last executing test programs: 4m26.588051605s ago: executing program 3 (id=4560): r0 = socket$key(0xf, 0x3, 0x2) accept4(r0, 0x0, 0x0, 0x0) 4m26.454800129s ago: executing program 3 (id=4563): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 4m26.36644048s ago: executing program 3 (id=4566): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a300000000080000000030a01020000000000000000020000060900010073797a30000000005e000300fd02b21edf8b721e23f25f47"], 0xc8}}, 0x0) 4m26.167901085s ago: executing program 3 (id=4571): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001500), 0x400, 0x0) ioctl$PTP_PIN_SETFUNC2(r0, 0x80503d0a, 0x0) 4m26.024284571s ago: executing program 3 (id=4576): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010200000040ac055302400001020301090224000101007263090400df02030102"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) 4m24.628811277s ago: executing program 3 (id=4593): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000002a00)=ANY=[@ANYBLOB="140000002700010026bd7000fcdbdf3206"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 4m9.531404265s ago: executing program 32 (id=4593): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000002a00)=ANY=[@ANYBLOB="140000002700010026bd7000fcdbdf3206"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2m30.350074369s ago: executing program 1 (id=6681): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0xfffffffc, 0xe, 0x35314241, 0x7, 0x2, [{0x0, 0x3}, {0x277c}, {0x0, 0x2}, {}, {0x0, 0x7}, {0xd360}, {0x0, 0xfffffffd}, {0x4, 0xc50}], 0x10, 0x9, 0x0, 0x0, 0x2}}) 2m30.205683603s ago: executing program 1 (id=6684): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x141a82, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x80000900, 0x12) 2m30.056702337s ago: executing program 1 (id=6687): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x8004000000071, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {0x7fffffff, 0x2, 0x2b21, 0x4}}) 2m29.941117546s ago: executing program 1 (id=6689): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) utime(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x9, 0x400}) 2m29.864608804s ago: executing program 1 (id=6692): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x121002, 0x0) sendfile(r0, r0, &(0x7f0000000380)=0xffffefdfbffffff2, 0x10204000000c) 2m29.794242586s ago: executing program 1 (id=6694): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m28.78753001s ago: executing program 2 (id=6719): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000009c0)=ANY=[@ANYBLOB="000200000000000002004e2364010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500"], 0x310) 2m28.641211062s ago: executing program 2 (id=6723): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="14010000290001002dbd7000fcdbdf2503014e8008002f00", @ANYRES32=r0, @ANYBLOB="1400010000"], 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 2m28.539516791s ago: executing program 2 (id=6726): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x8, 0x0, &(0x7f0000000000)=0x4c) 2m28.390359568s ago: executing program 2 (id=6730): syz_usb_connect$uac3(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000201e044030400001020301090292000301062005080b00010101304b0904000000010130000a2401052e00060000001324030506030604ff0c00000003000800080011240804"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf) 2m27.043883629s ago: executing program 2 (id=6752): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018}, './file0\x00'}) 2m26.946838534s ago: executing program 2 (id=6754): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}}, 0x4000080) 2m14.728598088s ago: executing program 33 (id=6694): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m11.846814547s ago: executing program 34 (id=6754): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}}, 0x4000080) 1m15.762166661s ago: executing program 0 (id=7857): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) 1m15.586126828s ago: executing program 0 (id=7860): syz_usb_connect(0x5, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100003d2ab420720c0d009b27010203010902120001000000000904"], 0x0) read(0xffffffffffffffff, 0x0, 0x0) 1m14.007904098s ago: executing program 0 (id=7885): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640200000000500010006000000050005000a00000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x20000000) 1m13.891726049s ago: executing program 0 (id=7888): r0 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x80000) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000140)={0x0, 0x0, 0x0}) 1m13.708045772s ago: executing program 0 (id=7892): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readahead(r0, 0x8, 0x0) 1m13.628218702s ago: executing program 0 (id=7894): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1800000027000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 1m6.278192993s ago: executing program 4 (id=8026): mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) mincore(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0) 1m6.233386792s ago: executing program 4 (id=8027): r0 = syz_open_procfs(0x0, &(0x7f0000000400)='stat\x00') pread64(r0, &(0x7f0000000140)=""/15, 0xf, 0x4) 1m6.145430551s ago: executing program 4 (id=8029): syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) 1m5.875032087s ago: executing program 4 (id=8034): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x103081, 0x0) write(r0, &(0x7f0000000040)="393424cdd8839bbce4f2b14d1e9c9fe2f5140ec1328ed03641671651ccfbd7afaf8dca9f500ff358e1f294c67a81c6c8fb08a45ef0796c7fa390b833a8b0f6b1fe3ee836b17444cc89f8cbfd00", 0x4d) 1m5.701532156s ago: executing program 4 (id=8036): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) 1m5.463527782s ago: executing program 4 (id=8038): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='nfsd\x00', 0x1000016, 0x0) 59.245715559s ago: executing program 6 (id=8119): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 59.13373389s ago: executing program 6 (id=8120): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer'}}}]}) 59.079011704s ago: executing program 6 (id=8121): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @raw_data="a3d6896248e5bb8852474250d6d22288b01bb2e965809906fbc4504f7dcdfd78604d5a1ca660c6063e06962d5c3ca5d6a41c557a993de08cb207eb844efe3885bd95e2591e8cb72ae4261a691f973360538cc442943209b3406eba6c2615054658c1192aa0646e22b060ba9edee3a91b5900beaaed97a3acb2dc0cfb01a6d5443385ddd972a67fda870498142dc6fa5bddb99d5149ca5c4070731f533f3c60aedbc424822a3a0c40eb06e0c7be3e68c1ba1f0a25e17753c8a193c74b7ce82cdf6010a25db2891844"}) 59.023140036s ago: executing program 6 (id=8122): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="18010000140001002dbd7000fcdbdf2507014e800c0002"], 0x118}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 58.95671651s ago: executing program 6 (id=8123): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x5, 0x200, 0x2}) 58.860228115s ago: executing program 6 (id=8125): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) 57.835828358s ago: executing program 35 (id=7894): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1800000027000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 49.323337968s ago: executing program 36 (id=8038): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='nfsd\x00', 0x1000016, 0x0) 42.72451989s ago: executing program 37 (id=8125): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) 31.511284395s ago: executing program 7 (id=8369): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 31.14390602s ago: executing program 7 (id=8371): r0 = socket$pppl2tp(0x18, 0x1, 0x1) recvmsg(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x22) 30.902379178s ago: executing program 7 (id=8373): syz_ublk_setup_io_uring(0x1f3e, &(0x7f00000007c0)={0x0, 0x9445, 0x8544, 0x0, 0xba}, &(0x7f0000000040), &(0x7f0000000100)=0x0, &(0x7f0000000140)) munmap$IORING_OFF_CQ_RING(r0, 0x401) 30.593038068s ago: executing program 7 (id=8375): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000580)='\t', 0x1}], 0x1) 30.505793952s ago: executing program 7 (id=8376): r0 = syz_open_dev$sndpcmc(&(0x7f00000002c0), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r0, 0x4112, 0x0) 30.368245996s ago: executing program 7 (id=8378): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x70bd26, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x2004c800}, 0x40014) 14.248643339s ago: executing program 38 (id=8378): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x70bd26, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x2004c800}, 0x40014) 3.034971286s ago: executing program 5 (id=8688): r0 = socket(0x40000000015, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000440)={'veth1_to_batadv\x00', 0x305d, 0x6a}) 2.836273422s ago: executing program 5 (id=8691): syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d77e17208680630b326a010203010902240001000410000904"], 0x0) 1.179237998s ago: executing program 8 (id=8712): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea11004a35f4667d41", 0x29}], 0x1) 1.137683443s ago: executing program 5 (id=8713): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x10, @mcast1, 0x56}, 0x80, 0x0}}], 0x1, 0x0) 1.114538678s ago: executing program 9 (id=8714): prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) 942.717851ms ago: executing program 8 (id=8715): r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000080)={0x1, 0x5, 0xfffffffffffff800, 0x0, 0x2}) 938.731537ms ago: executing program 5 (id=8716): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x3b, 0x1, 0x70bd27, 0x25dfdbfd, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040010) 857.140964ms ago: executing program 9 (id=8717): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0016800800b6008848", @ANYRES8], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 780.277897ms ago: executing program 5 (id=8718): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='oom_score_adj\x00') write$cgroup_int(r0, 0x0, 0x0) 765.8205ms ago: executing program 8 (id=8719): r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$sock_int(r0, 0x1, 0x3c, 0x0, &(0x7f0000000040)) 609.937236ms ago: executing program 5 (id=8720): syz_usb_connect(0x2, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0xb4, 0xd6, 0x1a, 0x40, 0x1199, 0x9040, 0x3efa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0xb, 0x38, 0x20, 0x80, "", [{{0x9, 0x4, 0x36, 0x2, 0x0, 0xce, 0xa6, 0x7b, 0x8}}, {{0x9, 0x4, 0x5b, 0x1, 0x0, 0xff, 0xff, 0xff, 0x9}}]}}]}}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) 591.458199ms ago: executing program 9 (id=8721): r0 = socket$inet(0x2, 0x3, 0x33) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[], 0x108}}], 0x1, 0xc040) 534.268626ms ago: executing program 8 (id=8722): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r0, &(0x7f0000000a40)=@known='security.selinux\x00', 0x0, 0x0, 0x0) 452.264819ms ago: executing program 9 (id=8723): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001300)=@acquire={0x134, 0x17, 0x505, 0x70bd26, 0x25dfdbfe, {{@in=@loopback, 0x4d3, 0xff}, @in=@remote, {@in=@multicast2, @in=@multicast2, 0x4e21, 0x9, 0x4e22, 0x0, 0xa, 0x80, 0x20, 0x6c}, {{@in=@loopback, @in6=@remote, 0x4e23, 0x1, 0x4e22, 0x0, 0xa, 0x80, 0x20, 0x3a}, {0xffffffff, 0x4, 0x0, 0x2, 0x8004, 0x9, 0x7, 0xc6}, {0x6, 0x5, 0xa}, 0x0, 0x0, 0x1, 0x1, 0x3, 0x2}, 0x0, 0x9, 0x8000, 0x70bd2b}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xd1}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4090}, 0x4004) 358.284701ms ago: executing program 8 (id=8724): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000001ec0)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000240)="a905000000007464000100000001000000e5", 0x12}, {&(0x7f0000000000)="82d9", 0x2}], 0x2}}], 0x1, 0x24000810) 259.767003ms ago: executing program 9 (id=8725): pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f00000002c0)) 206.327297ms ago: executing program 8 (id=8726): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi4\x00', 0x100, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000001540)={0x1, 0x30000, 0x1, 0x5, 0x0, 0x3, 0xffffffff, 0x3, 0x10, 0x7f, 0xffffffff, 0xb63, &(0x7f0000000200), 0x0, 0x0}) 0s ago: executing program 9 (id=8727): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000a40)=0xffffffff) kernel console output (not intermixed with test programs): to 8 [ 516.620287][ T43] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 516.620311][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.691803][T19701] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 516.716369][ T43] hub 2-1:1.0: bad descriptor, ignoring hub [ 516.716403][ T43] hub 2-1:1.0: probe with driver hub failed with error -5 [ 516.717313][ T43] cdc_wdm 2-1:1.0: skipping garbage [ 516.717329][ T43] cdc_wdm 2-1:1.0: skipping garbage [ 516.774813][ T43] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 516.774851][ T43] cdc_wdm 2-1:1.0: Unknown control protocol [ 516.968517][T19725] deleting an unspecified loop device is not supported. [ 517.005610][T19726] netlink: 'syz.4.6636': attribute type 9 has an invalid length. [ 517.005634][T19726] netlink: 'syz.4.6636': attribute type 2 has an invalid length. [ 517.086443][ T9] usb 2-1: USB disconnect, device number 65 [ 517.351588][ T43] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 517.512000][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 517.521928][ T43] usb 5-1: config 155 has an invalid interface number: 1 but max is 0 [ 517.521970][ T43] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 517.521991][ T43] usb 5-1: config 155 has 2 interfaces, different from the descriptor's value: 1 [ 517.522055][ T43] usb 5-1: config 155 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 517.522081][ T43] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 517.559213][ T43] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 517.559245][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.559267][ T43] usb 5-1: Product: syz [ 517.559282][ T43] usb 5-1: Manufacturer: syz [ 517.559297][ T43] usb 5-1: SerialNumber: syz [ 517.616764][T19728] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 517.633767][ T43] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 517.633920][ T43] imon 5-1:155.0: unable to initialize intf0, err -19 [ 517.633938][ T43] imon:imon_probe: failed to initialize context! [ 517.633951][ T43] imon 5-1:155.0: unable to register, err -19 [ 517.676640][ T43] imon 5-1:155.1: inconsistent driver matching [ 517.676660][ T43] imon 5-1:155.1: unable to register, err -22 [ 517.676689][ T43] imon 5-1:155.1: probe with driver imon failed with error -22 [ 517.784480][T19754] bridge_slave_1: left allmulticast mode [ 517.784513][T19754] bridge_slave_1: left promiscuous mode [ 517.784821][T19754] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.836406][ T5710] usb 5-1: USB disconnect, device number 18 [ 518.013758][T19754] bridge_slave_0: left allmulticast mode [ 518.013785][T19754] bridge_slave_0: left promiscuous mode [ 518.038677][T19754] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.261526][ T5710] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 518.418880][ T5710] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 518.418915][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.418937][ T5710] usb 2-1: Product: syz [ 518.418953][ T5710] usb 2-1: Manufacturer: syz [ 518.418968][ T5710] usb 2-1: SerialNumber: syz [ 518.437161][ T5710] usb 2-1: config 0 descriptor?? [ 518.472825][T19758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6654'. [ 518.692087][ T5710] peak_usb 2-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 518.806942][T19778] overlayfs: failed to resolve './file0:/': -2 [ 518.894412][ T5710] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 518.894443][ T5710] peak_usb 2-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71) [ 519.073197][ T5710] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 519.094881][ T5710] usb 2-1: USB disconnect, device number 66 [ 519.292173][ T43] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 519.453940][ T43] usb 3-1: not running at top speed; connect to a high speed hub [ 519.457441][ T43] usb 3-1: config 250 has an invalid interface number: 173 but max is 0 [ 519.457469][ T43] usb 3-1: config 250 has no interface number 0 [ 519.457517][ T43] usb 3-1: config 250 interface 173 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 519.457541][ T43] usb 3-1: config 250 interface 173 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 519.457566][ T43] usb 3-1: config 250 interface 173 has no altsetting 0 [ 519.460872][ T43] usb 3-1: New USB device found, idVendor=1b3d, idProduct=019e, bcdDevice=b9.5f [ 519.460901][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.460922][ T43] usb 3-1: Product: syz [ 519.460937][ T43] usb 3-1: Manufacturer: syz [ 519.460952][ T43] usb 3-1: SerialNumber: syz [ 519.781474][ T43] ftdi_sio 3-1:250.173: FTDI USB Serial Device converter detected [ 519.784255][ T43] ftdi_sio ttyUSB0: unknown device type: 0xb95f [ 519.812174][ T43] usb 3-1: USB disconnect, device number 67 [ 519.816740][ T43] ftdi_sio 3-1:250.173: device disconnected [ 520.466628][T19849] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6699'. [ 520.566726][T19856] nbd: must specify an index to disconnect [ 520.614707][T19857] FAT-fs (nbd2): unable to read boot sector [ 521.375588][T19899] netlink: 'syz.2.6723': attribute type 1 has an invalid length. [ 521.375613][T19899] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6723'. [ 521.819028][T19924] nfs: Deprecated parameter 'nointr' [ 521.872460][ T5710] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 522.021508][ T5710] usb 3-1: Using ep0 maxpacket: 32 [ 522.024376][ T5710] usb 3-1: unable to get BOS descriptor or descriptor too short [ 522.025650][ T5710] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.025675][ T5710] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 522.029389][ T5710] usb 3-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 522.029417][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.029437][ T5710] usb 3-1: Product: syz [ 522.029457][ T5710] usb 3-1: Manufacturer: syz [ 522.029467][ T5710] usb 3-1: SerialNumber: syz [ 522.345730][ T5710] usb 3-1: unit 255 not found! [ 522.413767][ T5710] usb 3-1: USB disconnect, device number 68 [ 522.477951][T19944] netlink: 'syz.0.6745': attribute type 1 has an invalid length. [ 522.491482][ T43] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 522.538418][T19485] udevd[19485]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 522.643679][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 522.647607][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 522.647637][ T43] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 522.649966][ T43] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 522.650000][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.650015][ T43] usb 5-1: Product: syz [ 522.650025][ T43] usb 5-1: Manufacturer: syz [ 522.650035][ T43] usb 5-1: SerialNumber: syz [ 522.710435][ T43] usb 5-1: config 0 descriptor?? [ 522.855790][T19954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6750'. [ 523.077676][T19964] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6755'. [ 523.139636][ T43] usb 5-1: USB disconnect, device number 19 [ 523.335002][T19974] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6760'. [ 523.715103][T19981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6763'. [ 524.587004][T20022] netlink: 'syz.0.6782': attribute type 1 has an invalid length. [ 524.587027][T20022] netlink: 'syz.0.6782': attribute type 3 has an invalid length. [ 524.587041][T20022] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6782'. [ 524.931456][ T5710] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 525.032832][T20044] netlink: 'syz.4.6793': attribute type 61 has an invalid length. [ 525.084451][ T5710] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 525.084488][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 525.084503][ T5710] usb 1-1: Product: syz [ 525.115062][ T5710] usb 1-1: config 0 descriptor?? [ 525.134274][ T5710] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 525.143899][ T5710] usb 1-1: Detected FT232H [ 525.531951][ T5710] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 525.533704][ T5710] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 525.537972][ T5710] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 525.576562][ T5710] usb 1-1: USB disconnect, device number 67 [ 525.587135][ T5710] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 525.595635][ T5710] ftdi_sio 1-1:0.0: device disconnected [ 525.709412][T20058] IPVS: Error connecting to the multicast addr [ 527.193533][T20132] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6837'. [ 527.726971][T20164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6853'. [ 528.049038][T20181] kAFS: No cell specified [ 528.411514][ T5710] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 528.566141][ T5710] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 528.566170][ T5710] usb 1-1: config 0 has no interface number 0 [ 528.566215][ T5710] usb 1-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 528.566232][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.580308][ T5710] usb 1-1: config 0 descriptor?? [ 528.829785][ T5710] usb 1-1: USB disconnect, device number 68 [ 528.888682][T20210] netlink: 'syz.4.6874': attribute type 12 has an invalid length. [ 529.352441][ T5712] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 529.523528][ T5712] usb 5-1: Using ep0 maxpacket: 16 [ 529.525788][ T5712] usb 5-1: config 251 has an invalid interface number: 202 but max is 0 [ 529.525816][ T5712] usb 5-1: config 251 has no interface number 0 [ 529.525870][ T5712] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 529.526640][ T5712] usb 5-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 529.526660][ T5712] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 529.526680][ T5712] usb 5-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 529.526699][ T5712] usb 5-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 529.526719][ T5712] usb 5-1: config 251 interface 202 has no altsetting 0 [ 529.529012][ T5712] usb 5-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 529.529040][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.529059][ T5712] usb 5-1: Product: syz [ 529.529079][ T5712] usb 5-1: Manufacturer: syz [ 529.529090][ T5712] usb 5-1: SerialNumber: syz [ 529.595482][T20218] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 529.926737][ T5712] cxacru 5-1:251.202: send of cm 0x90 failed (-71) [ 529.926776][ T5712] cxacru 5-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 529.927367][ T5712] cxacru 5-1:251.202: probe with driver cxacru failed with error -22 [ 529.950763][ T5712] usb 5-1: USB disconnect, device number 20 [ 530.617844][T20260] fuse: Bad value for 'fd' [ 530.911980][T20276] No source specified [ 531.356575][T20291] netlink: 4548 bytes leftover after parsing attributes in process `syz.0.6914'. [ 532.557392][T20289] syz.4.6913 (20289): drop_caches: 2 [ 532.612042][T20316] pvfs2: Unknown parameter 'noacl' [ 532.653892][ T5340] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 532.826084][ T5340] usb 1-1: unable to get BOS descriptor or descriptor too short [ 532.826835][ T5340] usb 1-1: not running at top speed; connect to a high speed hub [ 532.831251][ T5340] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 532.831857][ T5340] usb 1-1: config 0 has no interface number 0 [ 532.831971][ T5340] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 532.832048][ T5340] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 532.832110][ T5340] usb 1-1: config 0 interface 88 has no altsetting 0 [ 532.855412][ T5340] usb 1-1: string descriptor 0 read error: -22 [ 532.856240][ T5340] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 532.856305][ T5340] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 532.887108][ T5340] usb 1-1: config 0 descriptor?? [ 532.937070][ T5340] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input44 [ 533.153814][ T5712] usb 1-1: USB disconnect, device number 69 [ 533.203114][T19485] udevd[19485]: Error opening device "/dev/input/event4": No such device [ 533.203243][T19485] udevd[19485]: Unable to EVIOCGABS device "/dev/input/event4" [ 533.203360][T19485] udevd[19485]: Unable to EVIOCGABS device "/dev/input/event4" [ 533.448519][T20340] Invalid source name [ 533.811471][ T5712] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 533.947714][T20362] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 533.947728][T20362] overlayfs: missing 'lowerdir' [ 533.966938][ T5712] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 533.966967][ T5712] usb 5-1: config 8 has an invalid descriptor of length 255, skipping remainder of the config [ 533.966990][ T5712] usb 5-1: config 8 has no interface number 0 [ 533.967035][ T5712] usb 5-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 533.970209][ T5712] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 533.970243][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.970258][ T5712] usb 5-1: Product: syz [ 533.970269][ T5712] usb 5-1: Manufacturer: syz [ 533.970280][ T5712] usb 5-1: SerialNumber: syz [ 534.281209][ T5712] usb 5-1: USB disconnect, device number 21 [ 534.681512][ T5340] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 534.833258][ T5340] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 534.833289][ T5340] usb 1-1: config 0 has no interface number 0 [ 534.833352][ T5340] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 534.835698][ T5340] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 534.835728][ T5340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.835748][ T5340] usb 1-1: Product: syz [ 534.835768][ T5340] usb 1-1: Manufacturer: syz [ 534.835779][ T5340] usb 1-1: SerialNumber: syz [ 534.852254][ T5340] usb 1-1: config 0 descriptor?? [ 534.893076][T20376] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 534.946203][ T5340] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, ea:1e:7f:de:3c:a8 [ 535.168265][T20389] netlink: 'syz.4.6962': attribute type 2 has an invalid length. [ 535.168283][T20389] netlink: 'syz.4.6962': attribute type 8 has an invalid length. [ 535.168293][T20389] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6962'. [ 535.534265][ T5620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 535.607260][ T5620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 535.620585][ T5620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 535.646484][T20400] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6966'. [ 535.647920][ T5620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 535.648863][ T5620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 536.632880][T20395] xfrm0 speed is unknown, defaulting to 1000 [ 536.979679][ T9] usb 1-1: USB disconnect, device number 70 [ 536.993592][ T9] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 537.752153][ T5619] Bluetooth: hci5: command tx timeout [ 538.701199][ T5620] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 538.749971][ T5620] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 538.752225][ T5620] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 538.774203][ T5620] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 538.777476][ T5620] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 539.260890][T20395] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.271065][T20395] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.281192][T20395] bridge_slave_0: entered allmulticast mode [ 539.306688][T20395] bridge_slave_0: entered promiscuous mode [ 539.328469][T20395] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.338353][T20395] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.338715][T20395] bridge_slave_1: entered allmulticast mode [ 539.356382][T20395] bridge_slave_1: entered promiscuous mode [ 539.605970][T20395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.624210][T20395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.733544][T20395] team0: Port device team_slave_0 added [ 539.766883][T20395] team0: Port device team_slave_1 added [ 539.831516][ T5620] Bluetooth: hci5: command tx timeout [ 539.981721][T20395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.981740][T20395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.981769][T20395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.998278][T20395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.998321][T20395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.998395][T20395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.289684][T20539] sg_write: data in/out 242053/136 bytes for SCSI command 0x0-- guessing data in; [ 540.289684][T20539] program syz.4.7009 not setting count and/or reply_len properly [ 540.423074][T20547] tmpfs: Bad value for 'mpol' [ 540.525797][T20395] hsr_slave_0: entered promiscuous mode [ 540.528072][T20395] hsr_slave_1: entered promiscuous mode [ 540.529891][T20395] debugfs: 'hsr0' already exists in 'hsr' [ 540.529918][T20395] Cannot create hsr debugfs directory [ 540.574662][T20485] xfrm0 speed is unknown, defaulting to 1000 [ 540.951927][ T5620] Bluetooth: hci6: command tx timeout [ 541.888014][T20590] kAFS: unparsable volume name [ 541.915049][ T5620] Bluetooth: hci5: command tx timeout [ 542.172443][T20596] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 542.500977][T20395] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 542.545147][T20395] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 542.580216][T20395] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 542.615962][T20395] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 542.638073][T20395] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 542.732506][T20395] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 542.762899][T20395] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 542.874753][T20395] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 543.031954][ T5620] Bluetooth: hci6: command tx timeout [ 543.367942][T20485] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.368356][T20485] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.368658][T20485] bridge_slave_0: entered allmulticast mode [ 543.374168][T20485] bridge_slave_0: entered promiscuous mode [ 543.438641][T20485] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.439484][T20485] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.439750][T20485] bridge_slave_1: entered allmulticast mode [ 543.463320][T20485] bridge_slave_1: entered promiscuous mode [ 543.614008][T20485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.646504][T20485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.855688][T20485] team0: Port device team_slave_0 added [ 543.874470][T20485] team0: Port device team_slave_1 added [ 543.991602][ T5620] Bluetooth: hci5: command tx timeout [ 544.074727][T20485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.074745][T20485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.074777][T20485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.146074][T20485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.146093][T20485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.146122][T20485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.434261][T20676] netlink: 'syz.0.7070': attribute type 7 has an invalid length. [ 544.438908][T20485] hsr_slave_0: entered promiscuous mode [ 544.440581][T20485] hsr_slave_1: entered promiscuous mode [ 544.454848][T20485] debugfs: 'hsr0' already exists in 'hsr' [ 544.454876][T20485] Cannot create hsr debugfs directory [ 544.638665][T20395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.111843][ T5620] Bluetooth: hci6: command tx timeout [ 545.210720][T20395] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.336083][ T3282] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.336348][ T3282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.595894][ T3282] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.596068][ T3282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.965502][T20723] netlink: 'syz.4.7093': attribute type 29 has an invalid length. [ 546.379287][T20485] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 546.571875][T20485] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 546.596043][T20485] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 546.678816][T20485] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 546.696540][T20485] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 546.777464][T20485] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 546.789575][T20485] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 546.920643][T20485] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 547.191873][ T5620] Bluetooth: hci6: command tx timeout [ 547.870498][T20485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.928958][T20395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.033599][T20485] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.125216][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.128241][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.178475][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.178726][ T3310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.197338][T20395] veth0_vlan: entered promiscuous mode [ 549.378160][T20395] veth1_vlan: entered promiscuous mode [ 549.789249][T20395] veth0_macvtap: entered promiscuous mode [ 549.838507][T20395] veth1_macvtap: entered promiscuous mode [ 549.897832][T20485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.960750][T20395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.989958][T20395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.079187][ T3310] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.079750][ T3310] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.079794][ T3310] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.079833][ T3310] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.258634][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.258672][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.339189][T20883] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7152'. [ 551.606259][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.606280][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.938716][T20899] comedi: valid board names for 8255 driver are: [ 551.938737][T20899] 8255 [ 551.938744][T20899] comedi: valid board names for vmk80xx driver are: [ 551.938754][T20899] vmk80xx [ 551.938761][T20899] comedi: valid board names for usbduxsigma driver are: [ 551.938770][T20899] usbduxsigma [ 551.938777][T20899] comedi: valid board names for usbduxfast driver are: [ 551.938786][T20899] usbduxfast [ 551.938793][T20899] comedi: valid board names for usbdux driver are: [ 551.938817][T20899] usbdux [ 551.938824][T20899] comedi: valid board names for ni6501 driver are: [ 551.938833][T20899] ni6501 [ 551.938839][T20899] comedi: valid board names for dt9812 driver are: [ 551.938849][T20899] dt9812 [ 551.938856][T20899] comedi: valid board names for ni_labpc_cs driver are: [ 551.938866][T20899] ni_labpc_cs [ 551.938873][T20899] comedi: valid board names for ni_daq_700 driver are: [ 551.938883][T20899] ni_daq_700 [ 551.938890][T20899] comedi: valid board names for labpc_pci driver are: [ 551.938899][T20899] labpc_pci [ 551.938906][T20899] comedi: valid board names for adl_pci9118 driver are: [ 551.938914][T20899] pci9118dg [ 551.938920][T20899] pci9118hg [ 551.938926][T20899] pci9118hr [ 551.938932][T20899] comedi: valid board names for 8255_pci driver are: [ 551.938940][T20899] 8255_pci [ 551.938946][T20899] comedi: valid board names for s526 driver are: [ 551.938954][T20899] s526 [ 551.938961][T20899] comedi: valid board names for multiq3 driver are: [ 551.938970][T20899] multiq3 [ 551.938976][T20899] comedi: valid board names for pcmuio driver are: [ 551.938985][T20899] pcmuio48 [ 551.938992][T20899] pcmuio96 [ 551.938998][T20899] comedi: valid board names for pcmmio driver are: [ 551.939007][T20899] pcmmio [ 551.939015][T20899] comedi: valid board names for pcmda12 driver are: [ 551.939023][T20899] pcmda12 [ 551.939030][T20899] comedi: valid board names for pcmad driver are: [ 551.939039][T20899] pcmad12 [ 551.939045][T20899] pcmad16 [ 551.939052][T20899] comedi: valid board names for ni_labpc driver are: [ 551.939061][T20899] lab-pc-1200 [ 551.939068][T20899] lab-pc-1200ai [ 551.939075][T20899] lab-pc+ [ 551.939082][T20899] comedi: valid board names for atmio16 driver are: [ 551.939091][T20899] atmio16 [ 551.939097][T20899] atmio16d [ 551.939104][T20899] comedi: valid board names for ni_at_ao driver are: [ 551.939113][T20899] at-ao-6 [ 551.939120][T20899] at-ao-10 [ 551.939126][T20899] comedi: valid board names for ni_at_a2150 driver are: [ 551.939136][T20899] ni_at_a2150 [ 551.939142][T20899] comedi: valid board names for adq12b driver are: [ 551.939153][T20899] adq12b [ 551.939159][T20899] comedi: valid board names for mpc624 driver are: [ 551.939168][T20899] mpc624 [ 551.939175][T20899] comedi: valid board names for c6xdigio driver are: [ 551.939188][T20899] c6xdigio [ 551.939195][T20899] comedi: valid board names for aio_iiro_16 driver are: [ 551.939204][T20899] aio_iiro_16 [ 551.939211][T20899] comedi: valid board names for aio_aio12_8 driver are: [ 551.939220][T20899] aio_aio12_8 [ 551.939228][T20899] aio_ai12_8 [ 551.939235][T20899] aio_ao12_4 [ 551.939242][T20899] comedi: valid board names for fl512 driver are: [ 551.939252][T20899] fl512 [ 551.939260][T20899] comedi: valid board names for dmm32at driver are: [ 551.939270][T20899] dmm32at [ 551.939277][T20899] comedi: valid board names for dt282x driver are: [ 551.939285][T20899] dt2821 [ 551.939292][T20899] dt2821-f [ 551.939299][T20899] dt2821-g [ 551.939306][T20899] dt2823 [ 551.939313][T20899] dt2824-pgh [ 551.939320][T20899] dt2824-pgl [ 551.939327][T20899] dt2825 [ 551.939334][T20899] dt2827 [ 551.939342][T20899] dt2828 [ 551.939347][T20899] dt2829 [ 551.939353][T20899] dt21-ez [ 551.939359][T20899] dt23-ez [ 551.939364][T20899] dt24-ez [ 551.939370][T20899] dt24-ez-pgl [ 551.939377][T20899] comedi: valid board names for dt2817 driver are: [ 551.939387][T20899] dt2817 [ 551.939394][T20899] comedi: valid board names for dt2815 driver are: [ 551.939402][T20899] dt2815 [ 551.939408][T20899] comedi: valid board names for dt2814 driver are: [ 551.939417][T20899] dt2814 [ 551.939424][T20899] comedi: valid board names for dt2811 driver are: [ 551.939434][T20899] dt2811-pgh [ 551.939440][T20899] dt2811-pgl [ 551.939447][T20899] comedi: valid board names for dt2801 driver are: [ 551.939457][T20899] dt2801 [ 551.939462][T20899] comedi: valid board names for das6402 driver are: [ 551.939471][T20899] das6402-12 [ 551.939479][T20899] das6402-16 [ 551.939486][T20899] comedi: valid board names for das1800 driver are: [ 551.939494][T20899] das-1701st [ 551.939501][T20899] das-1701st-da [ 551.939507][T20899] das-1702st [ 551.939513][T20899] das-1702st-da [ 551.939520][T20899] das-1702hr [ 551.939526][T20899] das-1702hr-da [ 551.939532][T20899] das-1701ao [ 551.939539][T20899] das-1702ao [ 551.939545][T20899] das-1801st [ 551.939552][T20899] das-1801st-da [ 551.939559][T20899] das-1802st [ 551.939565][T20899] das-1802st-da [ 551.939572][T20899] das-1802hr [ 551.939579][T20899] das-1802hr-da [ 551.939586][T20899] das-1801hc [ 551.939592][T20899] das-1802hc [ 551.939598][T20899] das-1801ao [ 551.939605][T20899] das-1802ao [ 551.939612][T20899] comedi: valid board names for das800 driver are: [ 551.939621][T20899] das-800 [ 551.939627][T20899] cio-das800 [ 551.939634][T20899] das-801 [ 551.939641][T20899] cio-das801 [ 551.939648][T20899] das-802 [ 551.939654][T20899] cio-das802 [ 551.939661][T20899] cio-das802/16 [ 551.939667][T20899] comedi: valid board names for isa-das08 driver are: [ 551.939687][T20899] isa-das08 [ 551.939695][T20899] das08-pgm [ 551.939701][T20899] das08-pgh [ 551.939708][T20899] das08-pgl [ 551.939715][T20899] das08-aoh [ 551.939722][T20899] das08-aol [ 551.939728][T20899] das08-aom [ 551.939735][T20899] das08/jr-ao [ 551.939742][T20899] das08jr-16-ao [ 551.939748][T20899] pc104-das08 [ 551.939756][T20899] das08jr/16 [ 551.939764][T20899] comedi: valid board names for das16m1 driver are: [ 551.939773][T20899] das16m1 [ 551.939780][T20899] comedi: valid board names for dac02 driver are: [ 551.939789][T20899] dac02 [ 551.939796][T20899] comedi: valid board names for rti802 driver are: [ 551.939805][T20899] rti802 [ 551.939812][T20899] comedi: valid board names for rti800 driver are: [ 551.939821][T20899] rti800 [ 551.939828][T20899] rti815 [ 551.939835][T20899] comedi: valid board names for pcm3724 driver are: [ 551.939844][T20899] pcm3724 [ 551.939850][T20899] comedi: valid board names for pcl818 driver are: [ 551.939859][T20899] pcl818l [ 551.939867][T20899] pcl818h [ 551.939874][T20899] pcl818hd [ 551.939881][T20899] pcl818hg [ 551.939887][T20899] pcl818 [ 551.939895][T20899] pcl718 [ 551.939901][T20899] pcm3718 [ 551.939908][T20899] comedi: valid board names for pcl816 driver are: [ 551.939918][T20899] pcl816 [ 551.939925][T20899] pcl814b [ 551.939931][T20899] comedi: valid board names for pcl812 driver are: [ 551.939942][T20899] pcl812 [ 551.939950][T20899] pcl812pg [ 551.939956][T20899] acl8112pg [ 551.939962][T20899] acl8112dg [ 551.939970][T20899] acl8112hg [ 551.939976][T20899] a821pgl [ 551.939982][T20899] a821pglnda [ 551.939989][T20899] a821pgh [ 551.939995][T20899] a822pgl [ 551.940001][T20899] a822pgh [ 551.940008][T20899] a823pgl [ 551.940014][T20899] a823pgh [ 551.940020][T20899] pcl813 [ 551.940027][T20899] pcl813b [ 551.940034][T20899] acl8113 [ 551.940040][T20899] iso813 [ 551.940046][T20899] acl8216 [ 551.940052][T20899] a826pg [ 551.940059][T20899] comedi: valid board names for pcl730 driver are: [ 551.940068][T20899] pcl730 [ 551.940074][T20899] iso730 [ 551.940081][T20899] acl7130 [ 551.940088][T20899] pcm3730 [ 551.940095][T20899] pcl725 [ 551.940101][T20899] p8r8dio [ 551.940174][T20899] acl7225b [ 551.940182][T20899] p16r16dio [ 551.940189][T20899] pcl733 [ 551.940196][T20899] pcl734 [ 551.940202][T20899] opmm-1616-xt [ 551.940209][T20899] pearl-mm-p [ 551.940216][T20899] ir104-pbf [ 551.940223][T20899] comedi: valid board names for pcl726 driver are: [ 551.940232][T20899] pcl726 [ 551.940239][T20899] pcl727 [ 551.940246][T20899] pcl728 [ 551.940253][T20899] acl6126 [ 551.940260][T20899] acl6128 [ 551.940267][T20899] comedi: valid board names for pcl724 driver are: [ 551.940277][T20899] pcl724 [ 551.940283][T20899] pcl722 [ 551.940290][T20899] pcl731 [ 551.940297][T20899] acl7122 [ 551.940302][T20899] acl7124 [ 551.940309][T20899] pet48dio [ 551.940315][T20899] pcmio48 [ 551.940321][T20899] onyx-mm-dio [ 551.940327][T20899] comedi: valid board names for pcl711 driver are: [ 551.940336][T20899] pcl711 [ 551.940343][T20899] pcl711b [ 551.940349][T20899] acl8112hg [ 551.940356][T20899] acl8112dg [ 551.940362][T20899] comedi: valid board names for amplc_pc263 driver are: [ 551.940372][T20899] pc263 [ 551.945621][T20899] comedi: valid board names for amplc_pc236 driver are: [ 551.945636][T20899] pc36at [ 551.945645][T20899] comedi: valid board names for amplc_dio200 driver are: [ 551.945654][T20899] pc212e [ 551.945660][T20899] pc214e [ 551.945667][T20899] pc215e [ 551.945674][T20899] pc218e [ 551.945691][T20899] pc272e [ 551.945697][T20899] comedi: valid board names for comedi_parport driver are: [ 551.945707][T20899] comedi_parport [ 551.945715][T20899] comedi: valid board names for comedi_test driver are: [ 551.945724][T20899] comedi_test [ 551.945730][T20899] comedi: valid board names for comedi_bond driver are: [ 551.945740][T20899] comedi_bond [ 552.431450][T20485] veth0_vlan: entered promiscuous mode [ 553.108362][T20485] veth1_vlan: entered promiscuous mode [ 553.348342][T20912] sctp: [Deprecated]: syz.5.7165 (pid 20912) Use of int in max_burst socket option. [ 553.348342][T20912] Use struct sctp_assoc_value instead [ 553.485829][T20485] veth0_macvtap: entered promiscuous mode [ 553.529143][T20485] veth1_macvtap: entered promiscuous mode [ 553.617711][T20920] usb usb9: usbfs: process 20920 (syz.0.7169) did not claim interface 0 before use [ 553.714169][T20485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.796756][T20485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.871004][ T3310] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.879266][ T3310] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.879401][ T3310] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.917804][ T3310] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.247287][T20939] netlink: 'syz.5.7178': attribute type 1 has an invalid length. [ 554.247311][T20939] netlink: 'syz.5.7178': attribute type 2 has an invalid length. [ 554.322767][T20940] netlink: 'syz.0.7179': attribute type 11 has an invalid length. [ 555.458164][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.458184][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.704619][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.704640][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.782662][T21005] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7210'. [ 556.829685][T21008] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7211'. [ 557.486723][T21035] netlink: 112 bytes leftover after parsing attributes in process `syz.0.7225'. [ 558.505824][T21081] netlink: 380 bytes leftover after parsing attributes in process `syz.5.7246'. [ 558.567670][T21085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7248'. [ 559.118774][T21108] random: crng reseeded on system resumption [ 559.161861][T21109] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[20395] was attempted by ""[21109] [ 560.532079][ T32] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 560.701532][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 560.703939][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 560.703975][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 560.704004][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 560.707460][ T32] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 560.707489][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.707511][ T32] usb 1-1: Product: syz [ 560.707525][ T32] usb 1-1: Manufacturer: syz [ 560.707540][ T32] usb 1-1: SerialNumber: syz [ 560.801127][ T32] usb 1-1: config 0 descriptor?? [ 560.838514][ T32] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input48 [ 561.151454][ T4959] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 561.436270][T21151] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 561.503689][T21187] netlink: 57 bytes leftover after parsing attributes in process `syz.6.7296'. [ 561.524576][ T4959] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 561.526444][T21188] netlink: 244 bytes leftover after parsing attributes in process `syz.5.7297'. [ 561.570496][T21025] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 561.646342][ T5599] usb 1-1: USB disconnect, device number 71 [ 561.646424][ C0] xpad 1-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 562.009014][T21199] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7301'. [ 562.299155][T21209] netlink: 'syz.5.7306': attribute type 21 has an invalid length. [ 562.299249][T21209] netlink: 'syz.5.7306': attribute type 6 has an invalid length. [ 562.299265][T21209] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7306'. [ 562.483399][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.553979][ T5712] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 562.756065][T21228] syz.0.7315: vmalloc error: size 18446744073699065876, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 562.756554][T21228] CPU: 1 UID: 0 PID: 21228 Comm: syz.0.7315 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 562.756586][T21228] Tainted: [L]=SOFTLOCKUP [ 562.756594][T21228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 562.756616][T21228] Call Trace: [ 562.756629][T21228] [ 562.756639][T21228] dump_stack_lvl+0xe8/0x150 [ 562.756714][T21228] warn_alloc+0x24c/0x270 [ 562.756738][T21228] ? __se_sys_ioctl+0x47/0x170 [ 562.756799][T21228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.756824][T21228] ? __UNIQUE_ID_modinfo_13351+0x64c97564/0xffffffffffed2550 [ 562.756901][T21228] ? __pfx_warn_alloc+0x10/0x10 [ 562.756948][T21228] ? look_up_lock_class+0x57/0x110 [ 562.756982][T21228] __vmalloc_node_range_noprof+0x12c/0x1730 [ 562.757010][T21228] ? __lock_acquire+0x683/0x2ce0 [ 562.757045][T21228] ? __UNIQUE_ID_modinfo_13351+0x64c97564/0xffffffffffed2550 [ 562.757075][T21228] ? kasan_quarantine_put+0xbb/0x1f0 [ 562.757112][T21228] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 562.757147][T21228] ? __UNIQUE_ID_modinfo_13351+0x64c97564/0xffffffffffed2550 [ 562.757178][T21228] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 562.757215][T21228] vmalloc_noprof+0xb2/0xe0 [ 562.757238][T21228] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 562.757273][T21228] ? __UNIQUE_ID_modinfo_13351+0x64c97564/0xffffffffffed2550 [ 562.757301][T21228] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 562.757337][T21228] ? dvb_demux_do_ioctl+0x323/0x540 [ 562.757373][T21228] dvb_demux_do_ioctl+0x460/0x540 [ 562.757414][T21228] ? __UNIQUE_ID_modinfo_13351+0x64c97564/0xffffffffffed2550 [ 562.757443][T21228] ? __UNIQUE_ID_modinfo_13351+0x64c97564/0xffffffffffed2550 [ 562.757468][T21228] dvb_usercopy+0x199/0x2e0 [ 562.757496][T21228] ? __UNIQUE_ID_modinfo_13351+0x64c97564/0xffffffffffed2550 [ 562.757523][T21228] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 562.757557][T21228] ? __pfx_dvb_usercopy+0x10/0x10 [ 562.757601][T21228] ? __fget_files+0x3a8/0x420 [ 562.757625][T21228] ? __fget_files+0x2a/0x420 [ 562.757649][T21228] ? __UNIQUE_ID_modinfo_13351+0x64c97564/0xffffffffffed2550 [ 562.757674][T21228] ? __UNIQUE_ID_modinfo_13351+0x64c97564/0xffffffffffed2550 [ 562.757699][T21228] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 562.757731][T21228] ? __UNIQUE_ID_modinfo_13351+0x64c97564/0xffffffffffed2550 [ 562.757756][T21228] dvb_demux_ioctl+0x29/0x40 [ 562.757788][T21228] __se_sys_ioctl+0xff/0x170 [ 562.757818][T21228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.757852][T21228] do_syscall_64+0x174/0x580 [ 562.757877][T21228] ? trace_irq_disable+0x3b/0x140 [ 562.757904][T21228] ? clear_bhb_loop+0x40/0x90 [ 562.757930][T21228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.757950][T21228] RIP: 0033:0x7f6b83b1ce59 [ 562.758014][T21228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.758033][T21228] RSP: 002b:00007f6b81d76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 562.758098][T21228] RAX: ffffffffffffffda RBX: 00007f6b83d95fa0 RCX: 00007f6b83b1ce59 [ 562.758114][T21228] RDX: ffffffffff600014 RSI: 0000000000006f2d RDI: 0000000000000003 [ 562.758128][T21228] RBP: 00007f6b83bb2e6f R08: 0000000000000000 R09: 0000000000000000 [ 562.758142][T21228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.758155][T21228] R13: 00007f6b83d96038 R14: 00007f6b83d95fa0 R15: 00007ffe9473fc28 [ 562.758181][T21228] ? __UNIQUE_ID_modinfo_13351+0x64c97564/0xffffffffffed2550 [ 562.758216][T21228] [ 562.760700][T21228] Mem-Info: [ 562.760717][T21228] active_anon:6306 inactive_anon:0 isolated_anon:0 [ 562.760717][T21228] active_file:0 inactive_file:18900 isolated_file:0 [ 562.760717][T21228] unevictable:768 dirty:229 writeback:0 [ 562.760717][T21228] slab_reclaimable:11066 slab_unreclaimable:114173 [ 562.760717][T21228] mapped:39814 shmem:1308 pagetables:1291 [ 562.760717][T21228] sec_pagetables:0 bounce:0 [ 562.760717][T21228] kernel_misc_reclaimable:0 [ 562.760717][T21228] free:1311055 free_pcp:3770 free_cma:0 [ 562.760853][T21228] Node 0 active_anon:25224kB inactive_anon:0kB active_file:0kB inactive_file:75432kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:159252kB dirty:916kB writeback:0kB shmem:3696kB kernel_stack:13664kB pagetables:5032kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 562.760914][T21228] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:168kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 562.760967][T21228] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 562.761039][T21228] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 562.761092][T21228] Node 0 DMA32 free:1294612kB boost:0kB min:3912kB low:6436kB high:8960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25224kB inactive_anon:0kB active_file:0kB inactive_file:75432kB unevictable:1536kB writepending:916kB zspages:0kB present:3129332kB managed:2552060kB mlocked:0kB bounce:0kB free_pcp:14824kB local_pcp:7936kB free_cma:0kB [ 562.761155][T21228] lowmem_reserve[]: 0 0 0 0 0 [ 562.761190][T21228] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:864kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 562.761249][T21228] lowmem_reserve[]: 0 0 0 0 0 [ 562.772825][T21228] Node 1 Normal free:3934248kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:168kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 562.773032][T21228] lowmem_reserve[]: 0 0 0 0 0 [ 562.773133][T21228] Node 0 DMA: [ 562.812364][ T5712] usb 7-1: Using ep0 maxpacket: 32 [ 562.845492][ T5712] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 562.845566][ T5712] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 562.845634][ T5712] usb 7-1: config 0 interface 0 has no altsetting 0 [ 562.909778][ T5712] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 562.909870][ T5712] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.909956][ T5712] usb 7-1: Product: syz [ 562.909983][ T5712] usb 7-1: Manufacturer: syz [ 562.910022][ T5712] usb 7-1: SerialNumber: syz [ 563.047766][ T5712] usb 7-1: config 0 descriptor?? [ 563.060490][T21228] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 563.060841][T21228] Node 0 DMA32: 1566*4kB (UME) 615*8kB (UME) 337*16kB (UME) 310*32kB (UME) 145*64kB (UME) 85*128kB (UME) 34*256kB (M) 19*512kB (M) 25*1024kB (ME) 18*2048kB (M) 285*4096kB (UM) = 1294912kB [ 563.062012][T21228] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 563.062330][T21228] Node 1 Normal: 4*4kB (UM) 1*8kB (M) 1*16kB (U) 8*32kB (UM) 6*64kB (UM) 5*128kB (UM) 3*256kB (UM) 2*512kB (M) 3*1024kB (UM) 2*2048kB (M) 958*4096kB (M) = 3934248kB [ 563.063151][T21228] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 563.063202][T21228] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 563.063251][T21228] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 563.063300][T21228] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 563.063343][T21228] 20204 total pagecache pages [ 563.063390][T21228] 0 pages in swap cache [ 563.063413][T21228] Free swap = 124996kB [ 563.063428][T21228] Total swap = 124996kB [ 563.063472][T21228] 2097051 pages RAM [ 563.063485][T21228] 0 pages HighMem/MovableOnly [ 563.063506][T21228] 427206 pages reserved [ 563.063533][T21228] 0 pages cma reserved [ 563.897373][ T5712] gs_usb 7-1:0.0: Couldn't get device config: (err=-71) [ 563.897421][ T5712] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71 [ 563.960535][ T5712] usb 7-1: USB disconnect, device number 2 [ 564.884376][T21285] netlink: 'syz.5.7343': attribute type 2 has an invalid length. [ 565.110624][T21297] netlink: 393 bytes leftover after parsing attributes in process `syz.5.7348'. [ 566.012334][ T5599] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 566.167056][ T5599] usb 5-1: unable to get BOS descriptor or descriptor too short [ 566.168641][ T5599] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 566.168668][ T5599] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 566.168688][ T5599] usb 5-1: config 63 has no interface number 0 [ 566.168720][ T5599] usb 5-1: config 63 interface 66 has no altsetting 0 [ 566.188143][ T5599] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 566.188173][ T5599] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.188192][ T5599] usb 5-1: Product: syz [ 566.188207][ T5599] usb 5-1: Manufacturer: syz [ 566.188227][ T5599] usb 5-1: SerialNumber: syz [ 566.528431][ T5599] uvcvideo 5-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 566.530127][ T5599] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 566.530748][ T5599] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 566.558441][ T5599] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 566.559749][ T5599] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 566.586123][ T5599] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 566.586219][ T5599] uvcvideo 5-1:63.66: No streaming interface found for terminal 29. [ 566.586350][ T5599] uvcvideo 5-1:63.66: Entity type for entity Output 32773 was not initialized! [ 566.747004][ T5599] usb 5-1: USB disconnect, device number 22 [ 567.051667][T20885] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 567.214046][T20885] usb 7-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 567.214084][T20885] usb 7-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 567.214111][T20885] usb 7-1: config 1 interface 0 has no altsetting 0 [ 567.218241][T20885] usb 7-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.40 [ 567.218272][T20885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.218293][T20885] usb 7-1: Product: syz [ 567.218308][T20885] usb 7-1: Manufacturer: syz [ 567.218322][T20885] usb 7-1: SerialNumber: syz [ 567.552354][T20885] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input49 [ 567.567467][T21371] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 567.580815][ T4959] bcm5974 7-1:1.0: could not read from device [ 567.627455][T20885] usb 7-1: USB disconnect, device number 3 [ 567.877947][T21380] openvswitch: netlink: Message has 8 unknown bytes. [ 568.042885][T16479] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 568.191479][T16479] usb 5-1: Using ep0 maxpacket: 16 [ 568.202997][T16479] usb 5-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 568.203027][T16479] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.203065][T16479] usb 5-1: Product: syz [ 568.203080][T16479] usb 5-1: Manufacturer: syz [ 568.203095][T16479] usb 5-1: SerialNumber: syz [ 568.273072][T16479] usb 5-1: config 0 descriptor?? [ 568.287924][T16479] usb-storage 5-1:0.0: USB Mass Storage device detected [ 568.301752][T16479] usb-storage 5-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 568.301779][T16479] usb-storage 5-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 568.301779][T16479] Please send a copy of this message to and [ 568.525043][ T5340] usb 5-1: USB disconnect, device number 23 [ 568.850501][T21406] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7401'. [ 569.258385][T21384] infiniband syz1: set down [ 569.277893][T21384] infiniband syz1: added ipvlan1 [ 569.571696][T21384] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 569.571739][T21384] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 569.571784][T21384] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 569.710996][T21384] RDS/IB: syz1: added [ 569.712668][T21384] smc: adding ib device syz1 with port count 1 [ 569.712890][T21384] smc: ib device syz1 port 1 has no pnetid [ 570.345130][ T37] audit: type=1400 audit(1782751502.447:237): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=21459 comm="syz.4.7425" [ 570.727248][T21476] netlink: 'syz.6.7433': attribute type 19 has an invalid length. [ 571.253109][T21493] CIFS: bad ip= option (%‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 571.331571][ T5712] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 571.449870][T21501] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7445'. [ 571.504203][ T5712] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 571.504234][ T5712] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.504255][ T5712] usb 5-1: config 0 has no interface number 0 [ 571.504301][ T5712] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 571.504329][ T5712] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 571.504353][ T5712] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 571.519604][ T5712] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 571.519659][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.519682][ T5712] usb 5-1: Product: syz [ 571.519699][ T5712] usb 5-1: Manufacturer: syz [ 571.519730][ T5712] usb 5-1: SerialNumber: syz [ 571.625222][T21503] openvswitch: netlink: IP tunnel TTL not specified. [ 571.627853][ T5712] usb 5-1: config 0 descriptor?? [ 572.076219][ T5712] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 572.173609][ T5712] usb 5-1: USB disconnect, device number 24 [ 572.504670][T21531] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 572.683650][T21538] netlink: 'syz.0.7463': attribute type 21 has an invalid length. [ 573.083347][T21554] 9pnet_fd: p9_fd_create_unix (21554): problem connecting socket: ./file0: -111 [ 573.143122][T21556] overlayfs: conflicting options: nfs_export=on,index=off [ 573.931706][T20885] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 574.094919][T20885] usb 5-1: unable to get BOS descriptor or descriptor too short [ 574.096919][T20885] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.096945][T20885] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 574.097011][T20885] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 574.120649][T20885] usb 5-1: New USB device found, idVendor=0e41, idProduct=4141, bcdDevice= 0.40 [ 574.120683][T20885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.120706][T20885] usb 5-1: Product: syz [ 574.120722][T20885] usb 5-1: Manufacturer: syz [ 574.120739][T20885] usb 5-1: SerialNumber: syz [ 574.434099][T20885] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor [ 574.434128][T20885] usb 5-1: 1:1 : format type 193 is not supported yet [ 574.436260][T20885] usb 5-1: 0:2 : does not exist [ 574.582028][T20885] usb 5-1: USB disconnect, device number 25 [ 574.709812][T21152] udevd[21152]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 575.182806][T21607] netlink: 244 bytes leftover after parsing attributes in process `syz.4.7496'. [ 576.006064][T21637] netlink: 'syz.4.7511': attribute type 10 has an invalid length. [ 576.549344][T21653] rdma_rxe: rxe_newlink: failed to add veth1_vlan [ 576.841701][T21672] netlink: 'syz.5.7528': attribute type 1 has an invalid length. [ 576.841724][T21672] netlink: 'syz.5.7528': attribute type 2 has an invalid length. [ 576.841785][T21672] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7528'. [ 577.471590][T20885] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 577.645293][T20885] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 577.645334][T20885] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 577.645357][T20885] usb 7-1: config 0 has no interface number 0 [ 577.645402][T20885] usb 7-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 577.645431][T20885] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 577.645460][T20885] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 577.645488][T20885] usb 7-1: config 0 interface 52 has no altsetting 0 [ 577.647221][T20885] usb 7-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 577.647250][T20885] usb 7-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 577.647273][T20885] usb 7-1: Product: syz [ 577.647289][T20885] usb 7-1: SerialNumber: syz [ 577.763876][T20885] usb 7-1: config 0 descriptor?? [ 578.012636][T20885] input: syz (Stick) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.52/input/input52 [ 578.266354][ T11] usb 7-1: USB disconnect, device number 4 [ 578.266482][ C1] synaptics_usb 7-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 578.844172][T20885] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 578.995584][T20885] usb 1-1: Using ep0 maxpacket: 16 [ 578.999474][T20885] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 579.050993][T20885] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 579.051027][T20885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.051049][T20885] usb 1-1: Product: syz [ 579.051065][T20885] usb 1-1: Manufacturer: syz [ 579.051081][T20885] usb 1-1: SerialNumber: syz [ 579.097804][T20885] usb 1-1: config 0 descriptor?? [ 579.135092][T20885] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 579.161507][T20885] usb 1-1: Detected FT232R [ 579.308836][T20885] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 579.309298][T20885] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 579.309808][T20885] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 579.390630][T20885] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 579.435889][T20885] usb 1-1: USB disconnect, device number 72 [ 579.485499][T20885] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 579.489203][T20885] ftdi_sio 1-1:0.0: device disconnected [ 579.688822][T21758] 9p: Bad value for 'msize' [ 579.938077][T21766] netlink: 'syz.4.7575': attribute type 4 has an invalid length. [ 580.191455][T20885] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 580.353667][T20885] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 580.353702][T20885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.353724][T20885] usb 7-1: Product: syz [ 580.353753][T20885] usb 7-1: Manufacturer: syz [ 580.353770][T20885] usb 7-1: SerialNumber: syz [ 580.411154][T20885] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 580.628880][ T11] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 580.653684][T21794] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7589'. [ 580.795126][T21796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7590'. [ 581.223226][ T5340] usb 7-1: USB disconnect, device number 5 [ 581.451544][T21819] block nbd0: NBD_DISCONNECT [ 581.606895][T21827] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7605'. [ 581.734797][T21832] netlink: 'syz.4.7607': attribute type 21 has an invalid length. [ 581.914064][ T11] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 581.976131][ T11] ath9k_htc: Failed to initialize the device [ 581.976992][ T5340] usb 7-1: ath9k_htc: USB layer deinitialized [ 582.205182][T21852] netlink: zone id is out of range [ 582.205199][T21852] netlink: zone id is out of range [ 582.205209][T21852] netlink: zone id is out of range [ 582.205231][T21852] netlink: zone id is out of range [ 582.205240][T21852] netlink: zone id is out of range [ 582.205249][T21852] netlink: zone id is out of range [ 582.205258][T21852] netlink: zone id is out of range [ 582.205268][T21852] netlink: zone id is out of range [ 582.205277][T21852] netlink: zone id is out of range [ 582.205286][T21852] netlink: zone id is out of range [ 582.360611][T21858] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7620'. [ 582.836699][T21879] IPVS: length: 140 != 8 [ 583.519975][T21911] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7645'. [ 583.781026][T21922] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7650'. [ 584.008293][T21932] tmpfs: Bad value for 'mpol' [ 584.513343][T21958] netlink: 5 bytes leftover after parsing attributes in process `syz.5.7668'. [ 584.513858][T21958] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 584.516668][T21956] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7667'. [ 584.554601][T21958] 0ªî{X¹¦: entered allmulticast mode [ 584.881432][ T5340] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 585.044779][ T5340] usb 1-1: unable to get BOS descriptor or descriptor too short [ 585.045380][ T5340] usb 1-1: not running at top speed; connect to a high speed hub [ 585.046567][ T5340] usb 1-1: config 250 has an invalid interface number: 239 but max is 0 [ 585.046595][ T5340] usb 1-1: config 250 has no interface number 0 [ 585.046643][ T5340] usb 1-1: config 250 interface 239 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 585.046670][ T5340] usb 1-1: config 250 interface 239 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 585.046709][ T5340] usb 1-1: config 250 interface 239 altsetting 2 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 585.046736][ T5340] usb 1-1: config 250 interface 239 altsetting 2 endpoint 0x83 has invalid maxpacket 59526, setting to 64 [ 585.046782][ T5340] usb 1-1: config 250 interface 239 altsetting 2 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 585.046819][ T5340] usb 1-1: config 250 interface 239 has no altsetting 0 [ 585.047507][ T5340] usb 1-1: language id specifier not provided by device, defaulting to English [ 585.061970][ T5340] usb 1-1: New USB device found, idVendor=05e0, idProduct=2009, bcdDevice=fc.ef [ 585.062055][ T5340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.062118][ T5340] usb 1-1: Product: syz [ 585.062201][ T5340] usb 1-1: SerialNumber: syz [ 585.145877][T21961] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 585.156806][T21961] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 585.481955][ T5340] ipaq 1-1:250.239: PocketPC PDA converter detected [ 585.482283][ T5340] usb 1-1: active config #250 != 1 ?? [ 585.515937][ T5340] usb 1-1: USB disconnect, device number 73 [ 586.651484][ T5712] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 586.840931][ T5712] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 586.840966][ T5712] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.840989][ T5712] usb 7-1: Product: syz [ 586.841006][ T5712] usb 7-1: Manufacturer: syz [ 586.841022][ T5712] usb 7-1: SerialNumber: syz [ 586.878655][ T5712] usb 7-1: config 0 descriptor?? [ 586.898449][ T5712] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 006 [ 587.309925][ T5712] (null): failure reading functionality [ 587.364444][ T5712] i2c i2c-1: failure reading functionality [ 587.499718][ T5712] i2c i2c-1: connected i2c-tiny-usb device [ 587.508139][ T5712] usb 7-1: USB disconnect, device number 6 [ 587.569359][T22060] netlink: 'syz.4.7718': attribute type 9 has an invalid length. [ 588.661504][ T5712] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 588.818120][ T5712] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 588.818150][ T5712] usb 7-1: config 0 has no interface number 0 [ 588.818197][ T5712] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 588.818224][ T5712] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 588.818253][ T5712] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 588.818282][ T5712] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 588.818307][ T5712] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 588.818351][ T5712] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 588.818377][ T5712] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.918311][ T5712] usb 7-1: config 0 descriptor?? [ 588.969386][ T5712] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 589.164216][T22094] ldusb 7-1:0.55: Couldn't submit interrupt_in_urb -90 [ 589.166745][ T11] usb 7-1: USB disconnect, device number 7 [ 589.203018][ T11] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 589.457064][T22140] binder: binder_mmap: 22139 2000007c4000-2000007c5000 bad vm_flags failed -1 [ 589.594686][T22146] netlink: 'syz.4.7761': attribute type 1 has an invalid length. [ 589.966460][T22164] sg_write: data in/out 808464396/136 bytes for SCSI command 0x0-- guessing data in; [ 589.966460][T22164] program syz.0.7768 not setting count and/or reply_len properly [ 590.129769][T22171] netlink: 6 bytes leftover after parsing attributes in process `syz.4.7772'. [ 590.336721][T22182] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7779'. [ 590.499824][T22190] net_ratelimit: 360 callbacks suppressed [ 590.499847][T22190] netlink: zone id is out of range [ 590.499858][T22190] netlink: zone id is out of range [ 590.499869][T22190] netlink: zone id is out of range [ 590.499878][T22190] netlink: zone id is out of range [ 590.499888][T22190] netlink: zone id is out of range [ 590.499897][T22190] netlink: zone id is out of range [ 590.499907][T22190] netlink: zone id is out of range [ 590.499916][T22190] netlink: zone id is out of range [ 590.499926][T22190] netlink: zone id is out of range [ 590.499935][T22190] netlink: zone id is out of range [ 590.726695][T22194] hfs: unable to load iocharset "io#harset" [ 591.051842][T22211] No source specified [ 591.256178][T22219] netlink: 128 bytes leftover after parsing attributes in process `syz.6.7797'. [ 591.462088][T22229] tc_dump_action: action bad kind [ 591.669039][T22235] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 592.142539][T22254] netlink: 4416 bytes leftover after parsing attributes in process `syz.0.7815'. [ 592.311954][T22264] syz.4.7818 (22264): /proc/22264/oom_adj is deprecated, please use /proc/22264/oom_score_adj instead. [ 592.634288][T20885] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 592.781400][T20885] usb 6-1: Using ep0 maxpacket: 8 [ 592.787176][T20885] usb 6-1: unable to get BOS descriptor or descriptor too short [ 592.789880][T20885] usb 6-1: config 4 interface 0 has no altsetting 0 [ 592.816280][T20885] usb 6-1: string descriptor 0 read error: -22 [ 592.816391][T20885] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 592.816415][T20885] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 592.875546][T20885] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 592.897407][T20885] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 592.899400][T20885] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 592.899456][T20885] usb 6-1: media controller created [ 592.947177][T20885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 593.177767][T22292] netlink: 'syz.6.7832': attribute type 3 has an invalid length. [ 593.371557][ T32] usb 6-1: USB disconnect, device number 2 [ 594.781513][ T5712] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 594.941918][ T5712] usb 1-1: Using ep0 maxpacket: 32 [ 594.958553][ T5712] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 594.958584][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.958606][ T5712] usb 1-1: Product: syz [ 594.958621][ T5712] usb 1-1: Manufacturer: syz [ 594.958646][ T5712] usb 1-1: SerialNumber: syz [ 595.013837][ T5712] usb 1-1: config 0 descriptor?? [ 595.250663][ T5712] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 595.250695][ T5712] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 595.452661][ T5712] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 595.504134][ T5712] usb 1-1: USB disconnect, device number 74 [ 595.555336][T22394] netlink: 'syz.4.7879': attribute type 62 has an invalid length. [ 595.561795][ T32] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 595.721975][ T32] usb 7-1: Using ep0 maxpacket: 32 [ 595.727148][ T32] usb 7-1: config 0 has an invalid descriptor of length 254, skipping remainder of the config [ 595.746024][T22402] netlink: 'syz.4.7882': attribute type 33 has an invalid length. [ 595.776146][ T32] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 595.776170][ T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.776185][ T32] usb 7-1: Product: syz [ 595.776196][ T32] usb 7-1: Manufacturer: syz [ 595.776207][ T32] usb 7-1: SerialNumber: syz [ 595.825682][ T32] usb 7-1: config 0 descriptor?? [ 595.841496][ T32] cdc_ether 7-1:0.0: missing cdc header descriptor [ 595.852645][ T32] usb 7-1: unsupported MDLM descriptors [ 595.916026][T22404] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000) [ 596.073401][ T32] usb 7-1: USB disconnect, device number 8 [ 596.389459][T22424] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7893'. [ 596.389496][T22424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7893'. [ 596.389515][T22424] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7893'. [ 596.436288][T22424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7893'. [ 596.436317][T22424] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7893'. [ 596.949627][T22446] netlink: 'syz.4.7906': attribute type 10 has an invalid length. [ 596.967978][T22446] team0: Device vxcan0 is of different type [ 598.022045][ T11] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 598.174371][ T11] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 598.174402][ T11] usb 6-1: config 0 has no interface number 0 [ 598.177750][ T11] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 598.177780][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.177802][ T11] usb 6-1: Product: syz [ 598.177818][ T11] usb 6-1: Manufacturer: syz [ 598.177833][ T11] usb 6-1: SerialNumber: syz [ 598.229593][ T11] usb 6-1: config 0 descriptor?? [ 598.586802][T22510] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7936'. [ 598.669806][ T11] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 598.669840][ T11] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 598.670150][ T11] asix 6-1:0.251: probe with driver asix failed with error -5 [ 598.743426][ T11] usb 6-1: USB disconnect, device number 3 [ 599.265940][ T32] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 599.411424][ T32] usb 5-1: Using ep0 maxpacket: 16 [ 599.416090][ T32] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 599.416131][ T32] usb 5-1: config 0 has no interface number 0 [ 599.416177][ T32] usb 5-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 599.416203][ T32] usb 5-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x3C, changing to 0xC [ 599.416229][ T32] usb 5-1: config 0 interface 49 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 599.436083][ T32] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 599.436169][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.436231][ T32] usb 5-1: Product: syz [ 599.436272][ T32] usb 5-1: Manufacturer: syz [ 599.436325][ T32] usb 5-1: SerialNumber: syz [ 599.559823][ T32] usb 5-1: config 0 descriptor?? [ 599.560829][T22526] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 599.813745][ T32] usb 5-1: USB disconnect, device number 26 [ 600.181025][T22560] 9p: Unknown Cache mode or invalid value  [ 600.298401][T22564] netlink: 'syz.6.7963': attribute type 10 has an invalid length. [ 600.372784][T22564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.405338][T22564] team0: Port device bond0 added [ 601.266584][ T5620] Bluetooth: hci4: unexpected subevent 0x01 length: 32 > 18 [ 601.810965][T22622] net_ratelimit: 7 callbacks suppressed [ 601.810984][T22622] openvswitch: netlink: IPv6 tunnel dst address is zero [ 601.954152][T22627] netlink: 'syz.5.7994': attribute type 23 has an invalid length. [ 602.704530][T16479] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 602.867141][T16479] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 602.867170][T16479] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 602.867221][T16479] usb 7-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 602.867875][T22668] tmpfs: Bad value for 'size' [ 602.870487][T16479] usb 7-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 602.870517][T16479] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.870539][T16479] usb 7-1: Product: syz [ 602.870554][T16479] usb 7-1: Manufacturer: syz [ 602.870571][T16479] usb 7-1: SerialNumber: syz [ 603.053025][T22672] CIFS mount error: No usable UNC path provided in device string! [ 603.053025][T22672] [ 603.053096][T22672] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 603.183461][T16479] usb 7-1: 0:2 : does not exist [ 603.363172][T16479] usb 7-1: USB disconnect, device number 9 [ 603.442710][T21152] udevd[21152]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 603.497560][ T5619] Bluetooth: hci4: command 0x0c1a tx timeout [ 603.891223][T16479] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 604.076396][T16479] usb 6-1: Using ep0 maxpacket: 32 [ 604.078375][T16479] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 604.078402][T16479] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 604.078426][T16479] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.078447][T16479] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 604.078479][T16479] usb 6-1: config 1 has no interface number 0 [ 604.078528][T16479] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 604.078554][T16479] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.183594][T16479] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 604.427289][T16479] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values [ 604.427678][T16479] snd_usb_pod 6-1:1.1: invalid control EP [ 604.427714][T16479] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 604.427979][T16479] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 604.428413][T16479] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 604.654640][ T5712] usb 6-1: USB disconnect, device number 4 [ 605.159911][T22737] netlink: 'syz.6.8048': attribute type 21 has an invalid length. [ 605.340592][T22744] netlink: 'syz.5.8051': attribute type 28 has an invalid length. [ 605.340617][T22744] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8051'. [ 605.719601][ T5619] Bluetooth: hci4: command 0x0c1a tx timeout [ 605.766976][T22759] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 606.136346][ T5712] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 606.236367][T22775] dlm: no locking on control device [ 606.300510][ T5712] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 606.300539][ T5712] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 606.300592][ T5712] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 606.303102][ T5712] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 606.303123][ T5712] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.303138][ T5712] usb 7-1: Product: syz [ 606.303149][ T5712] usb 7-1: Manufacturer: syz [ 606.303160][ T5712] usb 7-1: SerialNumber: syz [ 606.601907][ T5712] usb 7-1: 2:0: failed to get current value for ch 0 (-71) [ 606.613599][ T5712] usb 7-1: unit 6 not found! [ 606.690536][ T5712] usb 7-1: USB disconnect, device number 10 [ 608.596975][T22843] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8099'. [ 609.172493][T20885] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 609.335718][T20885] usb 7-1: Using ep0 maxpacket: 8 [ 609.348050][T20885] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 609.351479][T20885] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 609.351511][T20885] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 609.351554][T20885] usb 7-1: Product: syz [ 609.351571][T20885] usb 7-1: Manufacturer: syz [ 609.351586][T20885] usb 7-1: SerialNumber: syz [ 609.627201][T20885] usb 7-1: Handspring Visor / Palm OS: No valid connect info available [ 609.627220][T20885] usb 7-1: Handspring Visor / Palm OS: port 83, is for Debugger use [ 609.627235][T20885] usb 7-1: Handspring Visor / Palm OS: port 171, is for unknown use [ 609.627249][T20885] usb 7-1: Handspring Visor / Palm OS: Number of ports: 2 [ 609.815768][ T11] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 609.841968][T20885] usb 7-1: palm_os_3_probe - error -71 getting bytes available request [ 609.842134][T20885] visor 7-1:1.0: Handspring Visor / Palm OS converter detected [ 609.863272][T20885] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 609.875446][T20885] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 609.892428][T20885] usb 7-1: USB disconnect, device number 11 [ 609.898190][T20885] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 609.918288][T20885] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 609.922452][T20885] visor 7-1:1.0: device disconnected [ 609.988352][ T11] usb 6-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 609.988386][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.010200][ T11] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 610.442923][ T11] gspca_sunplus: reg_w_riv err -71 [ 610.443029][ T11] sunplus 6-1:8.0: probe with driver sunplus failed with error -71 [ 610.461079][ T11] usb 6-1: USB disconnect, device number 5 [ 610.739863][T22883] netlink: 'syz.6.8119': attribute type 10 has an invalid length. [ 610.739879][T22883] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8119'. [ 610.787109][T22883] team0: Port device geneve1 added [ 610.856570][T22885] tmpfs: Bad value for 'mpol' [ 610.962793][T22889] netlink: 'syz.6.8122': attribute type 2 has an invalid length. [ 610.962809][T22889] netlink: 248 bytes leftover after parsing attributes in process `syz.6.8122'. [ 611.517586][T22907] netlink: 768 bytes leftover after parsing attributes in process `syz.5.8131'. [ 611.744562][T22915] misc userio: The device must be registered before sending interrupts [ 611.981947][T22923] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8139'. [ 612.299740][T22932] netlink: 10 bytes leftover after parsing attributes in process `syz.5.8144'. [ 612.442493][ T5619] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 612.485048][ T5619] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 612.487550][ T5619] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 612.494935][ T5619] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 612.497456][ T5619] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 612.939213][T22933] xfrm0 speed is unknown, defaulting to 1000 [ 612.989053][ T11] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 613.151657][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 613.151690][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 613.168592][ T11] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 613.168684][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.168750][ T11] usb 6-1: Product: syz [ 613.168787][ T11] usb 6-1: Manufacturer: syz [ 613.168842][ T11] usb 6-1: SerialNumber: syz [ 613.215610][ T11] usb 6-1: config 0 descriptor?? [ 613.544575][ T11] usb 6-1: USB disconnect, device number 6 [ 613.680442][T20873] udevd[20873]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 614.214803][T22933] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.215173][T22933] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.215513][T22933] bridge_slave_0: entered allmulticast mode [ 614.223784][T22933] bridge_slave_0: entered promiscuous mode [ 614.257195][T22933] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.257576][T22933] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.257921][T22933] bridge_slave_1: entered allmulticast mode [ 614.298832][T22933] bridge_slave_1: entered promiscuous mode [ 614.403230][T22933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.427215][T22933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.589743][T22933] team0: Port device team_slave_0 added [ 614.607801][T22933] team0: Port device team_slave_1 added [ 614.716388][T22933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.716407][T22933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.716440][T22933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.749947][T22933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.750006][T22933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.750096][T22933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.795644][ T5620] Bluetooth: hci7: command tx timeout [ 614.897004][T22933] hsr_slave_0: entered promiscuous mode [ 614.898785][T22933] hsr_slave_1: entered promiscuous mode [ 614.900108][T22933] debugfs: 'hsr0' already exists in 'hsr' [ 614.900134][T22933] Cannot create hsr debugfs directory [ 615.486752][T22980] netlink: 'syz.5.8159': attribute type 15 has an invalid length. [ 615.486774][T22980] netlink: 666 bytes leftover after parsing attributes in process `syz.5.8159'. [ 616.000247][T22933] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 616.074212][T22933] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 616.089193][T22933] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 616.134386][T22933] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 616.137207][T22933] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 616.251647][T22933] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 616.253272][T22933] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 616.292148][T22933] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 616.478025][T22933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.561433][T22933] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.580500][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.580737][ T3295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.635022][ T1030] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.635193][ T1030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.008704][ T5620] Bluetooth: hci7: command tx timeout [ 617.582555][T22933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.810594][ T5340] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 617.880413][T22933] veth0_vlan: entered promiscuous mode [ 617.908275][T22933] veth1_vlan: entered promiscuous mode [ 617.978516][T22933] veth0_macvtap: entered promiscuous mode [ 617.992565][T22933] veth1_macvtap: entered promiscuous mode [ 618.010044][ T5340] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.010081][ T5340] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 618.010125][ T5340] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 618.010141][ T5340] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.034356][ T5340] usb 6-1: config 0 descriptor?? [ 618.109963][T22933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.144674][T22933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.188265][ T1030] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.191036][ T1030] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.191148][ T1030] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.191187][ T1030] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.555915][ T5340] Bluetooth: Can't get version to change to load ram patch err [ 618.555935][ T5340] Bluetooth: Loading patch file failed [ 618.555970][ T5340] ath3k 6-1:0.0: probe with driver ath3k failed with error -71 [ 618.590336][ T5340] usb 6-1: USB disconnect, device number 7 [ 618.852042][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.852067][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.217661][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.217680][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.245602][ T5620] Bluetooth: hci7: command tx timeout [ 619.724057][ T43] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 619.929686][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 619.931745][ T43] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 619.931774][ T43] usb 6-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 619.931796][ T43] usb 6-1: config 63 has no interface number 0 [ 619.931830][ T43] usb 6-1: config 63 interface 66 has no altsetting 0 [ 619.936947][ T43] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 619.936978][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.936999][ T43] usb 6-1: Product: syz [ 619.937014][ T43] usb 6-1: Manufacturer: syz [ 619.937029][ T43] usb 6-1: SerialNumber: syz [ 620.243432][ T43] uvcvideo 6-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 620.243574][ T43] uvcvideo 6-1:63.66: No valid video chain found. [ 620.282781][ T43] usb 6-1: USB disconnect, device number 8 [ 620.786520][T23077] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8195'. [ 621.088935][ T5619] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 621.125711][ T5619] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 621.130400][ T5619] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 621.131546][ T5619] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 621.132305][ T5619] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 621.456320][ T5619] Bluetooth: hci7: command tx timeout [ 621.823196][T23107] netlink: 164 bytes leftover after parsing attributes in process `syz.7.8205'. [ 621.956964][ T37] audit: type=1326 audit(1782751552.731:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23111 comm="syz.7.8208" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235432ce59 code=0x7ffc0000 [ 621.958388][ T37] audit: type=1326 audit(1782751552.731:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23111 comm="syz.7.8208" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235432ce59 code=0x7ffc0000 [ 622.016820][ T37] audit: type=1326 audit(1782751552.787:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23111 comm="syz.7.8208" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f235432ce59 code=0x7ffc0000 [ 622.017640][ T37] audit: type=1326 audit(1782751552.787:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23111 comm="syz.7.8208" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235432ce59 code=0x7ffc0000 [ 622.045433][T23114] program syz.5.8209 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 622.254673][T23082] xfrm0 speed is unknown, defaulting to 1000 [ 622.587895][T23129] sg_write: data in/out 200668/136 bytes for SCSI command 0x0-- guessing data in; [ 622.587895][T23129] program syz.7.8216 not setting count and/or reply_len properly [ 623.339353][ T5619] Bluetooth: hci8: command tx timeout [ 623.365271][T23148] netlink: 'syz.7.8225': attribute type 21 has an invalid length. [ 623.618250][T23156] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8229'. [ 624.260028][T23176] netlink: 140 bytes leftover after parsing attributes in process `syz.5.8239'. [ 624.937352][T23198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8248'. [ 625.016971][T23200] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.480697][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.561107][ T5619] Bluetooth: hci8: command tx timeout [ 625.588731][T23082] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.589146][T23082] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.589515][T23082] bridge_slave_0: entered allmulticast mode [ 625.618540][T23082] bridge_slave_0: entered promiscuous mode [ 625.638187][T23082] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.647892][T23082] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.661244][T23082] bridge_slave_1: entered allmulticast mode [ 625.675844][T23082] bridge_slave_1: entered promiscuous mode [ 625.968515][T23082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.978154][T23082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.181799][T23082] team0: Port device team_slave_0 added [ 626.187716][T23082] team0: Port device team_slave_1 added [ 626.345770][T23241] bond0: (slave bond_slave_1): Releasing backup interface [ 626.579262][T23251] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8273'. [ 626.579288][T23251] openvswitch: netlink: Missing key (keys=40, expected=100) [ 626.584624][T23082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.584637][T23082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.584659][T23082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.659868][T23082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.659896][T23082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.659930][T23082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.987577][T23082] hsr_slave_0: entered promiscuous mode [ 627.045933][T23082] hsr_slave_1: entered promiscuous mode [ 627.059687][T23082] debugfs: 'hsr0' already exists in 'hsr' [ 627.059718][T23082] Cannot create hsr debugfs directory [ 627.698838][ T5620] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 627.760857][ T5620] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 627.786955][ T5620] Bluetooth: hci8: command tx timeout [ 627.793108][T23277] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 627.819049][T23277] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 627.819867][T23277] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 628.061439][T23284] sg_write: data in/out 235872/136 bytes for SCSI command 0x0-- guessing data in; [ 628.061439][T23284] program syz.5.8288 not setting count and/or reply_len properly [ 628.483895][ T11] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 628.648757][ T11] usb 8-1: Using ep0 maxpacket: 16 [ 628.652701][ T11] usb 8-1: config index 0 descriptor too short (expected 51443, got 18) [ 628.682334][ T11] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 628.682368][ T11] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.682391][ T11] usb 8-1: Product: syz [ 628.682407][ T11] usb 8-1: Manufacturer: syz [ 628.682423][ T11] usb 8-1: SerialNumber: syz [ 628.722252][ T11] r8152-cfgselector 8-1: Unknown version 0x0000 [ 628.722278][ T11] r8152-cfgselector 8-1: config 0 descriptor?? [ 628.847838][T23301] netlink: 'syz.5.8293': attribute type 1 has an invalid length. [ 628.847862][T23301] netlink: 'syz.5.8293': attribute type 2 has an invalid length. [ 628.847877][T23301] netlink: 140 bytes leftover after parsing attributes in process `syz.5.8293'. [ 629.060665][T23273] xfrm0 speed is unknown, defaulting to 1000 [ 629.218244][ T11] r8152-cfgselector 8-1: USB disconnect, device number 2 [ 629.468915][T23082] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 629.535193][T23082] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 629.549446][T23082] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 629.668711][T23082] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 629.681718][T23082] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 629.830960][T23082] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 629.833871][T23082] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 629.988454][T23082] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 630.019019][ T5619] Bluetooth: hci8: command tx timeout [ 630.095420][ T5619] Bluetooth: hci9: command tx timeout [ 630.791821][T23082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.922295][T23082] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.966729][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.966884][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.192072][ T3364] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.192242][ T3364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.285662][ T43] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 632.325602][ T5619] Bluetooth: hci9: command tx timeout [ 632.449329][ T43] usb 6-1: config 5 has an invalid interface number: 123 but max is 0 [ 632.449360][ T43] usb 6-1: config 5 has no interface number 0 [ 632.449408][ T43] usb 6-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 632.449439][ T43] usb 6-1: config 5 interface 123 altsetting 7 endpoint 0x8B has invalid wMaxPacketSize 0 [ 632.449466][ T43] usb 6-1: config 5 interface 123 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 632.449492][ T43] usb 6-1: config 5 interface 123 has no altsetting 0 [ 632.452671][ T43] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 632.452703][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.452727][ T43] usb 6-1: Product: syz [ 632.452744][ T43] usb 6-1: Manufacturer: syz [ 632.452760][ T43] usb 6-1: SerialNumber: syz [ 632.768464][T23273] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.768795][T23273] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.769258][T23273] bridge_slave_0: entered allmulticast mode [ 632.773626][T23273] bridge_slave_0: entered promiscuous mode [ 632.809769][T23273] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.810117][T23273] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.810505][T23273] bridge_slave_1: entered allmulticast mode [ 632.846699][T23273] bridge_slave_1: entered promiscuous mode [ 632.897043][ T43] ni6501 6-1:5.123: driver 'ni6501' failed to auto-configure device. [ 632.929684][ T43] usb 6-1: USB disconnect, device number 9 [ 633.052072][T23273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.125968][T23273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.283872][T23273] team0: Port device team_slave_0 added [ 633.299264][T23273] team0: Port device team_slave_1 added [ 633.403620][T23273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.403640][T23273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.403672][T23273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.436189][T23273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.436241][T23273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.436333][T23273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.675782][T23082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.750932][T23273] hsr_slave_0: entered promiscuous mode [ 633.753500][T23273] hsr_slave_1: entered promiscuous mode [ 633.755702][T23273] debugfs: 'hsr0' already exists in 'hsr' [ 633.755728][T23273] Cannot create hsr debugfs directory [ 634.756597][T23424] openvswitch: netlink: Port -2146435068 exceeds max allowable 65535 [ 634.905684][T23426] tmpfs: Bad value for 'mpol' [ 634.962805][T16479] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 635.135341][T16479] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 635.135381][T16479] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 635.135405][T16479] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 635.135447][T16479] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 635.135472][T16479] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.262126][T16479] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 635.618370][T23082] veth0_vlan: entered promiscuous mode [ 635.846097][T23082] veth1_vlan: entered promiscuous mode [ 636.041183][T16479] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 636.065647][T16479] usb 8-1: USB disconnect, device number 3 [ 636.095683][T23273] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 636.176006][T23444] netlink: 'syz.5.8349': attribute type 10 has an invalid length. [ 636.206995][T23273] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 636.256372][T23444] veth1_macvtap: left promiscuous mode [ 636.355836][T23273] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 636.392822][T23273] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 636.397723][T23273] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 636.503198][T23273] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 636.536479][T23273] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 636.624296][T23273] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 636.685864][T23082] veth0_macvtap: entered promiscuous mode [ 636.839054][T23082] veth1_macvtap: entered promiscuous mode [ 636.878124][T23462] netlink: 'syz.5.8356': attribute type 27 has an invalid length. [ 637.166980][T23470] futex_wake_op: syz.7.8358 tries to shift op by 144; fix this program [ 637.167568][T23470] futex_wake_op: syz.7.8358 tries to shift op by 144; fix this program [ 637.168283][T23082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.255321][T23082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.308070][T23472] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8360'. [ 637.351999][T23474] ./file0: Can't lookup blockdev [ 637.441116][ T14] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.456892][ T14] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.478748][ T14] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.482699][ T14] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.010324][T23484] netlink: 'syz.5.8366': attribute type 10 has an invalid length. [ 638.537248][T23273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.960470][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.960495][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.112469][T23273] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.380125][T23502] netlink: 495 bytes leftover after parsing attributes in process `syz.5.8374'. [ 639.410468][ T3295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.410489][ T3295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.448989][ T3364] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.449105][ T3364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.627746][ T3364] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.627874][ T3364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.828031][ T5340] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 640.990691][ T5340] usb 9-1: unable to get BOS descriptor or descriptor too short [ 640.995580][ T5340] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 640.995641][ T5340] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 641.033451][ T5340] usb 9-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 641.033601][ T5340] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.033626][ T5340] usb 9-1: Product: syz [ 641.033645][ T5340] usb 9-1: Manufacturer: syz [ 641.033662][ T5340] usb 9-1: SerialNumber: syz [ 641.196255][T23273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.375177][ T5340] usb 9-1: unit 3 not found! [ 641.624297][ T5340] usb 9-1: USB disconnect, device number 2 [ 641.646388][T23555] netlink: 'syz.5.8392': attribute type 28 has an invalid length. [ 641.646411][T23555] netlink: 'syz.5.8392': attribute type 40 has an invalid length. [ 641.646427][T23555] netlink: 'syz.5.8392': attribute type 17 has an invalid length. [ 641.959304][T21152] udevd[21152]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 642.026353][T23563] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8394'. [ 642.490487][T23273] veth0_vlan: entered promiscuous mode [ 642.621249][T23273] veth1_vlan: entered promiscuous mode [ 642.813339][T23273] veth0_macvtap: entered promiscuous mode [ 642.855715][T23273] veth1_macvtap: entered promiscuous mode [ 642.985687][T23273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.018974][T23273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.043657][ T56] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.043997][ T56] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.044042][ T56] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.044083][ T56] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.221877][ T5599] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 643.400470][ T5599] usb 6-1: Using ep0 maxpacket: 16 [ 643.410344][ T5599] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 643.410372][ T5599] usb 6-1: config 0 has no interface number 0 [ 643.410419][ T5599] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 643.410447][ T5599] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 643.451792][ T5599] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 643.451825][ T5599] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.451848][ T5599] usb 6-1: Product: syz [ 643.451864][ T5599] usb 6-1: Manufacturer: syz [ 643.451881][ T5599] usb 6-1: SerialNumber: syz [ 643.517567][ T5599] usb 6-1: config 0 descriptor?? [ 643.518398][T23575] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 643.518528][T23575] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 643.801017][T23575] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 643.801152][T23575] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 644.040353][ T5599] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 644.040648][ T5599] asix 6-1:0.34: probe with driver asix failed with error -71 [ 644.222871][ T5599] usb 6-1: USB disconnect, device number 10 [ 644.455661][ T3282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.455684][ T3282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.038522][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.038545][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.154705][T23595] openvswitch: netlink: IP tunnel dst address not specified [ 645.367276][ T37] audit: type=1800 audit(1782751574.629:242): pid=23601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.8410" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 645.670132][T20885] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 645.831170][T20885] usb 10-1: Using ep0 maxpacket: 16 [ 645.835151][T20885] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 645.860350][T20885] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 645.860383][T20885] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.860406][T20885] usb 10-1: Product: syz [ 645.860472][T20885] usb 10-1: Manufacturer: syz [ 645.860545][T20885] usb 10-1: SerialNumber: syz [ 645.923001][T20885] usb 10-1: config 0 descriptor?? [ 645.975009][T20885] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 645.996551][T20885] usb 10-1: Detected FT232B [ 646.211236][T20885] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 646.211699][T20885] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 646.235228][T20885] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 646.282843][T20885] usb 10-1: USB disconnect, device number 2 [ 646.309188][T20885] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 646.310050][T20885] ftdi_sio 10-1:0.0: device disconnected [ 646.781994][ T5713] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 646.942992][ T5713] usb 6-1: Using ep0 maxpacket: 8 [ 646.947824][ T5713] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 646.947857][ T5713] usb 6-1: config 0 interface 0 has no altsetting 0 [ 646.975224][ T5713] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 646.975254][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.975274][ T5713] usb 6-1: Product: syz [ 646.975289][ T5713] usb 6-1: Manufacturer: syz [ 646.975304][ T5713] usb 6-1: SerialNumber: syz [ 646.982678][ T5713] usb 6-1: config 0 descriptor?? [ 647.035690][ T5713] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 647.236536][ T5713] snd_usb_toneport 6-1:0.0: cannot get proper max packet size [ 647.237065][ T5713] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 647.241409][ T5713] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 647.454121][ T43] usb 6-1: USB disconnect, device number 11 [ 647.860201][T23661] netlink: 'syz.9.8439': attribute type 2 has an invalid length. [ 647.860217][T23661] netlink: 'syz.9.8439': attribute type 11 has an invalid length. [ 647.860228][T23661] netlink: 132 bytes leftover after parsing attributes in process `syz.9.8439'. [ 647.910721][ T11] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 648.104432][ T11] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 648.104464][ T11] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 648.104492][ T11] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 648.104515][ T11] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 648.117515][ T11] usb 9-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 648.117599][ T11] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.117660][ T11] usb 9-1: Product: syz [ 648.117704][ T11] usb 9-1: Manufacturer: syz [ 648.117754][ T11] usb 9-1: SerialNumber: syz [ 648.154861][ T11] usb 9-1: config 0 descriptor?? [ 648.206168][ T11] ums-isd200 9-1:0.0: USB Mass Storage device detected [ 648.234531][T23671] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8443'. [ 648.235496][T23667] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 648.563261][ T11] ums-isd200 9-1:0.0: probe with driver ums-isd200 failed with error -22 [ 648.682454][ T11] usb 9-1: USB disconnect, device number 3 [ 649.508257][ T5713] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 649.683591][ T5713] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 649.683629][ T5713] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.688195][ T5713] usb 10-1: config 0 descriptor?? [ 649.719370][ T5713] cp210x 10-1:0.0: cp210x converter detected [ 650.164424][ T5713] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 650.164930][ T5713] cp210x 10-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 650.164957][ T5713] cp210x 10-1:0.0: GPIO initialisation failed: -71 [ 650.198394][ T5713] usb 10-1: cp210x converter now attached to ttyUSB0 [ 650.299350][ T5713] usb 10-1: USB disconnect, device number 3 [ 650.329475][ T5713] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 650.330394][ T5713] cp210x 10-1:0.0: device disconnected [ 651.459534][T23762] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8487'. [ 651.763349][T23773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 652.614109][T23806] netlink: 'syz.5.8509': attribute type 2 has an invalid length. [ 653.013014][T23820] netlink: 964 bytes leftover after parsing attributes in process `syz.8.8517'. [ 653.375293][ T37] audit: type=1400 audit(1782751582.122:243): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="%#{//(@\)//&@}" pid=23831 comm="syz.5.8522" [ 653.475139][ T5713] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 653.638853][ T5713] usb 9-1: Using ep0 maxpacket: 32 [ 653.642979][ T5713] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 653.643010][ T5713] usb 9-1: config 0 has no interface number 0 [ 653.643059][ T5713] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 653.696651][ T5713] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 653.696685][ T5713] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.696708][ T5713] usb 9-1: Product: syz [ 653.696723][ T5713] usb 9-1: Manufacturer: syz [ 653.696739][ T5713] usb 9-1: SerialNumber: syz [ 653.736078][ T5713] usb 9-1: config 0 descriptor?? [ 653.737019][T23827] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 653.928129][T23848] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8530'. [ 653.958418][T23827] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 654.179136][ T5713] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 654.179373][ T5713] asix 9-1:0.188: probe with driver asix failed with error -71 [ 654.277347][ T5713] usb 9-1: USB disconnect, device number 4 [ 654.530925][T23862] netlink: 192 bytes leftover after parsing attributes in process `syz.9.8537'. [ 655.296690][T23893] tmpfs: Bad value for 'mpol' [ 656.100109][T23922] comedi: No check for data length of config insn id 1023 is implemented [ 656.100131][T23922] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 656.100146][T23922] comedi: Assuming n=15 is correct [ 656.239063][T23277] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 656.277779][ T5696] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 656.300787][T23277] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 656.314369][T23277] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 656.328046][T23277] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 656.346918][T23277] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 656.449969][ T5696] usb 6-1: Using ep0 maxpacket: 8 [ 656.453920][ T5696] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 656.453948][ T5696] usb 6-1: config 0 has no interface number 0 [ 656.453990][ T5696] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 656.454015][ T5696] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 656.454040][ T5696] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 656.454067][ T5696] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 656.454094][ T5696] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 656.454119][ T5696] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 656.488918][ T5696] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 656.488941][ T5696] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.488957][ T5696] usb 6-1: Product: syz [ 656.488968][ T5696] usb 6-1: Manufacturer: syz [ 656.488979][ T5696] usb 6-1: SerialNumber: syz [ 657.242010][ T5696] usb 6-1: config 0 descriptor?? [ 657.500812][ T5696] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 657.616612][T23923] xfrm0 speed is unknown, defaulting to 1000 [ 657.730185][T20885] usb 6-1: USB disconnect, device number 12 [ 658.543769][ T5340] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 658.738625][ T5340] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 658.738659][ T5340] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 658.738682][ T5340] usb 9-1: Product: syz [ 658.738698][ T5340] usb 9-1: SerialNumber: syz [ 658.787846][ T5340] usb 9-1: config 0 descriptor?? [ 659.050977][ T5340] hso 9-1:0.0: Failed to find BULK eps [ 659.104079][T23976] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8589'. [ 659.278995][T20885] usb 9-1: USB disconnect, device number 5 [ 659.439586][ T5619] Bluetooth: hci10: command tx timeout [ 659.854052][T23996] tmpfs: Bad value for 'mpol' [ 659.976785][T23999] netlink: 'syz.5.8600': attribute type 4 has an invalid length. [ 659.976810][T23999] netlink: 17 bytes leftover after parsing attributes in process `syz.5.8600'. [ 660.091799][T24004] netlink: 384 bytes leftover after parsing attributes in process `syz.9.8601'. [ 660.335837][T24011] netlink: 'syz.9.8604': attribute type 64 has an invalid length. [ 660.335859][T24011] netlink: 5 bytes leftover after parsing attributes in process `syz.9.8604'. [ 660.879039][T23923] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.888224][T23923] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.888604][T23923] bridge_slave_0: entered allmulticast mode [ 660.920487][T23923] bridge_slave_0: entered promiscuous mode [ 661.020785][T23923] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.021159][T23923] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.021484][T23923] bridge_slave_1: entered allmulticast mode [ 661.063247][T23923] bridge_slave_1: entered promiscuous mode [ 661.314141][T20885] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 661.361467][T23923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.394784][T23923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.482983][T23923] team0: Port device team_slave_0 added [ 661.498133][T23923] team0: Port device team_slave_1 added [ 661.523696][T20885] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 661.523726][T20885] usb 6-1: config 0 has no interface number 0 [ 661.523775][T20885] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 661.535907][T20885] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 661.535941][T20885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.535986][T20885] usb 6-1: Product: syz [ 661.536035][T20885] usb 6-1: Manufacturer: syz [ 661.536077][T20885] usb 6-1: SerialNumber: syz [ 661.653022][ T5619] Bluetooth: hci10: command tx timeout [ 661.661054][T20885] usb 6-1: config 0 descriptor?? [ 661.823819][T24058] tmpfs: Bad value for 'mpol' [ 661.899835][ C0] yurex 6-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 661.905477][T20885] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 661.983199][T23923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.983218][T23923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.983249][T23923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.046046][T23923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.046065][T23923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.046096][T23923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.126895][ T5712] usb 6-1: USB disconnect, device number 13 [ 662.176413][ T5713] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 662.184341][ T5712] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 662.305331][T24064] 9pnet_fd: p9_fd_create_unix (24064): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 662.372662][T23923] hsr_slave_0: entered promiscuous mode [ 662.374831][ T5713] usb 9-1: unable to get BOS descriptor or descriptor too short [ 662.378692][ T5713] usb 9-1: not running at top speed; connect to a high speed hub [ 662.414703][ T5713] usb 9-1: config 1 interface 0 altsetting 91 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 662.414743][ T5713] usb 9-1: config 1 interface 0 has no altsetting 0 [ 662.419243][T23923] hsr_slave_1: entered promiscuous mode [ 662.423705][T23923] debugfs: 'hsr0' already exists in 'hsr' [ 662.423734][T23923] Cannot create hsr debugfs directory [ 662.458664][ T5713] usb 9-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 662.458698][ T5713] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.458721][ T5713] usb 9-1: Product: syz [ 662.458736][ T5713] usb 9-1: Manufacturer: syz [ 662.458752][ T5713] usb 9-1: SerialNumber: syz [ 662.500540][T24060] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 662.732618][ C1] raw-gadget.1 gadget.8: ignoring, device is not running [ 662.844607][ T5713] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input55 [ 662.847849][ T4959] bcm5974 9-1:1.0: could not read from device [ 662.949693][ T5713] usb 9-1: USB disconnect, device number 6 [ 663.121630][T24076] usb usb8: usbfs: process 24076 (syz.5.8636) did not claim interface 0 before use [ 663.844240][T24098] overlayfs: unescaped trailing colons in lowerdir mount option. [ 663.876340][T20398] Bluetooth: hci10: command tx timeout [ 665.689515][T23923] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.929083][T24154] netlink: 'syz.8.8674': attribute type 9 has an invalid length. [ 666.017954][T20398] Bluetooth: hci6: command 0x0406 tx timeout [ 666.018157][T20398] Bluetooth: hci5: command 0x0406 tx timeout [ 666.099951][T20398] Bluetooth: hci10: command tx timeout [ 666.224310][T24163] netdevsim netdevsim9: Firmware load for '..' refused, path contains '..' component [ 666.552913][T23923] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.692379][T24164] vlan0: entered promiscuous mode [ 666.692630][T24164] vlan0: entered allmulticast mode [ 666.692647][T24164] veth0_vlan: entered allmulticast mode [ 667.300224][T23923] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.704449][ T43] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 667.772424][T24208] openvswitch: netlink: Flow key attr not present in new flow. [ 667.898415][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 667.907361][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.911977][ T43] usb 6-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32 [ 667.912006][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.912028][ T43] usb 6-1: Product: syz [ 667.912043][ T43] usb 6-1: Manufacturer: syz [ 667.912058][ T43] usb 6-1: SerialNumber: syz [ 667.925029][ T43] usb 6-1: config 0 descriptor?? [ 668.101469][T23923] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.205492][ T43] ljca 6-1:0.0: bulk endpoints not found [ 668.213241][T24210] netlink: 'syz.9.8702': attribute type 12 has an invalid length. [ 668.236704][ T43] usb 6-1: USB disconnect, device number 14 [ 668.851352][T24232] netlink: 'syz.8.8712': attribute type 6 has an invalid length. [ 669.231133][T24242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 669.643318][ T5696] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 669.802644][ T5696] usb 6-1: unable to get BOS descriptor or descriptor too short [ 669.803543][ T5696] usb 6-1: not running at top speed; connect to a high speed hub [ 669.841573][ T5696] usb 6-1: config 11 has an invalid interface number: 54 but max is 1 [ 669.841603][ T5696] usb 6-1: config 11 has an invalid interface number: 91 but max is 1 [ 669.841625][ T5696] usb 6-1: config 11 has no interface number 0 [ 669.841644][ T5696] usb 6-1: config 11 has no interface number 1 [ 669.841691][ T5696] usb 6-1: config 11 interface 54 has no altsetting 0 [ 669.841711][ T5696] usb 6-1: config 11 interface 91 has no altsetting 0 [ 669.846919][ T5696] usb 6-1: New USB device found, idVendor=1199, idProduct=9040, bcdDevice=3e.fa [ 669.846950][ T5696] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.846971][ T5696] usb 6-1: Product: syz [ 669.846986][ T5696] usb 6-1: Manufacturer: syz [ 669.847001][ T5696] usb 6-1: SerialNumber: syz [ 669.961212][ T38] INFO: task syz.1.6694:19839 blocked for more than 143 seconds. [ 669.961241][ T38] Tainted: G L syzkaller #0 [ 669.961254][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 669.961265][ T38] task:syz.1.6694 state:D stack:25424 pid:19839 tgid:19837 ppid:5611 task_flags:0x400140 flags:0x00080002 [ 669.961342][ T38] Call Trace: [ 669.961351][ T38] [ 669.961365][ T38] __schedule+0x1709/0x5530 [ 669.961418][ T38] ? irqentry_exit+0x218/0x8f0 [ 669.961444][ T38] ? trace_irq_disable+0x3b/0x140 [ 669.961476][ T38] ? __pfx___schedule+0x10/0x10 [ 669.961500][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 669.961553][ T38] rt_mutex_schedule+0x76/0xf0 [ 669.961577][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 669.961644][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 669.961682][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 669.961707][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 669.961730][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 669.961784][ T38] ? nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 669.961829][ T38] ? nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 669.961870][ T38] ? nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 669.961901][ T38] mutex_lock_nested+0x168/0x1d0 [ 669.961956][ T38] nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 669.961979][ T38] ? kasan_save_track+0x3e/0x80 [ 669.962015][ T38] ? __asan_memset+0x22/0x50 [ 669.962051][ T38] ? __nla_validate_parse+0x2429/0x2d50 [ 669.962075][ T38] ? ___sys_sendmsg+0x2a5/0x360 [ 669.962102][ T38] ? __x64_sys_sendmsg+0x1b7/0x290 [ 669.962134][ T38] ? do_syscall_64+0x174/0x580 [ 669.962156][ T38] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 669.962209][ T38] ? __pfx___nla_validate_parse+0x10/0x10 [ 669.962252][ T38] ? rcu_is_watching+0x15/0xb0 [ 669.962292][ T38] ? trace_kmalloc+0x2a/0xf0 [ 669.962324][ T38] ? __nla_parse+0x40/0x60 [ 669.962342][ T38] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 669.962380][ T38] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 669.962414][ T38] genl_family_rcv_msg_doit+0x233/0x340 [ 669.962446][ T38] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 669.962487][ T38] ? bpf_lsm_capable+0x9/0x20 [ 669.962509][ T38] ? security_capable+0x7e/0x2c0 [ 669.962555][ T38] genl_rcv_msg+0x614/0x7a0 [ 669.962598][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 669.962620][ T38] ? ref_tracker_free+0x668/0x820 [ 669.962667][ T38] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 669.962691][ T38] ? ____sys_sendmsg+0x565/0x870 [ 669.962726][ T38] ? ___sys_sendmsg+0x2a5/0x360 [ 669.962756][ T38] ? __x64_sys_sendmsg+0x1b7/0x290 [ 669.962786][ T38] ? do_syscall_64+0x174/0x580 [ 669.962812][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.962848][ T38] netlink_rcv_skb+0x226/0x4a0 [ 669.962872][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 669.962905][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 669.962952][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 669.962982][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 669.963020][ T38] genl_rcv+0x28/0x40 [ 669.963035][ T38] netlink_unicast+0x7f5/0x990 [ 669.963063][ T38] netlink_sendmsg+0x813/0xb40 [ 669.963119][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.963154][ T38] ? aa_sock_msg_perm+0x122/0x200 [ 669.963196][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.963218][ T38] sock_sendmsg_nosec+0x13a/0x180 [ 669.963236][ T38] ____sys_sendmsg+0x565/0x870 [ 669.963285][ T38] ? __might_fault+0xaf/0x130 [ 669.963318][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 669.963356][ T38] ? import_iovec+0x73/0xa0 [ 669.963386][ T38] ___sys_sendmsg+0x2a5/0x360 [ 669.963406][ T38] ? __lock_acquire+0x683/0x2ce0 [ 669.963449][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 669.963485][ T38] ? futex_wait+0x2a2/0x390 [ 669.963539][ T38] ? __fget_files+0x2a/0x420 [ 669.963564][ T38] ? __fget_files+0x3a8/0x420 [ 669.963589][ T38] __x64_sys_sendmsg+0x1b7/0x290 [ 669.963634][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 669.963698][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.963753][ T38] do_syscall_64+0x174/0x580 [ 669.963788][ T38] ? trace_irq_disable+0x3b/0x140 [ 669.963818][ T38] ? clear_bhb_loop+0x40/0x90 [ 669.963849][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.963872][ T38] RIP: 0033:0x7f7e1bd0ce59 [ 669.963892][ T38] RSP: 002b:00007f7e19f5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 669.963919][ T38] RAX: ffffffffffffffda RBX: 00007f7e1bf85fa0 RCX: 00007f7e1bd0ce59 [ 669.963932][ T38] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 669.963943][ T38] RBP: 00007f7e1bda2e6f R08: 0000000000000000 R09: 0000000000000000 [ 669.963968][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 669.963984][ T38] R13: 00007f7e1bf86038 R14: 00007f7e1bf85fa0 R15: 00007ffc631ba398 [ 669.964021][ T38] [ 669.964090][ T38] [ 669.964090][ T38] Showing all locks held in the system: [ 669.964101][ T38] 1 lock held by khungtaskd/38: [ 669.964111][ T38] #0: ffffffff8e1c30c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 669.964198][ T38] 2 locks held by kworker/1:1/43: [ 669.964211][ T38] #0: ffff88813fe16538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 669.964281][ T38] #1: ffffc90000b47c60 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 669.964370][ T38] 2 locks held by kworker/u8:13/3295: [ 669.964385][ T38] #0: ffff88813fe54138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 669.964449][ T38] #1: ffffc9000fba7c60 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 669.964510][ T38] 2 locks held by kworker/u8:14/3310: [ 669.964525][ T38] #0: ffff88813fe54138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 669.964590][ T38] #1: ffffc9000fab7c60 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 669.964649][ T38] 2 locks held by getty/5367: [ 669.964658][ T38] #0: ffff88803659e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 669.964726][ T38] #1: ffffc90003cbb2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 669.964800][ T38] 4 locks held by kworker/0:5/5696: [ 669.964810][ T38] #0: ffff888022edd938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 669.964872][ T38] #1: ffffc90005057c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 669.964949][ T38] #2: ffff88802a1b8210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 669.965001][ T38] #3: ffff88803dd94210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 669.965065][ T38] 2 locks held by syz.3.4593/15409: [ 669.965090][ T38] #0: ffffffff8f60cf60 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 669.965137][ T38] #1: ffffffff8e4ec278 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x136/0x16e0 [ 669.965192][ T38] 2 locks held by syz.1.6694/19839: [ 669.965214][ T38] #0: ffffffff8f60cf60 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 669.965265][ T38] #1: ffffffff8e4ec278 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 669.965335][ T38] 2 locks held by syz.2.6754/19962: [ 669.965343][ T38] #0: ffffffff8f60cf60 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 669.965390][ T38] #1: ffffffff8e4ec278 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 669.965456][ T38] 1 lock held by udevd/21025: [ 669.965468][ T38] #0: ffffffff8e1c30c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 669.965520][ T38] 2 locks held by syz.0.7894/22425: [ 669.965530][ T38] #0: ffffffff8f60cf60 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 669.965582][ T38] #1: ffffffff8e4ec278 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 669.965642][ T38] 2 locks held by syz.4.8038/22717: [ 669.965655][ T38] #0: ffff88802c8120d0 (&type->s_umount_key#93){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 669.965715][ T38] #1: ffffffff8e4ec278 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 669.965777][ T38] 2 locks held by syz.6.8125/22895: [ 669.965788][ T38] #0: ffffffff8f60cf60 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 669.965836][ T38] #1: ffffffff8e4ec278 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 669.965906][ T38] 4 locks held by syz-executor/23273: [ 669.965915][ T38] #0: ffff88805ee2a500 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 669.965979][ T38] #1: ffff88803d8fcd18 (&lockref->lock){+.+.}-{3:3}, at: dentry_kill+0x27f/0x880 [ 669.966041][ T38] #2: ffffffff8e1c30c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 669.966089][ T38] #3: ffffffff8e1c30c0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 669.966150][ T38] 2 locks held by syz.7.8378/23508: [ 669.966164][ T38] #0: ffffffff8f60cf60 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 669.966213][ T38] #1: ffffffff8e4ec278 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xd20 [ 669.966269][ T38] 8 locks held by syz-executor/23923: [ 669.966290][ T38] #0: ffff888036ca8500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 669.966362][ T38] #1: ffff88807845d478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 669.966421][ T38] #2: ffff888029238878 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 669.966471][ T38] #3: ffffffff8ee10bd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x710 [ 669.966538][ T38] #4: ffff88803c3c3160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 669.966592][ T38] #5: ffff88803d4de310 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_drv_probe+0xfc/0xc00 [ 669.966679][ T38] #6: ffffffff8f59bff8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_create+0x87f/0x1150 [ 669.966734][ T38] #7: ffffffff8e1c30c0 (rcu_read_lock){....}-{1:3}, at: kernfs_root+0x1c/0x230 [ 669.966790][ T38] 1 lock held by syz.8.8726/24260: [ 669.966800][ T38] #0: ffff88803a1447b0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 669.966857][ T38] [ 669.966863][ T38] ============================================= [ 669.966863][ T38] [ 669.966874][ T38] NMI backtrace for cpu 1 [ 669.966895][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 669.966924][ T38] Tainted: [L]=SOFTLOCKUP [ 669.966932][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 669.966946][ T38] Call Trace: [ 669.966961][ T38] [ 669.966967][ T38] dump_stack_lvl+0xe8/0x150 [ 669.966987][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 669.967004][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 669.967049][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 669.967077][ T38] sys_info+0x135/0x170 [ 669.967109][ T38] watchdog+0xfd7/0x1030 [ 669.967146][ T38] ? watchdog+0x1c7/0x1030 [ 669.967171][ T38] kthread+0x388/0x470 [ 669.967206][ T38] ? __pfx_watchdog+0x10/0x10 [ 669.967234][ T38] ? __pfx_kthread+0x10/0x10 [ 669.967263][ T38] ret_from_fork+0x514/0xb70 [ 669.967298][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 669.967327][ T38] ? __switch_to+0xc89/0x1420 [ 669.967345][ T38] ? __pfx_kthread+0x10/0x10 [ 669.967378][ T38] ret_from_fork_asm+0x1a/0x30 [ 669.967423][ T38] [ 669.967445][ T38] Sending NMI from CPU 1 to CPUs 0: [ 669.967476][ C0] NMI backtrace for cpu 0 [ 669.967495][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 669.967520][ C0] Tainted: [L]=SOFTLOCKUP [ 669.967528][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 669.967540][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 669.967569][ C0] Code: 3b 66 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 cb 0e 00 fb f4 8c cd 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 669.967587][ C0] RSP: 0018:ffffffff8de07de0 EFLAGS: 00000242 [ 669.967603][ C0] RAX: 0000000000131c9b RBX: ffffffff81997690 RCX: 0000000080000001 [ 669.967618][ C0] RDX: 0000000000000001 RSI: ffffffff8d75fa49 RDI: ffffffff8bab9e80 [ 669.967632][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8633d5b R09: 1ffff110170c67ab [ 669.967647][ C0] R10: dffffc0000000000 R11: ffffed10170c67ac R12: 0000000000000000 [ 669.967662][ C0] R13: 1ffffffff1bdede8 R14: 1ffffffff1bc0fc4 R15: dffffc0000000000 [ 669.967677][ C0] FS: 0000000000000000(0000) GS:ffff888125c85000(0000) knlGS:0000000000000000 [ 669.967693][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 669.967706][ C0] CR2: 00007f6f9072a540 CR3: 000000003858c000 CR4: 00000000003526f0 [ 669.967723][ C0] Call Trace: [ 669.967731][ C0] [ 669.967738][ C0] default_idle+0x9/0x20 [ 669.967763][ C0] default_idle_call+0x72/0xb0 [ 669.967796][ C0] do_idle+0x2e0/0x540 [ 669.967825][ C0] ? __pfx_do_idle+0x10/0x10 [ 669.967857][ C0] cpu_startup_entry+0x43/0x60 [ 669.967885][ C0] rest_init+0x2de/0x300 [ 669.967915][ C0] start_kernel+0x392/0x3e0 [ 669.967963][ C0] x86_64_start_reservations+0x24/0x30 [ 669.967993][ C0] x86_64_start_kernel+0x137/0x1b0 [ 669.968020][ C0] common_startup_64+0x13e/0x157 [ 669.968058][ C0] [ 669.968482][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 669.968501][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 669.968534][ T38] Tainted: [L]=SOFTLOCKUP [ 669.968541][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 669.968551][ T38] Call Trace: [ 669.968557][ T38] [ 669.968564][ T38] vpanic+0x56c/0xa60 [ 669.968610][ T38] ? __pfx_vpanic+0x10/0x10 [ 669.968655][ T38] panic+0xc5/0xd0 [ 669.968688][ T38] ? __pfx_panic+0x10/0x10 [ 669.968726][ T38] ? wq_watchdog_touch+0xf9/0x160 [ 669.968751][ T38] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 669.968794][ T38] watchdog+0x1030/0x1030 [ 669.968831][ T38] ? watchdog+0x1c7/0x1030 [ 669.968865][ T38] kthread+0x388/0x470 [ 669.968891][ T38] ? __pfx_watchdog+0x10/0x10 [ 669.968918][ T38] ? __pfx_kthread+0x10/0x10 [ 669.968937][ T38] ret_from_fork+0x514/0xb70 [ 669.968979][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 669.969007][ T38] ? __switch_to+0xc89/0x1420 [ 669.969032][ T38] ? __pfx_kthread+0x10/0x10 [ 669.969059][ T38] ret_from_fork_asm+0x1a/0x30 [ 669.969100][ T38] [ 669.969713][ T38] Kernel Offset: disabled