last executing test programs: 10m25.809476808s ago: executing program 1 (id=3106): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)={0x4c, r1, 0x1, 0x70bd2d, 0x4, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7}}]}, 0x4c}}, 0x4040) 10m20.39643966s ago: executing program 1 (id=3107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 10m13.129522129s ago: executing program 1 (id=3109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10000}]}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4000851}, 0x4040040) 10m7.201701808s ago: executing program 1 (id=3111): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x7, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) 9m58.249931644s ago: executing program 1 (id=3113): r0 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000000)='z', 0x1, 0xffffffffffffffff) keyctl$update(0x2, r0, &(0x7f0000000600)="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", 0x5c1) keyctl$read(0x3, r0, 0x0, 0x0) 9m52.579733929s ago: executing program 1 (id=3115): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18) unshare(0x62000000) 9m3.185572223s ago: executing program 32 (id=3115): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18) unshare(0x62000000) 1m1.734915464s ago: executing program 0 (id=3153): syz_usb_connect(0x3, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) 54.695885881s ago: executing program 2 (id=3154): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000070000e9070004000a010101080005"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x20040040) 42.316983416s ago: executing program 0 (id=3155): r0 = io_uring_setup(0x7194, &(0x7f0000001d80)={0x0, 0x714, 0x2, 0x1, 0x3d7}) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) io_uring_enter(r0, 0x5756, 0x9d76, 0x5, &(0x7f0000001e00), 0x8) 39.264528084s ago: executing program 2 (id=3156): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x3}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 28.877022136s ago: executing program 0 (id=3157): io_setup(0x1000, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000300)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 28.248805119s ago: executing program 2 (id=3158): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000ee0000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 16.583035366s ago: executing program 0 (id=3159): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x3, 0x5, 0x9, 0x0, 0x6}) 14.832256908s ago: executing program 2 (id=3160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000040)) 10.812908517s ago: executing program 0 (id=3161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xfb}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x100}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 10.111050613s ago: executing program 2 (id=3162): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 2.201074615s ago: executing program 0 (id=3163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x18}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 0s ago: executing program 2 (id=3164): set_mempolicy(0x4003, &(0x7f0000000080)=0x7, 0x3) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:21484' (ED25519) to the list of known hosts. syzkaller login: [ 465.556231][ T3202] cgroup: Unknown subsys name 'net' [ 466.324939][ T3202] cgroup: Unknown subsys name 'cpuset' [ 466.499329][ T3202] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 537.725290][ T3202] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 646.475838][ T3216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.626621][ T3216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.253022][ T3214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.537770][ T3214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.391702][ T3216] hsr_slave_0: entered promiscuous mode [ 662.481926][ T3216] hsr_slave_1: entered promiscuous mode [ 669.934754][ T3214] hsr_slave_0: entered promiscuous mode [ 669.977206][ T3214] hsr_slave_1: entered promiscuous mode [ 669.997378][ T3214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 670.002168][ T3214] Cannot create hsr debugfs directory [ 673.095628][ T3216] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 673.207194][ T3216] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 674.102456][ T3216] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 674.446129][ T3216] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 679.843798][ T3214] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 679.971772][ T3214] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 680.133671][ T3214] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 680.338504][ T3214] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 689.195713][ T3216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.889022][ T3214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.832241][ T3214] veth0_vlan: entered promiscuous mode [ 740.283224][ T3214] veth1_vlan: entered promiscuous mode [ 742.265762][ T3216] veth0_vlan: entered promiscuous mode [ 743.215094][ T3214] veth0_macvtap: entered promiscuous mode [ 743.649243][ T3214] veth1_macvtap: entered promiscuous mode [ 743.985106][ T3216] veth1_vlan: entered promiscuous mode [ 747.192016][ T3214] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.194737][ T3214] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.196440][ T3214] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.198276][ T3214] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.528808][ T3216] veth0_macvtap: entered promiscuous mode [ 748.178107][ T3216] veth1_macvtap: entered promiscuous mode [ 751.883411][ T3216] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.886479][ T3216] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.889097][ T3216] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.905661][ T3216] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.342772][ T3214] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 759.885860][ T3918] hsr0 speed is unknown, defaulting to 1000 [ 759.955855][ T3918] hsr0 speed is unknown, defaulting to 1000 [ 760.192406][ T3918] hsr0 speed is unknown, defaulting to 1000 [ 760.443468][ T3918] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 760.936252][ T3918] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 763.231604][ T3918] hsr0 speed is unknown, defaulting to 1000 [ 763.444788][ T3918] hsr0 speed is unknown, defaulting to 1000 [ 776.168060][ T3936] IPv6: Can't replace route, no match found [ 778.335557][ T3938] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 795.736297][ T3950] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16'. [ 801.542499][ T35] audit: type=1400 audit(800.490:2): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=3953 comm="syz.1.18" [ 864.087254][ T4007] netlink: 'syz.1.42': attribute type 21 has an invalid length. [ 864.113501][ T4007] netlink: 128 bytes leftover after parsing attributes in process `syz.1.42'. [ 864.118878][ T4007] netlink: 'syz.1.42': attribute type 4 has an invalid length. [ 864.136966][ T4007] netlink: 'syz.1.42': attribute type 5 has an invalid length. [ 864.139237][ T4007] netlink: 3 bytes leftover after parsing attributes in process `syz.1.42'. [ 905.153624][ T826] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 905.487046][ T826] usb 1-1: Using ep0 maxpacket: 32 [ 905.666287][ T826] usb 1-1: config 0 has an invalid interface number: 148 but max is 0 [ 905.685887][ T826] usb 1-1: config 0 has no interface number 0 [ 905.731104][ T826] usb 1-1: config 0 interface 148 has no altsetting 0 [ 905.885046][ T826] usb 1-1: New USB device found, idVendor=067b, idProduct=0307, bcdDevice=dd.c8 [ 905.887748][ T826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.914381][ T826] usb 1-1: Product: syz [ 905.916515][ T826] usb 1-1: Manufacturer: syz [ 905.918347][ T826] usb 1-1: SerialNumber: syz [ 906.307439][ T826] usb 1-1: config 0 descriptor?? [ 907.277181][ T826] pl2303 1-1:0.148: required interrupt-in endpoint missing [ 907.885574][ T826] usb 1-1: USB disconnect, device number 2 [ 922.247677][ T4068] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 922.893073][ T4068] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 927.885907][ T35] audit: type=1400 audit(926.840:3): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4073 comm="syz.0.62" [ 948.216338][ T4094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.72'. [ 948.223722][ T4094] netlink: 48 bytes leftover after parsing attributes in process `syz.1.72'. [ 953.375383][ T4098] xt_CT: No such helper "syz0" [ 974.742145][ T4113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'. [ 1001.432134][ T4135] tmpfs: Bad value for 'mpol' [ 1061.332788][ T3934] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1061.655104][ T3934] usb 1-1: Using ep0 maxpacket: 16 [ 1061.981978][ T3934] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 1061.985720][ T3934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.007201][ T3934] usb 1-1: Product: syz [ 1062.026416][ T3934] usb 1-1: Manufacturer: syz [ 1062.031064][ T3934] usb 1-1: SerialNumber: syz [ 1065.226461][ T3934] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1066.618793][ T3934] snd-usb-audio 1-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 1066.844127][ T3934] usb 1-1: USB disconnect, device number 3 [ 1069.942634][ T4201] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 1183.161225][ T4275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.149'. [ 1207.795986][ T4277] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.799302][ T4277] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.834318][ T4277] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.836977][ T4277] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.808384][ T4289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.155'. [ 1212.831710][ T4289] netlink: 31 bytes leftover after parsing attributes in process `syz.1.155'. [ 1212.837018][ T4289] netlink: 'syz.1.155': attribute type 3 has an invalid length. [ 1212.872286][ T4289] netlink: 'syz.1.155': attribute type 2 has an invalid length. [ 1212.874062][ T4289] netlink: 31 bytes leftover after parsing attributes in process `syz.1.155'. [ 1230.114450][ T826] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1230.333497][ T826] usb 2-1: Using ep0 maxpacket: 32 [ 1230.424378][ T826] usb 2-1: config 0 has an invalid interface number: 148 but max is 0 [ 1230.427714][ T826] usb 2-1: config 0 has no interface number 0 [ 1230.444241][ T826] usb 2-1: config 0 interface 148 has no altsetting 0 [ 1230.608503][ T826] usb 2-1: New USB device found, idVendor=067b, idProduct=0307, bcdDevice=dd.c8 [ 1230.618515][ T826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.630891][ T826] usb 2-1: Product: syz [ 1230.634015][ T826] usb 2-1: Manufacturer: syz [ 1230.636838][ T826] usb 2-1: SerialNumber: syz [ 1230.847944][ T826] usb 2-1: config 0 descriptor?? [ 1231.227188][ T826] pl2303 2-1:0.148: required interrupt-in endpoint missing [ 1232.644744][ T4189] usb 2-1: USB disconnect, device number 2 [ 1255.145767][ T4335] dlm: no locking on control device [ 1264.914941][ T4341] netlink: 'syz.0.175': attribute type 1 has an invalid length. [ 1264.941530][ T4341] netlink: 160 bytes leftover after parsing attributes in process `syz.0.175'. [ 1271.645372][ T4345] Illegal XDP return value 4294967274 on prog (id 15) dev N/A, expect packet loss! [ 1278.425432][ T4350] syz.0.179 uses obsolete (PF_INET,SOCK_PACKET) [ 1298.665209][ T4369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.188'. [ 1298.671897][ T4369] netlink: 60 bytes leftover after parsing attributes in process `syz.1.188'. [ 1298.682316][ T4369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.188'. [ 1298.755294][ T4369] netlink: 60 bytes leftover after parsing attributes in process `syz.1.188'. [ 1298.776666][ T4369] netlink: 104 bytes leftover after parsing attributes in process `syz.1.188'. [ 1307.285886][ T4378] kernel read not supported for file /'- (pid: 4378 comm: syz.1.192) [ 1307.373396][ T35] audit: type=1800 audit(1306.300:4): pid=4378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.192" name="'-" dev="mqueue" ino=3978 res=0 errno=0 [ 1340.607485][ T4407] netlink: 'syz.1.202': attribute type 3 has an invalid length. [ 1389.033584][ T35] audit: type=1326 audit(1387.980:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4447 comm="syz.1.221" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdbb92 code=0x7ffc0000 [ 1389.114495][ T35] audit: type=1326 audit(1388.020:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4447 comm="syz.1.221" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdbb92 code=0x7ffc0000 [ 1389.582771][ T35] audit: type=1326 audit(1388.530:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4447 comm="syz.1.221" exe="/syz-executor" sig=0 arch=c00000f3 syscall=277 compat=0 ip=0xdbb92 code=0x7ffc0000 [ 1389.654968][ T35] audit: type=1326 audit(1388.580:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4447 comm="syz.1.221" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdbb92 code=0x7ffc0000 [ 1389.707132][ T35] audit: type=1326 audit(1388.630:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4447 comm="syz.1.221" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdbb92 code=0x7ffc0000 [ 1400.637288][ T4459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'. [ 1405.492740][ T4463] netlink: 830 bytes leftover after parsing attributes in process `syz.1.227'. [ 1410.963324][ T4467] comedi comedi1: Minor 0 could not be opened [ 1422.148231][ T4479] netlink: 36 bytes leftover after parsing attributes in process `syz.1.235'. [ 1426.093922][ T4483] capability: warning: `syz.1.237' uses 32-bit capabilities (legacy support in use) [ 1429.316981][ T4485] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1435.295641][ T3204] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 1435.757398][ T3204] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1435.786822][ T3204] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1435.802717][ T3204] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1435.807491][ T3204] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1435.812873][ T3204] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1435.816310][ T3204] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1435.818837][ T3204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.022358][ T4491] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1436.168636][ T3204] hub 2-1:1.0: bad descriptor, ignoring hub [ 1436.185240][ T3204] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1436.241942][ T3204] cdc_wdm 2-1:1.0: skipping garbage [ 1436.244240][ T3204] cdc_wdm 2-1:1.0: skipping garbage [ 1436.425189][ T3204] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1439.591669][ T3204] usb 2-1: USB disconnect, device number 3 [ 1455.953056][ T3205] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1456.202813][ T3205] usb 1-1: Using ep0 maxpacket: 8 [ 1456.615158][ T3205] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1456.622167][ T3205] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1456.626845][ T3205] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1456.636753][ T3205] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1456.654048][ T3205] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1456.657079][ T3205] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1456.682867][ T3205] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1456.687542][ T3205] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.40 [ 1456.708116][ T3205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.938667][ T3205] usb 1-1: config 0 descriptor?? [ 1457.152798][ T3205] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1459.283450][ T3934] usb 1-1: USB disconnect, device number 4 [ 1464.022803][ T3912] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1464.382594][ T3912] usb 2-1: Using ep0 maxpacket: 8 [ 1464.525387][ T3912] usb 2-1: config 0 has too many interfaces: 235, using maximum allowed: 32 [ 1464.532664][ T3912] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 235 [ 1464.535617][ T3912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1464.663306][ T3912] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1464.672278][ T3912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.674314][ T3912] usb 2-1: Product: syz [ 1464.675448][ T3912] usb 2-1: Manufacturer: syz [ 1464.676596][ T3912] usb 2-1: SerialNumber: syz [ 1464.946373][ T3912] usb 2-1: config 0 descriptor?? [ 1465.217065][ T3912] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1466.749381][ T3912] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1468.339037][ T3205] usb 2-1: USB disconnect, device number 4 [ 1478.766611][ T4561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.252'. [ 1513.415235][ T4592] netlink: 'syz.1.265': attribute type 5 has an invalid length. [ 1551.582623][ T4630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'. [ 1553.083950][ T826] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1553.324926][ T826] usb 1-1: Using ep0 maxpacket: 16 [ 1553.518200][ T826] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1553.523967][ T826] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1553.624700][ T826] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1553.627673][ T826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1553.658764][ T826] usb 1-1: SerialNumber: syz [ 1554.184208][ T826] usb 1-1: 0:2 : does not exist [ 1555.186661][ T826] usb 1-1: USB disconnect, device number 5 [ 1579.754094][ T4666] netlink: 32 bytes leftover after parsing attributes in process `syz.0.290'. [ 1587.983370][ T4676] netlink: 'syz.1.295': attribute type 2 has an invalid length. [ 1587.985663][ T4676] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.295'. [ 1649.019054][ T4726] netlink: 'syz.1.319': attribute type 1 has an invalid length. [ 1649.028180][ T4726] netlink: 160 bytes leftover after parsing attributes in process `syz.1.319'. [ 1652.262788][ T4729] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1664.483338][ T4743] netlink: 'syz.0.328': attribute type 1 has an invalid length. [ 1664.492881][ T4743] netlink: 'syz.0.328': attribute type 2 has an invalid length. [ 1673.878488][ T4751] ======================================================= [ 1673.878488][ T4751] WARNING: The mand mount option has been deprecated and [ 1673.878488][ T4751] and is ignored by this kernel. Remove the mand [ 1673.878488][ T4751] option from the mount to silence this warning. [ 1673.878488][ T4751] ======================================================= [ 1685.477391][ T4761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'. [ 1730.723983][ T4798] IPv6: NLM_F_CREATE should be specified when creating new route [ 1743.208939][ T4808] netlink: 'syz.1.357': attribute type 7 has an invalid length. [ 1775.535585][ T4834] netlink: 'syz.1.370': attribute type 58 has an invalid length. [ 1779.244219][ T4839] tmpfs: Bad value for 'mpol' [ 1794.158765][ T4853] [U]  [ 1794.161247][ T4853] [U] K{ [ 1794.178621][ T4853] [U] t 1ŠFfˊ`GJgo/mC [ 1794.217091][ T4853] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 1794.224320][ T4853] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 1794.256044][ T4853] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 1794.303838][ T4853] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 1794.307985][ T4853] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 1794.361918][ T4853] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 1794.365103][ T4853] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 1794.393413][ T4853] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 1794.396524][ T4853] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 1794.398773][ T4853] [U] 22Ʃx?0;3u [ 1794.407898][ T4853] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 1794.421224][ T4853] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 1794.423941][ T4853] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 1794.425893][ T4853] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 1794.458366][ T4853] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 1794.493164][ T4853] [U] ec [ 1794.494878][ T4853] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 1794.715622][ T4852] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 1811.464783][ T4867] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1815.672081][ T4875] netlink: 'syz.0.388': attribute type 4 has an invalid length. [ 1841.913070][ T826] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1842.442282][ T826] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1842.445089][ T826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.447390][ T826] usb 1-1: Product: syz [ 1842.449293][ T826] usb 1-1: Manufacturer: syz [ 1842.467718][ T826] usb 1-1: SerialNumber: syz [ 1842.703142][ T826] usb 1-1: config 0 descriptor?? [ 1843.965288][ T826] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1844.954006][ T826] usb 1-1: USB disconnect, device number 6 [ 1848.584460][ T4921] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1898.313222][ T4964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'. [ 1898.319023][ T4964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.421'. [ 2006.228772][ T5062] tmpfs: Bad value for 'mpol' [ 2014.713925][ T5073] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 2036.402954][ T5099] syz.0.483 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 2040.105735][ T5102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.484'. [ 2061.312637][ T5119] netlink: 'syz.0.493': attribute type 11 has an invalid length. [ 2074.176200][ T5134] capability: warning: `syz.0.500' uses deprecated v2 capabilities in a way that may be insecure [ 2092.860717][ T5148] infiniband syz0: set active [ 2092.865789][ T5148] infiniband syz0: added bond_slave_1 [ 2092.911694][ T5148] syz0: rxe_create_cq: returned err = -12 [ 2092.923626][ T5148] infiniband syz0: Couldn't create ib_mad CQ [ 2092.936631][ T5148] infiniband syz0: Couldn't open port 1 [ 2093.947622][ T5148] RDS/IB: syz0: added [ 2093.959075][ T5148] smc: adding ib device syz0 with port count 1 [ 2094.004719][ T5148] smc: ib device syz0 port 1 has pnetid [ 2113.752833][ T5172] mmap: syz.0.516 (5172) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 2206.455299][ T4890] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2206.712882][ T4890] usb 2-1: Using ep0 maxpacket: 8 [ 2206.821753][ T4890] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 2206.824463][ T4890] usb 2-1: config 0 has no interface number 0 [ 2207.004642][ T4890] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 2207.007516][ T4890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2207.017987][ T4890] usb 2-1: Product: syz [ 2207.019270][ T4890] usb 2-1: Manufacturer: syz [ 2207.034505][ T4890] usb 2-1: SerialNumber: syz [ 2207.207628][ T4890] usb 2-1: config 0 descriptor?? [ 2208.828982][ T4890] peak_usb 2-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 2209.115860][ T4890] peak_usb 2-1:0.56 can0: unable to request usb[type=2 value=5] err=-71 [ 2209.118776][ T4890] peak_usb 2-1:0.56: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 2210.011084][ T4890] peak_usb 2-1:0.56: probe with driver peak_usb failed with error -71 [ 2210.415671][ T4890] usb 2-1: USB disconnect, device number 5 [ 2253.918602][ T5337] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 2262.838678][ T5348] random: crng reseeded on system resumption [ 2265.146043][ T5351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.586'. [ 2265.147901][ T5351] netlink: 20 bytes leftover after parsing attributes in process `syz.0.586'. [ 2308.563603][ T5399] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.609'. [ 2324.321694][ T5425] netlink: 144 bytes leftover after parsing attributes in process `syz.1.621'. [ 2338.178446][ T5440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.629'. [ 2338.196000][ T5440] netlink: 'syz.1.629': attribute type 3 has an invalid length. [ 2352.423153][ T4890] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2353.098398][ T4890] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2353.105437][ T4890] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2353.110523][ T4890] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2353.113050][ T4890] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2353.116155][ T4890] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2353.118676][ T4890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2353.648480][ T4890] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2353.728753][ T4890] usb 2-1: invalid MIDI out EP 0 [ 2356.674147][ T4890] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2356.874059][ T4890] usb 2-1: USB disconnect, device number 6 [ 2376.679025][ T5501] netlink: 92148 bytes leftover after parsing attributes in process `syz.1.643'. [ 2383.052417][ T5509] netlink: 16 bytes leftover after parsing attributes in process `syz.0.647'. [ 2416.758913][ T5544] xt_TCPMSS: Only works on TCP SYN packets [ 2447.615740][ T5579] dummy0: entered promiscuous mode [ 2478.770733][ T5611] netlink: 'syz.0.695': attribute type 1 has an invalid length. [ 2478.772522][ T5611] netlink: 'syz.0.695': attribute type 2 has an invalid length. [ 2509.961990][ T5197] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 2510.287213][ T5197] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2510.289196][ T5197] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 2510.302108][ T5197] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2510.303505][ T5197] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2510.402826][ T5197] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2510.404505][ T5197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2510.405946][ T5197] usb 1-1: Product: syz [ 2510.407006][ T5197] usb 1-1: Manufacturer: syz [ 2510.408155][ T5197] usb 1-1: SerialNumber: syz [ 2510.645525][ T5197] usb 1-1: config 0 descriptor?? [ 2512.311112][ T5197] usb 1-1: USB disconnect, device number 7 [ 2538.508800][ T5694] netlink: 'syz.1.722': attribute type 2 has an invalid length. [ 2538.545920][ T5694] netlink: 46 bytes leftover after parsing attributes in process `syz.1.722'. [ 2551.002152][ T5704] netlink: 'syz.0.728': attribute type 11 has an invalid length. [ 2580.007875][ T5722] syz.0.738 (5722): drop_caches: 2 [ 2604.902287][ T4635] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2605.206291][ T4635] usb 2-1: Using ep0 maxpacket: 8 [ 2605.336069][ T4635] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2605.362852][ T4635] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2605.365878][ T4635] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2605.627820][ T4635] usb 2-1: config 0 descriptor?? [ 2605.833013][ T4635] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 2606.152482][ T5197] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 2606.514089][ T5197] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2606.516323][ T5197] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 2606.517838][ T5197] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2606.621159][ T5197] usb 1-1: config 0 descriptor?? [ 2609.332036][ T5197] usb 1-1: USB disconnect, device number 8 [ 2610.514985][ T4635] usb 2-1: USB disconnect, device number 7 [ 2640.217415][ T5798] !: renamed from dummy0 [ 2670.704460][ T5197] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 2670.952723][ T5197] usb 1-1: Using ep0 maxpacket: 8 [ 2671.016372][ T5197] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 2671.019181][ T5197] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2671.036219][ T5197] usb 1-1: config 0 has no interface number 0 [ 2671.038778][ T5197] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2671.053281][ T5197] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2671.055815][ T5197] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2671.059188][ T5197] usb 1-1: config 0 interface 52 has no altsetting 0 [ 2671.171165][ T5197] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 2671.175980][ T5197] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 2671.178354][ T5197] usb 1-1: Manufacturer: syz [ 2671.394414][ T5197] usb 1-1: config 0 descriptor?? [ 2671.595759][ T5197] hub 1-1:0.52: bad descriptor, ignoring hub [ 2671.598925][ T5197] hub 1-1:0.52: probe with driver hub failed with error -5 [ 2672.832239][ T5197] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 2672.844259][ T5197] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -5 [ 2673.722764][ T5197] usb 1-1: USB disconnect, device number 9 [ 2693.005163][ T5847] netlink: 'syz.0.775': attribute type 30 has an invalid length. [ 2693.036981][ T5847] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 2693.083098][ T5847] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 2705.047059][ T5856] C: renamed from lo (while UP) [ 2705.258026][ T5856] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2724.155076][ T5877] netlink: 64 bytes leftover after parsing attributes in process `syz.1.786'. [ 2727.810880][ T5879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2731.708852][ T5885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.790'. [ 2751.225795][ T5921] netlink: 16 bytes leftover after parsing attributes in process `syz.1.802'. [ 2751.228777][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.802'. [ 2778.695249][ T5946] netlink: 132 bytes leftover after parsing attributes in process `syz.1.812'. [ 2832.846154][ T5999] netlink: 'syz.0.835': attribute type 3 has an invalid length. [ 2832.848796][ T5999] netlink: 'syz.0.835': attribute type 3 has an invalid length. [ 2832.964564][ T5999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.835'. [ 2834.608818][ T5997] syz.1.833 (5997): drop_caches: 2 [ 2860.225152][ T6019] netlink: 'syz.0.844': attribute type 33 has an invalid length. [ 2863.475187][ T6023] netlink: 'syz.0.847': attribute type 1 has an invalid length. [ 2874.717515][ T6034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.851'. [ 2895.331485][ T5754] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 2895.608765][ T5754] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 2895.611563][ T5754] usb 2-1: config 0 has no interface number 0 [ 2895.613190][ T5754] usb 2-1: config 0 interface 41 has no altsetting 0 [ 2895.851651][ T5754] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2895.853615][ T5754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2895.855139][ T5754] usb 2-1: Product: syz [ 2895.856362][ T5754] usb 2-1: Manufacturer: syz [ 2895.857677][ T5754] usb 2-1: SerialNumber: syz [ 2896.003793][ T5754] usb 2-1: config 0 descriptor?? [ 2897.358704][ T5754] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 2897.378693][ T5754] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 2897.623397][ T5754] usb 2-1: USB disconnect, device number 8 [ 2903.624081][ T6071] netlink: 'syz.0.864': attribute type 2 has an invalid length. [ 2903.625792][ T6071] netlink: 132 bytes leftover after parsing attributes in process `syz.0.864'. [ 2935.782083][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.877'. [ 2935.783928][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.877'. [ 2947.706442][ T6145] netlink: 'syz.1.884': attribute type 14 has an invalid length. [ 2955.498863][ T6151] netlink: 2756 bytes leftover after parsing attributes in process `syz.1.887'. [ 2955.503216][ T6151] netlink: 1740 bytes leftover after parsing attributes in process `syz.1.887'. [ 2955.507809][ T6151] netlink: 1740 bytes leftover after parsing attributes in process `syz.1.887'. [ 2976.752336][ T5754] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 2977.113218][ T5754] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 2977.117356][ T5754] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2977.232923][ T5754] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2977.237504][ T5754] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2977.244824][ T5754] usb 1-1: Manufacturer: syz [ 2977.374174][ T5754] usb 1-1: config 0 descriptor?? [ 2979.446755][ T5754] rc_core: IR keymap rc-hauppauge not found [ 2979.448691][ T5754] Registered IR keymap rc-empty [ 2979.648296][ T5754] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 2979.716467][ T5754] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7 [ 2979.920945][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 2980.270921][ T5754] usb 1-1: USB disconnect, device number 10 [ 2983.259149][ T6195] netlink: 44 bytes leftover after parsing attributes in process `syz.1.898'. [ 3050.306652][ T6251] netlink: 'syz.1.922': attribute type 4 has an invalid length. [ 3061.355114][ T6263] comedi: No check for data length of config insn id 7 is implemented [ 3061.357696][ T6263] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 3061.363341][ T6263] comedi: Assuming n=15 is correct [ 3073.204764][ T6273] netlink: 'syz.0.933': attribute type 1 has an invalid length. [ 3077.655685][ T6275] xt_policy: too many policy elements [ 3088.272526][ T5947] hsr0 speed is unknown, defaulting to 1000 [ 3119.591057][ T6316] ip6t_srh: unknown srh invflags 7863 [ 3185.972818][ T4890] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 3186.272252][ T4890] usb 2-1: Using ep0 maxpacket: 16 [ 3186.526355][ T4890] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 3186.536787][ T4890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3186.547743][ T4890] usb 2-1: Product: syz [ 3186.554121][ T4890] usb 2-1: Manufacturer: syz [ 3186.556513][ T4890] usb 2-1: SerialNumber: syz [ 3186.806097][ T4890] usb 2-1: config 0 descriptor?? [ 3186.924999][ T4890] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 3189.108412][ T4890] usb 2-1: clie_3_5_startup: get interface number failed: -71 [ 3189.135957][ T4890] visor 2-1:0.0: probe with driver visor failed with error -71 [ 3189.548974][ T4890] usb 2-1: USB disconnect, device number 9 [ 3248.325852][ T6433] tmpfs: Bad value for 'mpol' [ 3258.638891][ T6440] netlink: 'syz.0.1007': attribute type 40 has an invalid length. [ 3329.242744][ T6501] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3330.872461][ T6503] binder: 6502:6503 ioctl c0306201 200000000a00 returned -14 [ 3346.575855][ T4890] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 3347.153182][ T4890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3347.163044][ T4890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3347.166189][ T4890] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 3347.666697][ T4890] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3347.678680][ T4890] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3347.683500][ T4890] usb 1-1: Manufacturer: syz [ 3347.897263][ T4890] usb 1-1: config 0 descriptor?? [ 3349.894527][ T5947] usb 1-1: USB disconnect, device number 11 [ 3351.095238][ T6527] xt_CT: No such helper "snmp_trap" [ 3361.817288][ T6544] netlink: 452 bytes leftover after parsing attributes in process `syz.0.1048'. [ 3377.876333][ T6556] netlink: 512 bytes leftover after parsing attributes in process `syz.0.1054'. [ 3393.496935][ T6567] netlink: 'syz.1.1059': attribute type 1 has an invalid length. [ 3393.555345][ T6567] netlink: 'syz.1.1059': attribute type 3 has an invalid length. [ 3393.558460][ T6567] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1059'. [ 3393.604427][ T6567] NCSI netlink: No device for ifindex 0 [ 3399.324070][ T6571] No such timeout policy "syz1" [ 3447.283260][ T6614] netlink: 'syz.0.1080': attribute type 21 has an invalid length. [ 3447.286064][ T6614] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1080'. [ 3447.312620][ T6614] netlink: 'syz.0.1080': attribute type 5 has an invalid length. [ 3447.336629][ T6614] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1080'. [ 3464.651626][ T6626] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 3464.770959][ T6626] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 3472.943449][ T6635] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1089'. [ 3487.618092][ T6647] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3487.624174][ T6647] IPv6: NLM_F_CREATE should be set when creating new route [ 3560.176360][ T6701] C: entered allmulticast mode [ 3560.323805][ T6701] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 3593.288200][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1130'. [ 3596.746585][ T6724] usb usb1: usbfs: process 6724 (syz.1.1132) did not claim interface 0 before use [ 3606.935636][ T6731] [U] [ 3634.686552][ T6781] __vm_enough_memory: pid: 6781, comm: syz.1.1144, bytes: 4115879641088 not enough memory for the allocation [ 3642.872549][ T6787] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1147'. [ 3646.829188][ T6789] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1148'. [ 3657.046329][ T6800] block device autoloading is deprecated and will be removed. [ 3657.183400][ T6800] syz.0.1152: attempt to access beyond end of device [ 3657.183400][ T6800] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 3667.932732][ T6810] netlink: 'syz.1.1157': attribute type 64 has an invalid length. [ 3667.935415][ T6810] netlink: 'syz.1.1157': attribute type 4 has an invalid length. [ 3667.937659][ T6810] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1157'. [ 3709.905189][ T6836] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1169'. [ 3719.139178][ T6842] syz.1.1172 (6842): drop_caches: 2 [ 3741.081231][ T6861] netlink: 123072 bytes leftover after parsing attributes in process `syz.0.1179'. [ 3751.181192][ T6869] netlink: 'syz.0.1183': attribute type 2 has an invalid length. [ 3759.092787][ T6875] binder: 6874:6875 ioctl c018620c 200000000040 returned -1 [ 3781.237252][ T6895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1195'. [ 3788.615300][ T6906] siw: device registration error -23 [ 3792.363962][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1202'. [ 3800.918023][ T6914] xt_l2tp: missing protocol rule (udp|l2tpip) [ 3817.966845][ T6928] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1211'. [ 3821.715310][ T6932] netlink: 'syz.0.1212': attribute type 1 has an invalid length. [ 3821.717857][ T6932] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1212'. [ 3825.103947][ T35] audit: type=1400 audit(3824.050:10): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6933 comm="syz.1.1214" [ 3840.374283][ T6952] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 3926.934598][ T7040] netlink: 'syz.0.1264': attribute type 28 has an invalid length. [ 3926.958085][ T7040] netlink: 'syz.0.1264': attribute type 3 has an invalid length. [ 3926.991840][ T7040] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1264'. [ 3942.030805][ T7053] netlink: 'syz.0.1271': attribute type 21 has an invalid length. [ 3942.033528][ T7053] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1271'. [ 3942.046969][ T7053] netlink: 'syz.0.1271': attribute type 4 has an invalid length. [ 3942.053227][ T7053] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1271'. [ 3946.327297][ T7058] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 3982.899200][ T6604] hsr0 speed is unknown, defaulting to 1000 [ 3993.098379][ T7102] tmpfs: Bad value for 'mpol' [ 4024.176238][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1311'. [ 4056.674177][ T7166] cgroup: subsys name conflicts with all [ 4059.793905][ T7170] netlink: 'syz.1.1326': attribute type 10 has an invalid length. [ 4059.870899][ T7170] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1326'. [ 4059.878574][ T7170] ipvlan0: entered promiscuous mode [ 4059.932851][ T7170] ipvlan0: entered allmulticast mode [ 4059.935536][ T7170] veth0_vlan: entered allmulticast mode [ 4060.088071][ T7170] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 4067.775455][ T7178] xt_hashlimit: max too large, truncated to 1048576 [ 4104.946206][ T7212] gre1: entered promiscuous mode [ 4110.653240][ T6282] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 4110.933168][ T6282] usb 1-1: Using ep0 maxpacket: 32 [ 4111.012728][ T6282] usb 1-1: config 7 has an invalid interface number: 12 but max is 0 [ 4111.016765][ T6282] usb 1-1: config 7 has no interface number 0 [ 4111.041373][ T6282] usb 1-1: config 7 interface 12 has no altsetting 0 [ 4111.178567][ T6282] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=70.34 [ 4111.185379][ T6282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4111.187699][ T6282] usb 1-1: Product: syz [ 4111.195006][ T6282] usb 1-1: Manufacturer: syz [ 4111.197270][ T6282] usb 1-1: SerialNumber: syz [ 4112.486336][ T6282] asix 1-1:7.12 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 4112.548274][ T6282] asix 1-1:7.12: probe with driver asix failed with error -71 [ 4112.784397][ T6282] usb 1-1: USB disconnect, device number 12 [ 4135.358769][ T7251] block nbd1: NBD_DISCONNECT [ 4211.467274][ T7327] dlm: non-version read from control device 0 [ 4219.335349][ T7329] could not allocate digest TFM handle cryptd(blake2b-160) [ 4227.367012][ T7340] trusted_key: encrypted_key: master key parameter is missing [ 4255.673565][ T35] audit: type=1400 audit(4254.620:11): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=7373 comm="syz.1.1413" [ 4279.865819][ T7397] netlink: 'syz.1.1422': attribute type 13 has an invalid length. [ 4284.267694][ T7397] gretap0: refused to change device tx_queue_len [ 4284.290783][ T7397] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 4285.585731][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1423'. [ 4291.744763][ T7403] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1425'. [ 4291.747738][ T7403] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1425'. [ 4297.268015][ T7407] netlink: 'syz.0.1427': attribute type 4 has an invalid length. [ 4301.984165][ T7413] netlink: 'syz.1.1430': attribute type 21 has an invalid length. [ 4301.986857][ T7413] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1430'. [ 4305.285707][ T7417] binder: 7414:7417 ioctl 400c620e 0 returned -14 [ 4315.515466][ T7427] netlink: 'syz.1.1437': attribute type 6 has an invalid length. [ 4388.121805][ T7505] netlink: 'syz.1.1470': attribute type 3 has an invalid length. [ 4393.874115][ T7510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 4432.037870][ T7544] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1486'. [ 4432.055627][ T7544] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1486'. [ 4491.967176][ T7599] netlink: 'syz.1.1513': attribute type 21 has an invalid length. [ 4491.969145][ T7599] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1513'. [ 4491.973633][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1513'. [ 4504.717801][ T7613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1520'. [ 4529.392658][ T7632] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1529'. [ 4540.407266][ T35] audit: type=1400 audit(4539.350:12): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 4568.944647][ T7085] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 4568.947594][ T7085] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 4568.955730][ T7085] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 4568.959169][ T7085] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 4568.983570][ T7085] usb 2-1: config 1 has no interface number 0 [ 4568.988243][ T7085] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 4569.006902][ T7085] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 4569.014993][ T7085] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4569.618552][ T7085] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 4570.931619][ T7085] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 4570.942583][ T7085] snd_usb_pod 2-1:1.1: invalid control EP [ 4571.016632][ T7085] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 4571.085881][ T7085] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 4571.111268][ T7085] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 4571.237535][ T7085] usb 2-1: USB disconnect, device number 10 [ 4589.807481][ T7697] ipt_ECN: cannot use operation on non-tcp rule [ 4617.517464][ T7722] tmpfs: Bad value for 'mpol' [ 4644.387241][ T7749] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 4657.924252][ T7759] xt_CT: You must specify a L4 protocol and not use inversions on it [ 4770.608222][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1630'. [ 4779.577755][ T35] audit: type=1326 audit(4778.530:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.1.1634" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdbb92 code=0x0 [ 4780.132272][ T35] audit: type=1326 audit(4779.080:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.1.1634" exe="/syz-executor" sig=31 arch=c00000f3 syscall=436 compat=0 ip=0xdbb92 code=0x0 [ 4802.273764][ T7885] netlink: 'syz.0.1642': attribute type 11 has an invalid length. [ 4802.276501][ T7885] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1642'. [ 4891.627114][ T7957] bond0: entered promiscuous mode [ 4891.628735][ T7957] bond_slave_0: entered promiscuous mode [ 4891.634870][ T7957] bond_slave_1: entered promiscuous mode [ 4891.638712][ T7957] bond0: entered allmulticast mode [ 4891.641606][ T7957] bond_slave_0: entered allmulticast mode [ 4891.643053][ T7957] bond_slave_1: entered allmulticast mode [ 4891.807305][ T7957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4906.738254][ T7972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1685'. [ 4913.243356][ T7978] xt_hashlimit: Unknown mode mask 8C, kernel too old? [ 4936.728801][ T8000] netlink: 'syz.0.1699': attribute type 1 has an invalid length. [ 4965.981875][ T8023] netlink: 'syz.0.1710': attribute type 9 has an invalid length. [ 4999.825195][ T8060] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1726'. [ 4999.828241][ T8060] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1726'. [ 5004.913895][ T8063] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1727'. [ 5006.794344][ T6282] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 5007.043147][ T6282] usb 2-1: Using ep0 maxpacket: 32 [ 5007.250646][ T6282] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 5007.254330][ T6282] usb 2-1: config 0 has no interface number 0 [ 5007.256780][ T6282] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 5007.281669][ T6282] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 5007.284764][ T6282] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 5008.056646][ T6282] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 5008.071640][ T6282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5008.075053][ T6282] usb 2-1: Product: syz [ 5008.076948][ T6282] usb 2-1: Manufacturer: syz [ 5008.078884][ T6282] usb 2-1: SerialNumber: syz [ 5008.412849][ T6282] usb 2-1: config 0 descriptor?? [ 5008.495519][ T8065] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 5008.617024][ T6282] ums-sddr09 2-1:0.20: USB Mass Storage device detected [ 5008.898778][ T6282] ums-sddr09 2-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 5011.378747][ T6282] usb 2-1: USB disconnect, device number 11 [ 5055.756123][ T8128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1746'. [ 5107.994867][ T8175] xt_CT: You must specify a L4 protocol and not use inversions on it [ 5139.915735][ T8199] comedi comedi0: Minor 48 is invalid! [ 5154.734436][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1788'. [ 5207.064626][ T8257] xt_l2tp: wrong L2TP version: 0 [ 5233.729362][ T8285] netlink: 'syz.1.1823': attribute type 2 has an invalid length. [ 5233.743181][ T8285] netlink: 'syz.1.1823': attribute type 1 has an invalid length. [ 5249.721736][ T8295] comedi comedi1: Minor 47 could not be opened [ 5280.303263][ T8324] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1842'. [ 5305.291509][ T7459] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 5305.761455][ T7459] usb 2-1: Using ep0 maxpacket: 32 [ 5305.924189][ T7459] usb 2-1: config 0 has an invalid interface number: 127 but max is 0 [ 5305.928149][ T7459] usb 2-1: config 0 has no interface number 0 [ 5305.951165][ T7459] usb 2-1: config 0 interface 127 has no altsetting 0 [ 5306.214991][ T7459] usb 2-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.0f [ 5306.218001][ T7459] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5306.261857][ T7459] usb 2-1: Product: syz [ 5306.264271][ T7459] usb 2-1: Manufacturer: syz [ 5306.266265][ T7459] usb 2-1: SerialNumber: syz [ 5306.518280][ T7459] usb 2-1: config 0 descriptor?? [ 5308.073827][ T7459] usb-storage 2-1:0.127: USB Mass Storage device detected [ 5308.428862][ T7459] usb-storage 2-1:0.127: Quirks match for vid 05ab pid 0060: 2 [ 5308.944513][ T7459] usb 2-1: USB disconnect, device number 12 [ 5325.046215][ T7459] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 5326.294246][ T7459] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 5326.297188][ T7459] usb 1-1: config 0 has no interface number 0 [ 5326.312106][ T7459] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 5326.323963][ T7459] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 5326.327119][ T7459] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 5326.336936][ T7459] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 5326.353540][ T7459] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5326.612677][ T7459] usb 1-1: config 0 descriptor?? [ 5326.807382][ T7459] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 5326.813110][ T7459] usb 1-1: MIDIStreaming interface descriptor not found [ 5329.445352][ T8350] usb 1-1: USB disconnect, device number 13 [ 5343.223058][ T8420] batadv_slave_0: entered promiscuous mode [ 5343.226884][ T8420] batadv_slave_0: entered allmulticast mode [ 5368.764604][ T8439] infiniband s9z1: RDMA CMA: cma_listen_on_dev, error -98 [ 5382.468739][ T7085] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 5382.812772][ T7085] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 5382.815456][ T7085] usb 2-1: config 179 has no interface number 0 [ 5382.817811][ T7085] usb 2-1: config 179 interface 65 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 5382.835156][ T7085] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 5382.838035][ T7085] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x87 has invalid maxpacket 65535, setting to 8 [ 5382.857290][ T7085] usb 2-1: config 179 interface 65 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 5382.864191][ T7085] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 5382.872039][ T7085] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 5382.874710][ T7085] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 5382.877898][ T7085] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 5382.893091][ T7085] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5383.173874][ T8452] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 5385.096354][ T7085] usb 2-1: USB disconnect, device number 13 [ 5391.873229][ T7085] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 5392.352879][ T7085] usb 1-1: Using ep0 maxpacket: 16 [ 5392.477572][ T7085] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 5392.485014][ T7085] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 5392.487072][ T7085] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 5392.488818][ T7085] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 5392.498733][ T7085] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 5392.612240][ T7085] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 5392.618053][ T7085] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5392.631469][ T7085] usb 1-1: Product: syz [ 5392.632865][ T7085] usb 1-1: Manufacturer: syz [ 5392.634095][ T7085] usb 1-1: SerialNumber: syz [ 5392.748480][ T7085] usb 1-1: config 0 descriptor?? [ 5392.777930][ T8472] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 5393.885578][ T7085] mcba_usb 1-1:0.0 can0: couldn't setup read URBs [ 5393.888237][ T7085] mcba_usb 1-1:0.0 can0: couldn't start device: -90 [ 5394.782778][ T7085] mcba_usb 1-1:0.0: probe with driver mcba_usb failed with error -90 [ 5395.134325][ T7085] usb 1-1: USB disconnect, device number 14 [ 5396.438927][ T8492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1884'. [ 5396.773469][ T8492] xfrm1: entered promiscuous mode [ 5396.781759][ T8492] xfrm1: entered allmulticast mode [ 5409.657816][ T8504] tmpfs: Group quota inode hardlimit too large. [ 5412.743527][ T8350] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 5413.032004][ T8350] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 5413.034668][ T8350] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 5413.036981][ T8350] usb 2-1: config 0 has no interface number 0 [ 5413.048849][ T8350] usb 2-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 5413.053124][ T8350] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 5413.055986][ T8350] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 5413.058632][ T8350] usb 2-1: config 0 interface 52 has no altsetting 0 [ 5413.196231][ T8350] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 5413.202952][ T8350] usb 2-1: New USB device strings: Mfr=23, Product=149, SerialNumber=35 [ 5413.205513][ T8350] usb 2-1: Product: syz [ 5413.207389][ T8350] usb 2-1: Manufacturer: syz [ 5413.221353][ T8350] usb 2-1: SerialNumber: syz [ 5413.460772][ T8350] usb 2-1: config 0 descriptor?? [ 5414.873388][ T8350] input: syz syz (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input9 [ 5415.133741][ T8350] usb 2-1: USB disconnect, device number 14 [ 5423.168659][ T8533] netlink: 488 bytes leftover after parsing attributes in process `syz.0.1893'. [ 5434.677645][ T8541] xt_CT: You must specify a L4 protocol and not use inversions on it [ 5445.082633][ T8549] netlink: 'syz.1.1901': attribute type 5 has an invalid length. [ 5448.837241][ T8552] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1902'. [ 5451.484009][ T8556] veth0_to_bond: entered allmulticast mode [ 5456.924461][ T7459] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 5457.232478][ T7459] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 5457.235485][ T7459] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 5457.338719][ T7459] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 5457.344453][ T7459] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 5457.348143][ T7459] usb 2-1: SerialNumber: syz [ 5458.785987][ T7459] usb 2-1: 0:2 : does not exist [ 5459.562358][ T7459] usb 2-1: USB disconnect, device number 15 [ 5565.688754][ T8678] netlink: 'syz.1.1954': attribute type 5 has an invalid length. [ 5565.696928][ T8678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1954'. [ 5570.516167][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1956'. [ 5607.229049][ T8713] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1969'. [ 5607.278628][ T8713] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1969'. [ 5607.291828][ T8713] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1969'. [ 5644.224280][ T8751] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 5644.231683][ T8751] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 5648.456500][ T8757] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.1989'. [ 5690.417567][ T8797] bond0: (slave bond_slave_0): Releasing backup interface [ 5701.867636][ T8808] tmpfs: User quota block hardlimit too large. [ 5705.829104][ T8812] cgroup: Unknown subsys name 'cpuset' [ 5716.891819][ T8824] tc_dump_action: action bad kind [ 5722.363239][ T8826] xt_CT: No such helper "pptp" [ 5741.414725][ T8840] netlink: 'syz.1.2028': attribute type 1 has an invalid length. [ 5741.419275][ T8840] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2028'. [ 5755.898151][ T7459] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 5756.275476][ T7459] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 5756.278590][ T7459] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 5756.286188][ T7459] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 5756.288819][ T7459] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5756.559157][ T8855] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 5756.885774][ T7459] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 5761.264624][ T7459] usb 2-1: USB disconnect, device number 16 [ 5767.078199][ T8891] netdevsim netdevsim0 : renamed from netdevsim0 [ 5824.653788][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2063'. [ 5853.228713][ T8968] netlink: 'syz.1.2074': attribute type 13 has an invalid length. [ 5863.078262][ T8976] xt_hashlimit: size too large, truncated to 1048576 [ 5890.733389][ T9008] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2094'. [ 5917.223765][ T9028] netlink: 'syz.0.2104': attribute type 2 has an invalid length. [ 5917.226678][ T9028] netlink: 'syz.0.2104': attribute type 11 has an invalid length. [ 5917.228866][ T9028] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2104'. [ 5949.874258][ T8350] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 5950.154509][ T8350] usb 1-1: Using ep0 maxpacket: 8 [ 5950.272717][ T8350] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 5950.275590][ T8350] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 5950.278134][ T8350] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 5950.286288][ T8350] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 5950.290591][ T8350] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 5950.292969][ T8350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5951.722624][ T8350] usb 1-1: GET_CAPABILITIES returned 0 [ 5951.730862][ T8350] usbtmc 1-1:16.0: can't read capabilities [ 5953.329143][ T7085] usb 1-1: USB disconnect, device number 15 [ 5966.115484][ T9090] xfrm0: entered promiscuous mode [ 5966.118136][ T9090] xfrm0: entered allmulticast mode [ 6005.369059][ T9128] binder: BC_ACQUIRE_RESULT not supported [ 6005.376090][ T9128] binder: 9127:9128 ioctl c0306201 200000000040 returned -22 [ 6048.689097][ T9169] netlink: 'syz.0.2164': attribute type 1 has an invalid length. [ 6105.534249][ T9219] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffb,4) [ 6105.536882][ T9219] comedi comedi0: 8255: I/O port conflict (0x6,4) [ 6105.543975][ T9219] comedi comedi0: 8255: I/O port conflict (0xb,4) [ 6105.545694][ T9219] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 6105.547294][ T9219] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffa,4) [ 6105.548987][ T9219] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 6105.574126][ T9219] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 6105.576147][ T9219] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 6105.577819][ T9219] comedi comedi0: 8255: I/O port conflict (0x6,4) [ 6105.613003][ T9219] comedi comedi0: 8255: I/O port conflict (0x7,4) [ 6105.616034][ T9219] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 6105.618044][ T9219] comedi comedi0: 8255: I/O port conflict (0x7,4) [ 6105.638441][ T9219] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 6105.652633][ T9219] comedi comedi0: 8255: I/O port conflict (0x10,4) [ 6105.654951][ T9219] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 6105.656648][ T9219] comedi comedi0: 8255: I/O port conflict (0x9,4) [ 6105.658351][ T9219] comedi comedi0: 8255: I/O port conflict (0x9,4) [ 6105.661414][ T9219] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 6105.674487][ T9219] comedi comedi0: 8255: I/O port conflict (0xffffffffffffffff,4) [ 6111.274752][ T8350] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 6111.502105][ T8350] usb 1-1: Using ep0 maxpacket: 16 [ 6111.637752][ T8350] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 6111.650763][ T8350] usb 1-1: config 0 has no interface number 0 [ 6111.654919][ T8350] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 6111.665025][ T8350] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 6111.797625][ T8350] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 6111.818798][ T8350] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 6111.823388][ T8350] usb 1-1: Product: syz [ 6111.825333][ T8350] usb 1-1: SerialNumber: syz [ 6112.025610][ T8350] usb 1-1: config 0 descriptor?? [ 6112.664710][ T8350] cm109 1-1:0.8: invalid payload size 1024, expected 4 [ 6112.853461][ T8350] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input11 [ 6117.345671][ C1] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 6117.362244][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 6117.367390][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 6117.382466][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 6117.391185][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 6117.400725][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 6117.405220][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 6117.408661][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 6117.418565][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 6117.431492][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 6117.435683][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 6117.671151][ T8350] usb 1-1: USB disconnect, device number 16 [ 6117.681090][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 6117.741476][ T8350] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 6125.598436][ T9251] xt_CT: You must specify a L4 protocol and not use inversions on it [ 6139.074565][ T9295] xt_CT: You must specify a L4 protocol and not use inversions on it [ 6189.362808][ T9347] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 6255.217714][ T9398] ipt_REJECT: TCP_RESET invalid for non-tcp [ 6264.851712][ T9405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2250'. [ 6356.377170][ T9479] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2283'. [ 6356.392437][ T9479] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2283'. [ 6356.395266][ T9479] netlink: 'syz.0.2283': attribute type 6 has an invalid length. [ 6356.397608][ T9479] netlink: 'syz.0.2283': attribute type 5 has an invalid length. [ 6356.431186][ T9479] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2283'. [ 6360.138324][ T8350] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 6360.502145][ T8350] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 6360.505404][ T8350] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 6360.508100][ T8350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 30768, setting to 64 [ 6360.525799][ T8350] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 6360.747034][ T8350] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 6360.755251][ T8350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6360.757828][ T8350] usb 2-1: Product: syz [ 6360.770970][ T8350] usb 2-1: Manufacturer: syz [ 6360.773272][ T8350] usb 2-1: SerialNumber: syz [ 6360.968100][ T8350] usb 2-1: config 0 descriptor?? [ 6361.782515][ T8350] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 6364.782676][ T9067] usb 2-1: USB disconnect, device number 17 [ 6419.655367][ T9543] mmap: syz.0.2304 (9543): VmData 29085696 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 6452.934609][ T9598] netlink: 'syz.0.2315': attribute type 1 has an invalid length. [ 6452.937357][ T9598] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2315'. [ 6464.205267][ T9606] tmpfs: Bad value for 'mpol' [ 6475.041555][ T9645] netlink: 'syz.0.2322': attribute type 21 has an invalid length. [ 6475.046073][ T9645] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2322'. [ 6548.996982][ T9694] xt_nfacct: accounting object `syz1' does not exists [ 6581.377894][ T35] audit: type=1400 audit(6580.310:15): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=269625292F2F2E212D pid=9713 comm="syz.1.2355" [ 6605.373101][ T9732] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2364'. [ 6628.794749][ T9750] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2372'. [ 6645.437168][ T9764] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2379'. [ 6645.475775][ T9764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2379'. [ 6645.477868][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2379'. [ 6685.897503][ T9792] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 6693.232767][ T9797] cgroup: noprefix used incorrectly [ 6705.221064][ T9805] xt_recent: Unsupported userspace flags (000000de) [ 6726.594268][ T9821] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2407'. [ 6753.434048][ T9067] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 6753.752763][ T9067] usb 2-1: Using ep0 maxpacket: 16 [ 6753.873542][ T9067] usb 2-1: unable to get BOS descriptor or descriptor too short [ 6754.004660][ T9067] usb 2-1: config 1 interface 0 has no altsetting 0 [ 6754.356420][ T9067] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.40 [ 6754.359110][ T9067] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6754.376356][ T9067] usb 2-1: Product: syz [ 6754.378208][ T9067] usb 2-1: Manufacturer: syz [ 6754.420387][ T9067] usb 2-1: SerialNumber: syz [ 6757.703171][ T9067] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input13 [ 6758.416400][ T9067] usb 2-1: USB disconnect, device number 18 [ 6759.549129][ T9857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2416'. [ 6776.754083][ T9876] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 6776.759207][ T9876] Error validating options; rc = [-22] [ 6795.506264][ T9887] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 6795.506264][ T9887] The task syz.0.2426 (9887) triggered the difference, watch for misbehavior. [ 6900.495600][ T9965] netlink: 45 bytes leftover after parsing attributes in process `syz.0.2465'. [ 6931.742171][ T8350] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 6931.993044][ T8350] usb 2-1: Using ep0 maxpacket: 16 [ 6932.684170][ T8350] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 6932.686962][ T8350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6932.702689][ T8350] usb 2-1: Product: syz [ 6932.704814][ T8350] usb 2-1: Manufacturer: syz [ 6932.723174][ T8350] usb 2-1: SerialNumber: syz [ 6933.056466][ T8350] usb 2-1: config 0 descriptor?? [ 6933.346423][ T8350] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 6935.313563][ T8350] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 6935.330389][ T8350] visor 2-1:0.0: probe with driver visor failed with error -5 [ 6936.598244][ T9067] usb 2-1: USB disconnect, device number 19 [ 6938.639178][T10004] netlink: 'syz.0.2478': attribute type 15 has an invalid length. [ 6958.402637][T10017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2484'. [ 6964.504395][T10022] xt_l2tp: invalid flags combination: 0 [ 6980.683402][T10034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2492'. [ 7005.406535][T10050] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check. [ 7012.052955][ T7085] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 7012.485216][ T7085] usb 1-1: config index 0 descriptor too short (expected 7768, got 18) [ 7012.488501][ T7085] usb 1-1: config 0 has an invalid interface number: 208 but max is 0 [ 7012.502605][ T7085] usb 1-1: config 0 has no interface number 0 [ 7012.505650][ T7085] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 7012.507954][ T7085] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 7012.746783][ T7085] usb 1-1: config 0 descriptor?? [ 7013.015369][ T7085] ftdi_sio 1-1:0.208: FTDI USB Serial Device converter detected [ 7013.167400][ T7085] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 7014.627484][ T7085] usb 1-1: USB disconnect, device number 17 [ 7014.837118][ T7085] ftdi_sio 1-1:0.208: device disconnected [ 7057.725186][T10104] netlink: 'syz.1.2518': attribute type 3 has an invalid length. [ 7067.988453][T10111] [U] Ϧ:Kț.G8X4QTZ.|| [ 7085.576770][T10124] wireguard1: entered promiscuous mode [ 7085.605376][T10124] wireguard1: entered allmulticast mode [ 7158.238018][T10184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2551'. [ 7192.143642][ T8350] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 7192.417797][ T8350] usb 1-1: Using ep0 maxpacket: 8 [ 7192.554590][ T8350] usb 1-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 7192.558170][ T8350] usb 1-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 7192.610680][ T8350] usb 1-1: config 0 interface 0 has no altsetting 0 [ 7192.612682][ T8350] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 7192.614405][ T8350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 7192.943458][ T8350] usb 1-1: config 0 descriptor?? [ 7194.968491][ T8350] mcp2200 0003:04D8:00DF.0001: unknown main item tag 0x0 [ 7194.980823][ T8350] mcp2200 0003:04D8:00DF.0001: unknown main item tag 0x0 [ 7194.982429][ T8350] mcp2200 0003:04D8:00DF.0001: unknown main item tag 0x0 [ 7194.983850][ T8350] mcp2200 0003:04D8:00DF.0001: unknown main item tag 0x0 [ 7194.985092][ T8350] mcp2200 0003:04D8:00DF.0001: unknown main item tag 0x0 [ 7195.025483][ T8350] mcp2200 0003:04D8:00DF.0001: USB HID vff.ff Device [HID 04d8:00df] on usb-dummy_hcd.0-1/input0 [ 7195.825078][ T8350] usb 1-1: USB disconnect, device number 18 [ 7238.527322][T10258] trusted_key: encrypted_key: master key parameter '' is invalid [ 7245.351483][ T9067] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 7245.585097][ T9067] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 7264.779187][T10281] netlink: 304 bytes leftover after parsing attributes in process `syz.1.2584'. [ 7287.182969][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2592'. [ 7294.117249][T10301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2594'. [ 7294.153510][T10301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2594'. [ 7307.556795][T10309] x_tables: ip_tables: udp match: only valid for protocol 17 [ 7386.510982][T10061] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 7386.722434][T10061] usb 1-1: Using ep0 maxpacket: 8 [ 7386.835060][T10061] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 7386.837890][T10061] usb 1-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 7386.861442][T10061] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 7386.964427][T10061] usb 1-1: config 0 descriptor?? [ 7389.181467][T10061] cypress 0003:04B4:0001.0003: hidraw0: USB HID v0.00 Device [HID 04b4:0001] on usb-dummy_hcd.0-1/input0 [ 7389.551734][T10061] usb 1-1: USB disconnect, device number 19 [ 7425.386738][T10411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2631'. [ 7482.527332][T10451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2650'. [ 7496.602659][T10462] syz.1.2653: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 7496.662387][T10462] CPU: 1 UID: 0 PID: 10462 Comm: syz.1.2653 Not tainted 6.16.0-rc7-syzkaller-g7b388bf7a9d9 #0 PREEMPT [ 7496.663505][T10462] Hardware name: riscv-virtio,qemu (DT) [ 7496.664657][T10462] Call Trace: [ 7496.665145][T10462] [] dump_backtrace+0x2e/0x3c [ 7496.666219][T10462] [] show_stack+0x30/0x3c [ 7496.666799][T10462] [] dump_stack_lvl+0x12e/0x1a6 [ 7496.667399][T10462] [] dump_stack+0x1c/0x24 [ 7496.667985][T10462] [] warn_alloc+0x170/0x292 [ 7496.668598][T10462] [] __vmalloc_node_range_noprof+0xe3c/0x11b0 [ 7496.669491][T10462] [] __kvmalloc_node_noprof+0x46a/0x6ac [ 7496.670124][T10462] [] nf_tables_newset+0x2168/0x3962 [ 7496.670720][T10462] [] nfnetlink_rcv_batch+0x11ec/0x17ea [ 7496.671330][T10462] [] nfnetlink_rcv+0x3ca/0x47a [ 7496.671869][T10462] [] netlink_unicast+0x52a/0x870 [ 7496.672768][T10462] [] netlink_sendmsg+0x85e/0xdd6 [ 7496.673730][T10462] [] __sock_sendmsg+0xcc/0x160 [ 7496.674576][T10462] [] ____sys_sendmsg+0x63e/0x79c [ 7496.675430][T10462] [] ___sys_sendmsg+0x144/0x1e6 [ 7496.676258][T10462] [] __sys_sendmsg+0x188/0x246 [ 7496.677086][T10462] [] __riscv_sys_sendmsg+0x70/0xa2 [ 7496.678031][T10462] [] syscall_handler+0x94/0x118 [ 7496.678832][T10462] [] do_trap_ecall_u+0x396/0x530 [ 7496.679670][T10462] [] handle_exception+0x15e/0x16a [ 7496.752585][T10462] Mem-Info: [ 7496.758644][T10462] active_anon:2190 inactive_anon:0 isolated_anon:0 [ 7496.758644][T10462] active_file:13296 inactive_file:36702 isolated_file:0 [ 7496.758644][T10462] unevictable:768 dirty:42 writeback:0 [ 7496.758644][T10462] slab_reclaimable:2329 slab_unreclaimable:27676 [ 7496.758644][T10462] mapped:12498 shmem:831 pagetables:767 [ 7496.758644][T10462] sec_pagetables:0 bounce:0 [ 7496.758644][T10462] kernel_misc_reclaimable:0 [ 7496.758644][T10462] free:204840 free_pcp:4535 free_cma:52608 [ 7496.796570][T10462] Node 0 active_anon:8760kB inactive_anon:0kB active_file:53184kB inactive_file:146808kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:49992kB dirty:168kB writeback:0kB shmem:3324kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6024kB pagetables:3068kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 7496.841246][T10462] Node 0 DMA32 free:819360kB boost:0kB min:22528kB low:28160kB high:33792kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8760kB inactive_anon:0kB active_file:53184kB inactive_file:146808kB unevictable:3072kB writepending:168kB present:2097152kB managed:1429728kB mlocked:0kB bounce:0kB free_pcp:18140kB local_pcp:13528kB free_cma:210432kB [ 7496.881622][T10462] lowmem_reserve[]: 0 0 0 [ 7496.886822][T10462] Node 0 DMA32: 698*4kB (UME) 949*8kB (ME) 645*16kB (UME) 474*32kB (ME) 194*64kB (UM) 34*128kB (M) 17*256kB (ME) 9*512kB (MEC) 2*1024kB (MC) 5*2048kB (UM) 182*4096kB (UMC) = 819360kB [ 7496.974414][T10462] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 7496.977611][T10462] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 7497.011144][T10462] 50829 total pagecache pages [ 7497.013879][T10462] 0 pages in swap cache [ 7497.015644][T10462] Free swap = 124996kB [ 7497.017391][T10462] Total swap = 124996kB [ 7497.061222][T10462] 524288 pages RAM [ 7497.063481][T10462] 0 pages HighMem/MovableOnly [ 7497.065249][T10462] 166856 pages reserved [ 7497.067143][T10462] 52736 pages cma reserved [ 7508.068366][T10462] syz.1.2653: vmalloc error: size 67112960, failed to allocated page array size 131080, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 7508.076460][T10462] CPU: 1 UID: 0 PID: 10462 Comm: syz.1.2653 Not tainted 6.16.0-rc7-syzkaller-g7b388bf7a9d9 #0 PREEMPT [ 7508.077211][T10462] Hardware name: riscv-virtio,qemu (DT) [ 7508.077499][T10462] Call Trace: [ 7508.077728][T10462] [] dump_backtrace+0x2e/0x3c [ 7508.078688][T10462] [] show_stack+0x30/0x3c [ 7508.079275][T10462] [] dump_stack_lvl+0x12e/0x1a6 [ 7508.079895][T10462] [] dump_stack+0x1c/0x24 [ 7508.080457][T10462] [] warn_alloc+0x170/0x292 [ 7508.081059][T10462] [] __vmalloc_node_range_noprof+0xe3c/0x11b0 [ 7508.081946][T10462] [] __kvmalloc_node_noprof+0x46a/0x6ac [ 7508.082616][T10462] [] nf_tables_newset+0x2168/0x3962 [ 7508.083357][T10462] [] nfnetlink_rcv_batch+0x11ec/0x17ea [ 7508.083985][T10462] [] nfnetlink_rcv+0x3ca/0x47a [ 7508.084537][T10462] [] netlink_unicast+0x52a/0x870 [ 7508.085422][T10462] [] netlink_sendmsg+0x85e/0xdd6 [ 7508.086336][T10462] [] __sock_sendmsg+0xcc/0x160 [ 7508.087262][T10462] [] ____sys_sendmsg+0x63e/0x79c [ 7508.088150][T10462] [] ___sys_sendmsg+0x144/0x1e6 [ 7508.089121][T10462] [] __sys_sendmsg+0x188/0x246 [ 7508.090058][T10462] [] __riscv_sys_sendmsg+0x70/0xa2 [ 7508.090995][T10462] [] syscall_handler+0x94/0x118 [ 7508.091789][T10462] [] do_trap_ecall_u+0x396/0x530 [ 7508.092546][T10462] [] handle_exception+0x15e/0x16a [ 7508.162806][T10462] Mem-Info: [ 7508.165208][T10462] active_anon:2201 inactive_anon:0 isolated_anon:0 [ 7508.165208][T10462] active_file:13296 inactive_file:36706 isolated_file:0 [ 7508.165208][T10462] unevictable:768 dirty:64 writeback:0 [ 7508.165208][T10462] slab_reclaimable:2329 slab_unreclaimable:27539 [ 7508.165208][T10462] mapped:12514 shmem:832 pagetables:770 [ 7508.165208][T10462] sec_pagetables:0 bounce:0 [ 7508.165208][T10462] kernel_misc_reclaimable:0 [ 7508.165208][T10462] free:205291 free_pcp:4474 free_cma:52608 [ 7508.192093][T10462] Node 0 active_anon:8776kB inactive_anon:0kB active_file:53184kB inactive_file:146824kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:50056kB dirty:268kB writeback:0kB shmem:3328kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5984kB pagetables:3084kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 7508.212460][T10462] Node 0 DMA32 free:821164kB boost:0kB min:22528kB low:28160kB high:33792kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8776kB inactive_anon:0kB active_file:53184kB inactive_file:146824kB unevictable:3072kB writepending:268kB present:2097152kB managed:1429728kB mlocked:0kB bounce:0kB free_pcp:17832kB local_pcp:12896kB free_cma:210432kB [ 7508.218067][T10462] lowmem_reserve[]: 0 0 0 [ 7508.236930][T10462] Node 0 DMA32: 1043*4kB (UM) 1050*8kB (UM) 671*16kB (UME) 479*32kB (UME) 197*64kB (UME) 37*128kB (UME) 17*256kB (UM) 10*512kB (UMEC) 2*1024kB (MC) 4*2048kB (M) 182*4096kB (UMC) = 821164kB [ 7508.311254][T10462] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 7508.314228][T10462] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 7508.316781][T10462] 50836 total pagecache pages [ 7508.318673][T10462] 0 pages in swap cache [ 7508.331908][T10462] Free swap = 124996kB [ 7508.335164][T10462] Total swap = 124996kB [ 7508.336907][T10462] 524288 pages RAM [ 7508.338559][T10462] 0 pages HighMem/MovableOnly [ 7508.351980][T10462] 166856 pages reserved [ 7508.358619][T10462] 52736 pages cma reserved [ 7563.823724][ T8350] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 7564.201291][ T8350] usb 2-1: config index 0 descriptor too short (expected 1051, got 27) [ 7564.204189][ T8350] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 7564.206821][ T8350] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 7564.223131][ T8350] usb 2-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 7564.226692][ T8350] usb 2-1: config 0 interface 0 has no altsetting 0 [ 7564.383714][ T8350] usb 2-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 7564.387166][ T8350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 7564.413026][ T8350] usb 2-1: Product: syz [ 7564.415394][ T8350] usb 2-1: Manufacturer: syz [ 7564.417783][ T8350] usb 2-1: SerialNumber: syz [ 7564.671619][ T8350] usb 2-1: config 0 descriptor?? [ 7564.757177][T10510] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 7566.767348][ T8350] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 7566.808520][ T8350] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 7567.067841][ T8350] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 7567.077935][ T8350] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 7567.178281][ T8350] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 7567.369151][ T8350] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 7567.405349][ T8350] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 7567.551611][ T8350] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 7567.746965][ T8350] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 7567.777967][ T8350] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 7567.921134][ T8350] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 7567.998471][T10514] [U] [ 7568.095532][ T8350] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 7568.133782][ T8350] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 7568.294389][ T8350] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 7568.871999][ T8350] usb 2-1: USB disconnect, device number 20 [ 7569.516832][ T8350] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 7569.967474][ T8350] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 7570.575778][ T8350] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 7571.704548][ T8350] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 7571.828692][ T8350] keyspan 2-1:0.0: device disconnected [ 7625.624370][T10061] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 7626.018746][T10061] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 7626.026142][T10061] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 7626.028730][T10061] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 7626.034548][T10061] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 7626.314229][T10061] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 7626.317976][T10061] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 7626.341403][T10061] usb 1-1: Product: syz [ 7626.343797][T10061] usb 1-1: Manufacturer: syz [ 7626.345855][T10061] usb 1-1: SerialNumber: syz [ 7626.662927][T10061] usb 1-1: config 0 descriptor?? [ 7629.627754][ T8350] usb 1-1: USB disconnect, device number 20 [ 7631.748655][T10602] option changes via remount are deprecated (pid=10594 comm=syz.1.2688) [ 7675.668392][T10633] tmpfs: Bad value for 'size' [ 7754.693629][T10690] tmpfs: Invalid gid '0x00000000ffffffff' [ 7760.904985][T10694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2725'. [ 7761.087471][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2725'. [ 7761.112629][T10694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2725'. [ 7766.272063][ T9067] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 7766.745992][ T9067] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 7766.748937][ T9067] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 7766.763477][ T9067] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 7766.766796][ T9067] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 7766.769198][ T9067] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 7767.531596][T10698] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 7770.676661][ T9067] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 7770.767349][ T9067] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input15 [ 7772.473594][ T9067] usb 2-1: USB disconnect, device number 21 [ 7772.481420][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 7808.165024][T10751] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 7873.496263][T10808] ucma_write: process 2757 (syz.1.2760) changed security contexts after opening file descriptor, this is not allowed. [ 7883.286301][T10814] process 'syz.0.2763' launched '/dev/fd/3' with NULL argv: empty string added [ 7918.295031][T10837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2774'. [ 7972.139177][T10872] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2791'. [ 8013.381899][T10901] atomic_op ffffaf801c435998 conn xmit_atomic 0000000000000000 [ 8082.587964][T10950] netlink: 'syz.0.2827': attribute type 16 has an invalid length. [ 8082.611280][T10950] netlink: 'syz.0.2827': attribute type 3 has an invalid length. [ 8082.625869][T10950] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.2827'. [ 8112.533450][T10973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2836'. [ 8136.967256][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2842'. [ 8136.985390][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2842'. [ 8137.001386][T10990] netlink: 'syz.1.2842': attribute type 18 has an invalid length. [ 8173.563439][T11014] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2852'. [ 8173.565699][T11014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2852'. [ 8277.058517][T11085] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2881'. [ 8306.299243][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2887'. [ 8306.395960][T11100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2887'. [ 8353.565721][T11141] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2902'. [ 8370.772922][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2906'. [ 8443.156444][T11198] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 8458.384974][T11207] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 8492.355228][T11226] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 8499.621460][T11230] ptrace attach of "/syz-executor exec"[3216] was attempted by "/syz-executor exec"[11230] [ 8500.997158][T11231] [U] v3f"S/4:XTzWtlW= [ 8501.082446][T11228] [U] J"e:" [ 8555.136633][T11265] devtmpfs: Cannot retroactively limit inodes [ 8622.223988][T11306] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2969'. [ 8675.041357][ T35] audit: type=1326 audit(8673.990:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11339 comm="syz.0.2986" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdbb92 code=0x0 [ 8719.174277][T11365] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2997'. [ 8726.997615][T11371] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3000'. [ 8769.773450][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3015'. [ 8769.776708][T11401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3015'. [ 8769.788784][T11401] netlink: 'syz.0.3015': attribute type 20 has an invalid length. [ 8773.235513][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3016'. [ 8773.237713][T11405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3016'. [ 8853.335429][T11459] kernel profiling enabled (shift: 5) [ 8875.035384][T11470] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3040'. [ 8875.038759][T11470] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3040'. [ 8885.855703][ T35] audit: type=1804 audit(8884.770:17): pid=11480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3044" name="/newroot/1548/cgroup.controllers" dev="tmpfs" ino=7812 res=1 errno=0 [ 8885.903744][ T35] audit: type=1800 audit(8884.810:18): pid=11480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3044" name="cgroup.controllers" dev="tmpfs" ino=7812 res=0 errno=0 [ 8939.774069][T11513] netlink: 'syz.1.3058': attribute type 27 has an invalid length. [ 8990.625523][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3071'. [ 8990.627730][T11542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3071'. [ 8990.653623][T11542] netlink: 'syz.1.3071': attribute type 12 has an invalid length. [ 8990.655315][T11542] netlink: 'syz.1.3071': attribute type 11 has an invalid length. [ 9006.236629][T11552] pim6reg: entered allmulticast mode [ 9006.402274][T11555] pim6reg: left allmulticast mode [ 9010.194934][T11559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3077'. [ 9010.197726][T11559] tc_dump_action: action bad kind [ 9023.087997][T11565] netlink: 'syz.0.3080': attribute type 2 has an invalid length. [ 9023.104416][T11565] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3080'. [ 9038.747917][T11576] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3085'. [ 9082.980655][ C1] hrtimer: interrupt took 1183300 ns [ 9102.207904][T11616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3102'. [ 9130.207066][T11629] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 9130.210927][T11629] IPv6: NLM_F_CREATE should be set when creating new route [ 9130.213612][T11629] IPv6: NLM_F_CREATE should be set when creating new route [ 9130.216479][T11629] IPv6: NLM_F_CREATE should be set when creating new route [ 9130.525780][T11629] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 9130.558602][T11629] Zero length message leads to an empty skb [ 9155.966544][T11644] hsr0 speed is unknown, defaulting to 1000 [ 9177.515635][T11663] macsec0: entered promiscuous mode [ 9177.518890][T11663] macsec0: entered allmulticast mode [ 9181.434221][T11663] veth1_macvtap: entered allmulticast mode [ 9181.465079][T11663] macsec0: left promiscuous mode [ 9181.485900][T11663] macsec0: left allmulticast mode [ 9181.488409][T11663] veth1_macvtap: left allmulticast mode [ 9232.087877][T11619] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9234.197965][T11619] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9236.277114][T11619] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9237.724519][T11619] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9260.146391][T11619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 9260.515465][T11619] bond0 (unregistering): Released all slaves [ 9261.717107][T11619] bond1 (unregistering): Released all slaves [ 9262.534741][T11619] bond2 (unregistering): Released all slaves [ 9263.757111][T11619] bond3 (unregistering): Released all slaves [ 9264.832096][T11619] bond4 (unregistering): Released all slaves [ 9265.607991][T11634] syz0: Port: 1 Link DOWN [ 9265.733172][T11039] infiniband s9z1: ib_query_port failed (-19) [ 9274.771141][T11706] hsr0 speed is unknown, defaulting to 1000 [ 9284.604594][T11619] hsr_slave_0: left promiscuous mode [ 9284.728655][T11619] hsr_slave_1: left promiscuous mode [ 9285.235637][T11619] veth1_macvtap: left promiscuous mode [ 9285.262510][T11619] veth0_macvtap: left promiscuous mode [ 9285.310394][T11619] veth0_vlan: left promiscuous mode [ 9305.754695][T11708] smc: removing ib device syz0 [ 9313.993684][ T7085] hsr0 speed is unknown, defaulting to 1000 [ 9313.996741][ T7085] syz1: Port: 1 Link DOWN [ 9376.655817][T11706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 9376.937903][T11706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 9406.538695][T11706] hsr_slave_0: entered promiscuous mode [ 9406.638804][T11706] hsr_slave_1: entered promiscuous mode [ 9419.658010][T11706] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 9420.306448][T11706] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 9420.558202][T11706] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 9421.308074][T11706] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 9441.717134][T11706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 9535.638785][T11706] veth0_vlan: entered promiscuous mode [ 9537.655583][T11706] veth1_vlan: entered promiscuous mode [ 9541.586098][T11706] veth0_macvtap: entered promiscuous mode [ 9542.845091][T11706] veth1_macvtap: entered promiscuous mode [ 9545.676560][T11706] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 9545.678460][T11706] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 9545.684064][T11706] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 9545.685787][T11706] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 9663.328181][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3149'. [ 9742.353791][ T37] INFO: task kworker/u10:2:11241 blocked for more than 430 seconds. [ 9742.358085][ T37] Not tainted 6.16.0-rc7-syzkaller-g7b388bf7a9d9 #0 [ 9742.380962][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 9742.384050][ T37] task:kworker/u10:2 state:D stack:0 pid:11241 tgid:11241 ppid:2 task_flags:0x4208060 flags:0x00000000 [ 9742.387926][ T37] Workqueue: ib-unreg-wq ib_unregister_work [ 9742.446061][ T37] Call Trace: [ 9742.447815][ T37] [] __schedule+0x105c/0x4088 [ 9742.502080][ T37] [] schedule+0xc4/0x35e [ 9742.505033][ T37] [] schedule_timeout+0x1c6/0x2b2 [ 9742.507409][ T37] [] do_wait_for_common+0x1c2/0x3d0 [ 9742.566994][ T37] [] wait_for_completion+0x40/0x5c [ 9742.572856][ T37] [] disable_device+0x1b2/0x2ba [ 9742.575429][ T37] [] __ib_unregister_device+0x292/0x406 SYZFAIL: failed to recv rpc [ 9742.578147][ T37] [] ib_unregister_work+0x20/0x36 [ 9742.643058][ T37] [] process_one_work+0x85c/0x1f4a fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 9742.715931][ T37] [] worker_thread+0x5d0/0xdea [ 9742.761475][ T37] [] kthread+0x3a4/0x7e0 [ 9742.766050][ T37] [] ret_from_fork_kernel+0x2a/0xbec [ 9742.801058][ T37] [] ret_from_fork_kernel_asm+0x16/0x18 [ 9742.807153][ T37] [ 9742.807153][ T37] Showing all locks held in the system: [ 9742.831566][ T37] 1 lock held by khungtaskd/37: [ 9742.835034][ T37] #0: ffffffff885dbd80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2a/0x1a0 [ 9742.921735][ T37] 1 lock held by syslogd/3000: [ 9742.924930][ T37] 2 locks held by getty/3176: [ 9742.927241][ T37] #0: ffffaf8018f3b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3a/0x46 [ 9742.975587][ T37] #1: ffff8f800008e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x3e4/0x12ba [ 9743.005847][ T37] 1 lock held by syz-executor/3202: [ 9743.036957][ T37] 4 locks held by kworker/u9:0/9972: [ 9743.045841][ T37] 2 locks held by kworker/0:2/10061: [ 9743.047997][ T37] 3 locks held by kworker/u10:2/11241: [ 9743.082385][ T37] #0: ffffaf8011fae948 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_one_work+0x72e/0x1f4a [ 9743.089013][ T37] #1: ffff8f8003df7b70 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_one_work+0x756/0x1f4a [ 9743.127329][ T37] #2: ffffaf801b23c6d0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x204/0x406 [ 9743.187761][ T37] 2 locks held by kworker/u10:3/11497: [ 9743.224294][ T37] 4 locks held by kworker/u8:0/11619: [ 9743.227058][ T37] #0: ffffaf8012ae2148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x72e/0x1f4a [ 9743.267955][ T37] #1: ffff8f8003617b70 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x756/0x1f4a [ 9743.298146][ T37] #2: ffffffff89a53430 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xd2/0x7ec [ 9743.336078][ T37] #3: ffffffff885ebe80 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x56/0x66c [ 9743.390523][ T37] 2 locks held by syz-executor/11706: [ 9743.391895][ T37] 2 locks held by kworker/0:0/11753: [ 9743.392958][ T37] 1 lock held by syz.0.3163/12258: [ 9743.394578][ T37] [ 9743.395505][ T37] ============================================= [ 9743.395505][ T37] [ 9743.397031][ T37] NMI backtrace for cpu 1 [ 9743.397293][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller-g7b388bf7a9d9 #0 PREEMPT [ 9743.397723][ T37] Hardware name: riscv-virtio,qemu (DT) [ 9743.397862][ T37] Call Trace: [ 9743.397977][ T37] [] dump_backtrace+0x2e/0x3c [ 9743.398473][ T37] [] show_stack+0x30/0x3c [ 9743.398794][ T37] [] dump_stack_lvl+0x12e/0x1a6 [ 9743.399111][ T37] [] dump_stack+0x1c/0x24 [ 9743.399461][ T37] [] nmi_cpu_backtrace+0x3b0/0x3b2 [ 9743.399854][ T37] [] nmi_trigger_cpumask_backtrace+0x2c4/0x466 [ 9743.400258][ T37] [] arch_trigger_cpumask_backtrace+0x2c/0x42 [ 9743.400621][ T37] [] watchdog+0xd0e/0x11fe [ 9743.400969][ T37] [] kthread+0x3a4/0x7e0 [ 9743.401374][ T37] [] ret_from_fork_kernel+0x2a/0xbec [ 9743.401773][ T37] [] ret_from_fork_kernel_asm+0x16/0x18 [ 9743.415874][ T37] Sending NMI from CPU 1 to CPUs 0: [ 9743.418035][ C0] NMI backtrace for cpu 0 [ 9743.418603][ C0] CPU: 0 UID: 0 PID: 9972 Comm: kworker/u9:0 Not tainted 6.16.0-rc7-syzkaller-g7b388bf7a9d9 #0 PREEMPT [ 9743.419334][ C0] Hardware name: riscv-virtio,qemu (DT) [ 9743.419680][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 9743.420686][ C0] epc : kasan_quarantine_put+0x8a/0x1d6 [ 9743.421339][ C0] ra : kasan_quarantine_put+0x1a0/0x1d6 [ 9743.422032][ C0] epc : ffffffff80b04fb0 ra : ffffffff80b050c6 sp : ffff8f8001f07730 [ 9743.422463][ C0] gp : ffffffff89e816e0 tp : ffffaf801b49b480 t0 : ffff8f8001f07710 [ 9743.422917][ C0] t1 : 000000000000000a t2 : 00000000108be1e5 s0 : ffff8f8001f07770 [ 9743.423331][ C0] s1 : 0000000000064f80 a0 : 0000000000000000 a1 : ffffffff87f7bcd0 [ 9743.423758][ C0] a2 : 0000000000000006 a3 : 0000000000000001 a4 : 0000000000000001 [ 9743.424146][ C0] a5 : 0000000000000000 a6 : 0000000000000098 a7 : fffffffffe95560e [ 9743.424558][ C0] s2 : ffffaf803b3aa000 s3 : 0000000000000002 s4 : ffffaf8011802140 [ 9743.424993][ C0] s5 : 0000000000000000 s6 : 0000000000000000 s7 : 1ffff5f00621e092 [ 9743.425451][ C0] s8 : 1ffff5f0076755d8 s9 : ffffaf80310f0490 s10: 0000000000000000 [ 9743.425910][ C0] s11: 0000000000000000 t3 : 13e7e3bf00000000 t4 : fffffffef2226a54 [ 9743.426318][ C0] t5 : fffffffef2226a55 t6 : 0000000000000002 ssp : 0000000000000000 [ 9743.426736][ C0] status: 0000000200000120 badaddr: 0000000000000000 cause: 8000000000000001 [ 9743.427250][ C0] [] kasan_quarantine_put+0x8a/0x1d6 [ 9743.428066][ C0] [] __kasan_slab_free+0x56/0x68 [ 9743.428910][ C0] [] kfree+0x252/0x4da [ 9743.429555][ C0] [] skb_free_head+0x230/0x2ea [ 9743.430455][ C0] [] skb_release_data+0x526/0x6d6 [ 9743.431373][ C0] [] consume_skb+0xca/0xfa [ 9743.431936][ C0] [] nsim_dev_trap_report_work+0x8b6/0xc96 [ 9743.432793][ C0] [] process_one_work+0x85c/0x1f4a [ 9743.433681][ C0] [] worker_thread+0x5d0/0xdea [ 9743.434508][ C0] [] kthread+0x3a4/0x7e0 [ 9743.435134][ C0] [] ret_from_fork_kernel+0x2a/0xbec [ 9743.435859][ C0] [] ret_from_fork_kernel_asm+0x16/0x18 [ 9743.596030][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 9743.599138][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller-g7b388bf7a9d9 #0 PREEMPT [ 9743.601599][ T37] Hardware name: riscv-virtio,qemu (DT) [ 9743.603031][ T37] Call Trace: [ 9743.604293][ T37] [] dump_backtrace+0x2e/0x3c [ 9743.606432][ T37] [] show_stack+0x30/0x3c [ 9743.608168][ T37] [] dump_stack_lvl+0x110/0x1a6 [ 9743.610014][ T37] [] dump_stack+0x1c/0x24 [ 9743.611585][ T37] [] panic+0x39a/0x878 [ 9743.613219][ T37] [] watchdog+0x78a/0x11fe [ 9743.615064][ T37] [] kthread+0x3a4/0x7e0 [ 9743.616946][ T37] [] ret_from_fork_kernel+0x2a/0xbec [ 9743.618938][ T37] [] ret_from_fork_kernel_asm+0x16/0x18 [ 9743.621431][ T37] SMP: stopping secondary CPUs [ 9743.626073][ T37] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:13:40 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff864003fe mhartid 0000000000000000 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff864261a0 vstvec 0000000000000000 mepc ffffffff80091e3a sepc ffffffff804f7dbe vsepc 0000000000000000 mcause 0000000000000009 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 000000008004a000 sscratch 0000000000000000 satp 90fc50000009dbac x0/zero 0000000000000000 x1/ra ffffffff80247cd0 x2/sp ffff8f80000067a0 x3/gp ffffffff89e816e0 x4/tp ffffaf8011989a40 x5/t0 ffffaf806ece9220 x6/t1 fffff5ef02331348 x7/t2 ffffffff8cdfc18f x8/s0 ffff8f80000067a0 x9/s1 ffffaf806ecfb140 x10/a0 ffffaf806ecfb1c8 x11/a1 0000000000000006 x12/a2 0000000000000000 x13/a3 0000000000000000 x14/a4 0000000000010103 x15/a5 0000000000010104 x16/a6 fffff5ef02331349 x17/a7 ffffaf8011989a47 x18/s2 ffffaf806ecfb140 x19/s3 1ffff5f00dd9f657 x20/s4 0000000000000001 x21/s5 ffffaf806ece5600 x22/s6 ffffaf806ecfb2b8 x23/s7 0000000000000000 x24/s8 ffffffff9123a400 x25/s9 ffffffff89ec28a0 x26/s10 ffffffff880043c0 x27/s11 1ffff1f000000d4c x28/t3 6d05111900000000 x29/t4 fffff5ef02331348 x30/t5 fffff5ef02331349 x31/t6 ffffffff8861a260 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff804f7ed8 mhartid 0000000000000001 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff864261a0 vstvec 0000000000000000 mepc ffffffff80091e3a sepc ffffffff8030402a vsepc 0000000000000000 mcause 0000000000000009 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080048000 sscratch 0000000000000000 satp 90ef7000000ab107 x0/zero 0000000000000000 x1/ra ffffffff8007aeac x2/sp ffff8f8000017c70 x3/gp ffffffff89e816e0 x4/tp ffffaf80136e4ec0 x5/t0 ffffaf806ed0b220 x6/t1 0000000000000001 x7/t2 746f4e2020202020 x8/s0 ffff8f8000017c70 x9/s1 ffffaf80136e4ec0 x10/a0 ffffffff8016864a x11/a1 ffffaf80136e4ec0 x12/a2 00000000000f0000 x13/a3 0000000000000101 x14/a4 0000000000020000 x15/a5 0000000000000000 x16/a6 0000000000000028 x17/a7 ffffffffdfffffff x18/s2 0000000000000008 x19/s3 0000000000000002 x20/s4 ffffffff9123a400 x21/s5 0000000000000002 x22/s6 0000000000000001 x23/s7 ffffffff8840f088 x24/s8 0000000000000001 x25/s9 0000000000000001 x26/s10 00000000ffffffff x27/s11 ffffffff89f8ba80 x28/t3 2fbca24600000000 x29/t4 0000000000000000 x30/t5 0000000000000000 x31/t6 0000000000000002 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000