008: Failed charging grip handshake [ 1983.632460][T14213] nintendo 0003:057E:200E.0008: Failed to initialize controller; ret=-110 [ 1983.660965][T14213] nintendo 0003:057E:200E.0008: probe - fail = -110 [ 1983.661151][T14213] nintendo 0003:057E:200E.0008: probe with driver nintendo failed with error -110 [ 1983.740762][ T5809] usb 1-1: USB disconnect, device number 28 [ 1983.762395][T18378] fido_id[18378]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:057E:200E.0008/report_descriptor': No such device [ 1984.199333][T18404] netlink: 96 bytes leftover after parsing attributes in process `syz.2.19671'. [ 1984.224499][T18404] vlan1: entered allmulticast mode [ 1984.224521][T18404] gretap0: entered allmulticast mode [ 1985.004413][T18437] netlink: 104 bytes leftover after parsing attributes in process `syz.4.19686'. [ 1985.470507][T18440] netlink: 104 bytes leftover after parsing attributes in process `syz.4.19686'. [ 1985.767122][T18454] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.19689'. [ 1985.767497][T18454] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 1986.017035][ T37] audit: type=1326 audit(1796826011.453:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18467 comm="syz.4.19701" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcd00c5f6c9 code=0x0 [ 1986.191713][T18478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19704'. [ 1986.919255][T18496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19713'. [ 1987.170590][T18506] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1987.900686][T18543] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1988.318559][T18564] macsec1: entered promiscuous mode [ 1988.318583][T18564] macsec0: entered promiscuous mode [ 1988.681003][T18581] 9pnet_fd: Insufficient options for proto=fd [ 1989.802332][T18597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1992.200161][ T5809] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1992.350125][ T5809] usb 3-1: Using ep0 maxpacket: 16 [ 1992.354298][ T5809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1992.354331][ T5809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1992.354371][ T5809] usb 3-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 1992.354394][ T5809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1992.406329][ T5809] usb 3-1: config 0 descriptor?? [ 1992.511134][T18664] netlink: 44 bytes leftover after parsing attributes in process `syz.3.19792'. [ 1992.511392][T18664] tunl0: Caught tx_queue_len zero misconfig [ 1992.834240][ T5809] logitech 0003:046D:C286.0009: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.2-1/input0 [ 1992.834287][ T5809] logitech 0003:046D:C286.0009: no inputs found [ 1993.028820][ T5809] usb 3-1: USB disconnect, device number 33 [ 1994.126327][T18684] netlink: 'syz.3.19801': attribute type 33 has an invalid length. [ 1994.126351][T18684] netlink: 152 bytes leftover after parsing attributes in process `syz.3.19801'. [ 1994.126382][T18684] `: renamed from team0 (while UP) [ 1994.560150][T14213] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 1994.577839][T18697] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19806'. [ 1994.712590][T14213] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1994.712619][T14213] usb 3-1: config 0 has no interface number 0 [ 1994.712669][T14213] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1994.712691][T14213] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1994.712715][T14213] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1994.712740][T14213] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1994.712763][T14213] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1994.712787][T14213] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1994.712828][T14213] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1994.712849][T14213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1994.727040][T14213] usb 3-1: config 0 descriptor?? [ 1994.730970][T18690] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1994.731165][T18690] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1994.772048][T14213] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1994.995086][T12709] usb 3-1: USB disconnect, device number 34 [ 1995.001611][T12709] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1995.120207][T14213] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1995.274674][T14213] usb 1-1: Using ep0 maxpacket: 16 [ 1995.277659][T14213] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1995.277683][T14213] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1995.280724][T14213] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1995.280748][T14213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1995.280765][T14213] usb 1-1: Product: syz [ 1995.280778][T14213] usb 1-1: Manufacturer: syz [ 1995.280791][T14213] usb 1-1: SerialNumber: syz [ 1995.924293][T14213] usb 1-1: cannot find UAC_HEADER [ 1995.939973][ T159] [ 1995.939984][ T159] ============================================ [ 1995.939991][ T159] WARNING: possible recursive locking detected [ 1995.940008][ T159] syzkaller #0 Not tainted [ 1995.940018][ T159] -------------------------------------------- [ 1995.940026][ T159] kworker/u8:5/159 is trying to acquire lock: [ 1995.940037][ T159] ffff888036df8318 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0xd58/0x3b70 [ 1995.940097][ T159] [ 1995.940097][ T159] but task is already holding lock: [ 1995.940103][ T159] ffff88807039c398 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x1370/0x3b70 [ 1995.940152][ T159] [ 1995.940152][ T159] other info that might help us debug this: [ 1995.940159][ T159] Possible unsafe locking scenario: [ 1995.940159][ T159] [ 1995.940165][ T159] CPU0 [ 1995.940170][ T159] ---- [ 1995.940175][ T159] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 1995.940194][ T159] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 1995.940212][ T159] [ 1995.940212][ T159] *** DEADLOCK *** [ 1995.940212][ T159] [ 1995.940217][ T159] May be due to missing lock nesting notation [ 1995.940217][ T159] [ 1995.940224][ T159] 16 locks held by kworker/u8:5/159: [ 1995.940235][ T159] #0: ffff88805e6d0938 ((wq_completion)bond2#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1995.940287][ T159] #1: ffffc90003b57ba0 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1995.940340][ T159] #2: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf2/0x1840 [ 1995.940382][ T159] #3: ffffffff8d44aca0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x540 [ 1995.940429][ T159] #4: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0xa1/0x540 [ 1995.940473][ T159] #5: ffffffff8d5aa8e0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x26f/0x3b70 [ 1995.940521][ T159] #6: ffff88807039c398 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x1370/0x3b70 [ 1995.940573][ T159] #7: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10d/0x2b0 [ 1995.940619][ T159] #8: ffff88805ef59998 (&qdisc_xmit_lock_key#4){+...}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 1995.940674][ T159] #9: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 1995.940718][ T159] #10: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 1995.940764][ T159] #11: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x11d0 [ 1995.940813][ T159] #12: ffffffff8d44aca0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x540 [ 1995.940858][ T159] #13: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 1995.940907][ T159] #14: ffffffff8d44aca0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x540 [ 1995.940952][ T159] #15: ffffffff8d5aa8e0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x26f/0x3b70 [ 1995.940999][ T159] [ 1995.940999][ T159] stack backtrace: [ 1995.941026][ T159] CPU: 1 UID: 0 PID: 159 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1995.941075][ T159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1995.941088][ T159] Workqueue: bond2 bond_alb_monitor [ 1995.941108][ T159] Call Trace: [ 1995.941119][ T159] [ 1995.941128][ T159] dump_stack_lvl+0x189/0x250 [ 1995.941156][ T159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1995.941182][ T159] ? __pfx__printk+0x10/0x10 [ 1995.941205][ T159] ? print_lock_name+0xde/0x100 [ 1995.941227][ T159] print_deadlock_bug+0x28b/0x2a0 [ 1995.941245][ T159] validate_chain+0x1a3f/0x2140 [ 1995.941266][ T159] ? unwind_next_frame+0xa5/0x2390 [ 1995.941292][ T159] ? __lock_acquire+0xab9/0xd20 [ 1995.941318][ T159] __lock_acquire+0xab9/0xd20 [ 1995.941373][ T159] ? __dev_queue_xmit+0xd58/0x3b70 [ 1995.941395][ T159] lock_acquire+0x120/0x360 [ 1995.941418][ T159] ? __dev_queue_xmit+0xd58/0x3b70 [ 1995.941443][ T159] ? __lock_acquire+0xab9/0xd20 [ 1995.941470][ T159] rt_spin_lock+0x88/0x3e0 [ 1995.941490][ T159] ? __dev_queue_xmit+0xd58/0x3b70 [ 1995.941514][ T159] ? __pfx_rt_spin_lock+0x10/0x10 [ 1995.941534][ T159] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1995.941565][ T159] __dev_queue_xmit+0xd58/0x3b70 [ 1995.941587][ T159] ? __neigh_event_send+0xf68/0x1580 [ 1995.941617][ T159] ? __dev_queue_xmit+0x26f/0x3b70 [ 1995.941640][ T159] ? ret_from_fork_asm+0x1a/0x30 [ 1995.941664][ T159] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1995.941694][ T159] ? __lock_acquire+0xab9/0xd20 [ 1995.941726][ T159] ? NF_HOOK+0x9e/0x3a0 [ 1995.941752][ T159] NF_HOOK+0x310/0x3a0 [ 1995.941777][ T159] ? __pfx_arp_xmit_finish+0x10/0x10 [ 1995.941803][ T159] ? NF_HOOK+0x9e/0x3a0 [ 1995.941827][ T159] ? __pfx_NF_HOOK+0x10/0x10 [ 1995.941852][ T159] ? arp_xmit+0x23/0x270 [ 1995.941881][ T159] arp_xmit+0x16c/0x270 [ 1995.941906][ T159] ? arp_xmit+0x23/0x270 [ 1995.941930][ T159] arp_solicit+0xc6a/0xeb0 [ 1995.941958][ T159] ? arp_solicit+0x115/0xeb0 [ 1995.941985][ T159] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1995.942006][ T159] ? __pfx_arp_solicit+0x10/0x10 [ 1995.942032][ T159] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1995.942058][ T159] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1995.942084][ T159] ? rt_write_unlock+0x191/0x230 [ 1995.942106][ T159] ? __pfx_arp_solicit+0x10/0x10 [ 1995.942131][ T159] __neigh_event_send+0xf68/0x1580 [ 1995.942160][ T159] ? __neigh_event_send+0x38/0x1580 [ 1995.942189][ T159] neigh_resolve_output+0x19f/0x780 [ 1995.942218][ T159] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 1995.942246][ T159] ip_finish_output2+0xd97/0x11d0 [ 1995.942272][ T159] ? ip_finish_output2+0x452/0x11d0 [ 1995.942300][ T159] ? __pfx_ip_finish_output2+0x10/0x10 [ 1995.942330][ T159] ? ip_skb_dst_mtu+0x18d/0xb70 [ 1995.942353][ T159] ? ip_skb_dst_mtu+0x917/0xb70 [ 1995.942376][ T159] ? ip_finish_output+0x33a/0x3f0 [ 1995.942400][ T159] ip_output+0x29f/0x450 [ 1995.942421][ T159] ? ip_output+0x5b/0x450 [ 1995.942444][ T159] iptunnel_xmit+0x5f8/0xa90 [ 1995.942469][ T159] ip_tunnel_xmit+0x1c44/0x2390 [ 1995.942506][ T159] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 1995.942530][ T159] ? gre_build_header+0x3fd/0xa40 [ 1995.942557][ T159] ? __pfx_gre_build_header+0x10/0x10 [ 1995.942585][ T159] gre_tap_xmit+0x590/0x7a0 [ 1995.942611][ T159] ? __pfx_gre_tap_xmit+0x10/0x10 [ 1995.942637][ T159] dev_hard_start_xmit+0x2f0/0x870 [ 1995.942666][ T159] sch_direct_xmit+0x241/0x4b0 [ 1995.942695][ T159] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1995.942721][ T159] ? rcu_needs_cpu+0x50/0xb0 [ 1995.942738][ T159] ? rt_spin_trylock+0x13b/0x2b0 [ 1995.942761][ T159] __dev_queue_xmit+0x1826/0x3b70 [ 1995.942788][ T159] ? __dev_queue_xmit+0x26f/0x3b70 [ 1995.942817][ T159] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1995.942839][ T159] ? rcu_is_watching+0x15/0xb0 [ 1995.942855][ T159] ? kmalloc_reserve+0xbd/0x290 [ 1995.942874][ T159] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1995.942895][ T159] ? kmem_cache_alloc_node_noprof+0x291/0x6e0 [ 1995.942918][ T159] ? kmalloc_reserve+0xbd/0x290 [ 1995.942935][ T159] ? __alloc_skb+0x112/0x2d0 [ 1995.942955][ T159] ? __build_skb_around+0x262/0x3f0 [ 1995.942981][ T159] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 1995.943001][ T159] ? alb_send_lp_vid+0x139/0x510 [ 1995.943021][ T159] alb_send_lp_vid+0x324/0x510 [ 1995.943042][ T159] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 1995.943066][ T159] alb_send_learning_packets+0x10d/0x2c0 [ 1995.943086][ T159] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 1995.943108][ T159] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 1995.943129][ T159] bond_alb_monitor+0x3dc/0x1840 [ 1995.943146][ T159] ? bond_alb_monitor+0xf2/0x1840 [ 1995.943164][ T159] ? process_scheduled_works+0x9ef/0x17b0 [ 1995.943186][ T159] ? __pfx_bond_alb_monitor+0x10/0x10 [ 1995.943204][ T159] ? _raw_spin_unlock_irq+0x23/0x50 [ 1995.943228][ T159] ? process_scheduled_works+0x9ef/0x17b0 [ 1995.943249][ T159] ? process_scheduled_works+0x9ef/0x17b0 [ 1995.943272][ T159] process_scheduled_works+0xae1/0x17b0 [ 1995.943305][ T159] ? __pfx_process_scheduled_works+0x10/0x10 [ 1995.943338][ T159] worker_thread+0x8a0/0xda0 [ 1995.943371][ T159] kthread+0x711/0x8a0 [ 1995.943398][ T159] ? __pfx_worker_thread+0x10/0x10 [ 1995.943420][ T159] ? __pfx_kthread+0x10/0x10 [ 1995.943444][ T159] ? rt_spin_unlock+0x150/0x200 [ 1995.943467][ T159] ? rt_spin_unlock+0x161/0x200 [ 1995.943486][ T159] ? __pfx_kthread+0x10/0x10 [ 1995.943512][ T159] ret_from_fork+0x4bc/0x870 [ 1995.943534][ T159] ? __pfx_ret_from_fork+0x10/0x10 [ 1995.943558][ T159] ? __switch_to_asm+0x39/0x70 [ 1995.943575][ T159] ? __switch_to_asm+0x33/0x70 [ 1995.943593][ T159] ? __pfx_kthread+0x10/0x10 [ 1995.943619][ T159] ret_from_fork_asm+0x1a/0x30 [ 1995.943644][ T159] [ 1995.986887][T14213] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1995.999561][T14213] usb 1-1: USB disconnect, device number 29 [ 1996.674095][T18661] udevd[18661]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory