last executing test programs: 2m42.292067769s ago: executing program 3 (id=6235): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x80000000, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0xff, 0x0, 0x0, 0x6, 0xff, 0x0, 0x400, [0x2]}}) 2m41.834785521s ago: executing program 3 (id=6241): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000040)=0xffffffff, 0x4) 2m41.636391123s ago: executing program 3 (id=6247): r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x0, 0x2}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000000)='2`', 0x2}], 0x1}, 0x880) 2m41.367551493s ago: executing program 3 (id=6252): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100ffff000000000000000085000000ae000000850000000700000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) 2m41.213841558s ago: executing program 3 (id=6257): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x1004000, &(0x7f0000000200)={[{'noac,'}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nfs\x00'}}]}) 2m41.094924837s ago: executing program 3 (id=6259): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) 2m26.772908202s ago: executing program 32 (id=6259): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) 2m25.479416303s ago: executing program 4 (id=6557): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r0, 0x0, 0x0, 0x80800) 2m25.240410236s ago: executing program 4 (id=6561): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2m25.090224111s ago: executing program 4 (id=6564): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000001780)={0x48}) 2m24.947255179s ago: executing program 4 (id=6569): r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000340)={0x1000f4, 0x59455247, 0x2, @discrete={0x7, 0x870}}) 2m24.766630198s ago: executing program 4 (id=6571): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0) 2m24.703617442s ago: executing program 4 (id=6573): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m18.948754069s ago: executing program 0 (id=6650): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, 0x0) 2m18.764769101s ago: executing program 0 (id=6653): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0x2a, 0x0, &(0x7f00000004c0)="06ff03076844268cb89e14f00806", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m18.454668596s ago: executing program 0 (id=6658): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xa2, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000040)='h', 0x1}, {0x0}], 0x2) 2m18.351668194s ago: executing program 0 (id=6660): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)={0x17a6, 0x1, [{0x1, 0x1}]}) 2m18.181434531s ago: executing program 0 (id=6664): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001a83f16ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d1600360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb100273f90a9b9b98c154bb444c6d291", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) 2m17.915961391s ago: executing program 0 (id=6669): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0x70bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x20048000) 2m10.316042623s ago: executing program 33 (id=6573): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m3.495487784s ago: executing program 34 (id=6669): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0x70bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x20048000) 1.755381964s ago: executing program 5 (id=8789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) 1.688445976s ago: executing program 1 (id=8790): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv6_newroute={0x24, 0x18, 0x1, 0x70bd28, 0x25dfdbff, {0xa, 0x14, 0x10, 0x0, 0xfd, 0x0, 0xfd, 0x6, 0x200}, [@RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000042}, 0xc800) 1.562604981s ago: executing program 6 (id=8791): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@ipv6_delrule={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x20, 0x0, 0x0, 0x3, 0x0, 0x7, 0x20001}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x1}]}, 0x24}}, 0x0) 1.515574864s ago: executing program 2 (id=8792): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000500)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.514628144s ago: executing program 5 (id=8793): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=bind=pelztive:']) 1.493451181s ago: executing program 1 (id=8794): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) 1.364003561s ago: executing program 6 (id=8795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}}, 0x4) 1.212100404s ago: executing program 1 (id=8797): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'netdevsim0\x00', {0x4}, 0x6}) 1.177534405s ago: executing program 5 (id=8798): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'hsr0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x20, 0x7, "07428322cd576f"}}) 1.151694599s ago: executing program 7 (id=8799): r0 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r0, 0x29, 0xd1, 0x0, 0x0) 1.044539149s ago: executing program 6 (id=8800): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffd, 0x6, 0x1d, @scatter={0x0, 0x91ff, 0x0}, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00', 0x0, 0x200, 0x20, 0xfffffeff, 0x0}) 948.361044ms ago: executing program 7 (id=8801): r0 = userfaultfd(0x80001) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) 902.384277ms ago: executing program 6 (id=8802): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000bc0)={&(0x7f0000000340)={0xa, 0x4a21, 0x1, @local, 0x5}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000740)="d3", 0x1}], 0x1}, 0xc890) 875.518099ms ago: executing program 2 (id=8803): r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x6a, 0x1, 0x0, &(0x7f0000000640)) 849.267957ms ago: executing program 5 (id=8804): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, 0x0) 802.140759ms ago: executing program 1 (id=8805): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000004940), 0x8201, 0x0) write$vga_arbiter(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="746172676574205043493a313a93d2"], 0x14) 708.350318ms ago: executing program 7 (id=8806): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0x80102) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) 675.242164ms ago: executing program 6 (id=8807): mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) munlock(&(0x7f00006cd000/0x1000)=nil, 0x1000) 617.429019ms ago: executing program 2 (id=8808): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002280)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000500020000000900020073797a300000000005000100070000001400078008000840000000080800064000000000050004000000000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 616.762112ms ago: executing program 5 (id=8809): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) 492.580601ms ago: executing program 1 (id=8810): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd7000000000000400006b0800180006ac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 490.98037ms ago: executing program 7 (id=8811): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x40081, 0x4) 430.93044ms ago: executing program 6 (id=8812): ioperm(0x40, 0x9, 0x7f) syz_clone3(&(0x7f00000016c0)={0xa4281200, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) 399.635747ms ago: executing program 2 (id=8813): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) 276.492871ms ago: executing program 5 (id=8814): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_disconnect(r0) 208.064761ms ago: executing program 7 (id=8815): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffff, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x104}, {0x85, 0x0, 0x0, 0x9b}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 196.592236ms ago: executing program 2 (id=8816): setregid(0x0, 0xee00) setresgid(0xffffffffffffffff, 0x0, 0xee00) 28.594262ms ago: executing program 2 (id=8817): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x8}, 0x0) 1.39963ms ago: executing program 7 (id=8818): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x0, 0x2, 0x0, 0x4, 0x1, 0x1ff, [{0x3, 0x1, 0xb0}, {0x3, 0x5, 0x9}]}]}, {0x0, [0x61, 0x5f]}}, 0x0, 0x40, 0x0, 0x1, 0x1000003}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000018000004000000001"], 0x50) 0s ago: executing program 1 (id=8819): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)={0x14, 0x1c, 0x1, 0x70bd25, 0x25dfdbff, "", [@nested={0x1, 0xcd, 0x0, 0x1, [@typed={0x0, 0x98, 0x0, 0x0, @ipv4=@private=0x5}, @typed={0x0, 0x4c, 0x0, 0x0, @uid=0xee01}, @generic="a2335c339913935ebfdb604ed318389ee3e529a0333985761e409eb1ccf133bc345c71ccdb4e20072deff3dff036b0d0b8d8f4f7656db1dacea0a921614da1fe863e55be511a89524f07189a813860f8d7361cbb6e63aae76a7af075a21fabcc0482e59792dc8c5cb55e19329821631a014ede17e8733b131eb438d84520edad9b98fbaae56e71658dec199a349791b6dce3565c0a49ac6806", @nested={0x0, 0x5a, 0x0, 0x1, [@typed={0x0, 0x0, 0x0, 0x0, @u64=0xc}, @generic="c40d44afe9998abc0f70f534720138dd445fed023bc3c274e0683c425d3ea74b00a8547cc546423998f5e2e79952728a237a08df55c0c4eb031fe1a2f8e26e2190c908bd9a974144db2b40679b12096124f571eef31a95202e6095850c08c6de734066532762baa92fac2bec81581b52200ac3c18406cde7a1509fb93b7427d7c87e7d30b015b735003d43ec7d9093676d8dc941449ff5950b651a7323a904b2d2d3c73caa948d46c753db40051581beec7fe765372f1d3cf002262ec0d3338d277165955bbdc9f0ab35f0324cba22614ee690f7e4d5699e24a08e1573077cc90cdf37", @typed={0x0, 0x111, 0x0, 0x0, @str='\x00'}]}, @generic='T|']}]}, 0x14}], 0x1, 0x0, 0x0, 0x20040010}, 0x800c000) kernel console output (not intermixed with test programs): [ 495.876860][ T8997] usb 1-1: Using ep0 maxpacket: 8 [ 495.880431][ T8997] usb 1-1: config 0 has no interfaces? [ 495.885099][ T8997] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 495.885130][ T8997] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.885151][ T8997] usb 1-1: Product: syz [ 495.885167][ T8997] usb 1-1: Manufacturer: syz [ 495.885190][ T8997] usb 1-1: SerialNumber: syz [ 495.954320][ T8997] usb 1-1: config 0 descriptor?? [ 495.984704][T18957] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 495.984734][T18957] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 496.000912][T18957] vhci_hcd vhci_hcd.0: Device attached [ 496.004013][T18958] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 496.021372][ T1232] vhci_hcd vhci_hcd.2: stop threads [ 496.021400][ T1232] vhci_hcd vhci_hcd.2: release socket [ 496.021444][ T1232] vhci_hcd vhci_hcd.2: disconnect device [ 496.933217][T18998] netlink: 'syz.1.6268': attribute type 7 has an invalid length. [ 497.983851][T19049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6292'. [ 498.357554][ T6582] usb 1-1: USB disconnect, device number 95 [ 498.505189][T19074] netlink: 'syz.4.6303': attribute type 10 has an invalid length. [ 498.507831][T19074] vxcan1: entered promiscuous mode [ 498.508088][T19074] team0: Device vxcan1 is of different type [ 499.477056][T19128] netlink: 'syz.4.6331': attribute type 4 has an invalid length. [ 499.477085][T19128] netlink: 'syz.4.6331': attribute type 1 has an invalid length. [ 499.477099][T19128] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6331'. [ 499.647938][ T8997] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 499.792342][ T8997] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 499.792373][ T8997] usb 3-1: config 0 has no interface number 0 [ 499.792424][ T8997] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 499.832844][ T8997] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 499.832879][ T8997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.832901][ T8997] usb 3-1: Product: syz [ 499.832916][ T8997] usb 3-1: Manufacturer: syz [ 499.832931][ T8997] usb 3-1: SerialNumber: syz [ 499.880348][ T8997] usb 3-1: config 0 descriptor?? [ 499.991887][ T8997] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 500.085259][ C1] yurex 3-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 500.120879][T19157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6344'. [ 500.278377][ T6582] usb 3-1: USB disconnect, device number 82 [ 500.288164][ T6582] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 500.367301][T19165] netlink: 'syz.1.6348': attribute type 3 has an invalid length. [ 500.481420][T19171] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 500.481442][T19171] overlayfs: missing 'lowerdir' [ 500.690152][T19177] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 500.690185][T19177] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 501.075124][ T6582] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 501.228524][ T6582] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 501.230159][ T6582] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 501.230187][ T6582] usb 1-1: config 0 has no interface number 0 [ 501.230238][ T6582] usb 1-1: config 0 interface 51 altsetting 128 endpoint 0x3 has invalid wMaxPacketSize 0 [ 501.230264][ T6582] usb 1-1: config 0 interface 51 has no altsetting 0 [ 501.231445][ T6582] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 501.231470][ T6582] usb 1-1: config 0 has no interface number 0 [ 501.231519][ T6582] usb 1-1: config 0 interface 51 altsetting 128 endpoint 0x3 has invalid wMaxPacketSize 0 [ 501.231542][ T6582] usb 1-1: config 0 interface 51 has no altsetting 0 [ 501.232878][ T6582] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 501.232903][ T6582] usb 1-1: config 0 has no interface number 0 [ 501.232950][ T6582] usb 1-1: config 0 interface 51 altsetting 128 endpoint 0x3 has invalid wMaxPacketSize 0 [ 501.232975][ T6582] usb 1-1: config 0 interface 51 has no altsetting 0 [ 501.234273][ T6582] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 501.234297][ T6582] usb 1-1: config 0 has no interface number 0 [ 501.234382][ T6582] usb 1-1: config 0 interface 51 altsetting 128 endpoint 0x3 has invalid wMaxPacketSize 0 [ 501.234407][ T6582] usb 1-1: config 0 interface 51 has no altsetting 0 [ 501.237640][ T6582] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 501.237666][ T6582] usb 1-1: config 0 has no interface number 0 [ 501.238748][ T6582] usb 1-1: config 0 interface 51 altsetting 128 endpoint 0x3 has invalid wMaxPacketSize 0 [ 501.238772][ T6582] usb 1-1: config 0 interface 51 has no altsetting 0 [ 501.248985][ T6582] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 501.249013][ T6582] usb 1-1: config 0 has no interface number 0 [ 501.249059][ T6582] usb 1-1: config 0 interface 51 altsetting 128 endpoint 0x3 has invalid wMaxPacketSize 0 [ 501.249082][ T6582] usb 1-1: config 0 interface 51 has no altsetting 0 [ 501.250402][ T6582] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 501.250426][ T6582] usb 1-1: config 0 has no interface number 0 [ 501.250469][ T6582] usb 1-1: config 0 interface 51 altsetting 128 endpoint 0x3 has invalid wMaxPacketSize 0 [ 501.250490][ T6582] usb 1-1: config 0 interface 51 has no altsetting 0 [ 501.284592][ T6582] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 501.284623][ T6582] usb 1-1: config 0 has no interface number 0 [ 501.284671][ T6582] usb 1-1: config 0 interface 51 altsetting 128 endpoint 0x3 has invalid wMaxPacketSize 0 [ 501.284695][ T6582] usb 1-1: config 0 interface 51 has no altsetting 0 [ 501.287735][ T6582] usb 1-1: New USB device found, idVendor=06e0, idProduct=f110, bcdDevice=bf.25 [ 501.287762][ T6582] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.287781][ T6582] usb 1-1: Product: syz [ 501.287794][ T6582] usb 1-1: Manufacturer: syz [ 501.287807][ T6582] usb 1-1: SerialNumber: syz [ 501.299173][ T6582] usb 1-1: config 0 descriptor?? [ 501.317206][ T6582] ti_usb_3410_5052 1-1:0.51: TI USB 3410 1 port adapter converter detected [ 501.317398][ T6582] ti_usb_3410_5052 1-1:0.51: missing endpoints [ 501.590325][ T8997] usb 1-1: USB disconnect, device number 96 [ 503.798039][T19284] netlink: 'syz.4.6402': attribute type 10 has an invalid length. [ 503.798311][T19284] bridge0: port 3(netdevsim0) entered blocking state [ 503.798475][T19284] bridge0: port 3(netdevsim0) entered disabled state [ 503.798736][T19284] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 503.966876][T19292] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6406'. [ 504.184857][T19301] netlink: 'syz.2.6412': attribute type 1 has an invalid length. [ 504.649449][T19318] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 504.803940][T19324] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6422'. [ 504.803968][T19324] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6422'. [ 505.227156][T19339] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 505.912197][T19376] netlink: 'syz.4.6447': attribute type 8 has an invalid length. [ 506.034290][T19380] cgroup: noprefix used incorrectly [ 506.795052][T19415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6467'. [ 506.834238][T19416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.480806][T19463] IPv6: Can't replace route, no match found [ 509.395434][ T8995] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 509.540862][ T8995] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 509.540897][ T8995] usb 3-1: config 0 has no interface number 0 [ 509.545283][ T8995] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 509.545317][ T8995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.545337][ T8995] usb 3-1: Product: syz [ 509.545352][ T8995] usb 3-1: Manufacturer: syz [ 509.545367][ T8995] usb 3-1: SerialNumber: syz [ 509.609756][ T8995] usb 3-1: config 0 descriptor?? [ 509.823940][T19516] nbd: must specify a size in bytes for the device [ 510.032832][ T8995] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 510.032866][ T8995] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 510.054378][ T8995] asix 3-1:0.251: probe with driver asix failed with error -5 [ 510.094294][ T8995] usb 3-1: USB disconnect, device number 83 [ 510.296302][ T37] audit: type=1326 audit(1904646213.899:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19535 comm="syz.4.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc1e2aeb9 code=0x7ffc0000 [ 510.313669][T19538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6526'. [ 510.313694][T19538] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6526'. [ 510.343403][ T37] audit: type=1326 audit(1904646213.899:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19535 comm="syz.4.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc1e2aeb9 code=0x7ffc0000 [ 510.343462][ T37] audit: type=1326 audit(1904646213.899:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19535 comm="syz.4.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc1e2aeb9 code=0x7ffc0000 [ 510.357784][ T37] audit: type=1326 audit(1904646213.941:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19535 comm="syz.4.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc1e2aeb9 code=0x7ffc0000 [ 510.357834][ T37] audit: type=1326 audit(1904646213.941:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19535 comm="syz.4.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f5cc1e2aeb9 code=0x7ffc0000 [ 510.423499][ T37] audit: type=1326 audit(1904646214.015:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19535 comm="syz.4.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5cc1deb78e code=0x7ffc0000 [ 510.423555][ T37] audit: type=1326 audit(1904646214.015:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19535 comm="syz.4.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5cc1deb78e code=0x7ffc0000 [ 510.423597][ T37] audit: type=1326 audit(1904646214.015:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19535 comm="syz.4.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5cc1deb78e code=0x7ffc0000 [ 510.423638][ T37] audit: type=1326 audit(1904646214.015:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19535 comm="syz.4.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5cc1deb78e code=0x7ffc0000 [ 510.423680][ T37] audit: type=1326 audit(1904646214.015:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19535 comm="syz.4.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5cc1deb78e code=0x7ffc0000 [ 510.804495][T19553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6533'. [ 510.804524][T19553] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 510.973600][T19560] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 510.991056][T19560] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 511.014122][T19560] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 511.035581][T19560] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 511.036613][T19560] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 511.108914][T19558] virt_wifi0 speed is unknown, defaulting to 1000 [ 511.473897][T19580] binfmt_misc: register: failed to install interpreter file ./file0 [ 511.712134][T19558] chnl_net:caif_netlink_parms(): no params data found [ 512.092334][T19558] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.092563][T19558] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.092776][T19558] bridge_slave_0: entered allmulticast mode [ 512.096865][T19558] bridge_slave_0: entered promiscuous mode [ 512.100679][T19558] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.100887][T19558] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.101078][T19558] bridge_slave_1: entered allmulticast mode [ 512.103628][T19558] bridge_slave_1: entered promiscuous mode [ 512.215073][T19558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.234669][T19558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.243760][T19612] netlink: 'syz.1.6559': attribute type 21 has an invalid length. [ 512.243787][T19612] IPv6: NLM_F_CREATE should be specified when creating new route [ 512.243899][T19612] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 512.243908][T19612] IPv6: NLM_F_CREATE should be set when creating new route [ 512.243981][T19612] IPv6: NLM_F_CREATE should be set when creating new route [ 512.244010][T19612] IPv6: NLM_F_CREATE should be set when creating new route [ 512.571927][T19558] team0: Port device team_slave_0 added [ 512.584330][T19558] team0: Port device team_slave_1 added [ 512.756992][T19558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.757011][T19558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.757038][T19558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.763788][T19558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.763809][T19558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.763839][T19558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.950489][T19558] hsr_slave_0: entered promiscuous mode [ 512.952115][T19558] hsr_slave_1: entered promiscuous mode [ 512.953293][T19558] debugfs: 'hsr0' already exists in 'hsr' [ 512.953320][T19558] Cannot create hsr debugfs directory [ 513.060806][ T61] Bluetooth: hci5: command tx timeout [ 513.193948][T19644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6576'. [ 513.193985][T19644] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6576'. [ 513.350732][T19648] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6578'. [ 513.470335][ T996] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 513.561006][T19558] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 513.614920][T19558] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 513.639258][ T996] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 513.640682][ T996] usb 1-1: config 0 has no interfaces? [ 513.642384][ T996] usb 1-1: config 0 has no interfaces? [ 513.646535][ T996] usb 1-1: config 0 has no interfaces? [ 513.668848][T19558] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 513.683583][ T996] usb 1-1: config 0 has no interfaces? [ 513.685862][ T996] usb 1-1: config 0 has no interfaces? [ 513.687173][ T996] usb 1-1: config 0 has no interfaces? [ 513.705359][ T996] usb 1-1: config 0 has no interfaces? [ 513.714177][ T996] usb 1-1: config 0 has no interfaces? [ 513.722602][ T996] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 513.722637][ T996] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 513.722659][ T996] usb 1-1: Product: syz [ 513.722675][ T996] usb 1-1: Manufacturer: syz [ 513.722689][ T996] usb 1-1: SerialNumber: syz [ 513.793083][ T996] usb 1-1: config 0 descriptor?? [ 513.819282][T19558] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 514.016219][ T5911] usb 1-1: USB disconnect, device number 97 [ 514.153479][T19558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.207512][T19558] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.230176][ T2329] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.235923][ T2329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.268842][ T2329] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.269518][ T2329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.479458][ T8997] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 514.632719][ T8997] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 514.632753][ T8997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.665839][ T8997] usb 3-1: config 0 descriptor?? [ 514.865101][ T8997] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 514.980365][T19558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.041147][ T61] Bluetooth: hci5: command tx timeout [ 515.057693][ T8997] [drm:udl_init] *ERROR* Selecting channel failed [ 515.081931][T19696] No source specified [ 515.193241][ T8997] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 515.193273][ T8997] [drm] Initialized udl on minor 2 [ 515.224893][ T8997] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 515.225439][ T8997] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 515.253908][ T8997] usb 3-1: USB disconnect, device number 84 [ 515.287930][ T8995] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 515.296536][ T8995] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 515.498638][ T5889] kworker/1:4 (5889) used greatest stack depth: 15192 bytes left [ 515.668679][T19713] netlink: 'syz.1.6602': attribute type 1 has an invalid length. [ 515.947407][T19558] veth0_vlan: entered promiscuous mode [ 515.971652][T19558] veth1_vlan: entered promiscuous mode [ 516.053516][T19558] veth0_macvtap: entered promiscuous mode [ 516.067908][T19558] veth1_macvtap: entered promiscuous mode [ 516.131029][T19558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.155428][T19558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.181375][ T2329] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.183081][ T2329] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.208655][ T1232] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.211104][ T1232] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.651147][T10469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.651169][T10469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.750526][T10469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.750552][T10469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.021131][ T61] Bluetooth: hci5: command tx timeout [ 517.144868][ T31] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 517.289959][ T31] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xCB, changing to 0x8B [ 517.289997][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 53407, setting to 1024 [ 517.290027][ T31] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 517.290051][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 517.293279][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 517.293311][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 517.293332][ T31] usb 2-1: SerialNumber: syz [ 517.311328][T19756] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 517.476899][ T152] Dead loop on virtual device wlan0, fix it urgently! [ 517.492717][T19776] overlay: Unknown parameter 'fsname' [ 517.538370][ T31] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 517.538473][ T31] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 517.605990][ T31] usb 2-1: USB disconnect, device number 93 [ 517.619905][T19780] IPVS: set_ctl: invalid protocol: 61 172.20.20.170:20002 [ 518.961173][T19796] syz.5.6641 (19796): drop_caches: 2 [ 518.992977][ T61] Bluetooth: hci5: command tx timeout [ 519.206942][T19836] usb usb7: usbfs: process 19836 (syz.0.6660) did not claim interface 0 before use [ 519.373059][T19844] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6664'. [ 520.195235][ T6582] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 520.355153][ T6582] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 520.355186][ T6582] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 520.355207][ T6582] usb 3-1: config 220 has no interface number 2 [ 520.355268][ T6582] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 520.355286][ T6582] usb 3-1: config 220 interface 0 has no altsetting 0 [ 520.355296][ T6582] usb 3-1: config 220 interface 76 has no altsetting 0 [ 520.355307][ T6582] usb 3-1: config 220 interface 1 has no altsetting 0 [ 520.357593][ T6582] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 520.357622][ T6582] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.357645][ T6582] usb 3-1: Product: syz [ 520.357661][ T6582] usb 3-1: Manufacturer: syz [ 520.357677][ T6582] usb 3-1: SerialNumber: syz [ 520.674661][ T6582] usb 3-1: selecting invalid altsetting 0 [ 520.675206][ T6582] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 520.675239][ T6582] uvcvideo 3-1:220.0: No valid video chain found. [ 520.707584][ T6582] usb 3-1: selecting invalid altsetting 0 [ 520.707628][ T6582] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 520.734876][ T6582] usb 3-1: USB disconnect, device number 85 [ 521.435434][T19920] netlink: 'syz.5.6701': attribute type 10 has an invalid length. [ 521.436596][T19920] veth0_vlan: entered allmulticast mode [ 521.516022][T19920] veth0_vlan: left promiscuous mode [ 521.517840][T19920] veth0_vlan: entered promiscuous mode [ 521.521492][T19920] team0: Device veth0_vlan failed to register rx_handler [ 521.618750][T19926] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 521.956370][T19938] macvlan1: entered promiscuous mode [ 522.101812][T19947] netlink: 'syz.5.6714': attribute type 1 has an invalid length. [ 522.101839][T19947] netlink: 244 bytes leftover after parsing attributes in process `syz.5.6714'. [ 522.444748][T19964] dummy0: entered allmulticast mode [ 522.761347][T19978] ieee802154 phy1 wpan1: encryption failed: -90 [ 522.904287][ T31] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 523.047459][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 523.048496][ T31] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 523.050016][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.051489][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.055378][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.085839][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.112262][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.123898][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.126503][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.128298][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.129811][ T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 523.129841][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 523.129862][ T31] usb 2-1: SerialNumber: syz [ 523.189484][ T31] usb 2-1: config 0 descriptor?? [ 523.203891][ T31] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input48 [ 523.339933][T19999] 9p: Bad value for 'smackfsroot' [ 523.404482][ T5151] bcm5974 2-1:0.0: could not read from device [ 523.464416][ T31] usb 2-1: USB disconnect, device number 94 [ 523.675954][T20010] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6745'. [ 525.027443][ T5870] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 525.201427][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 525.204778][ T5870] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 525.204810][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.204832][ T5870] usb 2-1: Product: syz [ 525.204846][ T5870] usb 2-1: Manufacturer: syz [ 525.204862][ T5870] usb 2-1: SerialNumber: syz [ 525.236413][ T5870] usb 2-1: config 0 descriptor?? [ 525.268747][ T5870] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 525.587752][ T5870] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 525.679083][T19494] udevd[19494]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 525.715262][ T5870] usb 2-1: USB disconnect, device number 95 [ 525.846883][ T31] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 525.991030][ T31] usb 6-1: config 0 has an invalid interface number: 238 but max is 0 [ 525.991063][ T31] usb 6-1: config 0 has no interface number 0 [ 525.991110][ T31] usb 6-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 525.991123][ T31] usb 6-1: config 0 interface 238 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 525.991147][ T31] usb 6-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 128 [ 525.998900][ T31] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 525.998929][ T31] usb 6-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 525.998949][ T31] usb 6-1: Product: syz [ 525.998963][ T31] usb 6-1: Manufacturer: syz [ 525.998977][ T31] usb 6-1: SerialNumber: syz [ 526.006213][ T31] usb 6-1: config 0 descriptor?? [ 526.035462][T20057] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 526.056517][ T31] ni6501 6-1:0.238: driver 'ni6501' failed to auto-configure device. [ 526.257868][ T31] usb 6-1: USB disconnect, device number 2 [ 526.591356][T20077] ALSA: mixer_oss: invalid OSS volume '' [ 526.591380][T20077] ALSA: mixer_oss: invalid OSS volume '9[&?ļx;Bb[rSHٝsr' [ 526.591390][T20077] ALSA: mixer_oss: invalid OSS volume '`~'5{&]c} {x.e8' [ 526.591402][T20077] ALSA: mixer_oss: invalid OSS volume 'j'|]jpi?.>̡|' [ 526.591442][T20077] ALSA: mixer_oss: invalid OSS volume '\SO\ ,4Qx' [ 526.591450][T20077] ALSA: mixer_oss: invalid OSS volume 'Qq*h0;bZ1#<3 P' [ 526.591458][T20077] ALSA: mixer_oss: invalid OSS volume 'S ߌ_q' [ 526.591467][T20077] ALSA: mixer_oss: invalid OSS volume '):{bvijp"g_6fݢ' [ 526.591491][T20077] ALSA: mixer_oss: invalid OSS volume 'Xr]X[*ۇ8tf;v6' [ 526.591503][T20077] ALSA: mixer_oss: invalid OSS volume '8L&wrˍ' [ 526.591511][T20077] ALSA: mixer_oss: invalid OSS volume 'zap1oRR|/`' [ 526.591519][T20077] ALSA: mixer_oss: invalid OSS volume '_y4"PI]Yye3O|K7qa' [ 526.591548][T20077] ALSA: mixer_oss: invalid OSS volume '\Qa2` g34%aFa v' [ 526.591556][T20077] ALSA: mixer_oss: invalid OSS volume 'Avb4xf[k'3Rg' [ 526.591566][T20077] ALSA: mixer_oss: invalid OSS volume 'uneB?' [ 526.591574][T20077] ALSA: mixer_oss: invalid OSS volume 'Y*)i-?9j(/1G:ECWw' [ 526.635027][T20082] netlink: set zone limit has 4 unknown bytes [ 526.998145][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 526.998167][ T37] audit: type=1326 audit(1904646231.441:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20097 comm="syz.2.6789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b899daeb9 code=0x7ffc0000 [ 527.037458][ T37] audit: type=1326 audit(1904646231.441:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20097 comm="syz.2.6789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b899daeb9 code=0x7ffc0000 [ 527.037803][ T37] audit: type=1326 audit(1904646231.483:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20097 comm="syz.2.6789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f2b899daeb9 code=0x7ffc0000 [ 527.038088][ T37] audit: type=1326 audit(1904646231.483:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20097 comm="syz.2.6789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b899daeb9 code=0x7ffc0000 [ 527.038408][ T37] audit: type=1326 audit(1904646231.483:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20097 comm="syz.2.6789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b899daeb9 code=0x7ffc0000 [ 527.215471][T20103] netlink: 'syz.5.6793': attribute type 21 has an invalid length. [ 527.215501][T20103] IPv6: NLM_F_CREATE should be specified when creating new route [ 527.341983][T20109] tmpfs: Bad value for 'mpol' [ 527.575904][T19560] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 527.592311][T19560] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 527.607880][T19560] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 527.625166][T19560] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 527.629472][T19560] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 527.786273][T20118] virt_wifi0 speed is unknown, defaulting to 1000 [ 528.023706][T20134] netlink: 'syz.1.6806': attribute type 2 has an invalid length. [ 528.386639][T20118] chnl_net:caif_netlink_parms(): no params data found [ 528.502565][ T5870] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 528.647752][ T5870] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 528.647787][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.677095][T20118] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.677332][T20118] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.677919][T20118] bridge_slave_0: entered allmulticast mode [ 528.680765][T20118] bridge_slave_0: entered promiscuous mode [ 528.699525][T20118] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.699656][T20118] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.700213][T20118] bridge_slave_1: entered allmulticast mode [ 528.734657][T20118] bridge_slave_1: entered promiscuous mode [ 528.736095][ T5870] usb 3-1: config 0 descriptor?? [ 528.761477][ T5870] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 528.981923][T20167] ip6gre2: entered promiscuous mode [ 528.981952][T20167] ip6gre2: entered allmulticast mode [ 529.018526][T20118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.054966][T20118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.160589][ T5870] gspca_cpia1: usb_control_msg 03, error -71 [ 529.161038][ T5870] gspca_cpia1: usb_control_msg 01, error -71 [ 529.161056][ T5870] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 529.179888][ T5870] usb 3-1: USB disconnect, device number 86 [ 529.227533][T20118] team0: Port device team_slave_0 added [ 529.231725][T20118] team0: Port device team_slave_1 added [ 529.273972][T20118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.273991][T20118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.274021][T20118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.435047][ T31] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 529.457296][T20118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.457316][T20118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.457346][T20118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.578326][ T61] Bluetooth: hci6: command tx timeout [ 529.584933][T20118] hsr_slave_0: entered promiscuous mode [ 529.585953][T20118] hsr_slave_1: entered promiscuous mode [ 529.586569][T20118] debugfs: 'hsr0' already exists in 'hsr' [ 529.586587][T20118] Cannot create hsr debugfs directory [ 529.599133][ T31] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 529.599162][ T31] usb 6-1: config 0 has no interface number 0 [ 529.601776][ T31] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 529.601809][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.601830][ T31] usb 6-1: Product: syz [ 529.601844][ T31] usb 6-1: Manufacturer: syz [ 529.601858][ T31] usb 6-1: SerialNumber: syz [ 529.611701][ T31] usb 6-1: config 0 descriptor?? [ 529.871924][ T31] uvcvideo 6-1:0.64: Found Unit with invalid ID 0 [ 529.871967][ T31] uvcvideo 6-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 529.872008][ T31] uvcvideo 6-1:0.64: Entity type for entity Output 65535 was not initialized! [ 529.872054][ T31] uvcvideo 6-1:0.64: Failed to create links for entity 65535 [ 529.872065][ T31] uvcvideo 6-1:0.64: Failed to register entities (-22). [ 529.899110][ T31] usb 6-1: USB disconnect, device number 3 [ 530.013505][T20187] ipip0: entered allmulticast mode [ 530.484578][ T31] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 530.637864][T20207] netlink: 'syz.1.6841': attribute type 1 has an invalid length. [ 530.637890][T20207] netlink: 'syz.1.6841': attribute type 11 has an invalid length. [ 530.637903][T20207] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6841'. [ 530.656375][ T31] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 530.656405][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.656424][ T31] usb 3-1: config 0 has no interface number 0 [ 530.656468][ T31] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 530.656493][ T31] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 530.656515][ T31] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 530.656540][ T31] usb 3-1: config 0 interface 52 has no altsetting 0 [ 530.660303][ T31] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 530.660330][ T31] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 530.660349][ T31] usb 3-1: Manufacturer: syz [ 530.677132][ T31] usb 3-1: config 0 descriptor?? [ 530.702064][ T31] hub 3-1:0.52: bad descriptor, ignoring hub [ 530.702106][ T31] hub 3-1:0.52: probe with driver hub failed with error -5 [ 530.735468][T20118] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 530.817425][T20118] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 530.855708][T20118] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 530.923307][T20118] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 530.933953][ T31] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 530.934227][ T31] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -5 [ 531.167414][ T37] audit: type=1326 audit(1904646235.811:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20223 comm="syz.5.6845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534031aeb9 code=0x7ffc0000 [ 531.168068][ T37] audit: type=1326 audit(1904646235.811:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20223 comm="syz.5.6845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534031aeb9 code=0x7ffc0000 [ 531.207040][ T8995] usb 3-1: USB disconnect, device number 87 [ 531.222491][ T37] audit: type=1326 audit(1904646235.874:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20223 comm="syz.5.6845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f534031aeb9 code=0x7ffc0000 [ 531.222744][ T37] audit: type=1326 audit(1904646235.874:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20223 comm="syz.5.6845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534031aeb9 code=0x7ffc0000 [ 531.222938][ T37] audit: type=1326 audit(1904646235.874:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20223 comm="syz.5.6845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534031aeb9 code=0x7ffc0000 [ 531.356674][T20118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.402642][T20230] process 'syz.1.6848' launched './file0' with NULL argv: empty string added [ 531.402815][T20118] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.433756][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.434000][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.548525][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.548768][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.558281][ T61] Bluetooth: hci6: command tx timeout [ 532.194393][T20118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.710474][ T8995] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 532.846825][T20118] veth0_vlan: entered promiscuous mode [ 532.868725][ T8995] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 532.868758][ T8995] usb 2-1: config 0 has no interface number 0 [ 532.870337][ T8995] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 532.870388][ T8995] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 532.870419][ T8995] usb 2-1: config 0 interface 255 has no altsetting 0 [ 532.870457][ T8995] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 532.870482][ T8995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.888196][ T8995] usb 2-1: config 0 descriptor?? [ 532.916221][ T8995] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 532.970753][T20118] veth1_vlan: entered promiscuous mode [ 533.000598][T20272] kAFS: unable to lookup cell 'syz0' [ 533.133491][T20118] veth0_macvtap: entered promiscuous mode [ 533.150161][T20118] veth1_macvtap: entered promiscuous mode [ 533.151508][ T8995] usb 2-1: USB disconnect, device number 96 [ 533.189061][T20118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.214154][T20118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.285803][ T43] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.289198][ T43] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.309869][ T43] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.331990][ T43] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.484672][T20282] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 533.538402][ T61] Bluetooth: hci6: command tx timeout [ 533.969219][T10469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.969243][T10469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.206547][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.206573][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.366710][ T6582] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 534.446753][T19560] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 534.459249][T19560] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 534.479812][T19560] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 534.485882][T19560] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 534.486746][T19560] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 534.566049][ T6582] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.567911][ T6582] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 534.576236][ T6582] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 534.576268][ T6582] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 534.576290][ T6582] usb 6-1: SerialNumber: syz [ 534.771951][T20313] netlink: 'syz.1.6881': attribute type 10 has an invalid length. [ 534.832031][ T6582] usb 6-1: 0:2 : does not exist [ 534.921909][ T6582] usb 6-1: USB disconnect, device number 4 [ 534.988357][T20313] team0: Port device netdevsim0 added [ 535.113494][T20306] virt_wifi0 speed is unknown, defaulting to 1000 [ 535.125804][T19494] udevd[19494]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 535.513749][ T37] audit: type=1326 audit(1904646240.380:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20330 comm="syz.6.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaaf6daeb9 code=0x7ffc0000 [ 535.518630][ T61] Bluetooth: hci6: command tx timeout [ 535.557506][ T37] audit: type=1326 audit(1904646240.433:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20330 comm="syz.6.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7faaaf6daeb9 code=0x7ffc0000 [ 535.557565][ T37] audit: type=1326 audit(1904646240.433:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20330 comm="syz.6.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaaf6daeb9 code=0x7ffc0000 [ 535.557610][ T37] audit: type=1326 audit(1904646240.433:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20330 comm="syz.6.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaaf6daeb9 code=0x7ffc0000 [ 535.667163][T20336] netlink: 'syz.2.6891': attribute type 10 has an invalid length. [ 535.668308][T20336] veth0_vlan: entered allmulticast mode [ 535.763773][T20336] team0: Device veth0_vlan failed to register rx_handler [ 536.277714][T20349] virt_wifi0 speed is unknown, defaulting to 1000 [ 536.503321][T20306] chnl_net:caif_netlink_parms(): no params data found [ 536.520573][ T61] Bluetooth: hci7: command tx timeout [ 537.089475][T20306] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.089691][T20306] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.089976][T20306] bridge_slave_0: entered allmulticast mode [ 537.100660][T20306] bridge_slave_0: entered promiscuous mode [ 537.109917][T20306] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.115487][T20306] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.115746][T20306] bridge_slave_1: entered allmulticast mode [ 537.121816][T20386] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6913'. [ 537.133560][T20306] bridge_slave_1: entered promiscuous mode [ 537.603699][ T6582] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 537.715432][T20306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.725434][T20306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.794859][ T6582] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 537.794897][ T6582] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 537.794924][ T6582] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 537.798331][ T6582] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 537.798365][ T6582] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.798386][ T6582] usb 7-1: Product: syz [ 537.798402][ T6582] usb 7-1: Manufacturer: syz [ 537.798416][ T6582] usb 7-1: SerialNumber: syz [ 537.863883][ T6582] usb 7-1: config 0 descriptor?? [ 537.864952][T20396] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 537.865214][T20396] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 537.867679][ T6582] usb 7-1: ucan: probing device on interface #0 [ 538.081749][ T6582] usb 7-1: ucan: device protocol version 0 is not supported [ 538.081789][ T6582] usb 7-1: ucan: probe failed; try to update the device firmware [ 538.322367][ T8995] usb 7-1: USB disconnect, device number 2 [ 538.452375][T20306] team0: Port device team_slave_0 added [ 538.455290][T20306] team0: Port device team_slave_1 added [ 538.498257][ T61] Bluetooth: hci7: command tx timeout [ 538.682419][T20306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.682439][T20306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.682470][T20306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.685233][T20306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.685249][T20306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.685278][T20306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.012758][T20436] netlink: 284 bytes leftover after parsing attributes in process `syz.6.6938'. [ 539.040364][T20306] hsr_slave_0: entered promiscuous mode [ 539.052201][T20306] hsr_slave_1: entered promiscuous mode [ 539.061291][T20306] debugfs: 'hsr0' already exists in 'hsr' [ 539.061321][T20306] Cannot create hsr debugfs directory [ 539.079015][ T996] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 539.227232][ T996] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 539.227270][ T996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.227292][ T996] usb 3-1: Product: syz [ 539.227307][ T996] usb 3-1: Manufacturer: syz [ 539.227323][ T996] usb 3-1: SerialNumber: syz [ 539.242927][ T996] usb 3-1: config 0 descriptor?? [ 539.464702][ T996] hso 3-1:0.0: Can't find BULK IN endpoint [ 539.466106][ T996] usb-storage 3-1:0.0: USB Mass Storage device detected [ 539.691604][ T9] usb 3-1: USB disconnect, device number 88 [ 540.429956][T20471] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6954'. [ 540.429990][T20471] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6954'. [ 540.470328][ T61] Bluetooth: hci7: command tx timeout [ 540.484529][T20474] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 540.524234][T20474] bond1 (unregistering): Released all slaves [ 540.996697][T20306] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 541.060156][T20306] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 541.174786][T20503] netlink: 'syz.1.6968': attribute type 16 has an invalid length. [ 541.174812][T20503] netlink: 'syz.1.6968': attribute type 17 has an invalid length. [ 541.211864][T20306] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 541.233883][T20505] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6970'. [ 541.301204][T20306] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 541.377957][T20510] netlink: 'syz.6.6974': attribute type 10 has an invalid length. [ 541.398405][T20510] veth0_vlan: entered allmulticast mode [ 541.455200][T20510] veth0_vlan: left promiscuous mode [ 541.469136][T20510] veth0_vlan: entered promiscuous mode [ 541.486478][T20510] team0: Device veth0_vlan failed to register rx_handler [ 541.911807][T20306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.943257][T20529] virt_wifi0 speed is unknown, defaulting to 1000 [ 542.004328][T20306] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.094885][ T2329] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.095086][ T2329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.129232][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.129383][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.265910][ C1] sd 0:0:1:0: [sda] tag#5361 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 542.266054][ C1] sd 0:0:1:0: [sda] tag#5361 CDB: Read(6) 08 00 00 00 00 93 [ 542.393962][T20544] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 542.449189][ T61] Bluetooth: hci7: command tx timeout [ 543.024104][T20566] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6995'. [ 543.246457][T20306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.682999][T20591] netlink: 'syz.1.7007': attribute type 10 has an invalid length. [ 543.710855][T20591] veth0_vlan: entered allmulticast mode [ 543.875521][T20591] veth0_vlan: left promiscuous mode [ 543.882312][T20591] veth0_vlan: entered promiscuous mode [ 543.954776][T20591] team0: Device veth0_vlan failed to register rx_handler [ 543.968167][T20601] netlink: 'syz.2.7010': attribute type 10 has an invalid length. [ 544.254758][T20601] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 544.255072][T20601] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 544.262542][T20601] team0: Port device wlan1 added [ 544.614010][T20617] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 544.656570][T20617] bond1 (unregistering): Released all slaves [ 544.717081][T20306] veth0_vlan: entered promiscuous mode [ 544.871321][T20306] veth1_vlan: entered promiscuous mode [ 544.954481][ T31] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 545.021639][T20306] veth0_macvtap: entered promiscuous mode [ 545.064745][T20306] veth1_macvtap: entered promiscuous mode [ 545.126943][ T31] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 545.126975][ T31] usb 3-1: config 0 has no interface number 0 [ 545.135616][ T31] usb 3-1: New USB device found, idVendor=2013, idProduct=0259, bcdDevice= e.96 [ 545.135658][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.135677][ T31] usb 3-1: Product: syz [ 545.135691][ T31] usb 3-1: Manufacturer: syz [ 545.135705][ T31] usb 3-1: SerialNumber: syz [ 545.174425][ T31] usb 3-1: config 0 descriptor?? [ 545.209225][ T31] cx231xx 3-1:0.1: New device syz syz @ 12 Mbps (2013:0259) with 1 interfaces [ 545.209262][ T31] cx231xx 3-1:0.1: Not found matching IAD interface [ 545.380415][T20306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.421938][ T8997] usb 3-1: USB disconnect, device number 89 [ 545.498725][T20306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.650216][ T2329] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.653431][ T2329] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.654233][ T2329] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.654738][ T2329] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.475725][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.475749][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.772657][ T2329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.772684][ T2329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.316681][ T8997] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 547.473082][ T8997] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 547.473117][ T8997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.473140][ T8997] usb 6-1: Product: syz [ 547.473155][ T8997] usb 6-1: Manufacturer: syz [ 547.473172][ T8997] usb 6-1: SerialNumber: syz [ 547.486574][ T8997] usb 6-1: config 0 descriptor?? [ 547.637773][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 547.740645][ T8997] mos7840 6-1:0.0: required endpoints missing [ 547.792269][ T9] usb 7-1: config index 0 descriptor too short (expected 42532, got 36) [ 547.792303][ T9] usb 7-1: config 206 has an invalid descriptor of length 0, skipping remainder of the config [ 547.792325][ T9] usb 7-1: config 206 has 0 interfaces, different from the descriptor's value: 30 [ 547.792363][ T9] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 547.792388][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.948682][ T31] usb 6-1: USB disconnect, device number 5 [ 548.133834][ T6582] usb 7-1: USB disconnect, device number 3 [ 548.324858][T20714] random: crng reseeded on system resumption [ 548.542719][ T8997] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 548.625067][T20724] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7069'. [ 548.719183][ T8997] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 548.719218][ T8997] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.719241][ T8997] usb 2-1: Product: syz [ 548.719256][ T8997] usb 2-1: Manufacturer: syz [ 548.719271][ T8997] usb 2-1: SerialNumber: syz [ 548.764936][ T8997] usb 2-1: config 0 descriptor?? [ 548.862159][ T8997] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 549.218659][ T5870] usb 2-1: USB disconnect, device number 97 [ 549.313103][ T8995] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 549.485690][ T8995] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 549.485725][ T8995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.485747][ T8995] usb 3-1: Product: syz [ 549.485762][ T8995] usb 3-1: Manufacturer: syz [ 549.485778][ T8995] usb 3-1: SerialNumber: syz [ 549.537485][ T8995] usb 3-1: config 0 descriptor?? [ 549.626415][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 549.650763][ T8995] usb 3-1: selecting invalid altsetting 3 [ 549.650789][ T8995] comedi comedi4: could not set alternate setting 3 in high speed [ 549.650806][ T8995] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 549.658344][ T8995] usbdux 3-1:0.0: probe with driver usbdux failed with error -22 [ 549.743359][ T5870] usb 3-1: USB disconnect, device number 90 [ 549.966800][T20768] netlink: 'syz.1.7088': attribute type 12 has an invalid length. [ 550.135678][T20773] netlink: 'syz.5.7090': attribute type 10 has an invalid length. [ 550.644729][T20790] netlink: 'syz.7.7099': attribute type 5 has an invalid length. [ 550.903152][T20802] i2c i2c-0: Invalid block write size 49 [ 551.033270][T20806] tc_dump_action: action bad kind [ 551.411756][ T37] audit: type=1326 audit(1904646257.082:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20815 comm="syz.5.7113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534031aeb9 code=0x7ffc0000 [ 551.411821][ T37] audit: type=1326 audit(1904646257.082:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20815 comm="syz.5.7113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534031aeb9 code=0x7ffc0000 [ 551.434119][ T37] audit: type=1326 audit(1904646257.103:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20815 comm="syz.5.7113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f534031aeb9 code=0x7ffc0000 [ 551.434181][ T37] audit: type=1326 audit(1904646257.103:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20815 comm="syz.5.7113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534031aeb9 code=0x7ffc0000 [ 551.434228][ T37] audit: type=1326 audit(1904646257.103:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20815 comm="syz.5.7113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534031aeb9 code=0x7ffc0000 [ 551.654827][T20823] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7116'. [ 551.728114][T20824] netlink: 'syz.6.7117': attribute type 1 has an invalid length. [ 552.242164][T20847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7126'. [ 552.242193][T20847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7126'. [ 553.020954][ T6582] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 553.191176][ T6582] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 553.193703][ T6582] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 553.193765][ T6582] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 553.193792][ T6582] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 553.193815][ T6582] usb 7-1: config 0 interface 0 has no altsetting 0 [ 553.195251][ T6582] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 553.195308][ T6582] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 553.195335][ T6582] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 553.195357][ T6582] usb 7-1: config 0 interface 0 has no altsetting 0 [ 553.196785][ T6582] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 553.196845][ T6582] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 553.300694][ T6582] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 553.300728][ T6582] usb 7-1: config 0 interface 0 has no altsetting 0 [ 553.338025][ T6582] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 553.338091][ T6582] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 553.338118][ T6582] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 553.338142][ T6582] usb 7-1: config 0 interface 0 has no altsetting 0 [ 553.339491][ T6582] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 553.339552][ T6582] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 553.339580][ T6582] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 553.339602][ T6582] usb 7-1: config 0 interface 0 has no altsetting 0 [ 553.346127][ T6582] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 553.346184][ T6582] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 553.346211][ T6582] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 553.346235][ T6582] usb 7-1: config 0 interface 0 has no altsetting 0 [ 553.385940][ T6582] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 553.386009][ T6582] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 553.386038][ T6582] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 553.386062][ T6582] usb 7-1: config 0 interface 0 has no altsetting 0 [ 553.445095][ T6582] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 553.445162][ T6582] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 553.445190][ T6582] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 553.445216][ T6582] usb 7-1: config 0 interface 0 has no altsetting 0 [ 553.539784][ T6582] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 553.539817][ T6582] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 553.539846][ T6582] usb 7-1: Product: syz [ 553.539863][ T6582] usb 7-1: Manufacturer: syz [ 553.539878][ T6582] usb 7-1: SerialNumber: syz [ 553.577295][ T6582] usb 7-1: config 0 descriptor?? [ 553.591763][ T6582] yurex 7-1:0.0: Could not submitting URB [ 553.603117][ T6582] yurex 7-1:0.0: probe with driver yurex failed with error -5 [ 553.830547][ T31] usb 7-1: USB disconnect, device number 4 [ 554.243019][T20911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 554.456225][T10469] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.456282][T10469] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.456321][T10469] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.456360][T10469] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.612452][T20928] netlink: 140 bytes leftover after parsing attributes in process `syz.7.7162'. [ 554.612649][T20928] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7162'. [ 554.949704][T20938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7165'. [ 555.050074][T20940] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7167'. [ 555.527637][T20958] overlay: Bad value for 'workdir' [ 556.459270][T20990] bond1: option packets_per_slave: invalid value (347020128) [ 556.459298][T20990] bond1: option packets_per_slave: allowed values 0 - 65535 [ 556.495837][T20990] bond1 (unregistering): Released all slaves [ 556.569827][T20995] MTD: Couldn't look up '': -22 [ 556.876013][T21005] kernel profiling enabled (shift: 0) [ 557.541584][T21028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7208'. [ 558.758436][T21062] ./file0: Can't lookup blockdev [ 559.342017][T21083] trusted_key: encrypted_key: master key parameter '' is invalid [ 559.589036][T21088] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7235'. [ 559.589249][T21088] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7235'. [ 559.928151][T21097] openvswitch: netlink: Flow actions attr not present in new flow. [ 560.149778][ T6582] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 560.289606][ T6582] usb 2-1: Using ep0 maxpacket: 32 [ 560.292078][ T6582] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 560.292107][ T6582] usb 2-1: config 0 has no interface number 0 [ 560.292161][ T6582] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 560.295956][ T6582] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 560.296058][ T6582] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.296081][ T6582] usb 2-1: Product: syz [ 560.296096][ T6582] usb 2-1: Manufacturer: syz [ 560.296111][ T6582] usb 2-1: SerialNumber: syz [ 560.369614][ T6582] usb 2-1: config 0 descriptor?? [ 560.378143][T21095] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 560.516138][T21110] MPI: mpi too large (107144 bits) [ 560.627633][T21095] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 560.646893][T21114] overlay: Unknown parameter '\' [ 560.831319][ T6582] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 560.831627][ T6582] asix 2-1:0.188: probe with driver asix failed with error -71 [ 560.891822][ T6582] usb 2-1: USB disconnect, device number 98 [ 560.945925][T21122] netlink: 388 bytes leftover after parsing attributes in process `syz.6.7253'. [ 561.022814][ T8997] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 561.191616][ T8997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 561.191655][ T8997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 561.191701][ T8997] usb 6-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 561.191725][ T8997] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.216795][ T8997] usb 6-1: config 0 descriptor?? [ 561.217736][T21116] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 561.270327][ T8997] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input50 [ 561.419397][ T5151] bcm5974 6-1:0.0: could not read from device [ 561.486793][T21136] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7259'. [ 561.495290][ T8997] usb 6-1: USB disconnect, device number 6 [ 561.509241][ T5151] bcm5974 6-1:0.0: could not read from device [ 561.793650][T21145] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 562.165367][ T37] audit: type=1326 audit(1904646268.374:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21156 comm="syz.7.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb236ecaeb9 code=0x7ffc0000 [ 562.165426][ T37] audit: type=1326 audit(1904646268.374:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21156 comm="syz.7.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb236ecaeb9 code=0x7ffc0000 [ 562.184438][ T37] audit: type=1326 audit(1904646268.395:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21156 comm="syz.7.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb236ecaeb9 code=0x7ffc0000 [ 562.186311][ T37] audit: type=1326 audit(1904646268.405:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21156 comm="syz.7.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb236ecaeb9 code=0x7ffc0000 [ 562.186364][ T37] audit: type=1326 audit(1904646268.405:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21156 comm="syz.7.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb236ecaeb9 code=0x7ffc0000 [ 562.187805][ T37] audit: type=1326 audit(1904646268.405:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21156 comm="syz.7.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fb236ecaeb9 code=0x7ffc0000 [ 562.187854][ T37] audit: type=1326 audit(1904646268.405:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21156 comm="syz.7.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb236ecaeb9 code=0x7ffc0000 [ 562.187894][ T37] audit: type=1326 audit(1904646268.405:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21156 comm="syz.7.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb236ecaeb9 code=0x7ffc0000 [ 562.187945][ T37] audit: type=1326 audit(1904646268.405:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21156 comm="syz.7.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb236ecaeb9 code=0x7ffc0000 [ 562.585203][T21172] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7278'. [ 562.983846][ T8996] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 563.136750][ T8996] usb 2-1: Using ep0 maxpacket: 32 [ 563.144323][ T8996] usb 2-1: config 0 has an invalid interface number: 46 but max is 0 [ 563.144356][ T8996] usb 2-1: config 0 has no interface number 0 [ 563.144414][ T8996] usb 2-1: config 0 interface 46 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 563.144443][ T8996] usb 2-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 563.205687][ T8996] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=d8.55 [ 563.205721][ T8996] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.205743][ T8996] usb 2-1: Product: syz [ 563.205759][ T8996] usb 2-1: Manufacturer: syz [ 563.205775][ T8996] usb 2-1: SerialNumber: syz [ 563.214656][ T8996] usb 2-1: config 0 descriptor?? [ 563.257055][ T8996] ttusbir 2-1:0.46: cannot find expected altsetting [ 563.479949][ T8996] usb 2-1: USB disconnect, device number 99 [ 563.632016][T21207] openvswitch: netlink: Multiple metadata blocks provided [ 563.726822][T21213] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7297'. [ 563.726855][T21213] netlink: 43 bytes leftover after parsing attributes in process `syz.6.7297'. [ 563.726872][T21213] netlink: 'syz.6.7297': attribute type 5 has an invalid length. [ 563.726886][T21213] netlink: 43 bytes leftover after parsing attributes in process `syz.6.7297'. [ 563.880620][T21219] netlink: 9 bytes leftover after parsing attributes in process `syz.2.7301'. [ 563.880813][T21219] .70: renamed from hsr0 (while UP) [ 563.977324][T21219] .70: entered allmulticast mode [ 563.977350][T21219] hsr_slave_0: entered allmulticast mode [ 563.977370][T21219] hsr_slave_1: entered allmulticast mode [ 563.978209][T21219] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check. [ 564.575394][T21247] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7314'. [ 564.575788][T21247] Unknown options in mask b7f2 [ 564.595252][T21246] netlink: 'syz.2.7315': attribute type 11 has an invalid length. [ 564.595278][T21246] netlink: 140 bytes leftover after parsing attributes in process `syz.2.7315'. [ 564.630836][ T6582] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 564.809358][ T6582] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 564.809394][ T6582] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.809415][ T6582] usb 7-1: Product: syz [ 564.809430][ T6582] usb 7-1: Manufacturer: syz [ 564.809445][ T6582] usb 7-1: SerialNumber: syz [ 564.819311][ T6582] usb 7-1: config 0 descriptor?? [ 564.838786][ T6582] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 005 [ 564.909094][T21258] netlink: 'syz.7.7318': attribute type 1 has an invalid length. [ 564.909121][T21258] netlink: 224 bytes leftover after parsing attributes in process `syz.7.7318'. [ 565.250158][ T6582] (null): failure reading functionality [ 565.268696][ T6582] i2c i2c-2: failure reading functionality [ 565.321964][ T6582] i2c i2c-2: connected i2c-tiny-usb device [ 565.336110][ T6582] usb 7-1: USB disconnect, device number 5 [ 565.379433][T21271] netlink: 'syz.2.7327': attribute type 62 has an invalid length. [ 565.487607][ T8997] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 565.671187][ T8997] usb 6-1: Using ep0 maxpacket: 8 [ 565.692760][ T8997] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 565.692792][ T8997] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 565.692814][ T8997] usb 6-1: config 0 has no interface number 0 [ 565.692892][ T8997] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 565.692921][ T8997] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 565.692949][ T8997] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 565.695891][ T8997] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 565.695923][ T8997] usb 6-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 565.695944][ T8997] usb 6-1: Product: syz [ 565.695959][ T8997] usb 6-1: Manufacturer: syz [ 565.804605][ T8997] usb 6-1: config 0 descriptor?? [ 566.255445][ T8997] usb 6-1: USB disconnect, device number 7 [ 566.416683][T21293] netlink: 'syz.6.7338': attribute type 2 has an invalid length. [ 566.781068][T21267] infiniband syz2: set active [ 566.781092][T21267] infiniband syz2: added veth1_to_team [ 566.823851][T21267] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 566.834204][T21267] infiniband syz2: Couldn't open port 1 [ 566.944259][T21311] netlink: 'syz.5.7345': attribute type 3 has an invalid length. [ 567.084599][T21267] RDS/IB: syz2: added [ 567.085787][T21267] smc: adding ib device syz2 with port count 1 [ 567.086226][T21267] smc: ib device syz2 port 1 has no pnetid [ 567.647018][T21331] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.244371][T21353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7365'. [ 568.753761][ T37] audit: type=1326 audit(1904646275.306:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21366 comm="syz.2.7374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b899daeb9 code=0x7ffc0000 [ 568.756618][ T37] audit: type=1326 audit(1904646275.306:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21366 comm="syz.2.7374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b899daeb9 code=0x7ffc0000 [ 568.757202][ T37] audit: type=1326 audit(1904646275.306:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21366 comm="syz.2.7374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b899daeb9 code=0x7ffc0000 [ 568.803103][ T37] audit: type=1326 audit(1904646275.359:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21366 comm="syz.2.7374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f2b899daeb9 code=0x7ffc0000 [ 568.803155][ T37] audit: type=1326 audit(1904646275.359:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21366 comm="syz.2.7374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b899daeb9 code=0x7ffc0000 [ 568.803195][ T37] audit: type=1326 audit(1904646275.359:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21366 comm="syz.2.7374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b899daeb9 code=0x7ffc0000 [ 568.804329][ T37] audit: type=1326 audit(1904646275.359:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21366 comm="syz.2.7374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2b899daeb9 code=0x7ffc0000 [ 568.804375][ T37] audit: type=1326 audit(1904646275.359:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21366 comm="syz.2.7374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2b899daeb9 code=0x7ffc0000 [ 569.163271][T21378] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 569.172439][T21381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7379'. [ 569.836529][T21402] netlink: 148 bytes leftover after parsing attributes in process `syz.7.7389'. [ 569.836561][T21402] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 570.210098][ T996] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 570.320291][T21420] lo: entered allmulticast mode [ 570.321198][T21420] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 570.380911][ T996] usb 8-1: Using ep0 maxpacket: 32 [ 570.389517][ T996] usb 8-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 570.389540][ T996] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.389552][ T996] usb 8-1: Product: syz [ 570.389560][ T996] usb 8-1: Manufacturer: syz [ 570.389569][ T996] usb 8-1: SerialNumber: syz [ 570.489655][ T996] usb 8-1: config 0 descriptor?? [ 570.546018][ T996] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 570.884216][ T996] gspca_topro: reg_w err -71 [ 570.911011][ T996] gspca_topro: Sensor soi763a [ 570.984149][ T996] usb 8-1: USB disconnect, device number 2 [ 571.024497][T21433] netlink: 5240 bytes leftover after parsing attributes in process `syz.6.7405'. [ 571.610939][T21450] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7413'. [ 571.610963][T21450] netlink: 348 bytes leftover after parsing attributes in process `syz.6.7413'. [ 571.610985][T21450] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7413'. [ 571.611000][T21450] netlink: 348 bytes leftover after parsing attributes in process `syz.6.7413'. [ 571.611082][T21450] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7413'. [ 571.948294][T21458] netlink: 'syz.6.7417': attribute type 1 has an invalid length. [ 571.948444][T21458] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7417'. [ 573.980702][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 574.284810][ T996] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 574.429745][ T996] usb 7-1: config 0 has an invalid interface number: 3 but max is 2 [ 574.429777][ T996] usb 7-1: config 0 has an invalid interface number: 176 but max is 2 [ 574.429799][ T996] usb 7-1: config 0 has no interface number 1 [ 574.429816][ T996] usb 7-1: config 0 has no interface number 2 [ 574.429900][ T996] usb 7-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 574.429925][ T996] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.524634][ T996] usb 7-1: config 0 descriptor?? [ 574.600261][T21527] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7451'. [ 574.729713][T21533] autofs4:pid:21533:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(32.1), cmd(0xc0189379) [ 574.729747][T21533] autofs4:pid:21533:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189379) [ 574.763445][ T996] qcserial 7-1:0.3: Qualcomm USB modem converter detected [ 575.021018][ T996] usb 7-1: USB disconnect, device number 6 [ 575.023778][ T996] qcserial 7-1:0.3: device disconnected [ 575.301826][T21549] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 575.564309][T21559] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7467'. [ 575.793511][T21567] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 576.385298][T21589] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7481'. [ 576.712394][T21600] netlink: 'syz.5.7487': attribute type 2 has an invalid length. [ 576.842763][ T37] audit: type=1326 audit(1904646283.794:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21604 comm="syz.6.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaaf6daeb9 code=0x7ffc0000 [ 576.845417][ T37] audit: type=1326 audit(1904646283.794:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21604 comm="syz.6.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaaf6daeb9 code=0x7ffc0000 [ 576.893991][ T37] audit: type=1326 audit(1904646283.857:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21604 comm="syz.6.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaaf6daeb9 code=0x7ffc0000 [ 576.894151][ T37] audit: type=1326 audit(1904646283.857:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21604 comm="syz.6.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7faaaf6daeb9 code=0x7ffc0000 [ 576.894429][ T37] audit: type=1326 audit(1904646283.857:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21604 comm="syz.6.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaaf6daeb9 code=0x7ffc0000 [ 576.894478][ T37] audit: type=1326 audit(1904646283.857:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21604 comm="syz.6.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaaf6daeb9 code=0x7ffc0000 [ 576.894615][ T37] audit: type=1326 audit(1904646283.857:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21604 comm="syz.6.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaaf6daeb9 code=0x7ffc0000 [ 576.894874][ T37] audit: type=1326 audit(1904646283.857:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21604 comm="syz.6.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7faaaf6daeb9 code=0x7ffc0000 [ 576.895042][ T37] audit: type=1326 audit(1904646283.857:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21604 comm="syz.6.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7faaaf6daeb9 code=0x7ffc0000 [ 577.883850][T21641] tmpfs: Bad value for 'nr_inodes' [ 577.933491][T21643] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7507'. [ 578.046976][T21647] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7509'. [ 578.093540][T19560] Bluetooth: hci7: command 0x2016 tx timeout [ 578.250428][T21652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7510'. [ 578.390719][T21652] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 578.390756][T21652] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 578.392991][T21652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7510'. [ 579.141438][T21665] lo speed is unknown, defaulting to 1000 [ 579.168719][T21665] lo speed is unknown, defaulting to 1000 [ 579.171641][T21665] lo speed is unknown, defaulting to 1000 [ 580.033578][ T37] audit: type=1326 audit(1904646287.144:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21698 comm="syz.2.7535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b899daeb9 code=0x7ffc0000 [ 580.086330][ T61] Bluetooth: hci7: command 0x2016 tx timeout [ 580.512380][T21665] infiniband sqz0: set active [ 580.512404][T21665] infiniband sqz0: added lo [ 580.518568][ T8997] lo speed is unknown, defaulting to 1000 [ 580.854630][T21728] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7548'. [ 580.854657][T21728] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7548'. [ 580.929986][T21665] RDS/IB: sqz0: added [ 580.930085][T21665] smc: adding ib device sqz0 with port count 1 [ 580.930113][T21665] smc: ib device sqz0 port 1 has no pnetid [ 580.930203][ T5870] lo speed is unknown, defaulting to 1000 [ 580.932136][T21665] lo speed is unknown, defaulting to 1000 [ 581.519508][ T8996] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 581.690767][ T8996] usb 3-1: Using ep0 maxpacket: 8 [ 581.693288][T21758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7564'. [ 581.693552][ T8996] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.693608][ T8996] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 581.693632][ T8996] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.772207][ T8996] usb 3-1: config 0 descriptor?? [ 581.821301][ T8996] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 581.944456][T21764] netlink: 456 bytes leftover after parsing attributes in process `syz.5.7567'. [ 582.199554][ T8996] gspca_vc032x: reg_w err -71 [ 582.199659][ T8996] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 582.275579][ T8996] usb 3-1: USB disconnect, device number 91 [ 582.317728][T21772] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7571'. [ 582.463903][T21665] lo speed is unknown, defaulting to 1000 [ 583.088118][T21795] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7582'. [ 583.176209][ T8996] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 583.342088][ T8996] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 583.365272][ T8996] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 583.365308][ T8996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.365330][ T8996] usb 3-1: Product: syz [ 583.365345][ T8996] usb 3-1: Manufacturer: syz [ 583.365361][ T8996] usb 3-1: SerialNumber: syz [ 583.424732][ T8996] usb 3-1: config 0 descriptor?? [ 583.429053][ T8996] hub 3-1:0.0: bad descriptor, ignoring hub [ 583.429096][ T8996] hub 3-1:0.0: probe with driver hub failed with error -5 [ 583.470682][ T8996] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input53 [ 583.873908][T21665] lo speed is unknown, defaulting to 1000 [ 584.060301][T21815] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7592'. [ 584.550367][ T5870] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 584.694225][ T5870] usb 2-1: Using ep0 maxpacket: 16 [ 584.738049][ T5870] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 584.738084][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.738104][ T5870] usb 2-1: Product: syz [ 584.738120][ T5870] usb 2-1: Manufacturer: syz [ 584.738134][ T5870] usb 2-1: SerialNumber: syz [ 584.768669][ T5870] usb 2-1: config 0 descriptor?? [ 584.802010][ T5870] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 585.253024][ T5870] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 585.281784][ T5870] usb 2-1: USB disconnect, device number 100 [ 585.519616][T21665] lo speed is unknown, defaulting to 1000 [ 585.931597][ T31] usb 3-1: USB disconnect, device number 92 [ 586.270611][ T996] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 586.435309][ T996] usb 7-1: Using ep0 maxpacket: 32 [ 586.439859][ T996] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 586.439894][ T996] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.447193][ T996] usb 7-1: config 0 descriptor?? [ 586.493576][ T996] gspca_main: sq930x-2.14.0 probing 041e:403c [ 586.542766][T21665] lo speed is unknown, defaulting to 1000 [ 586.717371][T21868] misc userio: The device must be registered before sending interrupts [ 586.856250][ T996] gspca_sq930x: ucbus_write failed -71 [ 586.856352][ T996] sq930x 7-1:0.0: probe with driver sq930x failed with error -71 [ 586.898568][ T996] usb 7-1: USB disconnect, device number 7 [ 587.665760][T21665] lo speed is unknown, defaulting to 1000 [ 587.824081][T21906] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7637'. [ 588.108017][T21916] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 588.480081][T21929] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7648'. [ 588.609289][ T37] kauditd_printk_skb: 17 callbacks suppressed [ 588.609313][ T37] audit: type=1326 audit(1904646296.157:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21931 comm="syz.6.7650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaaf6daeb9 code=0x7ffc0000 [ 588.609359][ T37] audit: type=1326 audit(1904646296.157:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21931 comm="syz.6.7650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaaf6daeb9 code=0x7ffc0000 [ 588.658813][T21665] lo speed is unknown, defaulting to 1000 [ 588.659974][ T37] audit: type=1326 audit(1904646296.199:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21931 comm="syz.6.7650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7faaaf6daeb9 code=0x7ffc0000 [ 588.660029][ T37] audit: type=1326 audit(1904646296.199:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21931 comm="syz.6.7650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaaf6daeb9 code=0x7ffc0000 [ 588.660069][ T37] audit: type=1326 audit(1904646296.199:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21931 comm="syz.6.7650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaaf6daeb9 code=0x7ffc0000 [ 588.739767][ T37] audit: type=1326 audit(1904646296.293:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21935 comm="syz.5.7652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534031aeb9 code=0x7ffc0000 [ 588.764999][ T37] audit: type=1326 audit(1904646296.315:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21935 comm="syz.5.7652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f534031aeb9 code=0x7ffc0000 [ 588.765054][ T37] audit: type=1326 audit(1904646296.315:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21935 comm="syz.5.7652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534031aeb9 code=0x7ffc0000 [ 588.765095][ T37] audit: type=1326 audit(1904646296.315:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21935 comm="syz.5.7652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534031aeb9 code=0x7ffc0000 [ 589.306931][ T5911] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 589.348548][ T37] audit: type=1326 audit(1904646296.934:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21957 comm="syz.5.7663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534031aeb9 code=0x7ffc0000 [ 589.460262][ T5911] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 589.460298][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.538102][ T5911] usb 2-1: config 0 descriptor?? [ 589.574236][ T5911] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 589.968569][ T5911] gspca_stv06xx: I2C: Read error writing address: -71 [ 590.062848][ T5911] usb 2-1: USB disconnect, device number 101 [ 590.110085][T21665] lo speed is unknown, defaulting to 1000 [ 591.021626][T22010] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7688'. [ 591.057850][T22007] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 591.171827][T22013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7689'. [ 591.296940][T22016] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7690'. [ 591.582359][T22026] dlm: non-version read from control device 131 [ 591.801074][T22034] netlink: 1216 bytes leftover after parsing attributes in process `syz.2.7700'. [ 592.514539][T22067] netlink: 'syz.2.7716': attribute type 20 has an invalid length. [ 592.656103][T22077] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7719'. [ 592.785398][T22080] netlink: 6 bytes leftover after parsing attributes in process `syz.5.7722'. [ 593.036944][T22089] netlink: 'syz.2.7727': attribute type 11 has an invalid length. [ 593.979914][T22130] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 594.440367][T22153] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7758'. [ 594.475660][T22155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7759'. [ 594.793311][T22168] tmpfs: Bad value for 'mpol' [ 595.114181][T22176] libceph: resolve '400' (ret=-3): failed [ 595.342510][ T996] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 595.497170][ T996] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 595.500292][ T996] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 595.500323][ T996] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.500344][ T996] usb 7-1: Product: syz [ 595.500360][ T996] usb 7-1: Manufacturer: syz [ 595.500383][ T996] usb 7-1: SerialNumber: syz [ 595.513072][ T996] usb 7-1: config 0 descriptor?? [ 595.525624][ T996] hub 7-1:0.0: bad descriptor, ignoring hub [ 595.525663][ T996] hub 7-1:0.0: probe with driver hub failed with error -5 [ 595.563016][ T996] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input54 [ 595.806628][T22201] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7782'. [ 596.340472][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 596.340492][ T37] audit: type=1326 audit(1904646304.277:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22211 comm="syz.7.7786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb236ecaeb9 code=0x7ffc0000 [ 596.340821][ T37] audit: type=1326 audit(1904646304.277:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22211 comm="syz.7.7786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fb236ecaeb9 code=0x7ffc0000 [ 596.341972][ T37] audit: type=1326 audit(1904646304.277:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22211 comm="syz.7.7786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb236ecaeb9 code=0x7ffc0000 [ 596.368716][ T37] audit: type=1326 audit(1904646304.277:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22211 comm="syz.7.7786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb236ecaeb9 code=0x7ffc0000 [ 596.520908][T22214] bond3: option miimon: invalid value (18446744073709551614) [ 596.520936][T22214] bond3: option miimon: allowed values 0 - 2147483647 [ 596.556862][T22214] bond3 (unregistering): Released all slaves [ 596.782314][T22227] netlink: 'syz.2.7793': attribute type 1 has an invalid length. [ 597.255187][T22246] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7802'. [ 597.255222][T22246] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7802'. [ 597.255239][T22246] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7802'. [ 597.618877][T22258] netlink: 'syz.6.7807': attribute type 2 has an invalid length. [ 597.618901][T22258] netlink: 'syz.6.7807': attribute type 1 has an invalid length. [ 597.777777][T22265] mmap: syz.2.7813 (22265): VmData 37462016 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 598.174484][T22282] netlink: 'syz.1.7820': attribute type 7 has an invalid length. [ 598.554983][T22295] netlink: 'syz.7.7826': attribute type 2 has an invalid length. [ 598.741076][T22295] #{6c!: entered promiscuous mode [ 598.917512][T22308] bridge_slave_1: left allmulticast mode [ 598.917544][T22308] bridge_slave_1: left promiscuous mode [ 598.917858][T22308] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.049078][T22308] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 599.314380][T22323] netlink: zone id is out of range [ 599.314399][T22323] netlink: zone id is out of range [ 599.314444][T22323] netlink: get zone limit has 4 unknown bytes [ 599.535138][ T996] usb 7-1: USB disconnect, device number 8 [ 599.854942][ T996] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 600.004053][ T996] usb 7-1: string descriptor 0 read error: -22 [ 600.004233][ T996] usb 7-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 600.004249][ T996] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.017236][ T996] usb 7-1: config 0 descriptor?? [ 600.066998][ T996] usbtest 7-1:0.0: FX2 device [ 600.067024][ T996] usbtest 7-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 600.073975][T22320] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 600.260904][ T8997] usb 7-1: USB disconnect, device number 9 [ 600.367934][T22357] usb usb8: usbfs: process 22357 (syz.7.7856) did not claim interface 0 before use [ 601.071162][T22388] netlink: 'syz.7.7872': attribute type 3 has an invalid length. [ 601.071448][T22388] netlink: 'syz.7.7872': attribute type 3 has an invalid length. [ 601.254869][T19560] Bluetooth: hci2: command 0x0406 tx timeout [ 601.377826][ T37] audit: type=1326 audit(1904646309.571:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22391 comm="syz.1.7874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896d6faeb9 code=0x7ffc0000 [ 601.379248][ T37] audit: type=1326 audit(1904646309.571:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22391 comm="syz.1.7874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896d6faeb9 code=0x7ffc0000 [ 601.435940][T22398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7876'. [ 601.457142][ T37] audit: type=1326 audit(1904646309.634:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22391 comm="syz.1.7874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896d6faeb9 code=0x7ffc0000 [ 601.457178][ T37] audit: type=1326 audit(1904646309.634:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22391 comm="syz.1.7874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f896d6faeb9 code=0x7ffc0000 [ 601.457204][ T37] audit: type=1326 audit(1904646309.634:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22391 comm="syz.1.7874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896d6faeb9 code=0x7ffc0000 [ 601.457231][ T37] audit: type=1326 audit(1904646309.644:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22391 comm="syz.1.7874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896d6faeb9 code=0x7ffc0000 [ 601.457256][ T37] audit: type=1326 audit(1904646309.644:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22391 comm="syz.1.7874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896d6faeb9 code=0x7ffc0000 [ 601.457281][ T37] audit: type=1326 audit(1904646309.644:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22391 comm="syz.1.7874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f896d6faeb9 code=0x7ffc0000 [ 601.457306][ T37] audit: type=1326 audit(1904646309.644:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22391 comm="syz.1.7874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f896d6faeb9 code=0x7ffc0000 [ 602.842977][T22453] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7904'. [ 602.893519][T22456] delete_channel: no stack [ 603.225463][ T8996] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 603.296424][T22472] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7914'. [ 603.387610][ T8996] usb 3-1: Using ep0 maxpacket: 32 [ 603.398213][ T8996] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 603.398242][ T8996] usb 3-1: config 0 has no interface number 0 [ 603.414004][ T8996] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 603.414035][ T8996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.414056][ T8996] usb 3-1: Product: syz [ 603.414071][ T8996] usb 3-1: Manufacturer: syz [ 603.414086][ T8996] usb 3-1: SerialNumber: syz [ 603.464135][ T8996] usb 3-1: config 0 descriptor?? [ 603.886985][ T8996] radio-si470x 3-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 603.890447][ T8996] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 603.915724][ T8996] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 603.937997][ T8996] usb 3-1: USB disconnect, device number 93 [ 604.148983][ T996] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 604.308206][ T996] usb 8-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 604.308242][ T996] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.308264][ T996] usb 8-1: Product: syz [ 604.308289][ T996] usb 8-1: Manufacturer: syz [ 604.308304][ T996] usb 8-1: SerialNumber: syz [ 604.361049][ T996] r8152-cfgselector 8-1: Unknown version 0x0000 [ 604.361078][ T996] r8152-cfgselector 8-1: config 0 descriptor?? [ 604.800953][T22511] bond3: entered promiscuous mode [ 604.801593][T22511] 8021q: adding VLAN 0 to HW filter on device bond3 [ 604.860395][ T996] r8152-cfgselector 8-1: USB disconnect, device number 3 [ 605.018309][T22524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.126401][T22570] tmpfs: Bad value for 'mpol' [ 606.243603][ T8997] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 606.388093][ T8997] usb 3-1: Using ep0 maxpacket: 16 [ 606.390571][ T8997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.390616][ T8997] usb 3-1: config 0 interface 0 has no altsetting 0 [ 606.430146][ T8997] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 606.430182][ T8997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.430204][ T8997] usb 3-1: Product: syz [ 606.430220][ T8997] usb 3-1: Manufacturer: syz [ 606.430236][ T8997] usb 3-1: SerialNumber: syz [ 606.479143][ T8997] usb 3-1: config 0 descriptor?? [ 606.771023][T22591] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7972'. [ 606.886751][ T8997] usb 3-1: USB disconnect, device number 94 [ 607.009838][T22601] netlink: 1 bytes leftover after parsing attributes in process `syz.7.7977'. [ 608.115907][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 609.643477][ T996] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 609.743682][T22691] binder: Bad value for 'stats' [ 609.797185][ T996] usb 8-1: Using ep0 maxpacket: 16 [ 609.800735][ T996] usb 8-1: config 0 has an invalid interface number: 104 but max is 1 [ 609.800766][ T996] usb 8-1: config 0 has an invalid interface number: 104 but max is 1 [ 609.800787][ T996] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 609.800810][ T996] usb 8-1: config 0 has no interface number 0 [ 609.800860][ T996] usb 8-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 48, changing to 9 [ 609.800889][ T996] usb 8-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 8240, setting to 1024 [ 609.800917][ T996] usb 8-1: config 0 interface 104 has no altsetting 1 [ 609.811229][ T996] usb 8-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 609.811259][ T996] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.811278][ T996] usb 8-1: Product: syz [ 609.811292][ T996] usb 8-1: Manufacturer: syz [ 609.811306][ T996] usb 8-1: SerialNumber: syz [ 609.890494][ T996] usb 8-1: config 0 descriptor?? [ 609.911510][ T996] asix 8-1:0.104: probe with driver asix failed with error -22 [ 610.106554][ T31] usb 8-1: USB disconnect, device number 4 [ 610.303213][T22705] netlink: 'syz.5.8028': attribute type 2 has an invalid length. [ 610.303238][T22705] netlink: 'syz.5.8028': attribute type 8 has an invalid length. [ 610.303253][T22705] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8028'. [ 610.613275][ T5870] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 610.755519][ T5870] usb 7-1: Using ep0 maxpacket: 32 [ 610.757930][ T5870] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 610.757964][ T5870] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 610.761100][ T5870] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 610.761131][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.761150][ T5870] usb 7-1: Product: syz [ 610.761165][ T5870] usb 7-1: Manufacturer: syz [ 610.761180][ T5870] usb 7-1: SerialNumber: syz [ 610.822159][ T5870] usb 7-1: config 0 descriptor?? [ 610.830118][ T5870] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input55 [ 611.081258][ T31] usb 7-1: USB disconnect, device number 10 [ 611.523718][T22744] netlink: 992 bytes leftover after parsing attributes in process `syz.7.8048'. [ 611.593827][T22748] netlink: 'syz.5.8050': attribute type 2 has an invalid length. [ 611.898641][T22758] cgroup: subsys name conflicts with all [ 612.765338][T22795] ALSA: mixer_oss: invalid OSS volume 'u' [ 613.770120][T22842] netdevsim netdevsim6: Firmware load for '..' refused, path contains '..' component [ 614.200104][T22856] ieee802154 phy1 wpan1: encryption failed: -22 [ 615.354317][T22894] netlink: 'syz.7.8120': attribute type 3 has an invalid length. [ 615.355033][T22894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 615.356214][ T31] lo speed is unknown, defaulting to 1000 [ 615.469917][T22897] netlink: 'syz.5.8122': attribute type 1 has an invalid length. [ 615.607013][T22903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8125'. [ 615.991653][ T8997] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 616.144360][ T8997] usb 6-1: Using ep0 maxpacket: 16 [ 616.162988][ T8997] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 616.163364][ T8997] usb 6-1: config 0 has no interface number 0 [ 616.163416][ T8997] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 616.163443][ T8997] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 160, changing to 11 [ 616.163469][ T8997] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 57565, setting to 1024 [ 616.172155][ T8997] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 616.172186][ T8997] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 616.172666][ T8997] usb 6-1: Product: syz [ 616.172684][ T8997] usb 6-1: SerialNumber: syz [ 616.187193][ T8997] usb 6-1: config 0 descriptor?? [ 616.216945][ T8997] cm109 6-1:0.8: invalid payload size 1024, expected 4 [ 616.250941][ T8997] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input56 [ 616.400831][ C1] cm109 6-1:0.8: cm109_urb_irq_callback: urb status -71 [ 616.592977][ C1] cm109_urb_ctl_callback: 792 callbacks suppressed [ 616.593005][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 616.593264][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 616.593511][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 616.593754][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 616.593771][ T9] usb 6-1: USB disconnect, device number 8 [ 616.593777][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 616.922091][ T9] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 619.061232][T23010] netlink: 'syz.6.8177': attribute type 29 has an invalid length. [ 619.257939][ T9] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 619.438273][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.438304][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 619.438367][ T9] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 619.438392][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.485988][ T9] usb 6-1: config 0 descriptor?? [ 619.492099][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 619.492416][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 619.546016][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 619.547096][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 619.547164][ T9] usb 6-1: media controller created [ 619.550736][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 619.630344][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 619.630488][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 619.634986][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input57 [ 619.664819][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 619.664845][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 619.705176][ T996] usb 6-1: USB disconnect, device number 9 [ 619.856521][ T37] audit: type=1326 audit(1904646328.972:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23033 comm="syz.2.8188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b899daeb9 code=0x7ffc0000 [ 619.883540][ T37] audit: type=1326 audit(1904646328.972:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23033 comm="syz.2.8188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b899daeb9 code=0x7ffc0000 [ 619.883896][ T37] audit: type=1326 audit(1904646329.003:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23033 comm="syz.2.8188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f2b899daeb9 code=0x7ffc0000 [ 619.885032][ T37] audit: type=1326 audit(1904646329.003:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23033 comm="syz.2.8188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b899daeb9 code=0x7ffc0000 [ 619.885335][ T37] audit: type=1326 audit(1904646329.003:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23033 comm="syz.2.8188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b899daeb9 code=0x7ffc0000 [ 620.034307][ T996] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 620.116638][T23043] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.8190'. [ 621.151672][ T5911] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 621.313589][ T5911] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 621.313623][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.313644][ T5911] usb 2-1: Product: syz [ 621.313659][ T5911] usb 2-1: Manufacturer: syz [ 621.313674][ T5911] usb 2-1: SerialNumber: syz [ 621.374481][ T5911] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 621.465094][ T996] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 621.924223][ T8996] usb 2-1: USB disconnect, device number 102 [ 621.977669][T23103] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8219'. [ 622.413601][T23121] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8231'. [ 622.413729][T23121] bond_slave_0: entered promiscuous mode [ 622.414636][T23121] bond_slave_1: entered promiscuous mode [ 622.601022][ T996] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 622.601252][ T996] ath9k_htc: Failed to initialize the device [ 622.605097][ T8996] usb 2-1: ath9k_htc: USB layer deinitialized [ 622.879151][T23137] netlink: 'syz.5.8237': attribute type 20 has an invalid length. [ 622.879180][T23137] IPv6: NLM_F_CREATE should be specified when creating new route [ 622.879331][T23137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 622.879345][T23137] IPv6: NLM_F_CREATE should be set when creating new route [ 623.751021][T23177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8257'. [ 624.174599][T23195] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8267'. [ 624.637950][T23213] tmpfs: Bad value for 'mpol' [ 624.883482][T23224] netlink: 'syz.5.8280': attribute type 62 has an invalid length. [ 624.949580][T23227] netlink: 'syz.1.8281': attribute type 3 has an invalid length. [ 625.032201][T23231] netlink: 148 bytes leftover after parsing attributes in process `syz.7.8284'. [ 625.032232][T23231] netlink: 52 bytes leftover after parsing attributes in process `syz.7.8284'. [ 625.161241][T23235] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8286'. [ 625.245247][ T31] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 625.409419][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.409484][ T31] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 625.409510][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.428394][ T31] usb 3-1: config 0 descriptor?? [ 625.662626][ T31] usb 3-1: string descriptor 0 read error: -71 [ 625.665700][ T31] rndis_host 3-1:0.0: probe with driver rndis_host failed with error -22 [ 625.673915][ T31] usb 3-1: USB disconnect, device number 95 [ 625.755406][T23250] netlink: 'syz.5.8293': attribute type 4 has an invalid length. [ 625.755434][T23250] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8293'. [ 625.786641][T23250] .`: renamed from bond0 (while UP) [ 626.187054][T23264] netlink: 'syz.1.8301': attribute type 3 has an invalid length. [ 627.950201][ T37] audit: type=1326 audit(1904646337.480:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23314 comm="syz.2.8326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b899daeb9 code=0x7ffc0000 [ 627.956634][ T37] audit: type=1326 audit(1904646337.480:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23314 comm="syz.2.8326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b899daeb9 code=0x7ffc0000 [ 627.956772][ T37] audit: type=1326 audit(1904646337.480:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23314 comm="syz.2.8326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b899daeb9 code=0x7ffc0000 [ 627.958696][ T37] audit: type=1326 audit(1904646337.491:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23314 comm="syz.2.8326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f2b899daeb9 code=0x7ffc0000 [ 627.958762][ T37] audit: type=1326 audit(1904646337.491:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23314 comm="syz.2.8326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b899daeb9 code=0x7ffc0000 [ 627.958941][ T37] audit: type=1326 audit(1904646337.491:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23314 comm="syz.2.8326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b899daeb9 code=0x7ffc0000 [ 627.962047][ T37] audit: type=1326 audit(1904646337.491:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23314 comm="syz.2.8326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2b899daeb9 code=0x7ffc0000 [ 627.968443][ T37] audit: type=1326 audit(1904646337.501:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23314 comm="syz.2.8326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2b899daeb9 code=0x7ffc0000 [ 628.649106][T23335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8335'. [ 628.941384][ T31] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 629.089177][ T31] usb 7-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 629.089208][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.089222][ T31] usb 7-1: Product: syz [ 629.089231][ T31] usb 7-1: Manufacturer: syz [ 629.089240][ T31] usb 7-1: SerialNumber: syz [ 629.132310][ T31] usb 7-1: config 0 descriptor?? [ 629.189895][ T31] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 629.202071][ T31] usb 7-1: Detected FT4232HP [ 629.386389][ T996] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 629.486666][T23367] netdevsim0: mtu less than device minimum [ 629.533480][ T996] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.552448][ T996] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 629.552485][ T996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.552508][ T996] usb 3-1: Product: syz [ 629.552523][ T996] usb 3-1: Manufacturer: syz [ 629.552539][ T996] usb 3-1: SerialNumber: syz [ 629.565476][ T31] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 629.593908][T19560] Bluetooth: hci5: command 0x0406 tx timeout [ 629.607700][ T996] usb 3-1: config 0 descriptor?? [ 629.608523][ T31] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 629.634251][ T996] ims_pcu 3-1:0.0: Union descriptor too short (2 vs 5) [ 629.634325][ T996] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 629.678144][ T31] usb 7-1: USB disconnect, device number 11 [ 629.716918][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 629.736921][ T31] ftdi_sio 7-1:0.0: device disconnected [ 629.895289][ T8997] usb 3-1: USB disconnect, device number 96 [ 630.117513][ T9] hid-generic 0008:80000001:0000.0001: item fetching failed at offset 1/4 [ 630.118359][ T9] hid-generic 0008:80000001:0000.0001: probe with driver hid-generic failed with error -22 [ 632.069597][ T37] audit: type=1800 audit(1904646341.808:559): pid=23437 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.7.8386" name="/newroot/261/bus" dev="tmpfs" ino=1329 res=0 errno=0 [ 632.296775][T23453] program syz.2.8393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 632.584673][T23465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8399'. [ 632.584717][T23465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8399'. [ 632.816260][T23475] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8400'. [ 632.816292][T23475] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8400'. [ 633.224445][T23491] IPv6: Can't replace route, no match found [ 633.796697][T23518] tc_dump_action: action bad kind [ 634.141946][T23531] netlink: 144 bytes leftover after parsing attributes in process `syz.7.8432'. [ 634.460954][T23543] dlm: no locking on control device [ 634.733021][T23558] veth0_macvtap: left promiscuous mode [ 634.777322][T23558] macvtap0: refused to change device tx_queue_len [ 634.822308][ T5911] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 634.976347][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 634.999564][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 635.003828][ T5911] usb 3-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 635.003861][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.003880][ T5911] usb 3-1: Product: syz [ 635.003895][ T5911] usb 3-1: Manufacturer: syz [ 635.003908][ T5911] usb 3-1: SerialNumber: syz [ 635.072757][ T5911] usb 3-1: config 0 descriptor?? [ 635.298345][ T5911] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input59 [ 635.504792][ T6582] usb 3-1: USB disconnect, device number 97 [ 635.688347][T23588] netlink: 'syz.6.8459': attribute type 21 has an invalid length. [ 635.688458][T23588] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8459'. [ 635.696584][T23586] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 635.697587][T23586] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 636.088036][ T37] audit: type=1107 audit(1904646346.030:560): pid=23599 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 636.638424][T23623] kAFS: unable to lookup cell '' [ 636.774575][T23625] netlink: 'syz.6.8479': attribute type 27 has an invalid length. [ 636.774602][T23625] netlink: 164 bytes leftover after parsing attributes in process `syz.6.8479'. [ 638.122747][T23671] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 638.377302][T23683] tipc: Trying to set illegal importance in message [ 639.026488][T23708] netlink: 'syz.6.8520': attribute type 27 has an invalid length. [ 639.026515][T23708] netlink: 'syz.6.8520': attribute type 3 has an invalid length. [ 639.026530][T23708] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8520'. [ 640.110889][T23744] cgroup: name respecified [ 640.477141][T23760] netlink: 'syz.7.8546': attribute type 30 has an invalid length. [ 640.477168][T23760] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8546'. [ 640.659762][T23760] bond1: entered promiscuous mode [ 640.995621][T23784] netlink: 'syz.7.8556': attribute type 30 has an invalid length. [ 641.067620][ T8997] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 641.223637][ T8997] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 2303, setting to 64 [ 641.223692][ T8997] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 641.223719][ T8997] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.238775][ T8997] usb 7-1: config 0 descriptor?? [ 641.248196][T23774] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 641.254454][ T8997] uvcvideo 7-1:0.0: Found UVC 0.00 device (10c4:ea90) [ 641.254487][ T8997] uvcvideo 7-1:0.0: No valid video chain found. [ 641.457051][ T8997] usb 7-1: USB disconnect, device number 12 [ 641.591482][T23807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8568'. [ 641.720082][T23813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8572'. [ 643.175463][T23861] netlink: 14 bytes leftover after parsing attributes in process `syz.7.8596'. [ 643.840668][T23875] openvswitch: netlink: IP tunnel dst address not specified [ 644.209222][T19560] Bluetooth: hci6: command 0x0406 tx timeout [ 644.361391][ T37] audit: type=1326 audit(1904646354.717:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23884 comm="syz.5.8607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534031aeb9 code=0x7ffc0000 [ 644.429458][ T37] audit: type=1326 audit(1904646354.791:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23884 comm="syz.5.8607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534031aeb9 code=0x7ffc0000 [ 644.432317][ T37] audit: type=1326 audit(1904646354.791:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23884 comm="syz.5.8607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534031aeb9 code=0x7ffc0000 [ 644.432507][ T37] audit: type=1326 audit(1904646354.791:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23884 comm="syz.5.8607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534031aeb9 code=0x7ffc0000 [ 644.432705][ T37] audit: type=1326 audit(1904646354.791:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23884 comm="syz.5.8607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f534031aeb9 code=0x7ffc0000 [ 644.432902][ T37] audit: type=1326 audit(1904646354.791:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23884 comm="syz.5.8607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534031aeb9 code=0x7ffc0000 [ 644.433144][ T37] audit: type=1326 audit(1904646354.791:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23884 comm="syz.5.8607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f534031aeb9 code=0x7ffc0000 [ 644.433298][ T37] audit: type=1326 audit(1904646354.791:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23884 comm="syz.5.8607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f534031aeb9 code=0x7ffc0000 [ 645.482508][T23862] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 645.893104][ T37] audit: type=1326 audit(1904646356.324:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23911 comm="syz.5.8621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534031aeb9 code=0x7ffc0000 [ 645.921929][ T37] audit: type=1326 audit(1904646356.324:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23911 comm="syz.5.8621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534031aeb9 code=0x7ffc0000 [ 646.096929][T23916] netlink: 'syz.2.8623': attribute type 1 has an invalid length. [ 646.316124][T23922] netlink: 'syz.2.8625': attribute type 10 has an invalid length. [ 646.316151][T23922] openvswitch: netlink: Flow key attr not present in new flow. [ 647.912105][T23976] ip6erspan0: entered allmulticast mode [ 648.837069][T24009] program syz.5.8667 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 649.114148][T24017] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8671'. [ 650.123471][T24054] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8688'. [ 651.219957][T24084] mac80211_hwsim hwsim34 ;: renamed from wlan0 (while UP) [ 651.443266][T24092] bond1: option arp_all_targets: invalid value (786433) [ 651.471151][T24097] libceph: resolve '0..' (ret=-3): failed [ 651.497477][T24092] bond1 (unregistering): Released all slaves [ 651.994925][T24113] random: crng reseeded on system resumption [ 652.323131][T24130] netlink: 'syz.7.8723': attribute type 1 has an invalid length. [ 652.323172][T24130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 652.492147][T24135] netlink: 'syz.6.8729': attribute type 32 has an invalid length. [ 652.492173][T24135] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8729'. [ 652.872337][T24151] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8736'. [ 652.973023][ T5911] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 653.082609][T24160] netlink: 'syz.5.8740': attribute type 1 has an invalid length. [ 653.133410][ T5911] usb 7-1: Using ep0 maxpacket: 32 [ 653.137892][ T5911] usb 7-1: config 0 has an invalid interface number: 149 but max is 0 [ 653.137923][ T5911] usb 7-1: config 0 has no interface number 0 [ 653.137959][ T5911] usb 7-1: config 0 interface 149 has no altsetting 0 [ 653.147064][ T5911] usb 7-1: New USB device found, idVendor=0582, idProduct=008b, bcdDevice= f.27 [ 653.147095][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.147114][ T5911] usb 7-1: Product: syz [ 653.147128][ T5911] usb 7-1: Manufacturer: syz [ 653.147141][ T5911] usb 7-1: SerialNumber: syz [ 653.206686][ T5911] usb 7-1: config 0 descriptor?? [ 653.436552][ T8995] usb 7-1: USB disconnect, device number 13 [ 653.964166][T19560] Bluetooth: hci7: command 0x2016 tx timeout [ 654.359315][T24208] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8763'. [ 654.671432][T24215] netlink: 'syz.5.8768': attribute type 1 has an invalid length. [ 656.000779][T24263] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 656.000824][T24263] IPv6: NLM_F_CREATE should be set when creating new route [ 656.000859][T24263] IPv6: NLM_F_CREATE should be set when creating new route [ 656.121056][T24268] tmpfs: Bad value for 'mpol' [ 657.461701][ T38] INFO: task syz-executor:5812 blocked for more than 143 seconds. [ 657.461727][ T38] Not tainted syzkaller #0 [ 657.461739][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 657.461750][ T38] task:syz-executor state:D stack:22136 pid:5812 tgid:5812 ppid:1 task_flags:0x400140 flags:0x00080002 [ 657.461809][ T38] Call Trace: [ 657.461817][ T38] [ 657.461832][ T38] __schedule+0x1472/0x4fe0 [ 657.461875][ T38] ? sched_clock_cpu+0x74/0x440 [ 657.461923][ T38] ? __pfx___schedule+0x10/0x10 [ 657.461944][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 657.461985][ T38] rt_mutex_schedule+0x76/0xf0 [ 657.462014][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 657.462050][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 657.462075][ T38] rt_mutex_slowlock+0x2dc/0x710 [ 657.462100][ T38] ? rt_mutex_slowlock+0x1fd/0x710 [ 657.462124][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 657.462159][ T38] ? nfsd_shutdown_threads+0x4e/0xd0 [ 657.462185][ T38] ? nfsd_shutdown_threads+0x4e/0xd0 [ 657.462213][ T38] ? nfsd_shutdown_threads+0x4e/0xd0 [ 657.462233][ T38] mutex_lock_nested+0x168/0x1d0 [ 657.462263][ T38] nfsd_shutdown_threads+0x4e/0xd0 [ 657.462287][ T38] nfsd_umount+0x41/0x60 [ 657.462311][ T38] deactivate_locked_super+0xbc/0x130 [ 657.462339][ T38] cleanup_mnt+0x437/0x4d0 [ 657.462363][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 657.462396][ T38] task_work_run+0x1d9/0x270 [ 657.462424][ T38] ? __pfx_task_work_run+0x10/0x10 [ 657.462460][ T38] exit_to_user_mode_loop+0xed/0x480 [ 657.462485][ T38] ? rcu_is_watching+0x15/0xb0 [ 657.462517][ T38] do_syscall_64+0x2b7/0xf80 [ 657.462555][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.462575][ T38] ? trace_irq_disable+0x37/0x100 [ 657.462600][ T38] ? clear_bhb_loop+0x60/0xb0 [ 657.462626][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.462646][ T38] RIP: 0033:0x7f5cc1e2c117 [ 657.462666][ T38] RSP: 002b:00007ffce99e5518 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 657.462690][ T38] RAX: 0000000000000000 RBX: 00007f5cc1e9471f RCX: 00007f5cc1e2c117 [ 657.462706][ T38] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffce99e55d0 [ 657.462719][ T38] RBP: 00007ffce99e55d0 R08: 00007ffce99e65d0 R09: 00000000ffffffff [ 657.462735][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffce99e6660 [ 657.462750][ T38] R13: 00007f5cc1e9471f R14: 000000000007fed0 R15: 00007ffce99e66a0 [ 657.462784][ T38] [ 657.462832][ T38] INFO: task syz.0.6669:19854 blocked for more than 143 seconds. [ 657.462848][ T38] Not tainted syzkaller #0 [ 657.462859][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 657.462868][ T38] task:syz.0.6669 state:D stack:27408 pid:19854 tgid:19853 ppid:5814 task_flags:0x400040 flags:0x00080002 [ 657.462928][ T38] Call Trace: [ 657.462935][ T38] [ 657.462949][ T38] __schedule+0x1472/0x4fe0 [ 657.462977][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 657.463029][ T38] ? __pfx___schedule+0x10/0x10 [ 657.463073][ T38] rt_mutex_schedule+0x76/0xf0 [ 657.463102][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 657.463146][ T38] rt_mutex_slowlock+0x2dc/0x710 [ 657.463172][ T38] ? rt_mutex_slowlock+0x1fd/0x710 [ 657.463197][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 657.463239][ T38] ? nfsd_nl_listener_get_doit+0x108/0x620 [ 657.463272][ T38] ? nfsd_nl_listener_get_doit+0x108/0x620 [ 657.463296][ T38] mutex_lock_nested+0x168/0x1d0 [ 657.463324][ T38] nfsd_nl_listener_get_doit+0x108/0x620 [ 657.463353][ T38] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 657.463386][ T38] genl_family_rcv_msg_doit+0x22a/0x330 [ 657.463410][ T38] ? __asan_memcpy+0x40/0x70 [ 657.463440][ T38] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 657.463473][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 657.463508][ T38] genl_rcv_msg+0x61c/0x7a0 [ 657.463548][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 657.463570][ T38] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 657.463597][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 657.463634][ T38] netlink_rcv_skb+0x232/0x4b0 [ 657.463665][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 657.463690][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 657.463736][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 657.463764][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 657.463795][ T38] genl_rcv+0x28/0x40 [ 657.463816][ T38] netlink_unicast+0x831/0x9f0 [ 657.463853][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 657.463878][ T38] ? __alloc_skb+0x193/0x390 [ 657.463910][ T38] ? netlink_sendmsg+0x650/0xb40 [ 657.463937][ T38] ? skb_put+0x11b/0x210 [ 657.463963][ T38] netlink_sendmsg+0x813/0xb40 [ 657.464004][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.464043][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 657.464078][ T38] ____sys_sendmsg+0xa4e/0xac0 [ 657.464103][ T38] ? __might_fault+0xaf/0x130 [ 657.464143][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 657.464178][ T38] ? import_iovec+0x73/0xa0 [ 657.464213][ T38] ___sys_sendmsg+0x2a5/0x360 [ 657.464236][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 657.464265][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 657.464297][ T38] ? futex_wait+0x29a/0x380 [ 657.464357][ T38] ? __fget_files+0x2a/0x420 [ 657.464377][ T38] ? __fget_files+0x3a6/0x420 [ 657.464410][ T38] __x64_sys_sendmsg+0x1c3/0x2a0 [ 657.464437][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 657.464473][ T38] ? rcu_is_watching+0x15/0xb0 [ 657.464516][ T38] do_syscall_64+0xe2/0xf80 [ 657.464553][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.464574][ T38] ? trace_irq_disable+0x37/0x100 [ 657.464602][ T38] ? clear_bhb_loop+0x60/0xb0 [ 657.464629][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.464650][ T38] RIP: 0033:0x7fd29a01aeb9 [ 657.464669][ T38] RSP: 002b:00007fd29826e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 657.464691][ T38] RAX: ffffffffffffffda RBX: 00007fd29a295fa0 RCX: 00007fd29a01aeb9 [ 657.464707][ T38] RDX: 0000000020048000 RSI: 0000200000000140 RDI: 0000000000000003 [ 657.464722][ T38] RBP: 00007fd29a088c1f R08: 0000000000000000 R09: 0000000000000000 [ 657.464737][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 657.464752][ T38] R13: 00007fd29a296038 R14: 00007fd29a295fa0 R15: 00007ffd7ccd51d8 [ 657.464787][ T38] [ 657.464810][ T38] [ 657.464810][ T38] Showing all locks held in the system: [ 657.464821][ T38] 6 locks held by kworker/0:0/9: [ 657.464834][ T38] #0: ffff88801dafa938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 657.464886][ T38] #1: ffffc900000e7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 657.464938][ T38] #2: ffff88814477b188 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 657.464987][ T38] #3: ffff88814477f5b8 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b0/0x4f60 [ 657.465035][ T38] #4: ffff8881443f5058 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e0/0x4f60 [ 657.465085][ T38] #5: ffffffff8e7dd640 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14e/0x1820 [ 657.465137][ T38] 1 lock held by khungtaskd/38: [ 657.465149][ T38] #0: ffffffff8dbc77c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 657.465218][ T38] 3 locks held by kworker/0:3/996: [ 657.465248][ T38] 1 lock held by udevd/5166: [ 657.465262][ T38] 2 locks held by getty/5555: [ 657.465274][ T38] #0: ffff88814e3f80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 657.465333][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 657.465388][ T38] 2 locks held by syz-executor/5812: [ 657.465401][ T38] #0: ffff88803b60e0d0 (&type->s_umount_key#96){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 657.465458][ T38] #1: ffffffff8ded9e38 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 657.465509][ T38] 10 locks held by syz-executor/5813: [ 657.465538][ T38] 2 locks held by syz.3.6259/18980: [ 657.465551][ T38] #0: ffffffff8efaa160 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 657.465598][ T38] #1: ffffffff8ded9e38 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x13e/0x1690 [ 657.465654][ T38] 2 locks held by syz.0.6669/19854: [ 657.465666][ T38] #0: ffffffff8efaa160 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 657.465713][ T38] #1: ffffffff8ded9e38 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x108/0x620 [ 657.465766][ T38] 1 lock held by syz-executor/20118: [ 657.465779][ T38] 1 lock held by syz-executor/20306: [ 657.465794][ T38] 2 locks held by syz.2.8817/24316: [ 657.465808][ T38] [ 657.465814][ T38] ============================================= [ 657.465814][ T38] [ 657.465824][ T38] NMI backtrace for cpu 0 [ 657.465839][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 657.465863][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 657.465875][ T38] Call Trace: [ 657.465883][ T38] [ 657.465892][ T38] dump_stack_lvl+0xe8/0x150 [ 657.465922][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 657.465947][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 657.465972][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 657.465998][ T38] sys_info+0x135/0x170 [ 657.466017][ T38] watchdog+0xf90/0xfe0 [ 657.466052][ T38] ? watchdog+0x209/0xfe0 [ 657.466089][ T38] kthread+0x726/0x8b0 [ 657.466120][ T38] ? __pfx_watchdog+0x10/0x10 [ 657.466149][ T38] ? __pfx_kthread+0x10/0x10 [ 657.466172][ T38] ? rt_spin_unlock+0x14f/0x200 [ 657.466199][ T38] ? rt_spin_unlock+0x160/0x200 [ 657.466220][ T38] ? __pfx_kthread+0x10/0x10 [ 657.466247][ T38] ret_from_fork+0x51b/0xa40 [ 657.466274][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 657.466294][ T38] ? __switch_to+0xc82/0x1410 [ 657.466330][ T38] ? __pfx_kthread+0x10/0x10 [ 657.466357][ T38] ret_from_fork_asm+0x1a/0x30 [ 657.466404][ T38] [ 657.466412][ T38] Sending NMI from CPU 0 to CPUs 1: [ 657.466442][ C1] NMI backtrace for cpu 1 [ 657.466458][ C1] CPU: 1 UID: 0 PID: 5813 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 657.466477][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 657.466486][ C1] RIP: 0010:rcu_is_watching+0x9/0xb0 [ 657.466509][ C1] Code: 24 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 <65> ff 05 00 19 7d 10 e8 0b 42 65 09 89 c3 83 f8 08 73 65 49 bf 00 [ 657.466524][ C1] RSP: 0018:ffffc90004a57350 EFLAGS: 00000202 [ 657.466539][ C1] RAX: ffffffff822ee636 RBX: ffffffff822ee3ba RCX: ffff8880331d0000 [ 657.466552][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 657.466563][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 657.466573][ C1] R10: dffffc0000000000 R11: fffff940002c2189 R12: dffffc0000000000 [ 657.466586][ C1] R13: 0000000000000008 R14: 0000000000000001 R15: ffff88813fffa8a0 [ 657.466596][ C1] FS: 0000555586221500(0000) GS:ffff8881266c9000(0000) knlGS:0000000000000000 [ 657.466612][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 657.466623][ C1] CR2: 00007f896e4a56b8 CR3: 0000000053654000 CR4: 00000000003526f0 [ 657.466641][ C1] Call Trace: [ 657.466647][ C1] [ 657.466654][ C1] ? pfn_valid+0xba/0x480 [ 657.466674][ C1] pfn_valid+0x340/0x480 [ 657.466695][ C1] page_table_check_set+0x25/0x610 [ 657.466718][ C1] copy_pmd_range+0x3ad0/0x7bd0 [ 657.466755][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 657.466785][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 657.466806][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 657.466827][ C1] copy_page_range+0xad0/0x1110 [ 657.466852][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 657.466872][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 657.466894][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 657.466914][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 657.466936][ C1] dup_mmap+0xf7c/0x1b70 [ 657.466965][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 657.466987][ C1] ? copy_mm+0x130/0x4b0 [ 657.467013][ C1] copy_mm+0x13b/0x4b0 [ 657.467030][ C1] copy_process+0x16db/0x3a90 [ 657.467054][ C1] ? copy_process+0x939/0x3a90 [ 657.467074][ C1] ? __pfx_copy_process+0x10/0x10 [ 657.467097][ C1] kernel_clone+0x249/0x7f0 [ 657.467116][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 657.467142][ C1] __x64_sys_clone+0x1b6/0x230 [ 657.467162][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 657.467188][ C1] ? do_user_addr_fault+0xc7c/0x1360 [ 657.467210][ C1] do_syscall_64+0xe2/0xf80 [ 657.467230][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.467246][ C1] ? trace_irq_disable+0x37/0x100 [ 657.467265][ C1] ? clear_bhb_loop+0x60/0xb0 [ 657.467284][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.467299][ C1] RIP: 0033:0x7f896d723952 [ 657.467314][ C1] Code: 89 e7 e8 f1 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 657.467327][ C1] RSP: 002b:00007ffd9cdc01d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 657.467350][ C1] RAX: ffffffffffffffda RBX: 00007ffd9cdc01d0 RCX: 00007f896d723952 [ 657.467361][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 657.467371][ C1] RBP: 00007ffd9cdc035c R08: 0000000000000000 R09: 0000000000000001 [ 657.467382][ C1] R10: 00005555862217d0 R11: 0000000000000246 R12: 0000000000000001 [ 657.467393][ C1] R13: 00000000000927c0 R14: 00000000000a5075 R15: 00007ffd9cdc03b0 [ 657.467413][ C1] [ 657.467439][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 657.467453][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 657.467475][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 657.467486][ T38] Call Trace: [ 657.467493][ T38] [ 657.467502][ T38] vpanic+0x1e0/0x670 [ 657.467540][ T38] panic+0xc5/0xd0 [ 657.467564][ T38] ? __pfx_panic+0x10/0x10 [ 657.467598][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 657.467624][ T38] watchdog+0xfda/0xfe0 [ 657.467656][ T38] ? watchdog+0x209/0xfe0 [ 657.467690][ T38] kthread+0x726/0x8b0 [ 657.467717][ T38] ? __pfx_watchdog+0x10/0x10 [ 657.467744][ T38] ? __pfx_kthread+0x10/0x10 [ 657.467765][ T38] ? rt_spin_unlock+0x14f/0x200 [ 657.467791][ T38] ? rt_spin_unlock+0x160/0x200 [ 657.467809][ T38] ? __pfx_kthread+0x10/0x10 [ 657.467835][ T38] ret_from_fork+0x51b/0xa40 [ 657.467857][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 657.467876][ T38] ? __switch_to+0xc82/0x1410 [ 657.467910][ T38] ? __pfx_kthread+0x10/0x10 [ 657.467937][ T38] ret_from_fork_asm+0x1a/0x30 [ 657.467983][ T38] [ 657.468136][ T38] Kernel Offset: disabled