last executing test programs: 53m7.873105271s ago: executing program 1 (id=557): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3a, 0xfe, 0x6, 0x20, 0x4e6, 0xb, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x2, 0xa0, 0x24, 0x26, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x6000, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x44) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) 52m55.520020582s ago: executing program 1 (id=561): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) 52m51.703520692s ago: executing program 1 (id=563): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x80000000000}) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) r1 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000140)=""/116, 0x74, 0x4) 52m46.122379151s ago: executing program 1 (id=565): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) chroot(&(0x7f0000000300)='./file0/file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 52m41.775210002s ago: executing program 1 (id=567): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x78}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0}) socket$nl_route(0x10, 0x3, 0x0) 52m39.712916265s ago: executing program 1 (id=568): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) 52m29.609878379s ago: executing program 32 (id=568): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) 47m56.182957985s ago: executing program 0 (id=618): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x189181, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r2, 0x28543634fae43ad, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 47m49.272537248s ago: executing program 0 (id=621): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) 47m33.335165181s ago: executing program 0 (id=624): io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2}) socket(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000403f5f201d0650c16fce0102030109021b00010000100509043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES64=r0]) 47m17.805929042s ago: executing program 0 (id=626): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0/file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x25840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00', 0x272) 47m16.307794719s ago: executing program 0 (id=628): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newlink={0x38, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x40c89}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}]}, 0x38}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) 47m13.546723676s ago: executing program 0 (id=629): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x4, r1, 0x0, &(0x7f0000000000/0x1000)=nil, 0x1000, 0xffdfffff}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r2, 0x0, 0x2fff, 0x2, &(0x7f00000000c0)="f0c1", 0x4}) 47m2.333071588s ago: executing program 33 (id=629): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x4, r1, 0x0, &(0x7f0000000000/0x1000)=nil, 0x1000, 0xffdfffff}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r2, 0x0, 0x2fff, 0x2, &(0x7f00000000c0)="f0c1", 0x4}) 6m5.894194205s ago: executing program 2 (id=1318): r0 = fsopen(&(0x7f0000000780)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) symlinkat(&(0x7f0000000000)='./bus\x00', r1, &(0x7f0000000040)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0xa0c2, 0x51) 6m1.128763897s ago: executing program 2 (id=1320): setreuid(0xffffffffffffffff, 0xee00) setfsuid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000013c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000002c0), 0x12) 5m54.943486019s ago: executing program 2 (id=1322): socket$kcm(0x2, 0x2, 0x73) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="02"], 0x10) socket$kcm(0x2, 0x2, 0x73) 5m51.879323788s ago: executing program 2 (id=1323): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000000002"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0x200, 0x300, 0x0, 0x76b, 0xd, "46436ee132c07506"}) close(r0) 5m48.172294547s ago: executing program 2 (id=1324): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0x4141, 0x0) 58.052183037s ago: executing program 3 (id=1356): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 50.383149738s ago: executing program 3 (id=1357): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f01000800000000000000042402000905810310"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 47.282154367s ago: executing program 2 (id=1324): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0x4141, 0x0) 27.891671581s ago: executing program 3 (id=1358): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 19.031691864s ago: executing program 3 (id=1359): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r1, 0x0, 0x0) 8.946073401s ago: executing program 3 (id=1360): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000b3a000/0x1000)=nil, 0x1000, 0x17) 0s ago: executing program 3 (id=1361): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:2389' (ED25519) to the list of known hosts. syzkaller login: [ 386.182751][ T3170] cgroup: Unknown subsys name 'net' [ 386.850508][ T3170] cgroup: Unknown subsys name 'cpuset' [ 386.973200][ T3170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 447.837614][ T3170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 543.572081][ T3176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.717142][ T3176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.907546][ T3178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.042521][ T3178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.579675][ T3176] hsr_slave_0: entered promiscuous mode [ 556.625432][ T3176] hsr_slave_1: entered promiscuous mode [ 558.671975][ T3178] hsr_slave_0: entered promiscuous mode [ 558.749610][ T3178] hsr_slave_1: entered promiscuous mode [ 558.793137][ T3178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 558.801408][ T3178] Cannot create hsr debugfs directory [ 565.185872][ T3176] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 565.289827][ T3176] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 565.350895][ T3176] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 565.432781][ T3176] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 566.967478][ T3178] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 567.048519][ T3178] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 567.148738][ T3178] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 567.211850][ T3178] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 577.966311][ T3176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.481890][ T3178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.650602][ T3176] veth0_vlan: entered promiscuous mode [ 620.203171][ T3176] veth1_vlan: entered promiscuous mode [ 621.498056][ T3176] veth0_macvtap: entered promiscuous mode [ 622.085165][ T3176] veth1_macvtap: entered promiscuous mode [ 624.022001][ T3176] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.041460][ T3176] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.052306][ T3176] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.071022][ T3176] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.329085][ T3178] veth0_vlan: entered promiscuous mode [ 626.503237][ T3178] veth1_vlan: entered promiscuous mode [ 628.938290][ T3178] veth0_macvtap: entered promiscuous mode [ 629.003342][ T3176] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 629.191295][ T3178] veth1_macvtap: entered promiscuous mode [ 631.243442][ T3178] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.256795][ T3178] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.258946][ T3178] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.261036][ T3178] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.523138][ T3910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'. [ 667.266736][ T36] audit: type=1326 audit(666.210:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3911 comm="syz.0.13" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x0 [ 672.650434][ T3880] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 672.959811][ T3880] usb 2-1: Using ep0 maxpacket: 32 [ 673.093380][ T3880] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.126938][ T3880] usb 2-1: config 0 interface 0 has no altsetting 0 [ 673.130150][ T3880] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 673.132364][ T3880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.362385][ T3880] usb 2-1: config 0 descriptor?? [ 676.049616][ T3880] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 676.051452][ T3880] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 676.167778][ T3880] koneplus 0003:1E7D:2D51.0001: hidraw0: USB HID v0.05 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 676.297159][ T3880] usb 2-1: USB disconnect, device number 2 [ 677.775568][ T3880] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 677.966441][ T3880] usb 1-1: Using ep0 maxpacket: 16 [ 678.166668][ T3880] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 678.170374][ T3880] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.172307][ T3880] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 678.302654][ T3880] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 678.305918][ T3880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.307735][ T3880] usb 1-1: Product: syz [ 678.309813][ T3880] usb 1-1: Manufacturer: syz [ 678.311364][ T3880] usb 1-1: SerialNumber: syz [ 680.130417][ T3880] usb 1-1: 0:2 : does not exist [ 681.452628][ T3880] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 682.159604][ T3880] usb 1-1: USB disconnect, device number 2 [ 686.201516][ T3966] syzkaller1: entered promiscuous mode [ 686.205166][ T3966] syzkaller1: entered allmulticast mode [ 691.208866][ T3974] bond_slave_1: entered promiscuous mode [ 691.411512][ T3974] bond_slave_1: left promiscuous mode [ 699.340153][ T3984] block nbd1: server does not support multiple connections per device. [ 699.395755][ T3983] block nbd1: shutting down sockets [ 719.020820][ T3997] netlink: 24 bytes leftover after parsing attributes in process `syz.1.29'. [ 725.561696][ T3194] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 725.998415][ T3194] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 726.097157][ T3194] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 726.099705][ T3194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 726.101631][ T3194] usb 2-1: SerialNumber: syz [ 729.607276][ T3194] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 731.309194][ T3773] usb 2-1: USB disconnect, device number 3 [ 731.509622][ T3773] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 742.455230][ T4034] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 742.739562][ T4034] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 758.424982][ T3957] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 758.981475][ T3957] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 759.102718][ T3957] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 759.110429][ T3957] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 759.112861][ T3957] usb 1-1: config 0 interface 0 has no altsetting 0 [ 759.187131][ T3957] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 759.189865][ T3957] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 759.192030][ T3957] usb 1-1: config 0 interface 0 has no altsetting 0 [ 759.257607][ T3957] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 759.261699][ T3957] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 759.272941][ T3957] usb 1-1: config 0 interface 0 has no altsetting 0 [ 759.620430][ T3957] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 759.623306][ T3957] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 759.646462][ T3957] usb 1-1: config 0 interface 0 has no altsetting 0 [ 759.701911][ T3957] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 759.708131][ T3957] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 759.710803][ T3957] usb 1-1: config 0 interface 0 has no altsetting 0 [ 759.844832][ T3957] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 759.846955][ T3957] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 759.848837][ T3957] usb 1-1: config 0 interface 0 has no altsetting 0 [ 759.932545][ T3957] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 759.938035][ T3957] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 759.941681][ T3957] usb 1-1: config 0 interface 0 has no altsetting 0 [ 760.068879][ T3957] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 760.070443][ T3957] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 760.071684][ T3957] usb 1-1: config 0 interface 0 has no altsetting 0 [ 760.249843][ T3957] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 760.252269][ T3957] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 760.255857][ T3957] usb 1-1: Product: syz [ 760.257444][ T3957] usb 1-1: Manufacturer: syz [ 760.258958][ T3957] usb 1-1: SerialNumber: syz [ 760.502248][ T3957] usb 1-1: config 0 descriptor?? [ 760.893029][ T3957] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 765.716608][ T3880] usb 1-1: USB disconnect, device number 3 [ 766.387411][ T3880] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 776.286699][ T4071] input: syz0 as /devices/virtual/input/input0 [ 780.896564][ T4082] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 798.966314][ T4102] syz.0.49 uses obsolete (PF_INET,SOCK_PACKET) [ 846.428475][ T4156] netlink: 'syz.1.68': attribute type 19 has an invalid length. [ 846.797667][ T4156] Zero length message leads to an empty skb [ 865.590292][ T4181] netlink: 136 bytes leftover after parsing attributes in process `syz.0.75'. [ 865.597196][ T4181] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 873.402287][ T4189] netlink: 'syz.0.79': attribute type 4 has an invalid length. [ 874.719721][ T4189] netlink: 'syz.0.79': attribute type 4 has an invalid length. [ 878.402585][ T3009] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 878.886545][ T3009] usb 1-1: Using ep0 maxpacket: 16 [ 879.101609][ T3009] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 879.120194][ T3009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.122297][ T3009] usb 1-1: Product: syz [ 879.136609][ T3009] usb 1-1: Manufacturer: syz [ 879.138542][ T3009] usb 1-1: SerialNumber: syz [ 879.459849][ T3009] usb 1-1: config 0 descriptor?? [ 879.592333][ T3009] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 879.767283][ T3009] usb 1-1: Detected FT-X [ 880.889036][ T3009] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 882.206797][ T3009] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 882.268880][ T4202] syzkaller1: entered promiscuous mode [ 882.271114][ T4202] syzkaller1: entered allmulticast mode [ 882.696930][ T3009] usb 1-1: USB disconnect, device number 4 [ 883.607186][ T3009] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 883.673143][ T3009] ftdi_sio 1-1:0.0: device disconnected [ 895.333445][ T4230] process 'syz.1.85' launched './file2' with NULL argv: empty string added [ 923.407901][ T4256] netlink: 'syz.0.92': attribute type 4 has an invalid length. [ 932.097061][ T3194] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 932.335570][ T3194] usb 1-1: Using ep0 maxpacket: 32 [ 932.416040][ T3194] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 932.418509][ T3194] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 932.597844][ T3194] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 932.600194][ T3194] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.602077][ T3194] usb 1-1: Product: syz [ 932.603663][ T3194] usb 1-1: Manufacturer: syz [ 932.626293][ T3194] usb 1-1: SerialNumber: syz [ 932.890212][ T3194] usb 1-1: config 0 descriptor?? [ 933.397917][ T3194] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 935.541096][ T3194] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 935.619504][ T3194] usb 1-1: USB disconnect, device number 5 [ 947.702928][ T4303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.100'. [ 957.922686][ T4310] vlan2: entered allmulticast mode [ 957.969040][ T4310] dummy0: entered allmulticast mode [ 967.391068][ T3194] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 967.691050][ T3194] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 967.715566][ T3194] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 967.718037][ T3194] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 967.720089][ T3194] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 967.802476][ T3194] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 967.806978][ T3194] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 967.808811][ T3194] usb 1-1: Manufacturer: syz [ 968.075968][ T3194] usb 1-1: config 0 descriptor?? [ 969.836933][ T3194] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 969.870248][ T3194] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 970.228607][ T3194] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 970.665877][ T3194] usb 1-1: USB disconnect, device number 6 [ 972.476802][ T3009] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 972.772649][ T3009] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 972.784927][ T3009] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 972.787577][ T3009] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 972.789600][ T3009] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.956064][ T3009] usb 2-1: config 0 descriptor?? [ 974.929698][ T3009] usb 2-1: string descriptor 0 read error: -22 [ 975.405873][ T3009] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0003/input/input1 [ 975.542317][ T3009] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0003/input/input2 [ 975.831060][ T3009] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0003/input/input3 [ 975.995572][ T3009] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0003/input/input4 [ 976.228919][ T3009] uclogic 0003:256C:006D.0003: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 976.358218][ T3009] usb 2-1: USB disconnect, device number 4 [ 1014.685808][ T4419] input: syz0 as /devices/virtual/input/input5 [ 1025.211214][ T4432] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.123'. [ 1025.287039][ T4429] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.123'. [ 1028.678189][ T4008] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 1029.106857][ T4008] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1029.109790][ T4008] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1029.111779][ T4008] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.411698][ T4008] usb 2-1: config 0 descriptor?? [ 1029.453305][ T4435] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1031.263348][ T4008] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 1031.567158][ T4008] usb 2-1: USB disconnect, device number 5 [ 1044.519288][ T4464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.130'. [ 1044.520883][ T4464] netlink: 'syz.0.130': attribute type 30 has an invalid length. [ 1044.720221][ T4464] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1044.723003][ T4464] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1044.726689][ T4464] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1044.727941][ T4464] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.429223][ T4468] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0002 with DS=0xee [ 1087.928010][ T925] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1088.406879][ T925] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1088.409392][ T925] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1088.658329][ T925] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1088.660893][ T925] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1088.662839][ T925] usb 2-1: Product: syz [ 1088.675013][ T925] usb 2-1: Manufacturer: syz [ 1088.676880][ T925] usb 2-1: SerialNumber: syz [ 1088.883478][ T925] usb 2-1: config 0 descriptor?? [ 1089.442949][ T925] usb 2-1: selecting invalid altsetting 0 [ 1089.776690][ T3957] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1090.418963][ T3957] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1090.421256][ T3957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.423139][ T3957] usb 1-1: Product: syz [ 1090.467308][ T3957] usb 1-1: Manufacturer: syz [ 1090.469289][ T3957] usb 1-1: SerialNumber: syz [ 1090.656116][ T925] usb 2-1: USB disconnect, device number 6 [ 1090.933269][ T3957] usb 1-1: config 0 descriptor?? [ 1093.277884][ T3957] usb 1-1: USB disconnect, device number 7 [ 1128.459209][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.465331][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.469197][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.472936][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.477477][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.481014][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.485394][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.489094][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.494656][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.498193][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.501606][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.506078][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.509673][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.513202][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.517599][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.522772][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.527335][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.531441][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.535947][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.540646][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.546230][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.550857][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.555202][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.558735][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.562238][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.566643][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.570197][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.574464][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.605572][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.609789][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.613503][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.618112][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.621801][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.626233][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.629784][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.633358][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.637647][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.640560][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.645062][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.648711][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.652209][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.655464][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.657643][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.660767][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.665109][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.668665][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.672421][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.676856][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.680465][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.684704][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.689894][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.695387][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.706468][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.711449][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.717736][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.723400][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.728989][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.732705][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.739524][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.745560][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.778075][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.781948][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.786495][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.789934][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.793409][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.797407][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.800830][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.806137][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.809634][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.814901][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.818351][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.822752][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.828338][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.832693][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.837477][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1128.840942][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1129.597150][ C0] vxcan0: j1939_tp_rxtimer: 0xffffaf8018c95800: rx timeout, send abort [ 1130.103255][ C0] vxcan0: j1939_tp_rxtimer: 0xffffaf8018c95800: abort rx timeout. Force session deactivation [ 1144.226703][ T3009] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1144.523380][ T3009] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1144.534866][ T3009] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1144.707324][ T3009] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1144.718760][ T3009] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1144.723497][ T3009] usb 1-1: Product: syz [ 1144.726216][ T3009] usb 1-1: Manufacturer: syz [ 1144.727694][ T3009] usb 1-1: SerialNumber: syz [ 1144.881671][ T3009] usb 1-1: config 0 descriptor?? [ 1145.151676][ T3009] usb 1-1: selecting invalid altsetting 0 [ 1148.011683][ T3009] usb 1-1: USB disconnect, device number 8 [ 1161.786580][ T4641] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1170.196629][ T36] audit: type=1326 audit(1169.130:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4653 comm="syz.1.163" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x0 [ 1197.739001][ T4678] netlink: 'syz.0.173': attribute type 10 has an invalid length. [ 1197.741272][ T4678] netlink: 40 bytes leftover after parsing attributes in process `syz.0.173'. [ 1198.145693][ T4678] A link change request failed with some changes committed already. Interface netdevsim3 may have been left with an inconsistent configuration, please check. [ 1202.378118][ T9] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 1202.745626][ T9] usb 2-1: config 0 has an invalid interface number: 46 but max is 0 [ 1202.750014][ T9] usb 2-1: config 0 has no interface number 0 [ 1202.752093][ T9] usb 2-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1202.766435][ T9] usb 2-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1203.229470][ T9] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1203.243059][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.256851][ T9] usb 2-1: Product: syz [ 1203.258597][ T9] usb 2-1: Manufacturer: syz [ 1203.260233][ T9] usb 2-1: SerialNumber: syz [ 1203.476271][ T9] usb 2-1: config 0 descriptor?? [ 1203.640980][ T9] ums-karma 2-1:0.46: USB Mass Storage device detected [ 1204.079748][ T9] ums-karma 2-1:0.46: probe with driver ums-karma failed with error -5 [ 1205.472870][ T3957] usb 2-1: USB disconnect, device number 7 [ 1228.210814][ T4724] netlink: 64 bytes leftover after parsing attributes in process `syz.1.184'. [ 1233.482924][ T4732] syzkaller1: entered promiscuous mode [ 1233.488873][ T4732] syzkaller1: entered allmulticast mode [ 1258.606703][ T3957] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1258.815967][ T3957] usb 1-1: Using ep0 maxpacket: 32 [ 1258.878026][ T3957] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 1258.880039][ T3957] usb 1-1: config 4 has no interface number 0 [ 1258.881700][ T3957] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1258.891253][ T3957] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1258.908786][ T3957] usb 1-1: New USB device found, idVendor=016d, idProduct=c314, bcdDevice= 0.00 [ 1258.910943][ T3957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.121688][ T3957] hub 1-1:4.128: USB hub found [ 1259.746548][ T3957] hub 1-1:4.128: 10 ports detected [ 1259.749208][ T3957] hub 1-1:4.128: Using single TT (err -22) [ 1259.778011][ T3957] hub 1-1:4.128: insufficient power available to use all downstream ports [ 1260.332905][ T3957] hub 1-1:4.128: hub_hub_status failed (err = -71) [ 1260.350877][ T3957] hub 1-1:4.128: config failed, can't get hub status (err -71) [ 1260.746717][ T3957] usb 1-1: USB disconnect, device number 9 [ 1268.148608][ T3924] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1268.232993][ T3924] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1268.616443][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1268.805682][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1269.080714][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 1269.083018][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.106906][ T9] usb 1-1: Product: syz [ 1269.108742][ T9] usb 1-1: Manufacturer: syz [ 1269.110297][ T9] usb 1-1: SerialNumber: syz [ 1269.277082][ T9] usb 1-1: config 0 descriptor?? [ 1271.038085][ T9] usb 1-1: USB disconnect, device number 10 [ 1283.876453][ T3924] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1284.156848][ T3924] usb 1-1: Using ep0 maxpacket: 16 [ 1284.280544][ T3924] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.282875][ T3924] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1284.438801][ T3924] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1284.441734][ T3924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.458771][ T3924] usb 1-1: Product: syz [ 1284.461291][ T3924] usb 1-1: Manufacturer: syz [ 1284.462902][ T3924] usb 1-1: SerialNumber: syz [ 1285.867609][ T3924] usb 1-1: 0:2 : does not exist [ 1287.399387][ T3957] usb 1-1: USB disconnect, device number 11 [ 1302.536296][ T3957] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1302.761004][ T3957] usb 2-1: Using ep0 maxpacket: 8 [ 1302.852981][ T3957] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1302.867498][ T3957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.988941][ T3957] usb 2-1: config 0 descriptor?? [ 1303.872610][ T3957] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1305.177213][ T3957] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1305.241572][ T3957] asix 2-1:0.0: probe with driver asix failed with error -71 [ 1305.350778][ T3957] usb 2-1: USB disconnect, device number 8 [ 1312.714958][ T4866] syzkaller1: entered promiscuous mode [ 1312.717051][ T4866] syzkaller1: entered allmulticast mode [ 1355.950459][ T4932] ipvlan2: entered promiscuous mode [ 1369.318707][ T4950] syzkaller1: entered promiscuous mode [ 1369.320907][ T4950] syzkaller1: entered allmulticast mode [ 1378.899791][ T4958] syz_tun: entered promiscuous mode [ 1378.978038][ T4958] batadv_slave_0: entered promiscuous mode [ 1379.273193][ T4962] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1389.039368][ T4968] ipvlan1: entered allmulticast mode [ 1389.041442][ T4968] veth0_vlan: entered allmulticast mode [ 1424.702383][ T5006] netlink: 64 bytes leftover after parsing attributes in process `syz.1.259'. [ 1437.838526][ T5023] mmap: syz.1.263 (5023) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1456.713216][ T5035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.269'. [ 1488.831882][ T5070] netlink: 168 bytes leftover after parsing attributes in process `syz.0.281'. [ 1538.387081][ T3924] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1538.607343][ T3924] usb 2-1: Using ep0 maxpacket: 16 [ 1538.700340][ T3924] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1538.702748][ T3924] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1538.829220][ T3924] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice= 7.fb [ 1538.831885][ T3924] usb 2-1: New USB device strings: Mfr=7, Product=130, SerialNumber=11 [ 1538.858240][ T3924] usb 2-1: Product: syz [ 1538.860132][ T3924] usb 2-1: Manufacturer: syz [ 1538.861723][ T3924] usb 2-1: SerialNumber: syz [ 1539.191307][ T3924] usb 2-1: config 0 descriptor?? [ 1539.503528][ T3924] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1539.559439][ T3924] imon 2-1:0.0: unable to initialize intf0, err -19 [ 1539.561694][ T3924] imon:imon_probe: failed to initialize context! [ 1539.563539][ T3924] imon 2-1:0.0: unable to register, err -19 [ 1542.661775][ T3194] usb 2-1: USB disconnect, device number 9 [ 1547.661532][ T5106] syz.0.296 (5106): drop_caches: 2 [ 1608.010713][ T5188] trusted_key: syz.0.322 sent an empty control message without MSG_MORE. [ 1632.732361][ T5219] syzkaller1: entered promiscuous mode [ 1632.742746][ T5219] syzkaller1: entered allmulticast mode [ 1636.939202][ T5229] bond0: entered promiscuous mode [ 1636.940736][ T5229] bond_slave_0: entered promiscuous mode [ 1636.952922][ T5229] bond_slave_1: entered promiscuous mode [ 1637.122895][ T5229] bridge_slave_1: entered promiscuous mode [ 1637.167451][ T5229] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1637.169739][ T5229] Cannot create hsr debugfs directory [ 1637.173132][ T5229] hsr1: entered promiscuous mode [ 1659.817336][ T5260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'. [ 1666.695752][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1666.948112][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1667.059706][ T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1667.075543][ T9] usb 1-1: config 179 has no interface number 0 [ 1667.077854][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1667.079949][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1667.081968][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1667.095623][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1667.100846][ T9] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1667.113347][ T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1667.119873][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.490042][ T5266] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1670.475440][ T4699] usb 1-1: USB disconnect, device number 12 [ 1670.476559][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1670.479458][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1676.118892][ T5288] can0: slcan on ttyS3. [ 1676.752637][ T5288] can0 (unregistered): slcan off ttyS3. [ 1688.446410][ T3957] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1688.966941][ T3957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1688.972673][ T3957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1688.983356][ T3957] usb 1-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1689.018108][ T3957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.350346][ T3957] usb 1-1: config 0 descriptor?? [ 1690.649276][ T3957] logitech 0003:046D:C293.0006: unbalanced collection at end of report description [ 1690.710562][ T3957] logitech 0003:046D:C293.0006: parse failed [ 1690.739662][ T3957] logitech 0003:046D:C293.0006: probe with driver logitech failed with error -22 [ 1691.048128][ T3957] usb 1-1: USB disconnect, device number 13 [ 1696.356233][ T4699] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1696.573439][ T4699] usb 2-1: Using ep0 maxpacket: 16 [ 1696.676756][ T4699] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1696.679346][ T4699] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1696.681392][ T4699] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1696.683348][ T4699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.821747][ T4699] usb 2-1: config 0 descriptor?? [ 1698.590829][ T4699] hid (null): nested delimiters [ 1699.182542][ T4699] cougar 0003:060B:500A.0007: unexpected long global item [ 1699.232155][ T4699] cougar 0003:060B:500A.0007: parse failed [ 1699.278071][ T4699] cougar 0003:060B:500A.0007: probe with driver cougar failed with error -22 [ 1699.460275][ T4699] usb 2-1: USB disconnect, device number 10 [ 1710.579680][ T5359] input: syz0 as /devices/virtual/input/input7 [ 1713.630289][ T5369] netlink: 40 bytes leftover after parsing attributes in process `syz.1.365'. [ 1727.837235][ T5389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.373'. [ 1727.988603][ T5389] gretap0: entered promiscuous mode [ 1727.991862][ T5389] macvtap1: entered promiscuous mode [ 1728.000730][ T5389] macvtap1: entered allmulticast mode [ 1728.001923][ T5389] gretap0: entered allmulticast mode [ 1748.011831][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1749.127910][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1749.130785][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.132615][ T9] usb 2-1: Product: syz [ 1749.145804][ T9] usb 2-1: Manufacturer: syz [ 1749.147664][ T9] usb 2-1: SerialNumber: syz [ 1749.519616][ T9] usb 2-1: config 0 descriptor?? [ 1753.177557][ T5426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'. [ 1753.607067][ T3009] usb 2-1: USB disconnect, device number 11 [ 1775.892207][ T5459] netlink: 'syz.1.396': attribute type 4 has an invalid length. [ 1776.519606][ T5460] netlink: 'syz.1.396': attribute type 4 has an invalid length. [ 1782.239377][ T4699] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1782.563502][ T4699] usb 2-1: Using ep0 maxpacket: 32 [ 1782.852542][ T4699] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1782.860087][ T4699] usb 2-1: config 0 has no interface number 0 [ 1783.757841][ T4699] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1783.759244][ T4699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.760267][ T4699] usb 2-1: Product: syz [ 1783.761091][ T4699] usb 2-1: Manufacturer: syz [ 1783.761924][ T4699] usb 2-1: SerialNumber: syz [ 1783.971265][ T4699] usb 2-1: config 0 descriptor?? [ 1784.535678][ T4699] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1789.682938][ T4699] usb 2-1: qt2_attach - failed to power on unit: -110 [ 1789.777457][ T4699] quatech2 2-1:0.51: probe with driver quatech2 failed with error -110 [ 1793.285796][ T5479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1793.411614][ T5479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1793.497996][ C0] vxcan0: j1939_tp_rxtimer: 0xffffaf80212d0000: rx timeout, send abort [ 1794.001934][ C0] vxcan0: j1939_tp_rxtimer: 0xffffaf80212d0000: abort rx timeout. Force session deactivation [ 1798.238472][ T5335] usb 2-1: USB disconnect, device number 12 [ 1821.021214][ T5511] netlink: 168 bytes leftover after parsing attributes in process `syz.0.408'. [ 1828.189838][ T5478] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1828.517304][ T5478] usb 2-1: Using ep0 maxpacket: 32 [ 1828.626228][ T5478] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1828.628543][ T5478] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1828.766045][ T5478] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1828.768564][ T5478] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.776762][ T5478] usb 2-1: Product: syz [ 1828.778338][ T5478] usb 2-1: Manufacturer: syz [ 1828.779834][ T5478] usb 2-1: SerialNumber: syz [ 1829.090576][ T5478] usb 2-1: config 0 descriptor?? [ 1829.245514][ T5478] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1830.793482][ T5478] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1830.935080][ T5478] usb 2-1: USB disconnect, device number 13 [ 1854.499654][ T5478] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1854.818315][ T5478] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1854.832198][ T5478] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1854.837409][ T5478] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1854.839468][ T5478] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1855.087703][ T5478] usb 1-1: config 0 descriptor?? [ 1858.259942][ T5478] hid-steam 0003:28DE:1142.0008: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 1858.383541][ T5478] hid-steam 0003:28DE:1142.0008: Steam wireless receiver connected [ 1858.770891][ T5478] hid-steam 0003:28DE:1142.0009: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 1860.199802][ T925] usb 1-1: reset high-speed USB device number 14 using dummy_hcd [ 1864.075407][ T5478] usb 1-1: USB disconnect, device number 14 [ 1864.740696][ T5478] hid-steam 0003:28DE:1142.0008: Steam wireless receiver disconnected [ 1873.158605][ T36] audit: type=1326 audit(1872.110:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5604 comm="syz.0.422" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x0 [ 1884.731865][ T5616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.427'. [ 1884.733245][ T5616] netlink: 11 bytes leftover after parsing attributes in process `syz.1.427'. [ 1929.003231][ T5652] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1939.067483][ T5659] input: syz0 as /devices/virtual/input/input8 [ 1952.103236][ T5677] Illegal XDP return value 32 on prog (id 41) dev syz_tun, expect packet loss! [ 1952.372343][ T5678] macvlan0: entered promiscuous mode [ 1952.432906][ T5678] macvlan0: left promiscuous mode [ 1971.442955][ T5709] netlink: 'syz.1.461': attribute type 10 has an invalid length. [ 1971.451491][ T5709] netlink: 40 bytes leftover after parsing attributes in process `syz.1.461'. [ 1971.653614][ T5709] A link change request failed with some changes committed already. Interface netdevsim3 may have been left with an inconsistent configuration, please check. [ 1973.595728][ T5712] syzkaller1: entered promiscuous mode [ 1973.597292][ T5712] syzkaller1: entered allmulticast mode [ 1977.457815][ T925] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1977.790377][ T925] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1977.815182][ T925] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1977.976673][ T925] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1977.979183][ T925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.981060][ T925] usb 1-1: Product: syz [ 1977.982615][ T925] usb 1-1: Manufacturer: syz [ 1977.995098][ T925] usb 1-1: SerialNumber: syz [ 1978.240630][ T925] usb 1-1: config 0 descriptor?? [ 1978.321123][ T5720] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1978.353736][ T5720] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1979.559654][ T5720] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1979.578301][ T5720] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1980.511502][ T925] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1981.136816][ T925] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 1981.413081][ T925] usb 1-1: USB disconnect, device number 15 [ 2038.748852][ T3009] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 2038.988689][ T3009] usb 1-1: Using ep0 maxpacket: 8 [ 2039.267161][ T3009] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2039.270572][ T3009] usb 1-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.00 [ 2039.272567][ T3009] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2039.461410][ T3009] usb 1-1: config 0 descriptor?? [ 2041.666466][ T3009] asus 0003:0B05:183D.000A: unknown main item tag 0x0 [ 2041.668597][ T3009] asus 0003:0B05:183D.000A: unknown main item tag 0x0 [ 2041.670899][ T3009] asus 0003:0B05:183D.000A: unknown main item tag 0x0 [ 2041.672595][ T3009] asus 0003:0B05:183D.000A: unknown main item tag 0x0 [ 2041.708655][ T3009] asus 0003:0B05:183D.000A: unknown main item tag 0x0 [ 2041.876895][ T3009] asus 0003:0B05:183D.000A: hidraw0: USB HID v0.01 Device [HID 0b05:183d] on usb-dummy_hcd.0-1/input0 [ 2041.879359][ T3009] asus 0003:0B05:183D.000A: Asus input not registered [ 2042.056001][ T3009] asus 0003:0B05:183D.000A: probe with driver asus failed with error -12 [ 2042.298785][ T3009] usb 1-1: USB disconnect, device number 16 [ 2100.867182][ T5887] can0: slcan on ttyS3. [ 2102.177769][ T5887] can0 (unregistered): slcan off ttyS3. [ 2132.234851][ C1] vkms_vblank_simulate: vblank timer overrun [ 2139.851397][ T5933] syzkaller1: entered promiscuous mode [ 2139.852632][ T5933] syzkaller1: entered allmulticast mode [ 2193.708084][ T6024] netlink: 'syz.1.544': attribute type 9 has an invalid length. [ 2206.673264][ T4699] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 2207.018340][ T4699] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2207.021027][ T4699] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2207.023105][ T4699] usb 2-1: config 1 has no interface number 1 [ 2207.052957][ T4699] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 2207.061495][ T4699] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2207.065623][ T4699] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 49, changing to 7 [ 2207.130372][ T4699] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2207.132752][ T4699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2207.137682][ T4699] usb 2-1: Product: syz [ 2207.139348][ T4699] usb 2-1: Manufacturer: syz [ 2207.140902][ T4699] usb 2-1: SerialNumber: syz [ 2208.323534][ T4699] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2208.989393][ T4699] usb 2-1: USB disconnect, device number 14 [ 2226.047916][ T4699] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 2226.619441][ T4699] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 2226.621744][ T4699] usb 2-1: config 0 has no interface number 0 [ 2226.642680][ T4699] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 2226.877735][ T4699] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 2226.879829][ T4699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2226.881391][ T4699] usb 2-1: Product: syz [ 2226.882700][ T4699] usb 2-1: Manufacturer: syz [ 2226.926680][ T4699] usb 2-1: SerialNumber: syz [ 2227.112172][ T4699] usb 2-1: config 0 descriptor?? [ 2227.192007][ T6112] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2227.310111][ T4699] usb-storage 2-1:0.20: USB Mass Storage device detected [ 2227.410419][ T4699] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 2228.218824][ T4699] scsi host0: usb-storage 2-1:0.20 [ 2228.928587][ T4699] usb 2-1: USB disconnect, device number 15 [ 2249.139974][ T6152] ======================================================= [ 2249.139974][ T6152] WARNING: The mand mount option has been deprecated and [ 2249.139974][ T6152] and is ignored by this kernel. Remove the mand [ 2249.139974][ T6152] option from the mount to silence this warning. [ 2249.139974][ T6152] ======================================================= [ 2251.602366][ T3176] syz_tun (unregistering): left promiscuous mode [ 2253.143440][ T5770] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2254.372849][ T5770] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2255.047437][ T5770] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2255.467343][ T5770] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2265.280505][ T5770] gretap0 (unregistering): left allmulticast mode [ 2270.482091][ T6175] capability: warning: `syz.0.572' uses 32-bit capabilities (legacy support in use) [ 2271.147944][ T5770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2271.399593][ T5770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2271.731372][ T5770] bond0 (unregistering): Released all slaves [ 2273.596229][ T5770] batadv_slave_0: left promiscuous mode [ 2274.230225][ T5770] hsr_slave_0: left promiscuous mode [ 2274.295264][ T5770] hsr_slave_1: left promiscuous mode [ 2274.896622][ T5770] veth1_macvtap: left promiscuous mode [ 2274.900822][ T5770] veth0_macvtap: left promiscuous mode [ 2274.973074][ T5770] veth1_vlan: left promiscuous mode [ 2274.980482][ T5770] veth0_vlan: left promiscuous mode [ 2301.663243][ C1] vkms_vblank_simulate: vblank timer overrun [ 2308.783377][ T6204] syzkaller1: entered promiscuous mode [ 2308.807972][ T6204] syzkaller1: entered allmulticast mode [ 2309.911063][ C1] vkms_vblank_simulate: vblank timer overrun [ 2331.813393][ T36] audit: type=1804 audit(2330.750:5): pid=6306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.583" name="/newroot/291/file1/file0" dev="ramfs" ino=7958 res=1 errno=0 [ 2335.521541][ T6355] binder: 6351:6355 ioctl c0306201 200000000040 returned -14 [ 2343.355825][ T6179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2343.511810][ T6179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2350.215573][ T3957] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2350.456651][ T3957] usb 1-1: Using ep0 maxpacket: 16 [ 2350.623400][ T3957] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 2350.624723][ T3957] usb 1-1: config 0 has no interface number 0 [ 2350.627225][ T3957] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2350.628435][ T3957] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2350.629693][ T3957] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 2350.630809][ T3957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2350.807884][ T3957] usb 1-1: config 0 descriptor?? [ 2352.842811][ T3957] hid (null): nested delimiters [ 2352.851938][ T3957] hid (null): nested delimiters [ 2352.855446][ T3957] hid (null): nested delimiters [ 2352.857781][ T3957] hid (null): bogus close delimiter [ 2352.873220][ T3957] hid (null): unknown global tag 0xd [ 2353.607222][ T3957] usb 1-1: USB disconnect, device number 17 [ 2358.496034][ T6031] page_pool_release_retry() stalled pool shutdown: id 12, 1 inflight 60 sec [ 2364.037549][ T6179] hsr_slave_0: entered promiscuous mode [ 2364.067634][ T6179] hsr_slave_1: entered promiscuous mode [ 2381.299758][ C1] vkms_vblank_simulate: vblank timer overrun [ 2381.870793][ T6179] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2382.160011][ T6179] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2382.950400][ T6179] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2383.451101][ T6179] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2402.136417][ T6179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2469.889330][ T6179] veth0_vlan: entered promiscuous mode [ 2470.342118][ T6179] veth1_vlan: entered promiscuous mode [ 2470.869188][ T6690] block nbd0: shutting down sockets [ 2472.218040][ T6179] veth0_macvtap: entered promiscuous mode [ 2472.910238][ T6179] veth1_macvtap: entered promiscuous mode [ 2475.068179][ T6179] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2475.070719][ T6179] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2475.086468][ T6179] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2475.092367][ T6179] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2501.551068][ T6729] gtp1: entered promiscuous mode [ 2501.553396][ T6729] gtp1: entered allmulticast mode [ 2506.183399][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.610'. [ 2533.206774][ T6759] syz.2.616 (6759): drop_caches: 2 [ 2551.238457][ T6767] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 2557.942032][ T6782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2557.987880][ T6782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2560.697118][ T3957] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 2561.037828][ T3957] usb 1-1: Using ep0 maxpacket: 32 [ 2561.147634][ T3957] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 2561.149843][ T3957] usb 1-1: config 0 has no interface number 0 [ 2561.227020][ T3957] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2561.228332][ T3957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2561.229402][ T3957] usb 1-1: Product: syz [ 2561.230292][ T3957] usb 1-1: Manufacturer: syz [ 2561.231144][ T3957] usb 1-1: SerialNumber: syz [ 2561.307219][ T3957] usb 1-1: config 0 descriptor?? [ 2561.547377][ T3957] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2563.059083][ T3957] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2563.655527][ T3957] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2564.037018][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2564.309235][ T3957] usb 1-1: USB disconnect, device number 18 [ 2564.803916][ T3957] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2565.208276][ T3957] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2565.253284][ T3957] quatech2 1-1:0.51: device disconnected [ 2566.916494][ T6816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2566.948027][ T6816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2579.021743][ T6180] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2579.038369][ T6180] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2580.108408][ T6180] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2580.110242][ T6180] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2580.757924][ T6180] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2580.759436][ T6180] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2581.566951][ T6180] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2581.570947][ T6180] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2598.446035][ T6180] bond0 (unregistering): left promiscuous mode [ 2598.449404][ T6180] bond_slave_0: left promiscuous mode [ 2598.486002][ T6180] bond_slave_1: left promiscuous mode [ 2598.650976][ T6180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2598.978335][ T6180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2599.118271][ T6180] bond0 (unregistering): Released all slaves [ 2600.328831][ T6839] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2600.438967][ T6840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2600.865716][ T6180] bridge_slave_1: left promiscuous mode [ 2601.188135][ T6180] hsr_slave_0: left promiscuous mode [ 2601.244515][ T6180] hsr_slave_1: left promiscuous mode [ 2602.211574][ T6180] veth1_macvtap: left promiscuous mode [ 2602.226897][ T6180] veth0_macvtap: left promiscuous mode [ 2602.236869][ T6180] veth1_vlan: left promiscuous mode [ 2602.240766][ T6180] veth0_vlan: left promiscuous mode [ 2607.673168][ C1] vkms_vblank_simulate: vblank timer overrun [ 2622.835209][ C1] vkms_vblank_simulate: vblank timer overrun [ 2673.567589][ T6844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2674.017443][ T6844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2695.575428][ T6844] hsr_slave_0: entered promiscuous mode [ 2695.652471][ T6844] hsr_slave_1: entered promiscuous mode [ 2695.680529][ T6844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2695.682789][ T6844] Cannot create hsr debugfs directory [ 2705.344918][ T6844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2705.842566][ T6844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2706.121814][ T6844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2706.371040][ T6844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2709.024464][ C1] vkms_vblank_simulate: vblank timer overrun [ 2713.912647][ C1] vkms_vblank_simulate: vblank timer overrun [ 2719.160576][ C1] vkms_vblank_simulate: vblank timer overrun [ 2721.738901][ T6844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2772.813143][ T6844] veth0_vlan: entered promiscuous mode [ 2773.540804][ T6844] veth1_vlan: entered promiscuous mode [ 2775.951850][ T6844] veth0_macvtap: entered promiscuous mode [ 2776.320728][ T6844] veth1_macvtap: entered promiscuous mode [ 2778.897696][ T6844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2778.899950][ T6844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2778.901754][ T6844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2778.915186][ T6844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2803.013236][ C1] vkms_vblank_simulate: vblank timer overrun [ 2833.630501][ T7316] syzkaller1: entered promiscuous mode [ 2833.670001][ T7316] syzkaller1: entered allmulticast mode [ 2852.376863][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.660'. [ 2878.186875][ T7350] xt_hashlimit: size too large, truncated to 1048576 [ 2879.489573][ T7352] : renamed from bond0 (while UP) [ 2902.737684][ T7369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2902.798121][ T7369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2903.449751][ T7367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2903.531738][ T7367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2917.521373][ T7377] syz.2.676: vmalloc error: size 1853191303, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 2917.532544][ T7377] CPU: 1 UID: 0 PID: 7377 Comm: syz.2.676 Not tainted 6.16.0-rc1-syzkaller-g306e57988197 #0 PREEMPT [ 2917.533588][ T7377] Hardware name: riscv-virtio,qemu (DT) [ 2917.534197][ T7377] Call Trace: [ 2917.534607][ T7377] [] dump_backtrace+0x2e/0x3c [ 2917.535401][ T7377] [] show_stack+0x30/0x3c [ 2917.535846][ T7377] [] dump_stack_lvl+0x12e/0x1a6 [ 2917.536489][ T7377] [] dump_stack+0x1c/0x24 [ 2917.537107][ T7377] [] warn_alloc+0x170/0x292 [ 2917.537650][ T7377] [] __vmalloc_node_range_noprof+0xe62/0x11b0 [ 2917.538381][ T7377] [] __kvmalloc_node_noprof+0x46a/0x6ac [ 2917.538950][ T7377] [] drm_property_create_blob+0x66/0x2f0 [ 2917.539538][ T7377] [] drm_mode_createblob_ioctl+0x102/0x3de [ 2917.540128][ T7377] [] drm_ioctl_kernel+0x1dc/0x380 [ 2917.540712][ T7377] [] drm_ioctl+0x502/0xbc2 [ 2917.541267][ T7377] [] __riscv_sys_ioctl+0x180/0x1e4 [ 2917.541863][ T7377] [] syscall_handler+0x94/0x118 [ 2917.542372][ T7377] [] do_trap_ecall_u+0x396/0x530 [ 2917.542819][ T7377] [] handle_exception+0x146/0x152 [ 2917.565147][ T7377] Mem-Info: [ 2917.567807][ T7377] active_anon:2754 inactive_anon:0 isolated_anon:0 [ 2917.567807][ T7377] active_file:10963 inactive_file:35045 isolated_file:0 [ 2917.567807][ T7377] unevictable:768 dirty:47 writeback:0 [ 2917.567807][ T7377] slab_reclaimable:2273 slab_unreclaimable:26758 [ 2917.567807][ T7377] mapped:12583 shmem:824 pagetables:973 [ 2917.567807][ T7377] sec_pagetables:0 bounce:0 [ 2917.567807][ T7377] kernel_misc_reclaimable:0 [ 2917.567807][ T7377] free:211765 free_pcp:5768 free_cma:52608 [ 2917.572802][ T7377] Node 0 active_anon:11016kB inactive_anon:0kB active_file:43852kB inactive_file:140180kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:50332kB dirty:188kB writeback:0kB shmem:3296kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6816kB pagetables:3892kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2917.611575][ T7377] Node 0 DMA32 free:847060kB boost:0kB min:22528kB low:28160kB high:33792kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11016kB inactive_anon:0kB active_file:43852kB inactive_file:140180kB unevictable:3072kB writepending:188kB present:2097152kB managed:1431536kB mlocked:0kB bounce:0kB free_pcp:23104kB local_pcp:9536kB free_cma:210432kB [ 2917.653329][ T7377] lowmem_reserve[]: 0 0 0 [ 2917.683402][ T7377] Node 0 DMA32: 51*4kB (UE) 777*8kB (UM) 592*16kB (UME) 440*32kB (UM) 261*64kB (UME) 45*128kB (UME) 18*256kB (UME) 7*512kB (UMC) 12*1024kB (UMEC) 4*2048kB (UM) 187*4096kB (MC) = 847060kB [ 2917.722028][ T7377] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2917.725043][ T7377] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2917.726971][ T7377] 46834 total pagecache pages [ 2917.728415][ T7377] 0 pages in swap cache [ 2917.730473][ T7377] Free swap = 124996kB [ 2917.736405][ T7377] Total swap = 124996kB [ 2917.738600][ T7377] 524288 pages RAM [ 2917.739912][ T7377] 0 pages HighMem/MovableOnly [ 2917.741272][ T7377] 166404 pages reserved [ 2917.742571][ T7377] 52736 pages cma reserved [ 3000.227975][ T7440] pim6reg: entered allmulticast mode [ 3000.289603][ T7443] macvlan0: entered allmulticast mode [ 3000.292002][ T7443] veth1_vlan: entered allmulticast mode [ 3001.357521][ T7440] veth1_vlan: left allmulticast mode [ 3002.149553][ T7440] macvlan0 (unregistering): left allmulticast mode [ 3064.979818][ T7484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3065.041105][ T7484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3109.587751][ T7513] input: syz1 as /devices/virtual/input/input9 [ 3119.451154][ T7526] syz_tun: entered allmulticast mode [ 3120.517549][ T7526] syz_tun: left allmulticast mode [ 3182.520032][ T7575] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 7575 comm: syz.3.743) [ 3182.549106][ T36] audit: type=1800 audit(3181.480:6): pid=7575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.743" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=11243 res=0 errno=0 [ 3192.549318][ T7585] netlink: 16 bytes leftover after parsing attributes in process `syz.3.747'. [ 3202.350308][ T7590] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3234.217623][ T7621] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 3341.025740][ T36] audit: type=1326 audit(3339.970:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.2.790" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 3341.029601][ T36] audit: type=1326 audit(3339.980:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.2.790" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 3341.199151][ T36] audit: type=1326 audit(3340.140:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.2.790" exe="/syz-executor" sig=0 arch=c00000f3 syscall=96 compat=0 ip=0xdb906 code=0x7ffc0000 [ 3341.201512][ T36] audit: type=1326 audit(3340.150:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.2.790" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 3341.217392][ T36] audit: type=1326 audit(3340.170:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.2.790" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 3341.271168][ T36] audit: type=1326 audit(3340.210:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.2.790" exe="/syz-executor" sig=0 arch=c00000f3 syscall=64 compat=0 ip=0xdb906 code=0x7ffc0000 [ 3341.287858][ T36] audit: type=1326 audit(3340.220:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.2.790" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 3341.310713][ T36] audit: type=1326 audit(3340.250:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.2.790" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 3341.341615][ T36] audit: type=1326 audit(3340.280:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.2.790" exe="/syz-executor" sig=0 arch=c00000f3 syscall=59 compat=0 ip=0xdb906 code=0x7ffc0000 [ 3341.356688][ T36] audit: type=1326 audit(3340.300:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.2.790" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 3367.602689][ T7726] batadv_slave_1: entered allmulticast mode [ 3368.069945][ T7725] batadv_slave_1: left allmulticast mode [ 3411.739998][ T7765] UHID_CREATE from different security context by process 260 (syz.2.812), this is not allowed. [ 3468.736559][ T7807] input: syz0 as /devices/virtual/input/input10 [ 3517.736409][ T7853] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 3571.507134][ T7908] capability: warning: `syz.2.862' uses deprecated v2 capabilities in a way that may be insecure [ 3594.358004][ T7928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3594.419313][ T7928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3650.230269][ T7974] ALSA: seq fatal error: cannot create timer (-22) [ 3696.090326][ T8011] netlink: 'syz.2.899': attribute type 12 has an invalid length. [ 3784.410198][ T8080] netlink: 'syz.2.928': attribute type 12 has an invalid length. [ 3792.019535][ T8087] netlink: 28 bytes leftover after parsing attributes in process `syz.3.931'. [ 3792.021818][ T8087] netlink: 28 bytes leftover after parsing attributes in process `syz.3.931'. [ 3795.005782][ T8089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3795.073286][ T8089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3795.082625][ T7776] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 3795.156357][ T7776] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3817.989105][ T8110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.938'. [ 3818.051085][ T8110] pim6reg: left allmulticast mode [ 3839.468281][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.946'. [ 3840.314694][ C1] vkms_vblank_simulate: vblank timer overrun [ 3846.538419][ T8142] IPv4: Oversized IP packet from 127.202.26.0 [ 3873.926810][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.957'. [ 3906.007552][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 3906.008125][ T36] audit: type=1326 audit(3904.920:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.967" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 3906.066033][ T36] audit: type=1326 audit(3904.990:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.967" exe="/syz-executor" sig=0 arch=c00000f3 syscall=293 compat=0 ip=0xdb906 code=0x7ffc0000 [ 3906.070242][ T36] audit: type=1326 audit(3905.010:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.967" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 3906.185903][ T36] audit: type=1326 audit(3905.080:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.967" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 3906.203319][ T36] audit: type=1326 audit(3905.130:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.967" exe="/syz-executor" sig=0 arch=c00000f3 syscall=55 compat=0 ip=0xdb906 code=0x7ffc0000 [ 3906.279645][ T36] audit: type=1326 audit(3905.220:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.967" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 3906.319315][ T36] audit: type=1326 audit(3905.240:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.967" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 3919.635084][ T8198] input: syz0 as /devices/virtual/input/input11 [ 3970.704639][ T8238] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3970.708157][ T8238] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3970.710962][ T8238] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3970.715366][ T8238] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3970.718157][ T8238] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3970.720059][ T8238] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3970.721642][ T8238] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3970.723392][ T8238] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3970.725559][ T8238] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3970.727170][ T8238] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3972.327948][ T36] audit: type=1326 audit(3971.240:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.2.987" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x0 [ 3975.752030][ T8238] net_ratelimit: 3126 callbacks suppressed [ 3975.752605][ T8238] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3975.760321][ T8238] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3975.764364][ T8238] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3975.767193][ T8238] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3975.769870][ T8238] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3975.772632][ T8238] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3975.776454][ T8238] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3975.779628][ T8238] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3975.782154][ T8238] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3975.785676][ T8238] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3988.699469][ T8246] netlink: 9 bytes leftover after parsing attributes in process `syz.2.989'. [ 3988.845912][ T8246] gretap0: entered promiscuous mode [ 3989.981169][ T8249] netlink: 5 bytes leftover after parsing attributes in process `syz.2.989'. [ 3989.997176][ T8249] gretap0: left promiscuous mode [ 3989.999266][ T8249] gretap0: entered allmulticast mode [ 4006.045295][ T8261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4006.082438][ T8261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4033.818616][ T8283] Invalid ELF header magic: != ELF [ 4050.940386][ T8295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4051.051741][ T8295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4055.095095][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1008'. [ 4087.687826][ T8322] input: syz1 as /devices/virtual/input/input12 [ 4089.289934][ T8323] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1017'. [ 4089.293406][ T8323] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1017'. [ 4089.331683][ T8323] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1017'. [ 4089.356707][ T8323] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1017'. [ 4129.391516][ T8357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4129.460190][ T8357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4136.973434][ T36] audit: type=1326 audit(4135.920:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.3.1034" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7fc00000 [ 4154.911088][ T8384] xt_hashlimit: size too large, truncated to 1048576 [ 4155.521216][ T8386] xt_hashlimit: size too large, truncated to 1048576 [ 4185.150698][ T36] audit: type=1800 audit(4184.100:29): pid=8409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1048" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 4236.851688][ T8471] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1068'. [ 4241.598947][ T8477] input: syz1 as /devices/virtual/input/input13 [ 4305.998274][ T8526] syzkaller1: entered promiscuous mode [ 4305.999913][ T8526] syzkaller1: entered allmulticast mode [ 4306.052117][ T8526] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 25 [ 4308.368340][ T8533] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1092'. [ 4310.118774][ T36] audit: type=1326 audit(4309.050:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.2.1093" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 4310.152167][ T36] audit: type=1326 audit(4309.080:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.2.1093" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 4310.216015][ T36] audit: type=1326 audit(4309.110:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.2.1093" exe="/syz-executor" sig=0 arch=c00000f3 syscall=199 compat=0 ip=0xdb906 code=0x7ffc0000 [ 4310.259379][ T36] audit: type=1326 audit(4309.200:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.2.1093" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 4310.312905][ T36] audit: type=1326 audit(4309.260:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.2.1093" exe="/syz-executor" sig=0 arch=c00000f3 syscall=269 compat=0 ip=0xdb906 code=0x7ffc0000 [ 4311.397952][ T36] audit: type=1326 audit(4310.330:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.2.1093" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 4311.401380][ T36] audit: type=1326 audit(4310.330:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.2.1093" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 4442.368554][ T8649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4442.467593][ T8649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4459.896073][ T8663] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1144'. [ 4529.759458][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1166'. [ 4581.893622][ T8769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4581.947751][ T8769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4786.401839][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1234'. [ 4806.215184][ T8952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4806.271920][ T8952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4814.468626][ T8956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1244'. [ 4814.496965][ T8956] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 4814.499700][ T8956] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 4823.412845][ T8962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1247'. [ 4930.715882][ T9048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4930.839944][ T9048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4932.426306][ T36] audit: type=1326 audit(4931.360:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9051 comm="syz.3.1283" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x0 [ 4941.772069][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1285'. [ 4953.077825][ T9069] binder: 9068:9069 ioctl c0306201 200000000480 returned -14 [ 5020.730790][ C1] vkms_vblank_simulate: vblank timer overrun [ 5029.578394][ T9127] xt_CT: No such helper "syz0" [ 5065.241223][ T8378] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5066.886690][ T8378] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5068.333186][ T8378] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5070.251895][ T8378] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5091.442208][ C1] vkms_vblank_simulate: vblank timer overrun [ 5095.988837][ T8378]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 5096.581807][ T8378]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 5096.992200][ T8378]  (unregistering): Released all slaves [ 5098.061505][ T8378] bond0 (unregistering): Released all slaves [ 5100.259778][ T8378] hsr_slave_0: left promiscuous mode [ 5100.281146][ T8378] hsr_slave_1: left promiscuous mode [ 5100.657648][ T8378] veth1_macvtap: left promiscuous mode [ 5100.660939][ T8378] veth0_macvtap: left promiscuous mode [ 5100.716542][ T8378] veth1_vlan: left promiscuous mode [ 5100.721424][ T8378] veth0_vlan: left promiscuous mode [ 5115.840071][ C1] vkms_vblank_simulate: vblank timer overrun [ 5175.307037][ C1] net_ratelimit: 183 callbacks suppressed [ 5175.307666][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 5183.060214][ T9194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5183.436862][ T9194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5214.711218][ T9194] hsr_slave_0: entered promiscuous mode [ 5214.753406][ T9194] hsr_slave_1: entered promiscuous mode [ 5237.512348][ T9194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 5237.751896][ T9194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 5238.222787][ T9194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 5238.900465][ T9194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 5266.799778][ T9194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5310.481101][ C0] vcan0: j1939_tp_rxtimer: 0xffffaf801cf48800: rx timeout, send abort [ 5310.494977][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffffaf801cf48800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 5346.578428][ T9194] veth0_vlan: entered promiscuous mode [ 5347.300645][ T9194] veth1_vlan: entered promiscuous mode [ 5350.026090][ T9194] veth0_macvtap: entered promiscuous mode [ 5350.688780][ T9194] veth1_macvtap: entered promiscuous mode [ 5354.886957][ T9194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5354.889541][ T9194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5354.892685][ T9194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5354.928769][ T9194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5366.291360][ T7887] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5368.000688][ T7887] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5369.270004][ T7887] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5370.655326][ T7887] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5383.538973][ C1] vkms_vblank_simulate: vblank timer overrun [ 5394.488271][ C1] vkms_vblank_simulate: vblank timer overrun [ 5395.189286][ T7887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5395.713383][ T7887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5396.126130][ T7887] bond0 (unregistering): Released all slaves [ 5398.486957][ T7887] hsr_slave_0: left promiscuous mode [ 5398.830057][ T7887] hsr_slave_1: left promiscuous mode [ 5399.728947][ T7887] veth1_macvtap: left promiscuous mode [ 5399.762603][ T7887] veth0_macvtap: left promiscuous mode [ 5399.783399][ T7887] veth1_vlan: left promiscuous mode [ 5399.821141][ T7887] veth0_vlan: left promiscuous mode [ 5415.528093][ T9738] Dead loop on virtual device ipvlan1, fix it urgently! [ 5415.528796][ T9738] Insufficient stack space to handle exception! [ 5415.529036][ T9738] Task stack: [0xffff8f8006120000..0xffff8f8006128000] [ 5415.529232][ T9738] Overflow stack: [0xffffaf806ed24070..0xffffaf806ed25070] [ 5415.529470][ T9738] CPU: 0 UID: 0 PID: 9738 Comm: syz.3.1361 Not tainted 6.16.0-rc1-syzkaller-g306e57988197 #0 PREEMPT [ 5415.529913][ T9738] Hardware name: riscv-virtio,qemu (DT) [ 5415.530210][ T9738] epc : __sanitizer_cov_trace_pc+0x2/0x78 [ 5415.530693][ T9738] ra : number+0xac/0xc1a [ 5415.531050][ T9738] epc : ffffffff804eba12 ra : ffffffff862d4752 sp : ffff8f800611fff0 [ 5415.531281][ T9738] gp : ffffffff89c7e9c0 tp : 0000000000000000 t0 : ffff8f80061208b4 [ 5415.531509][ T9738] t1 : ffff8f8006120300 t2 : 6567727520746920 s0 : ffff8f80061201b0 [ 5415.531764][ T9738] s1 : ffff8f8006120531 a0 : ffff8f8006120531 a1 : ffff8f808612052f [ 5415.532124][ T9738] a2 : 0000000000001527 a3 : 00000005ffff0a00 a4 : fffffffff3f3f3f3 [ 5415.532392][ T9738] a5 : 00000005ffff0a00 a6 : 0000000000000003 a7 : ffff8f8006120487 [ 5415.532713][ T9738] s2 : dfffffff00000000 s3 : ffff8f8006120280 s4 : ffff8f808612052f [ 5415.532960][ T9738] s5 : ffff8f80061203a8 s6 : 0000000000000001 s7 : ffff8f8006120140 [ 5415.533274][ T9738] s8 : ffff8f80061203a0 s9 : ffff8f808612052f s10: ffffffff8779851c [ 5415.533617][ T9738] s11: 000000007fffffff t3 : 1ffff1f000c24060 t4 : fffff1ef00c24090 [ 5415.533873][ T9738] t5 : fffff1ef00c24091 t6 : ffff8f8006120531 [ 5415.534072][ T9738] status: 0000000200000120 badaddr: ffff8f800611fff0 cause: 000000000000000f [ 5415.534920][ T9738] Kernel panic - not syncing: Kernel stack overflow [ 5415.535461][ T9738] CPU: 0 UID: 0 PID: 9738 Comm: syz.3.1361 Not tainted 6.16.0-rc1-syzkaller-g306e57988197 #0 PREEMPT [ 5415.535783][ T9738] Hardware name: riscv-virtio,qemu (DT) [ 5415.535913][ T9738] Call Trace: [ 5415.536082][ T9738] [] dump_backtrace+0x2e/0x3c [ 5415.536464][ T9738] [] show_stack+0x30/0x3c [ 5415.536767][ T9738] [] dump_stack_lvl+0x110/0x1a6 [ 5415.537152][ T9738] [] dump_stack+0x1c/0x24 [ 5415.537566][ T9738] [] panic+0x38c/0x86a [ 5415.537843][ T9738] [] handle_bad_stack+0xd4/0x128 [ 5415.538205][ T9738] [] number+0xac/0xc1a [ 5415.538792][ T9738] SMP: stopping secondary CPUs VM DIAGNOSIS: 10:35:02 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff81eadcbc mhartid 0000000000000000 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000220 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff86324f84 vstvec 0000000000000000 mepc ffffffff8008eba2 sepc ffffffff804eba12 vsepc 0000000000000000 mcause 0000000000000009 scause 000000000000000f vscause 0000000000000000 mtval 0000000000000000 stval ffff8f800611fff0 htval 0000000000000000 mtval2 0000000000000000 mscratch 000000008004a000 sscratch 0000000000000000 satp 909d0000000afcb8 x0/zero 0000000000000000 x1/ra ffffffff81eadc92 x2/sp ffffaf806ed24940 x3/gp ffffffff89c7e9c0 x4/tp ffffaf8015e53480 x5/t0 0000000000000000 x6/t1 0000000000000001 x7/t2 2065726177647261 x8/s0 ffffaf806ed24980 x9/s1 ffffffff91025c80 x10/a0 ffffffff91025cc8 x11/a1 000000000000001f x12/a2 0000000000080000 x13/a3 ffffffff81eadc92 x14/a4 1ffffffff2204b99 x15/a5 ffff8f800006d000 x16/a6 0000000000000003 x17/a7 0000000000000003 x18/s2 0000000000000031 x19/s3 0000000000000000 x20/s4 0000000000000000 x21/s5 0000000000000000 x22/s6 ffffffff81eadc24 x23/s7 0000000000000000 x24/s8 ffffffff90e40f83 x25/s9 0000000000000010 x26/s10 fffffffef2204b9b x27/s11 dfffffff00000000 x28/t3 ffffffff90e40f77 x29/t4 fffff5ef0dda4918 x30/t5 fffff5ef0dda4919 x31/t6 ffffffff90e40f77 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff8008508e mhartid 0000000000000001 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000020 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff86324f84 vstvec 0000000000000000 mepc ffffffff80095716 sepc ffffffff80095716 vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000001 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080048000 sscratch 0000000000000000 satp 9053f000000ac364 x0/zero 0000000000000000 x1/ra ffffffff8008508a x2/sp ffff8f8000017e30 x3/gp ffffffff89c7e9c0 x4/tp ffffaf801baa0000 x5/t0 ffff8f8000010000 x6/t1 fffffffef13b1128 x7/t2 ffffaf806ed476c0 x8/s0 ffff8f8000017e60 x9/s1 ffffffff8680c108 x10/a0 0000000000000001 x11/a1 0000000000000004 x12/a2 0000000000000001 x13/a3 ffffffff8008508a x14/a4 0000000000000000 x15/a5 ffffaf801baa0000 x16/a6 fffffffef13b1129 x17/a7 0000000000000003 x18/s2 0000000000000001 x19/s3 ffffffff910373c8 x20/s4 ffffaf8011a99400 x21/s5 0000000000000004 x22/s6 ffffffff86859240 x23/s7 ffffffff8665d000 x24/s8 ffffffff80084dcc x25/s9 0000000000000208 x26/s10 ffffffff87df5980 x27/s11 0000000000000001 x28/t3 4b952e4d00000000 x29/t4 fffffffef13b1128 x30/t5 fffffffef13b1129 x31/t6 0000000000000002 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000