last executing test programs: 2.83514863s ago: executing program 0 (id=4237): r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1, 0x4001}, 0xc) 2.567726425s ago: executing program 0 (id=4243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x58}}, 0x0) 2.252445716s ago: executing program 0 (id=4247): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x14, @dev={0xfe, 0x80, '\x00', 0x10}, 0x4}], 0x1c) 2.242087158s ago: executing program 3 (id=4248): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000f1401"], 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x20000000) 2.101428852s ago: executing program 0 (id=4250): r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4a20, 0x400, @local, 0xfffffffd}, 0x1c) 1.975896217s ago: executing program 3 (id=4253): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) 1.817054204s ago: executing program 0 (id=4255): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000040)={0x10051}) 1.721861225s ago: executing program 3 (id=4258): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="680100001000010000000000fadbdf2508000000", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="0d002b8008000300", @ANYBLOB="1d00"], 0x168}], 0x1, 0x0, 0x0, 0xc1a6ec5e92f4d87e}, 0x20000000) 1.531849858s ago: executing program 0 (id=4259): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d010203010902120001000000000904"], 0x0) 1.283622584s ago: executing program 3 (id=4263): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000761000/0x2000)=nil, 0x2000, 0xa, 0x11, r0, 0x8000000) 1.282123544s ago: executing program 2 (id=4264): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fcntl$addseals(r0, 0x409, 0xad175b2291b6ec41) 1.114846387s ago: executing program 1 (id=4266): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x713, 0x0, 0x25dfdbfe, {{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0xffff}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in6=@private2, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8}, {}, {}, 0x0, 0x1000, 0xa, 0x4}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x48001}, 0x0) 1.023415894s ago: executing program 3 (id=4267): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="210000000001000008000a00", @ANYRES32, @ANYBLOB="5400128009000100626f6e6400000000440002800800120003000000080013"], 0x7c}, 0x1, 0x0, 0x0, 0x20040000}, 0x24008800) 1.023190261s ago: executing program 2 (id=4268): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x3, 0x0, &(0x7f0000002000)=0x5c) 976.408644ms ago: executing program 4 (id=4269): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 894.328334ms ago: executing program 1 (id=4270): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x60, @remote, 0x28f}], 0x1c) 809.535192ms ago: executing program 2 (id=4271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000020703"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) 794.441ms ago: executing program 4 (id=4272): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x17, &(0x7f0000000080)="0000d85c", 0x4) 588.394614ms ago: executing program 1 (id=4273): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x2d, 0x431, 0x9, 0x19, 0x9, 0x20004, 0x3, 0x102, 0xffffffffffffffff}) 587.103573ms ago: executing program 2 (id=4274): r0 = syz_open_dev$radio(&(0x7f0000000980), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f00000009c0)) 528.3704ms ago: executing program 4 (id=4275): r0 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='resize', &(0x7f0000000100)='0', 0x0) 480.079619ms ago: executing program 1 (id=4276): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, 0x0, 0x1b) 348.746384ms ago: executing program 4 (id=4277): r0 = socket$kcm(0x10, 0x400000002, 0x0) fdatasync(r0) 319.928326ms ago: executing program 1 (id=4278): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 272.318182ms ago: executing program 2 (id=4279): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x17, 0x1, 0xf0bd29, 0x25dfdbfc, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20044002) 211.652547ms ago: executing program 4 (id=4280): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x300, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 200.29376ms ago: executing program 1 (id=4281): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0x8, 0x10, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000300000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000005800000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 69.693693ms ago: executing program 4 (id=4282): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') ioctl$NS_GET_USERNS(r0, 0x8004b709, 0x0) 25.52215ms ago: executing program 2 (id=4283): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x2, 0x12) 0s ago: executing program 3 (id=4284): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffe38, &(0x7f0000001ac0)={&(0x7f0000002a00)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x0) kernel console output (not intermixed with test programs): descriptors, different from the interface descriptor's value: 6 [ 323.652921][ T10] usb 3-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 323.652953][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.652974][ T10] usb 3-1: Product: syz [ 323.652990][ T10] usb 3-1: Manufacturer: syz [ 323.653005][ T10] usb 3-1: SerialNumber: syz [ 323.798487][ T815] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 323.963772][ T815] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.963832][ T815] usb 5-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 323.964888][ T815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.998462][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 324.020174][ T10] usb 3-1: USB disconnect, device number 57 [ 324.087127][ T815] usb 5-1: config 0 descriptor?? [ 324.108968][ T815] option 5-1:0.0: GSM modem (1-port) converter detected [ 324.337388][ T9989] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2014'. [ 324.351570][ T10] usb 5-1: USB disconnect, device number 61 [ 324.365261][ T10] option 5-1:0.0: device disconnected [ 325.020977][T10001] netlink: 'syz.0.2019': attribute type 10 has an invalid length. [ 325.021002][T10001] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2019'. [ 325.062683][ T36] audit: type=1326 audit(2000000626.083:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9996 comm="syz.3.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664df4c819 code=0x7ffc0000 [ 325.086891][ T36] audit: type=1326 audit(2000000626.093:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9996 comm="syz.3.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664df4c819 code=0x7ffc0000 [ 325.095754][ T36] audit: type=1326 audit(2000000626.123:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9996 comm="syz.3.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f664df4c819 code=0x7ffc0000 [ 325.095886][ T36] audit: type=1326 audit(2000000626.123:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9996 comm="syz.3.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664df4c819 code=0x7ffc0000 [ 325.095931][ T36] audit: type=1326 audit(2000000626.123:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9996 comm="syz.3.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664df4c819 code=0x7ffc0000 [ 325.186298][T10001] team0: Port device virt_wifi0 added [ 325.482195][T10010] netlink: 'syz.3.2024': attribute type 9 has an invalid length. [ 326.009911][ T815] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 326.207645][ T815] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 326.207681][ T815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 326.207721][ T815] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 326.207746][ T815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.260997][ T815] usb 5-1: config 0 descriptor?? [ 326.538840][ T815] ath6kl: Failed to submit usb control message: -71 [ 326.538893][ T815] ath6kl: unable to send the bmi data to the device: -71 [ 326.538909][ T815] ath6kl: Unable to send get target info: -71 [ 326.569143][ T815] ath6kl: Failed to init ath6kl core: -71 [ 326.569720][ T815] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 326.641886][ T815] usb 5-1: USB disconnect, device number 62 [ 327.266237][T10030] netlink: 'syz.4.2033': attribute type 8 has an invalid length. [ 329.299701][ T6675] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 329.467783][ T6675] usb 1-1: too many configurations: 37, using maximum allowed: 8 [ 329.471394][ T6675] usb 1-1: config index 0 descriptor too short (expected 72, got 36) [ 329.471470][ T6675] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 329.471498][ T6675] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 329.471525][ T6675] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 329.473877][ T6675] usb 1-1: config index 1 descriptor too short (expected 72, got 36) [ 329.473945][ T6675] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 329.473972][ T6675] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 329.473998][ T6675] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 329.478114][ T6675] usb 1-1: config index 2 descriptor too short (expected 72, got 36) [ 329.478167][ T6675] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 329.479370][ T6675] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 329.479401][ T6675] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 329.489745][ T6675] usb 1-1: config index 3 descriptor too short (expected 72, got 36) [ 329.489804][ T6675] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 329.489832][ T6675] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 329.489860][ T6675] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 329.496657][ T6675] usb 1-1: config index 4 descriptor too short (expected 72, got 36) [ 329.496713][ T6675] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 329.496741][ T6675] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 329.496768][ T6675] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 329.519282][ T6675] usb 1-1: config index 5 descriptor too short (expected 72, got 36) [ 329.519374][ T6675] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 329.519404][ T6675] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 329.519430][ T6675] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 329.531720][ T6675] usb 1-1: config index 6 descriptor too short (expected 72, got 36) [ 329.531782][ T6675] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 329.531810][ T6675] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 329.531836][ T6675] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 329.541203][ T6675] usb 1-1: config index 7 descriptor too short (expected 72, got 36) [ 329.541262][ T6675] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 329.541291][ T6675] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 329.541317][ T6675] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 329.550709][ T6675] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 329.550746][ T6675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.550770][ T6675] usb 1-1: Product: syz [ 329.550786][ T6675] usb 1-1: Manufacturer: syz [ 329.550804][ T6675] usb 1-1: SerialNumber: syz [ 329.602984][T10048] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 329.603172][T10048] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 329.628184][ T6675] usb 1-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 329.946607][ T6675] usb 1-1: USB disconnect, device number 63 [ 330.099669][ T36] audit: type=1326 audit(2000000631.133:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10062 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 330.099721][ T36] audit: type=1326 audit(2000000631.133:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10062 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 330.099762][ T36] audit: type=1326 audit(2000000631.133:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10062 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 330.126934][ T36] audit: type=1326 audit(2000000631.143:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10062 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 330.126986][ T36] audit: type=1326 audit(2000000631.143:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10062 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 330.180284][ T36] audit: type=1326 audit(2000000631.203:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10062 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4b7d65d04e code=0x7ffc0000 [ 330.217727][ T36] audit: type=1326 audit(2000000631.243:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10062 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4b7d65d04e code=0x7ffc0000 [ 330.245169][ T36] audit: type=1326 audit(2000000631.273:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10062 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4b7d65d04e code=0x7ffc0000 [ 330.253357][ T36] audit: type=1326 audit(2000000631.283:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10062 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4b7d65d04e code=0x7ffc0000 [ 330.267823][ T36] audit: type=1326 audit(2000000631.293:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10062 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4b7d65d04e code=0x7ffc0000 [ 331.668838][ T815] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 331.821456][ T815] usb 2-1: Using ep0 maxpacket: 32 [ 331.824937][ T815] usb 2-1: unable to get BOS descriptor or descriptor too short [ 331.871961][ T815] usb 2-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 32 [ 331.871995][ T815] usb 2-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 331.872022][ T815] usb 2-1: config 1 interface 0 has no altsetting 0 [ 331.883617][ T815] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 331.883649][ T815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.883678][ T815] usb 2-1: Product: syz [ 331.883693][ T815] usb 2-1: Manufacturer: syz [ 331.883709][ T815] usb 2-1: SerialNumber: syz [ 331.926268][T10080] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 332.235085][ T815] usblp0: Disabling reads from problematic bidirectional printer [ 332.261380][ T815] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 62 if 0 alt 4 proto 1 vid 0x03F0 pid 0x0004 [ 332.299914][ T815] usb 2-1: USB disconnect, device number 62 [ 332.364976][ T815] usblp0: removed [ 334.350462][ T42] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 334.501949][ T42] usb 1-1: config 0 interface 0 altsetting 12 bulk endpoint 0x6 has invalid maxpacket 1023 [ 334.501991][ T42] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x82 has invalid wMaxPacketSize 0 [ 334.502016][ T42] usb 1-1: config 0 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 0 [ 334.502069][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 334.521913][ T42] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 334.521948][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.521971][ T42] usb 1-1: Product: syz [ 334.521988][ T42] usb 1-1: Manufacturer: syz [ 334.522005][ T42] usb 1-1: SerialNumber: syz [ 334.597071][ T42] usb 1-1: config 0 descriptor?? [ 334.598121][T10128] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 334.821284][ T42] usb 1-1: USB disconnect, device number 64 [ 335.933269][T10177] netlink: 'syz.3.2105': attribute type 5 has an invalid length. [ 336.065931][T10183] netlink: 'syz.1.2107': attribute type 21 has an invalid length. [ 336.065961][T10183] IPv6: NLM_F_CREATE should be specified when creating new route [ 336.066526][T10183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 336.066543][T10183] IPv6: NLM_F_CREATE should be set when creating new route [ 336.066725][T10183] IPv6: NLM_F_CREATE should be set when creating new route [ 336.066760][T10183] IPv6: NLM_F_CREATE should be set when creating new route [ 336.155827][T10185] openvswitch: netlink: IP tunnel TTL not specified. [ 336.288368][ T815] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 336.450155][ T815] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 336.450193][ T815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.450216][ T815] usb 5-1: Product: syz [ 336.450233][ T815] usb 5-1: Manufacturer: syz [ 336.450250][ T815] usb 5-1: SerialNumber: syz [ 336.522725][ T6675] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 336.671944][ T6675] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 336.671979][ T6675] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.672001][ T6675] usb 1-1: config 0 has no interface number 0 [ 336.672456][ T6675] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 336.672486][ T6675] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.678128][ T6675] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 336.683083][ T6675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.683111][ T6675] usb 1-1: Product: syz [ 336.683127][ T6675] usb 1-1: Manufacturer: syz [ 336.683143][ T6675] usb 1-1: SerialNumber: syz [ 336.703969][ T6675] usb 1-1: config 0 descriptor?? [ 336.934754][ T815] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 63 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 337.015634][ T815] usb 5-1: USB disconnect, device number 63 [ 337.108595][T10204] Driver unsupported XDP return value 0 on prog (id 183) dev N/A, expect packet loss! [ 337.125023][ T815] usblp0: removed [ 337.247035][ T6675] usbtouchscreen 1-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 337.317585][ T6675] usb 1-1: USB disconnect, device number 65 [ 337.957705][T10222] ip6gre1: entered allmulticast mode [ 338.256494][T10234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2133'. [ 338.553449][T10246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.587446][T10250] C: renamed from lo (while UP) [ 338.689906][T10250] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 338.863606][T10257] netlink: 'syz.3.2144': attribute type 4 has an invalid length. [ 338.863631][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2144'. [ 338.886546][T10258] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2145'. [ 339.452853][T10273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2149'. [ 339.651615][T10254] bond1 (unregistering): Released all slaves [ 340.486456][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2160'. [ 341.321853][ C0] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 341.502657][T10328] ip6gre1: entered allmulticast mode [ 341.968728][T10346] capability: warning: `syz.0.2181' uses deprecated v2 capabilities in a way that may be insecure [ 342.258486][ T6066] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 342.408677][ T6066] usb 4-1: Using ep0 maxpacket: 16 [ 342.428271][ T6066] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 342.428302][ T6066] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.428322][ T6066] usb 4-1: Product: syz [ 342.428337][ T6066] usb 4-1: Manufacturer: syz [ 342.428352][ T6066] usb 4-1: SerialNumber: syz [ 342.448090][T10365] netlink: 'syz.2.2187': attribute type 23 has an invalid length. [ 342.515267][ T6066] usb 4-1: config 0 descriptor?? [ 342.542104][ T6066] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 342.646615][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2188'. [ 342.850227][T10353] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.962106][ T6066] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 342.984819][ T6066] usb 4-1: USB disconnect, device number 66 [ 343.481629][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2192'. [ 344.396806][T10412] overlayfs: unescaped trailing colons in lowerdir mount option. [ 344.874739][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2211'. [ 344.977609][T10418] ip6gre1: entered allmulticast mode [ 345.099767][ T42] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 345.279397][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 345.287662][ T42] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 345.287698][ T42] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 345.287721][ T42] usb 2-1: config 135 has no interface number 0 [ 345.287758][ T42] usb 2-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 345.287803][ T42] usb 2-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 345.287836][ T42] usb 2-1: config 135 interface 230 has no altsetting 0 [ 345.356289][ T42] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 345.356326][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.356348][ T42] usb 2-1: Product: syz [ 345.356364][ T42] usb 2-1: Manufacturer: syz [ 345.356379][ T42] usb 2-1: SerialNumber: syz [ 345.620999][ T42] uvcvideo 2-1:135.230: Found UVC 0.00 device syz (18ec:3288) [ 345.621042][ T42] uvcvideo 2-1:135.230: No valid video chain found. [ 345.667348][ T42] usb 2-1: USB disconnect, device number 63 [ 345.773793][T10453] netlink: 'syz.2.2221': attribute type 7 has an invalid length. [ 346.069370][T10462] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2225'. [ 346.892997][T10486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2234'. [ 347.154279][T10501] capability: warning: `syz.4.2241' uses 32-bit capabilities (legacy support in use) [ 347.566952][T10515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2246'. [ 347.847136][T10526] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2250'. [ 347.847173][T10526] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 348.683081][T10553] openvswitch: netlink: Flow actions attr not present in new flow. [ 348.705897][T10556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2263'. [ 349.938474][ T42] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 350.089004][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 350.089933][ T42] usb 1-1: too many configurations: 112, using maximum allowed: 8 [ 350.143145][ T42] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 350.143182][ T42] usb 1-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 350.143207][ T42] usb 1-1: Product: syz [ 350.143222][ T42] usb 1-1: Manufacturer: syz [ 350.202173][ T42] r8152-cfgselector 1-1: Unknown version 0x0000 [ 350.202206][ T42] r8152-cfgselector 1-1: config 0 descriptor?? [ 350.486388][ T42] rndis_host 1-1:0.0: rndis: master #0/ffff88802ad75000 slave #1/0000000000000000 [ 350.540504][ T42] r8152-cfgselector 1-1: USB disconnect, device number 66 [ 350.548528][T10626] netlink: 'syz.3.2292': attribute type 2 has an invalid length. [ 350.548550][T10626] netlink: 'syz.3.2292': attribute type 1 has an invalid length. [ 350.580808][T10626] netlink: 'syz.3.2292': attribute type 1 has an invalid length. [ 350.798132][T10636] netlink: 'syz.4.2295': attribute type 8 has an invalid length. [ 351.466456][T10651] team0: entered promiscuous mode [ 351.466484][T10651] team_slave_0: entered promiscuous mode [ 351.466779][T10651] team_slave_1: entered promiscuous mode [ 351.500319][T10651] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 351.985969][T10675] warning: `syz.2.2313' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 352.050281][T10682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2314'. [ 352.133820][T10686] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2317'. [ 352.134571][T10686] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 352.189267][T10687] netlink: 'syz.1.2319': attribute type 10 has an invalid length. [ 352.498822][T10687] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 352.501711][T10687] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 352.844048][T10707] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2326'. [ 352.844077][T10707] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2326'. [ 352.916412][T10708] bridge_slave_0: left allmulticast mode [ 352.916445][T10708] bridge_slave_0: left promiscuous mode [ 352.933574][T10708] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.100501][T10708] bridge_slave_1: left allmulticast mode [ 353.100536][T10708] bridge_slave_1: left promiscuous mode [ 353.100829][T10708] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.250456][T10720] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 353.350993][T10708] bond0: (slave bond_slave_0): Releasing backup interface [ 353.523767][T10708] bond0: (slave bond_slave_1): Releasing backup interface [ 353.608371][T10708] team_slave_0: left promiscuous mode [ 353.704449][T10708] team0: Port device team_slave_0 removed [ 353.716104][T10708] team_slave_1: left promiscuous mode [ 353.796803][T10708] team0: Port device team_slave_1 removed [ 353.797748][T10708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.804267][T10708] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.912341][T10708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.912365][T10708] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.956182][T10708] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 354.220037][T10747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2343'. [ 354.220074][T10747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2343'. [ 354.425265][T10753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.521623][T10760] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2353'. [ 354.811200][T10771] netlink: 292 bytes leftover after parsing attributes in process `syz.1.2357'. [ 355.066363][T10781] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2362'. [ 355.386450][T10793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2367'. [ 355.928371][ T860] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 356.087865][ T860] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 356.087904][ T860] usb 1-1: config 0 has no interface number 1 [ 356.087969][ T860] usb 1-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 356.088010][ T860] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 356.088035][ T860] usb 1-1: config 0 interface 199 has no altsetting 0 [ 356.136934][ T860] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 356.136970][ T860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 356.136994][ T860] usb 1-1: SerialNumber: syz [ 356.191088][ T860] usb 1-1: config 0 descriptor?? [ 356.195155][ T36] kauditd_printk_skb: 63 callbacks suppressed [ 356.195176][ T36] audit: type=1326 audit(2000000657.223:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10818 comm="syz.4.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 356.203738][ T36] audit: type=1326 audit(2000000657.223:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10818 comm="syz.4.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 356.210545][ T36] audit: type=1326 audit(2000000657.233:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10818 comm="syz.4.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 356.210596][ T36] audit: type=1326 audit(2000000657.243:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10818 comm="syz.4.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 356.210937][ T36] audit: type=1326 audit(2000000657.243:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10818 comm="syz.4.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 356.261356][ T36] audit: type=1326 audit(2000000657.293:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10818 comm="syz.4.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 356.262012][ T36] audit: type=1326 audit(2000000657.293:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10818 comm="syz.4.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4b7d65d04e code=0x7ffc0000 [ 356.264745][ T36] audit: type=1326 audit(2000000657.293:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10818 comm="syz.4.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4b7d65d04e code=0x7ffc0000 [ 356.267133][ T36] audit: type=1326 audit(2000000657.293:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10818 comm="syz.4.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4b7d65d04e code=0x7ffc0000 [ 356.271090][ T36] audit: type=1326 audit(2000000657.303:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10818 comm="syz.4.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4b7d65d04e code=0x7ffc0000 [ 356.477610][ T860] uvcvideo 1-1:0.199: Found UVC 0.00 device (0002:0000) [ 356.477652][ T860] uvcvideo 1-1:0.199: No valid video chain found. [ 356.696044][ T9] usb 1-1: USB disconnect, device number 67 [ 357.247284][T10854] netlink: 'syz.2.2397': attribute type 1 has an invalid length. [ 357.706490][T10871] netlink: 'syz.2.2405': attribute type 21 has an invalid length. [ 357.706601][T10871] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2405'. [ 357.731231][T10872] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 359.012881][T10919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.284361][T10932] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2432'. [ 359.941995][T10940] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 359.971900][T10953] netlink: 'syz.4.2444': attribute type 1 has an invalid length. [ 360.382318][T10962] bond1: option resend_igmp: invalid value (2878) [ 360.382350][T10962] bond1: option resend_igmp: allowed values 0 - 255 [ 360.436755][T10962] bond1 (unregistering): Released all slaves [ 360.675955][T10981] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2458'. [ 360.701960][T10984] random: crng reseeded on system resumption [ 360.714413][ T6186] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 360.911158][ T6186] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 360.911225][ T6186] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 360.911258][ T6186] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.911306][ T6186] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 360.911333][ T6186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.017381][ T6186] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 361.027630][ T6186] usb 3-1: invalid MIDI out EP 0 [ 361.045117][T10991] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2464'. [ 361.545976][T11006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2469'. [ 362.362648][T11026] binder: 11025:11026 ioctl 400c620e 200000000200 returned -22 [ 362.663042][ T6186] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 362.710472][ T6186] usb 3-1: USB disconnect, device number 58 [ 362.745920][T11038] Invalid option length (1048179) for dns_resolver key [ 363.459674][T11050] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 363.742279][T11064] bridge_slave_1: left allmulticast mode [ 363.742313][T11064] bridge_slave_1: left promiscuous mode [ 363.742606][T11064] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.906815][T11064] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 363.957030][T11072] netlink: 'syz.4.2500': attribute type 309 has an invalid length. [ 364.515181][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2507'. [ 364.897984][T11096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2513'. [ 366.058341][ T6066] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 366.213225][ T6066] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 366.213262][ T6066] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.250232][ T6066] usb 1-1: config 0 descriptor?? [ 366.329071][T11148] tmpfs: Bad value for 'mpol' [ 366.689827][ T6066] ath6kl: Failed to submit usb control message: -71 [ 366.689888][ T6066] ath6kl: unable to send the bmi data to the device: -71 [ 366.689906][ T6066] ath6kl: Unable to send get target info: -71 [ 366.690803][ T6066] ath6kl: Failed to init ath6kl core: -71 [ 366.740071][ T6066] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 366.835636][ T6066] usb 1-1: USB disconnect, device number 68 [ 366.939842][T11161] netlink: set zone limit has 4 unknown bytes [ 367.472002][T11179] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20002 [ 367.712643][T11189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2558'. [ 367.780764][ T36] kauditd_printk_skb: 286 callbacks suppressed [ 367.780787][ T36] audit: type=1326 audit(2000000668.813:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11191 comm="syz.1.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 367.780840][ T36] audit: type=1326 audit(2000000668.813:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11191 comm="syz.1.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 367.796506][ T36] audit: type=1326 audit(2000000668.833:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11191 comm="syz.1.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 367.796562][ T36] audit: type=1326 audit(2000000668.833:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11191 comm="syz.1.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 367.878391][ T42] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 368.071636][ T42] usb 4-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 368.071686][ T42] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 368.071731][ T42] usb 4-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 368.074143][ T42] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 368.074175][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 368.074199][ T42] usb 4-1: SerialNumber: syz [ 368.225176][T11204] netlink: 'syz.0.2565': attribute type 15 has an invalid length. [ 368.408626][ T42] rndis_host 4-1:253.0: probe with driver rndis_host failed with error -22 [ 368.458768][ T42] usb 4-1: USB disconnect, device number 67 [ 368.513521][T11213] binder: 11210:11213 ioctl c0285840 0 returned -22 [ 368.778419][ T6186] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 368.928555][ T6186] usb 2-1: Using ep0 maxpacket: 16 [ 368.932579][ T6186] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 368.932613][ T6186] usb 2-1: config 0 has no interface number 0 [ 368.932673][ T6186] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 368.932703][ T6186] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 368.936502][ T6186] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 368.936551][ T6186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.936573][ T6186] usb 2-1: Product: syz [ 368.936588][ T6186] usb 2-1: Manufacturer: syz [ 368.936604][ T6186] usb 2-1: SerialNumber: syz [ 369.035962][ T6186] usb 2-1: config 0 descriptor?? [ 369.037283][T11217] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 369.037421][T11217] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 369.275082][T11217] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 369.276003][T11217] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 369.485195][ T6186] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 369.485514][ T6186] asix 2-1:0.34: probe with driver asix failed with error -71 [ 369.535107][ T6186] usb 2-1: USB disconnect, device number 64 [ 369.572314][ T6428] udevd[6428]: setting mode of /dev/bus/usb/002/064 to 020664 failed: No such file or directory [ 369.583626][ T6428] udevd[6428]: setting owner of /dev/bus/usb/002/064 to uid=0, gid=0 failed: No such file or directory [ 369.683732][T11249] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.2588'. [ 370.167596][T11268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.476778][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2605'. [ 370.516108][T11284] cgroup: No subsys list or none specified [ 370.576369][T11285] ip6gre1: entered allmulticast mode [ 370.698595][ T6675] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 370.789928][T11293] netlink: 'syz.3.2609': attribute type 33 has an invalid length. [ 370.789956][T11293] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2609'. [ 370.789994][T11293] `: renamed from team0 (while UP) [ 370.863755][ T6675] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.867262][ T6675] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 370.867299][ T6675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.867323][ T6675] usb 1-1: Product: syz [ 370.867341][ T6675] usb 1-1: Manufacturer: syz [ 370.867358][ T6675] usb 1-1: SerialNumber: syz [ 371.148461][ T6675] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 371.148519][ T6675] cdc_ncm 1-1:1.0: bind() failure [ 371.258139][ T6675] usb 1-1: USB disconnect, device number 69 [ 371.589139][T11314] netlink: 'syz.4.2619': attribute type 1 has an invalid length. [ 371.740774][T11322] netlink: 'syz.3.2623': attribute type 1 has an invalid length. [ 371.740802][T11322] netlink: 924 bytes leftover after parsing attributes in process `syz.3.2623'. [ 372.543336][T11345] bond1: option resend_igmp: invalid value (2878) [ 372.543367][T11345] bond1: option resend_igmp: allowed values 0 - 255 [ 372.600256][T11345] bond1 (unregistering): Released all slaves [ 373.238508][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2650'. [ 373.238543][T11380] netlink: 'syz.3.2650': attribute type 1 has an invalid length. [ 373.458831][ T36] audit: type=1326 audit(2000000674.483:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11384 comm="syz.3.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664df4c819 code=0x7ffc0000 [ 373.471549][ T36] audit: type=1326 audit(2000000674.503:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11384 comm="syz.3.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664df4c819 code=0x7ffc0000 [ 373.471600][ T36] audit: type=1326 audit(2000000674.503:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11384 comm="syz.3.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664df4c819 code=0x7ffc0000 [ 373.478288][ T36] audit: type=1326 audit(2000000674.503:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11384 comm="syz.3.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f664df4c819 code=0x7ffc0000 [ 373.483426][ T36] audit: type=1326 audit(2000000674.503:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11384 comm="syz.3.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664df4c819 code=0x7ffc0000 [ 373.483476][ T36] audit: type=1326 audit(2000000674.513:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11384 comm="syz.3.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664df4c819 code=0x7ffc0000 [ 373.483519][ T36] audit: type=1326 audit(2000000674.513:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11384 comm="syz.3.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664df4c819 code=0x7ffc0000 [ 373.483568][ T36] audit: type=1326 audit(2000000674.513:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11384 comm="syz.3.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f664df4c819 code=0x7ffc0000 [ 373.483609][ T36] audit: type=1326 audit(2000000674.513:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11384 comm="syz.3.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f664df4c819 code=0x7ffc0000 [ 374.168898][T11398] bond1: option resend_igmp: invalid value (2878) [ 374.168931][T11398] bond1: option resend_igmp: allowed values 0 - 255 [ 374.340011][T11398] bond1 (unregistering): Released all slaves [ 374.561053][T11414] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 374.943865][T11430] TCP: TCP_TX_DELAY enabled [ 375.003650][T11425] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 375.003681][T11425] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 376.039764][T11464] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2690'. [ 376.306501][T11480] netlink: 340 bytes leftover after parsing attributes in process `syz.3.2697'. [ 376.438356][ T6186] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 376.522498][T11487] netlink: 'syz.1.2699': attribute type 2 has an invalid length. [ 376.522524][T11487] netlink: 'syz.1.2699': attribute type 1 has an invalid length. [ 376.588368][ T6186] usb 3-1: Using ep0 maxpacket: 32 [ 376.604716][ T6186] usb 3-1: unable to get BOS descriptor or descriptor too short [ 376.608110][ T6186] usb 3-1: config 232 has an invalid interface number: 202 but max is 0 [ 376.608143][ T6186] usb 3-1: config 232 has no interface number 0 [ 376.608387][ T6186] usb 3-1: config 232 interface 202 has no altsetting 0 [ 376.626288][ T6186] usb 3-1: New USB device found, idVendor=10c4, idProduct=8856, bcdDevice=e4.53 [ 376.626320][ T6186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.626341][ T6186] usb 3-1: Product: syz [ 376.626356][ T6186] usb 3-1: Manufacturer: syz [ 376.626371][ T6186] usb 3-1: SerialNumber: syz [ 376.920596][ T6186] cp210x 3-1:232.202: cp210x converter detected [ 376.922819][ T6186] cp210x 3-1:232.202: failed to get vendor val 0x370b size 1: -71 [ 376.922853][ T6186] cp210x 3-1:232.202: querying part number failed [ 376.933371][ T6186] usb 3-1: cp210x converter now attached to ttyUSB0 [ 376.947586][ T6186] usb 3-1: USB disconnect, device number 59 [ 377.010853][ T6186] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 377.013485][ T6186] cp210x 3-1:232.202: device disconnected [ 377.145333][ T36] audit: type=1326 audit(2000000678.173:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11502 comm="syz.3.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664df4c819 code=0x7ffc0000 [ 378.117081][T11530] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 378.654416][T11553] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2729'. [ 378.961200][ T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 379.113057][ T9] usb 3-1: config 4 has an invalid interface number: 197 but max is 0 [ 379.113092][ T9] usb 3-1: config 4 has no interface number 0 [ 379.136983][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=b832, bcdDevice=2d.ff [ 379.137007][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.137020][ T9] usb 3-1: Product: syz [ 379.137030][ T9] usb 3-1: Manufacturer: syz [ 379.137039][ T9] usb 3-1: SerialNumber: syz [ 379.206412][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.206488][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.374496][T11579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2741'. [ 379.820788][ T9] usb 3-1: USB disconnect, device number 60 [ 380.049358][ T6428] udevd[6428]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:4.197/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 381.330664][T11646] netlink: 'syz.3.2775': attribute type 21 has an invalid length. [ 381.617048][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 381.617069][ T36] audit: type=1326 audit(2000000682.643:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11656 comm="syz.1.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 381.627256][ T36] audit: type=1326 audit(2000000682.643:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11656 comm="syz.1.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 381.631857][ T36] audit: type=1326 audit(2000000682.663:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11656 comm="syz.1.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 381.640188][ T36] audit: type=1326 audit(2000000682.663:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11656 comm="syz.1.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 381.640241][ T36] audit: type=1326 audit(2000000682.673:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11656 comm="syz.1.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 382.256758][T11679] netlink: 'syz.2.2791': attribute type 1 has an invalid length. [ 382.256786][T11679] netlink: 'syz.2.2791': attribute type 2 has an invalid length. [ 383.308324][ T10] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 383.428642][ T7164] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 383.462263][ T10] usb 5-1: config 0 has an invalid interface number: 96 but max is 0 [ 383.462296][ T10] usb 5-1: config 0 has no interface number 0 [ 383.462346][ T10] usb 5-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 383.462378][ T10] usb 5-1: config 0 interface 96 altsetting 3 endpoint 0x88 has invalid wMaxPacketSize 0 [ 383.462403][ T10] usb 5-1: config 0 interface 96 has no altsetting 0 [ 383.471370][ T10] usb 5-1: New USB device found, idVendor=0b57, idProduct=058d, bcdDevice=33.74 [ 383.471404][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.471425][ T10] usb 5-1: Product: syz [ 383.471449][ T10] usb 5-1: Manufacturer: syz [ 383.471464][ T10] usb 5-1: SerialNumber: syz [ 383.516483][ T10] usb 5-1: config 0 descriptor?? [ 383.608310][ T7164] usb 2-1: Using ep0 maxpacket: 8 [ 383.610892][ T7164] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.626264][ T7164] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 383.626302][ T7164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.626327][ T7164] usb 2-1: Product: syz [ 383.626345][ T7164] usb 2-1: Manufacturer: syz [ 383.626363][ T7164] usb 2-1: SerialNumber: syz [ 383.701472][ T7164] usb 2-1: config 0 descriptor?? [ 383.730279][ T7164] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 383.730387][ T7164] usb 2-1: selecting invalid altsetting 1 [ 383.821413][ T10] usb 5-1: USB disconnect, device number 64 [ 383.962975][ T7164] gspca_stk014: reg_r err -71 [ 383.963083][ T7164] stk014 2-1:0.0: probe with driver stk014 failed with error -71 [ 383.992382][ T7164] usb 2-1: USB disconnect, device number 65 [ 385.017452][T11760] bond1 (unregistering): Released all slaves [ 386.684375][T11840] netlink: 'syz.0.2869': attribute type 4 has an invalid length. [ 386.684404][T11840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2869'. [ 386.684434][T11840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2869'. [ 387.498335][T11869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2882'. [ 387.734537][T11878] netlink: 'syz.2.2887': attribute type 1 has an invalid length. [ 388.060733][T11895] overlay: Unknown parameter '\' [ 388.063790][T11891] netlink: 736 bytes leftover after parsing attributes in process `syz.1.2893'. [ 388.099169][ T7164] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 388.256637][ T7164] usb 3-1: unable to get BOS descriptor or descriptor too short [ 388.276884][ T7164] usb 3-1: config 255 has an invalid interface number: 100 but max is 1 [ 388.276920][ T7164] usb 3-1: config 255 has an invalid interface number: 100 but max is 1 [ 388.277009][ T7164] usb 3-1: config 255 has 1 interface, different from the descriptor's value: 2 [ 388.277035][ T7164] usb 3-1: config 255 has no interface number 0 [ 388.277088][ T7164] usb 3-1: config 255 interface 100 altsetting 25 endpoint 0x9 has invalid maxpacket 16, setting to 8 [ 388.277120][ T7164] usb 3-1: config 255 interface 100 altsetting 25 has an endpoint descriptor with address 0xBF, changing to 0x8F [ 388.277150][ T7164] usb 3-1: config 255 interface 100 altsetting 25 endpoint 0x8F has an invalid bInterval 85, changing to 4 [ 388.277181][ T7164] usb 3-1: config 255 interface 100 altsetting 25 endpoint 0x8F has invalid maxpacket 62675, setting to 0 [ 388.277213][ T7164] usb 3-1: config 255 interface 100 altsetting 25 endpoint 0xF has invalid maxpacket 43660, setting to 8 [ 388.277243][ T7164] usb 3-1: config 255 interface 100 altsetting 25 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.277291][ T7164] usb 3-1: config 255 interface 100 has no altsetting 0 [ 388.277314][ T7164] usb 3-1: config 255 interface 100 has no altsetting 1 [ 388.393656][T11904] kAFS: unable to lookup cell '' [ 388.411079][ T7164] usb 3-1: string descriptor 0 read error: -22 [ 388.411243][ T7164] usb 3-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=7b.81 [ 388.411272][ T7164] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.458505][T11888] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 388.599102][T11910] QAT: Stopping all acceleration devices. [ 388.744050][T11917] netlink: 'syz.0.2903': attribute type 1 has an invalid length. [ 388.745866][ T7164] usb 3-1: USB disconnect, device number 61 [ 388.845978][T11920] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 389.199112][T11936] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 389.910404][T11960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2926'. [ 389.910457][T11960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2926'. [ 389.990541][T11963] CIFS: bad ip= option (%‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 390.468775][T11981] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2935'. [ 390.492293][T11985] netlink: 'syz.1.2938': attribute type 10 has an invalid length. [ 390.501811][T11985] bond0: (slave wlan1): Opening slave failed [ 390.588334][ T6186] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 390.738291][ T6186] usb 4-1: Using ep0 maxpacket: 32 [ 390.740945][ T6186] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 390.740978][ T6186] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 390.741003][ T6186] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 390.741027][ T6186] usb 4-1: config 1 has no interface number 0 [ 390.741078][ T6186] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 390.741108][ T6186] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 390.741134][ T6186] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 390.741181][ T6186] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 390.741207][ T6186] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.866662][ T6186] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 391.058456][ T6675] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 391.121682][ T6186] snd_usb_pod 4-1:1.1: cannot start listening: -90 [ 391.122029][ T6186] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 391.125040][ T6186] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 391.214536][ T6675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 391.222810][ T6675] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 391.222843][ T6675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.222870][ T6675] usb 1-1: Product: syz [ 391.222885][ T6675] usb 1-1: Manufacturer: syz [ 391.222901][ T6675] usb 1-1: SerialNumber: syz [ 391.264551][ T6675] usb 1-1: config 0 descriptor?? [ 391.276880][ T6675] hub 1-1:0.0: bad descriptor, ignoring hub [ 391.276926][ T6675] hub 1-1:0.0: probe with driver hub failed with error -5 [ 391.366813][ T6675] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input22 [ 391.437441][ T10] usb 4-1: USB disconnect, device number 68 [ 391.505691][T12018] netlink: 2116 bytes leftover after parsing attributes in process `syz.4.2954'. [ 391.950434][ T36] audit: type=1326 audit(2000000692.973:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12028 comm="syz.1.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 391.950493][ T36] audit: type=1326 audit(2000000692.983:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12028 comm="syz.1.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 391.994389][ T36] audit: type=1326 audit(2000000693.023:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12028 comm="syz.1.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 391.994445][ T36] audit: type=1326 audit(2000000693.023:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12028 comm="syz.1.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 392.040727][ T36] audit: type=1326 audit(2000000693.073:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12028 comm="syz.1.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 392.040787][ T36] audit: type=1326 audit(2000000693.073:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12028 comm="syz.1.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 392.040829][ T36] audit: type=1326 audit(2000000693.073:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12028 comm="syz.1.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 392.040872][ T36] audit: type=1326 audit(2000000693.073:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12028 comm="syz.1.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 392.040912][ T36] audit: type=1326 audit(2000000693.073:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12028 comm="syz.1.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 392.471115][ T36] audit: type=1800 audit(2000000693.463:418): pid=12022 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.4.2957" name="/" dev="sockfs" ino=27847 res=0 errno=0 [ 392.923748][ T9] usb 1-1: USB disconnect, device number 70 [ 392.987275][T12053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.137479][T12059] 8021q: VLANs not supported on ipvlan0 [ 393.277765][T12061] netlink: 'syz.3.2974': attribute type 1 has an invalid length. [ 393.393276][T12067] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 393.393328][T12067] CIFS mount error: No usable UNC path provided in device string! [ 393.393328][T12067] [ 393.393540][T12067] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 393.497010][T12071] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2979'. [ 394.319393][T12100] 9p: Could not find request transport: fd0x0000000000000003!ÿñ«rƒ†ép[QrUÚJ)¦´¹/›Ï¢ ÌËE»B [ 394.587446][T12109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2995'. [ 394.687072][T12112] netlink: 'syz.3.3000': attribute type 9 has an invalid length. [ 396.613378][T12173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3029'. [ 396.666558][T12172] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3027'. [ 398.260921][T12242] netlink: zone id is out of range [ 398.260939][T12242] netlink: zone id is out of range [ 398.260949][T12242] netlink: zone id is out of range [ 398.260959][T12242] netlink: zone id is out of range [ 398.260969][T12242] netlink: zone id is out of range [ 398.260978][T12242] netlink: zone id is out of range [ 398.260987][T12242] netlink: zone id is out of range [ 398.260997][T12242] netlink: zone id is out of range [ 398.261007][T12242] netlink: zone id is out of range [ 398.261017][T12242] netlink: zone id is out of range [ 398.424115][T12248] netlink: 'syz.4.3066': attribute type 3 has an invalid length. [ 399.058417][ T9] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 399.211708][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.211741][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 399.220027][ T9] usb 5-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 399.220063][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.220088][ T9] usb 5-1: Product: syz [ 399.220105][ T9] usb 5-1: Manufacturer: syz [ 399.220122][ T9] usb 5-1: SerialNumber: syz [ 399.333666][T12276] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 399.505542][ T9] usb 5-1: 0:1 : does not exist [ 399.505659][ T9] usb 5-1: unit 0 not found! [ 399.745471][ T9] usb 5-1: USB disconnect, device number 65 [ 399.871030][T12277] m1Ie5nè‹Ò: entered promiscuous mode [ 400.081160][ T6428] udevd[6428]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 401.051359][T12304] bond3 (unregistering): Released all slaves [ 401.264933][T12323] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3102'. [ 401.856808][T12338] veth3: entered promiscuous mode [ 401.856841][T12338] veth3: entered allmulticast mode [ 402.220394][T12345] m1Ie5nè‹Ò: entered promiscuous mode [ 402.679297][T12364] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 402.679357][T12364] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 402.679371][T12364] overlayfs: missing 'lowerdir' [ 402.780024][T12368] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3124'. [ 402.829578][T12372] netlink: 'syz.3.3127': attribute type 8 has an invalid length. [ 403.674541][T12399] bond1 (unregistering): Released all slaves [ 403.674922][T12409] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3142'. [ 404.513672][T12440] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3159'. [ 405.006842][ T36] audit: type=1326 audit(2000000706.033:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12455 comm="syz.1.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 405.007002][ T36] audit: type=1326 audit(2000000706.033:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12455 comm="syz.1.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 405.047504][ T36] audit: type=1326 audit(2000000706.073:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12455 comm="syz.1.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 405.047558][ T36] audit: type=1326 audit(2000000706.073:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12455 comm="syz.1.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 405.047600][ T36] audit: type=1326 audit(2000000706.073:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12455 comm="syz.1.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 405.047641][ T36] audit: type=1326 audit(2000000706.073:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12455 comm="syz.1.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 405.052071][ T36] audit: type=1326 audit(2000000706.073:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12455 comm="syz.1.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 405.052122][ T36] audit: type=1326 audit(2000000706.083:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12455 comm="syz.1.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 405.052524][T12460] netlink: 'syz.2.3167': attribute type 10 has an invalid length. [ 405.052543][T12460] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3167'. [ 405.052599][T12460] team0: entered promiscuous mode [ 405.052615][T12460] team_slave_0: entered promiscuous mode [ 405.052835][T12460] team_slave_1: entered promiscuous mode [ 405.053115][T12460] team0: entered allmulticast mode [ 405.053131][T12460] team_slave_0: entered allmulticast mode [ 405.053148][T12460] team_slave_1: entered allmulticast mode [ 405.053974][ T36] audit: type=1326 audit(2000000706.083:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12455 comm="syz.1.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 405.071753][T12460] bridge0: port 3(team0) entered blocking state [ 405.071982][T12460] bridge0: port 3(team0) entered disabled state [ 405.170406][T12460] bridge0: port 3(team0) entered blocking state [ 405.173265][T12460] bridge0: port 3(team0) entered forwarding state [ 405.809529][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3179'. [ 405.857474][T12484] netlink: 'syz.3.3180': attribute type 2 has an invalid length. [ 405.967374][T12490] syz.2.3184 (12490): drop_caches: 0 [ 406.063911][T12493] usb usb8: usbfs: process 12493 (syz.3.3185) did not claim interface 0 before use [ 406.095905][T12494] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3183'. [ 406.163034][T12497] ./bus: Can't lookup blockdev [ 406.464610][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3193'. [ 406.591065][T12518] tmpfs: Bad value for 'mpol' [ 406.914922][T12527] net_ratelimit: 8 callbacks suppressed [ 406.914946][T12527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.447814][T12543] netlink: 'syz.2.3208': attribute type 1 has an invalid length. [ 407.447841][T12543] netlink: 2108 bytes leftover after parsing attributes in process `syz.2.3208'. [ 408.079560][T12569] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 408.275513][T12577] tmpfs: Bad value for 'mpol' [ 409.751041][T12621] bond1 (unregistering): Released all slaves [ 410.370474][T12655] netlink: 'syz.4.3262': attribute type 2 has an invalid length. [ 410.519618][ T36] audit: type=1326 audit(2000000711.553:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12660 comm="syz.1.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 410.519678][ T36] audit: type=1326 audit(2000000711.553:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12660 comm="syz.1.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 410.526943][ T36] audit: type=1326 audit(2000000711.553:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12660 comm="syz.1.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 410.592146][ T36] audit: type=1326 audit(2000000711.553:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12660 comm="syz.1.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 410.798050][ T36] audit: type=1326 audit(2000000711.823:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12666 comm="syz.2.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aec27c819 code=0x7ffc0000 [ 410.804007][T12655] hmac(sha2!: entered promiscuous mode [ 410.828552][ T36] audit: type=1326 audit(2000000711.863:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12666 comm="syz.2.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aec27c819 code=0x7ffc0000 [ 410.835743][ T36] audit: type=1326 audit(2000000711.863:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12666 comm="syz.2.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aec27c819 code=0x7ffc0000 [ 410.836253][ T36] audit: type=1326 audit(2000000711.863:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12666 comm="syz.2.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f0aec27c819 code=0x7ffc0000 [ 410.836305][ T36] audit: type=1326 audit(2000000711.863:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12666 comm="syz.2.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aec27c819 code=0x7ffc0000 [ 410.836701][ T36] audit: type=1326 audit(2000000711.873:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12666 comm="syz.2.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aec27c819 code=0x7ffc0000 [ 410.942657][T12673] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3269'. [ 412.218052][T12719] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3293'. [ 412.218083][T12719] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3293'. [ 412.448613][ T6675] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 412.610557][ T6675] usb 5-1: Using ep0 maxpacket: 8 [ 412.614716][ T6675] usb 5-1: unable to get BOS descriptor or descriptor too short [ 412.617668][ T6675] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.635145][ T6675] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 412.635178][ T6675] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 412.635199][ T6675] usb 5-1: Product: syz [ 412.635214][ T6675] usb 5-1: Manufacturer: syz [ 412.635229][ T6675] usb 5-1: SerialNumber: syz [ 412.670447][ T6675] usb 5-1: config 0 descriptor?? [ 412.692524][T12733] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3301'. [ 412.692942][T12733] Unknown options in mask b7f2 [ 412.975964][ T6675] usb 5-1: USB disconnect, device number 66 [ 413.588503][ T7164] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 413.738464][ T7164] usb 2-1: Using ep0 maxpacket: 32 [ 413.743763][ T7164] usb 2-1: config 0 has an invalid interface number: 202 but max is 1 [ 413.743799][ T7164] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.743820][ T7164] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 413.743841][ T7164] usb 2-1: config 0 has no interface number 0 [ 413.743873][ T7164] usb 2-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30 [ 413.743917][ T7164] usb 2-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 413.743947][ T7164] usb 2-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182 [ 413.743977][ T7164] usb 2-1: config 0 interface 202 has no altsetting 0 [ 413.844977][ T7164] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 413.845013][ T7164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.845038][ T7164] usb 2-1: Product: syz [ 413.845054][ T7164] usb 2-1: Manufacturer: syz [ 413.845072][ T7164] usb 2-1: SerialNumber: syz [ 413.890589][ T7164] usb 2-1: config 0 descriptor?? [ 413.943551][ T7164] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 414.084865][T12766] netlink: 4975 bytes leftover after parsing attributes in process `syz.2.3315'. [ 414.084913][T12766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.138040][ T90] usb 2-1: Failed to submit usb control message: -71 [ 414.138085][ T90] usb 2-1: unable to send the bmi data to the device: -71 [ 414.138115][ T90] usb 2-1: unable to get target info from device [ 414.138134][ T90] usb 2-1: could not get target info (-71) [ 414.167605][ T7164] usb 2-1: USB disconnect, device number 66 [ 414.194468][ T90] usb 2-1: could not probe fw (-71) [ 414.210798][T12765] ip6erspan1: entered allmulticast mode [ 414.536358][T12776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3322'. [ 415.665370][T12823] tmpfs: Bad value for 'mpol' [ 415.808324][ T10] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 415.978607][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 415.978643][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.978665][ T10] usb 3-1: Product: syz [ 415.978681][ T10] usb 3-1: Manufacturer: syz [ 415.978697][ T10] usb 3-1: SerialNumber: syz [ 416.053315][T12837] ./file0: Can't lookup blockdev [ 416.055702][ T10] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 416.109591][T12839] comedi comedi0: Minor 5 could not be opened [ 416.270701][T12841] tmpfs: Bad value for 'mpol' [ 416.822485][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 417.457824][T12874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3369'. [ 417.570277][T12874] ip6tnl2: entered allmulticast mode [ 418.193365][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 418.193805][ T9] ath9k_htc: Failed to initialize the device [ 418.194263][ T6675] usb 3-1: USB disconnect, device number 62 [ 418.257658][ T6675] usb 3-1: ath9k_htc: USB layer deinitialized [ 418.274486][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 418.743285][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 418.743308][ T36] audit: type=1326 audit(2000000719.763:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12896 comm="syz.1.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 418.744870][ T36] audit: type=1326 audit(2000000719.773:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12896 comm="syz.1.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 418.811075][ T36] audit: type=1326 audit(2000000719.833:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12896 comm="syz.1.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 419.330724][T12889] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 419.667071][T12921] sctp: [Deprecated]: syz.0.3390 (pid 12921) Use of int in maxseg socket option. [ 419.667071][T12921] Use struct sctp_assoc_value instead [ 420.773911][ T36] audit: type=1326 audit(2000000721.803:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12946 comm="syz.4.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 420.775226][ T36] audit: type=1326 audit(2000000721.803:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12946 comm="syz.4.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 420.777362][ T36] audit: type=1326 audit(2000000721.803:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12946 comm="syz.4.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 420.777910][ T36] audit: type=1326 audit(2000000721.803:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12946 comm="syz.4.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 420.781642][ T36] audit: type=1326 audit(2000000721.803:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12946 comm="syz.4.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 420.781688][ T36] audit: type=1326 audit(2000000721.813:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12946 comm="syz.4.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 420.782050][ T36] audit: type=1326 audit(2000000721.813:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12946 comm="syz.4.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 421.307444][T12966] netlink: 'syz.1.3412': attribute type 15 has an invalid length. [ 421.424943][T12965] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 423.037873][T13018] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3438'. [ 423.223152][T13023] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 423.869107][ T10] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 424.008405][ T7164] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 424.021079][ T10] usb 4-1: config index 0 descriptor too short (expected 65230, got 72) [ 424.036103][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 424.036139][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.036163][ T10] usb 4-1: Product: syz [ 424.036180][ T10] usb 4-1: Manufacturer: syz [ 424.036198][ T10] usb 4-1: SerialNumber: syz [ 424.081243][ T10] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 424.165673][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 424.180519][ T7164] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.180579][ T7164] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 424.180611][ T7164] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 424.180641][ T7164] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 424.180668][ T7164] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 424.247616][ T7164] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 424.247773][ T7164] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 424.247800][ T7164] usb 1-1: Product: syz [ 424.247825][ T7164] usb 1-1: Manufacturer: syz [ 424.247847][ T7164] usb 1-1: SerialNumber: syz [ 424.294058][ T7164] usb 1-1: config 0 descriptor?? [ 424.515392][ T7164] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 424.515423][ T7164] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 424.640302][T13059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.687599][ T42] usb 4-1: USB disconnect, device number 69 [ 424.723007][ T7164] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 424.723038][ T7164] radio-si470x 1-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 424.723373][ T7164] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 424.786120][ T7164] usb 1-1: USB disconnect, device number 71 [ 425.001915][T13068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3462'. [ 425.749360][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 425.764681][ T9] ath9k_htc: Failed to initialize the device [ 425.835988][ T42] usb 4-1: ath9k_htc: USB layer deinitialized [ 426.046825][T13104] : renamed from team_slave_1 [ 427.258283][ T7164] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 427.329785][T13152] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3505'. [ 427.411268][ T7164] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.411302][ T7164] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 427.414552][ T7164] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 427.415324][ T7164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 427.415354][ T7164] usb 4-1: SerialNumber: syz [ 427.766690][ T7164] usb 4-1: 0:2 : does not exist [ 427.978909][T13168] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 427.982864][ T7164] usb 4-1: USB disconnect, device number 70 [ 428.267995][ T6428] udevd[6428]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 428.503455][T13185] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3521'. [ 431.578796][T13292] openvswitch: netlink: Missing valid actions attribute. [ 431.578834][T13292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.625135][T13295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3574'. [ 431.625168][T13295] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 431.912988][T13307] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3577'. [ 431.913055][T13307] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3577'. [ 432.093520][T13304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 432.442655][T13324] openvswitch: netlink: Duplicate key (type 21). [ 433.279963][T13352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3602'. [ 433.279992][T13352] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 433.280010][T13352] openvswitch: netlink: Message has 16 unknown bytes. [ 433.295571][T13351] xfrm0: entered promiscuous mode [ 433.295600][T13351] xfrm0: entered allmulticast mode [ 433.757169][T13366] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3606'. [ 433.767131][T13367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3609'. [ 433.821598][T13358] nvme_fabrics: missing parameter 'transport=%s' [ 433.821619][T13358] nvme_fabrics: missing parameter 'nqn=%s' [ 433.920653][T13370] netlink: 'syz.0.3611': attribute type 2 has an invalid length. [ 434.230393][T13381] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3612'. [ 434.570856][T13391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3622'. [ 434.672281][T13397] tmpfs: Bad value for 'mpol' [ 434.898326][ T9] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 435.099829][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 435.114246][ T9] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 435.114280][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.114303][ T9] usb 2-1: config 0 has no interface number 0 [ 435.114351][ T9] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 435.114384][ T9] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 435.114411][ T9] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 435.114438][ T9] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 435.114468][ T9] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 435.114498][ T9] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 435.114525][ T9] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 435.114554][ T9] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 435.114579][ T9] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 435.178056][ T9] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 435.178089][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.178110][ T9] usb 2-1: Product: syz [ 435.178125][ T9] usb 2-1: Manufacturer: syz [ 435.178145][ T9] usb 2-1: SerialNumber: syz [ 435.278917][ T9] usb 2-1: config 0 descriptor?? [ 435.282444][T13394] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 435.315203][ T9] microtek usb (rev 0.4.3): will this work? Command EP is not usually 12 [ 435.315227][ T9] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 435.315240][ T9] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 435.366939][ T9] scsi host1: microtekX6 [ 435.444425][ T12] microtek usb (rev 0.4.3): error -90 submitting URB [ 435.520828][ T11] microtek usb (rev 0.4.3): error -90 submitting URB [ 435.558337][T13419] microtek usb (rev 0.4.3): error -90 submitting URB [ 435.598573][T13419] microtek usb (rev 0.4.3): error -90 submitting URB [ 435.764689][ T6186] usb 2-1: USB disconnect, device number 67 [ 435.785931][T13423] netlink: 'syz.4.3634': attribute type 10 has an invalid length. [ 435.785960][T13423] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3634'. [ 435.786020][T13423] bond0: entered promiscuous mode [ 435.786040][T13423] bond_slave_0: entered promiscuous mode [ 435.786302][T13423] bond_slave_1: entered promiscuous mode [ 435.786862][T13423] bridge0: port 3(bond0) entered blocking state [ 435.787016][T13423] bridge0: port 3(bond0) entered disabled state [ 435.808573][T13423] bond0: entered allmulticast mode [ 435.808598][T13423] bond_slave_0: entered allmulticast mode [ 435.808620][T13423] bond_slave_1: entered allmulticast mode [ 436.057823][T13423] bridge0: port 3(bond0) entered blocking state [ 436.057976][T13423] bridge0: port 3(bond0) entered forwarding state [ 436.298397][T13433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 436.420603][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 436.420625][ T36] audit: type=1326 audit(2000000737.453:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13436 comm="syz.4.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 436.420680][ T36] audit: type=1326 audit(2000000737.453:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13436 comm="syz.4.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 436.422175][ T36] audit: type=1326 audit(2000000737.453:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13436 comm="syz.4.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 436.422814][ T36] audit: type=1326 audit(2000000737.453:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13436 comm="syz.4.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 436.422867][ T36] audit: type=1326 audit(2000000737.453:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13436 comm="syz.4.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 436.423588][ T36] audit: type=1326 audit(2000000737.453:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13436 comm="syz.4.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 436.425739][ T36] audit: type=1326 audit(2000000737.453:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13436 comm="syz.4.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 436.425786][ T36] audit: type=1326 audit(2000000737.453:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13436 comm="syz.4.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 436.426142][ T36] audit: type=1326 audit(2000000737.453:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13436 comm="syz.4.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 437.556405][ T7164] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 437.762689][ T7164] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 437.762725][ T7164] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 437.765829][ T7164] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 437.765865][ T7164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.765889][ T7164] usb 5-1: Product: syz [ 437.765930][ T7164] usb 5-1: Manufacturer: syz [ 437.765947][ T7164] usb 5-1: SerialNumber: syz [ 437.843036][ T7164] usb 5-1: config 0 descriptor?? [ 437.868094][ T7164] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 437.883919][T13470] syz.1.3657: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 437.891733][T13470] CPU: 1 UID: 0 PID: 13470 Comm: syz.1.3657 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 437.891768][T13470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 437.891785][T13470] Call Trace: [ 437.891796][T13470] [ 437.891807][T13470] dump_stack_lvl+0xe8/0x150 [ 437.891858][T13470] warn_alloc+0x263/0x3e0 [ 437.891906][T13470] ? __pfx_warn_alloc+0x10/0x10 [ 437.891927][T13470] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 437.891970][T13470] ? kasan_save_track+0x4f/0x80 [ 437.892002][T13470] ? kasan_save_track+0x3e/0x80 [ 437.892030][T13470] ? __kasan_kmalloc+0x93/0xb0 [ 437.892062][T13470] ? xskq_create+0x56/0x170 [ 437.892087][T13470] ? xsk_init_queue+0x8a/0xe0 [ 437.892110][T13470] ? xsk_setsockopt+0x54c/0x990 [ 437.892131][T13470] ? do_sock_setsockopt+0x17c/0x1b0 [ 437.892159][T13470] __vmalloc_node_range_noprof+0x132/0x1750 [ 437.892232][T13470] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 437.892277][T13470] ? __kasan_kmalloc+0x93/0xb0 [ 437.892313][T13470] vmalloc_user_noprof+0xad/0xe0 [ 437.892345][T13470] ? xskq_create+0xbf/0x170 [ 437.892370][T13470] xskq_create+0xbf/0x170 [ 437.892397][T13470] xsk_init_queue+0x8a/0xe0 [ 437.892423][T13470] xsk_setsockopt+0x54c/0x990 [ 437.892449][T13470] ? __pfx_xsk_setsockopt+0x10/0x10 [ 437.892483][T13470] ? __fget_files+0x2a/0x420 [ 437.892512][T13470] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 437.892545][T13470] ? __pfx_xsk_setsockopt+0x10/0x10 [ 437.892570][T13470] do_sock_setsockopt+0x17c/0x1b0 [ 437.892599][T13470] __x64_sys_setsockopt+0x143/0x1b0 [ 437.892625][T13470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.892650][T13470] do_syscall_64+0x15f/0xf80 [ 437.892677][T13470] ? trace_irq_disable+0x3b/0x140 [ 437.892700][T13470] ? clear_bhb_loop+0x40/0x90 [ 437.892728][T13470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.892751][T13470] RIP: 0033:0x7f860a25c819 [ 437.892772][T13470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.892792][T13470] RSP: 002b:00007f86084b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 437.892817][T13470] RAX: ffffffffffffffda RBX: 00007f860a4d5fa0 RCX: 00007f860a25c819 [ 437.892834][T13470] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 437.892848][T13470] RBP: 00007f860a2f2c91 R08: 0000000000000004 R09: 0000000000000000 [ 437.892863][T13470] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.892891][T13470] R13: 00007f860a4d6038 R14: 00007f860a4d5fa0 R15: 00007ffc44d07108 [ 437.892927][T13470] [ 437.993926][T13470] Mem-Info: [ 437.993943][T13470] active_anon:262 inactive_anon:25365 isolated_anon:0 [ 437.993943][T13470] active_file:9856 inactive_file:43893 isolated_file:0 [ 437.993943][T13470] unevictable:768 dirty:395 writeback:0 [ 437.993943][T13470] slab_reclaimable:11836 slab_unreclaimable:105295 [ 437.993943][T13470] mapped:40090 shmem:19825 pagetables:1517 [ 437.993943][T13470] sec_pagetables:0 bounce:0 [ 437.993943][T13470] kernel_misc_reclaimable:0 [ 437.993943][T13470] free:1293980 free_pcp:2759 free_cma:0 [ 437.994010][T13470] Node 0 active_anon:1048kB inactive_anon:101460kB active_file:39228kB inactive_file:175572kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:160360kB dirty:1580kB writeback:0kB shmem:77764kB kernel_stack:13264kB pagetables:5948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 437.994065][T13470] Node 1 active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 437.994115][T13470] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 437.994296][T13470] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 437.994341][T13470] Node 0 DMA32 free:1229408kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1048kB inactive_anon:101460kB active_file:39228kB inactive_file:175572kB unevictable:1536kB writepending:1580kB zspages:0kB present:3129332kB managed:2565000kB mlocked:0kB bounce:0kB free_pcp:11036kB local_pcp:4196kB free_cma:0kB [ 437.994408][T13470] lowmem_reserve[]: 0 0 0 0 0 [ 437.994510][T13470] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:136kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 437.994570][T13470] lowmem_reserve[]: 0 0 0 0 0 [ 437.994604][T13470] Node 1 Normal free:3931152kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 437.994672][T13470] lowmem_reserve[]: 0 0 0 0 0 [ 437.994707][T13470] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 438.052701][T13470] Node 0 DMA32: 1359*4kB (UM) 1570*8kB (UME) 1036*16kB (UME) 267*32kB (U) 337*64kB (U) 271*128kB (UME) 175*256kB (UM) 158*512kB (U) 80*1024kB (U) 30*2048kB (U) 210*4096kB (UM) = 1228588kB [ 438.052881][T13470] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 438.052990][T13470] Node 1 Normal: 2*4kB (U) 3*8kB (UM) 3*16kB (UM) 6*32kB (UM) 8*64kB (UM) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 3*2048kB (UM) 957*4096kB (M) = 3931152kB [ 438.053166][T13470] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 438.053185][T13470] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 438.053203][T13470] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 438.053221][T13470] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 438.053240][T13470] 73722 total pagecache pages [ 438.053251][T13470] 0 pages in swap cache [ 438.053259][T13470] Free swap = 124996kB [ 438.053269][T13470] Total swap = 124996kB [ 438.053278][T13470] 2097051 pages RAM [ 438.053287][T13470] 0 pages HighMem/MovableOnly [ 438.053296][T13470] 424152 pages reserved [ 438.053305][T13470] 0 pages cma reserved [ 438.289051][ T7164] gspca_sunplus: reg_r err -71 [ 438.289159][ T7164] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 438.647011][ T7164] usb 5-1: USB disconnect, device number 67 [ 438.872260][T13487] cgroup: noprefix used incorrectly [ 439.305346][T13496] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 439.306124][T13496] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 439.391653][T13502] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 439.876070][T13516] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3679'. [ 439.904688][T13518] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3678'. [ 440.338415][ T6124] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 440.368330][ T7164] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 440.459474][T13535] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3686'. [ 440.459511][T13535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3686'. [ 440.493107][ T6124] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.493141][ T6124] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 440.493183][ T6124] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 440.493209][ T6124] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 440.496851][ T6124] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 440.496893][ T6124] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 440.496917][ T6124] usb 3-1: SerialNumber: syz [ 440.553467][ T7164] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 440.553505][ T7164] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.596683][ T7164] usb 1-1: config 0 descriptor?? [ 440.610956][ T7164] cp210x 1-1:0.0: cp210x converter detected [ 440.660728][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.662687][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.823030][ T6124] usb 3-1: 0:2 : does not exist [ 440.823137][ T6124] usb 3-1: unit 5 not found! [ 440.914857][ T7164] usb 1-1: cp210x converter now attached to ttyUSB0 [ 441.060625][ T7164] usb 1-1: USB disconnect, device number 72 [ 441.121128][ T7164] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 441.148960][ T7164] cp210x 1-1:0.0: device disconnected [ 441.226925][ T6124] usb 3-1: USB disconnect, device number 63 [ 441.530367][T13549] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3693'. [ 441.667207][ T6428] udevd[6428]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 442.168684][T13561] team0: entered allmulticast mode [ 442.168710][T13561] team_slave_0: entered allmulticast mode [ 442.168733][T13561] team_slave_1: entered allmulticast mode [ 442.168754][T13561] virt_wifi0: entered allmulticast mode [ 442.666460][T13581] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3708'. [ 442.666500][T13581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3708'. [ 442.963688][T13583] vxfs: unable to read disk superblock at 1 [ 442.989820][T13583] vxfs: unable to read disk superblock at 8 [ 442.989847][T13583] vxfs: can't find superblock. [ 443.096058][T13591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3713'. [ 443.367681][T13598] delete_channel: no stack [ 443.498713][T13602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3718'. [ 444.857651][T13633] netlink: 'syz.2.3731': attribute type 10 has an invalid length. [ 444.857681][T13633] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3731'. [ 444.892648][T13633] bond0: entered promiscuous mode [ 444.892677][T13633] bond_slave_0: entered promiscuous mode [ 444.892917][T13633] bond_slave_1: entered promiscuous mode [ 444.893453][T13633] bridge0: port 4(bond0) entered blocking state [ 444.894847][T13633] bridge0: port 4(bond0) entered disabled state [ 444.895076][T13633] bond0: entered allmulticast mode [ 444.895094][T13633] bond_slave_0: entered allmulticast mode [ 444.895114][T13633] bond_slave_1: entered allmulticast mode [ 445.002362][T13633] bridge0: port 4(bond0) entered blocking state [ 445.002524][T13633] bridge0: port 4(bond0) entered forwarding state [ 445.149352][T13638] dlm: no local IP address has been set [ 445.149371][T13638] dlm: cannot start dlm midcomms -107 [ 445.213476][ T36] audit: type=1326 audit(2000000746.243:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13639 comm="syz.0.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eefa9c819 code=0x7ffc0000 [ 445.228009][ T36] audit: type=1326 audit(2000000746.243:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13639 comm="syz.0.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eefa9c819 code=0x7ffc0000 [ 445.228476][ T36] audit: type=1326 audit(2000000746.263:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13639 comm="syz.0.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f0eefa9c819 code=0x7ffc0000 [ 445.230214][ T36] audit: type=1326 audit(2000000746.263:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13639 comm="syz.0.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eefa9c819 code=0x7ffc0000 [ 445.232010][ T36] audit: type=1326 audit(2000000746.263:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13639 comm="syz.0.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eefa9c819 code=0x7ffc0000 [ 445.556212][T13646] netlink: 'syz.1.3737': attribute type 16 has an invalid length. [ 445.556241][T13646] __nla_validate_parse: 1 callbacks suppressed [ 445.556255][T13646] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3737'. [ 445.556290][T13646] veth1_macvtap: entered allmulticast mode [ 446.160479][ T860] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 446.308392][ T860] usb 2-1: Using ep0 maxpacket: 16 [ 446.310760][ T860] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 446.310798][ T860] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.310831][ T860] usb 2-1: config 0 has no interface number 0 [ 446.315950][ T860] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 446.315986][ T860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.316009][ T860] usb 2-1: Product: syz [ 446.316024][ T860] usb 2-1: Manufacturer: syz [ 446.316040][ T860] usb 2-1: SerialNumber: syz [ 446.395593][ T860] usb 2-1: config 0 descriptor?? [ 446.421834][ T860] uvcvideo 2-1:0.105: probe with driver uvcvideo failed with error -22 [ 446.616188][ T860] usb 2-1: USB disconnect, device number 68 [ 446.939406][T13679] tc_dump_action: action bad kind [ 447.254105][T13690] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3759'. [ 448.152127][T13718] overlay: Bad value for 'workdir' [ 448.198569][T13724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3777'. [ 448.450706][T13729] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3780'. [ 448.451646][T13729] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3780'. [ 448.451671][T13729] netlink: 19 bytes leftover after parsing attributes in process `syz.4.3780'. [ 448.674402][T13736] Zero length message leads to an empty skb [ 448.727440][T13738] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3783'. [ 448.742237][T13738] tc_dump_action: action bad kind [ 448.889782][T13746] netlink: 'syz.1.3787': attribute type 1 has an invalid length. [ 449.088300][ T6675] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 449.245255][ T6675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.245339][ T6675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 449.245366][ T6675] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 449.258995][ T6675] usb 4-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 449.259031][ T6675] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.259056][ T6675] usb 4-1: Product: syz [ 449.259073][ T6675] usb 4-1: Manufacturer: syz [ 449.259089][ T6675] usb 4-1: SerialNumber: syz [ 449.281956][ T6675] usb 4-1: config 0 descriptor?? [ 449.294271][ T6675] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 449.310335][ T6675] usb 4-1: Detected SIO [ 449.310359][ T6675] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 449.379291][ T6675] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 449.543627][ T6675] usb 4-1: USB disconnect, device number 71 [ 449.734513][ T6675] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 449.735412][ T6675] ftdi_sio 4-1:0.0: device disconnected [ 449.869848][T13770] IPVS: length: 121 != 8 [ 450.082907][T13775] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3800'. [ 450.082975][T13775] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3800'. [ 450.572126][T13793] netlink: 'syz.4.3810': attribute type 12 has an invalid length. [ 450.771270][T13798] netlink: 'syz.2.3812': attribute type 1 has an invalid length. [ 451.468584][T13826] netlink: 'syz.4.3827': attribute type 1 has an invalid length. [ 451.468613][T13826] netlink: 980 bytes leftover after parsing attributes in process `syz.4.3827'. [ 451.506022][ T36] audit: type=1326 audit(2000000752.533:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13828 comm="syz.1.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x50000 [ 451.506085][ T36] audit: type=1326 audit(2000000752.533:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13828 comm="syz.1.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x50000 [ 451.506133][ T36] audit: type=1326 audit(2000000752.533:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13828 comm="syz.1.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x50000 [ 451.506181][ T36] audit: type=1326 audit(2000000752.533:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13828 comm="syz.1.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x50000 [ 451.506230][ T36] audit: type=1326 audit(2000000752.533:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13828 comm="syz.1.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x50000 [ 451.506277][ T36] audit: type=1326 audit(2000000752.533:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13828 comm="syz.1.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x50000 [ 451.506326][ T36] audit: type=1326 audit(2000000752.533:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13828 comm="syz.1.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x50000 [ 451.528285][ T36] audit: type=1326 audit(2000000752.553:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13828 comm="syz.1.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x50000 [ 451.528344][ T36] audit: type=1326 audit(2000000752.553:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13828 comm="syz.1.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x50000 [ 451.528388][ T36] audit: type=1326 audit(2000000752.553:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13828 comm="syz.1.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x50000 [ 451.826289][T13835] netlink: 'syz.0.3834': attribute type 27 has an invalid length. [ 451.826316][T13835] netlink: 'syz.0.3834': attribute type 3 has an invalid length. [ 451.826330][T13835] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3834'. [ 451.948368][ T6124] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 452.098334][ T6124] usb 4-1: Using ep0 maxpacket: 8 [ 452.106489][ T6124] usb 4-1: config 255 has an invalid interface number: 131 but max is 0 [ 452.106522][ T6124] usb 4-1: config 255 has no interface number 0 [ 452.106568][ T6124] usb 4-1: config 255 interface 131 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 452.106591][ T6124] usb 4-1: config 255 interface 131 has no altsetting 0 [ 452.144744][ T6124] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=16.e2 [ 452.144777][ T6124] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.144797][ T6124] usb 4-1: Product: syz [ 452.144813][ T6124] usb 4-1: Manufacturer: syz [ 452.144828][ T6124] usb 4-1: SerialNumber: syz [ 452.419230][T13852] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3838'. [ 452.419262][T13852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3838'. [ 452.429184][ T6124] smsc75xx 4-1:255.131 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 452.429452][ T6124] smsc75xx 4-1:255.131: probe with driver smsc75xx failed with error -22 [ 452.450413][ T6124] usb 4-1: USB disconnect, device number 72 [ 452.743685][T13858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3841'. [ 452.743727][T13858] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3841'. [ 454.872230][T13933] netlink: 292 bytes leftover after parsing attributes in process `syz.0.3875'. [ 456.674576][T13991] netlink: 392 bytes leftover after parsing attributes in process `syz.3.3903'. [ 458.549644][ T860] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 458.728276][ T860] usb 1-1: Using ep0 maxpacket: 32 [ 458.734742][ T860] usb 1-1: config 7 has an invalid interface number: 15 but max is 2 [ 458.734776][ T860] usb 1-1: config 7 has an invalid interface number: 192 but max is 2 [ 458.734799][ T860] usb 1-1: config 7 has an invalid interface number: 96 but max is 2 [ 458.734821][ T860] usb 1-1: config 7 has an invalid interface number: 51 but max is 2 [ 458.734861][ T860] usb 1-1: config 7 has 4 interfaces, different from the descriptor's value: 3 [ 458.734887][ T860] usb 1-1: config 7 has no interface number 0 [ 458.734906][ T860] usb 1-1: config 7 has no interface number 1 [ 458.734925][ T860] usb 1-1: config 7 has no interface number 2 [ 458.734944][ T860] usb 1-1: config 7 has no interface number 3 [ 458.735040][ T860] usb 1-1: too many endpoints for config 7 interface 192 altsetting 139: 39, using maximum allowed: 30 [ 458.735141][ T860] usb 1-1: config 7 interface 192 altsetting 139 has 0 endpoint descriptors, different from the interface descriptor's value: 39 [ 458.735189][ T860] usb 1-1: config 7 interface 96 altsetting 255 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 458.735234][ T860] usb 1-1: config 7 interface 51 altsetting 207 has a duplicate endpoint with address 0xA, skipping [ 458.735262][ T860] usb 1-1: config 7 interface 51 altsetting 207 has a duplicate endpoint with address 0xA, skipping [ 458.761414][ T860] usb 1-1: config 7 interface 15 has no altsetting 0 [ 458.761466][ T860] usb 1-1: config 7 interface 192 has no altsetting 0 [ 458.761489][ T860] usb 1-1: config 7 interface 96 has no altsetting 0 [ 458.761510][ T860] usb 1-1: config 7 interface 51 has no altsetting 0 [ 458.874348][ T860] usb 1-1: string descriptor 0 read error: -22 [ 458.874516][ T860] usb 1-1: New USB device found, idVendor=12d1, idProduct=dfe6, bcdDevice=3f.1b [ 458.874545][ T860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.183699][T14073] netlink: 'syz.1.3942': attribute type 3 has an invalid length. [ 459.232205][T14074] netlink: 'syz.2.3943': attribute type 7 has an invalid length. [ 459.246641][ T7164] usb 1-1: USB disconnect, device number 73 [ 459.394875][T14080] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3948'. [ 459.395089][T14080] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3948'. [ 459.538729][T14086] kAFS: unable to lookup cell 'syz0' [ 459.740891][T14095] netlink: 876 bytes leftover after parsing attributes in process `syz.1.3953'. [ 459.740940][T14095] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3953'. [ 460.210370][ T7164] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 460.360055][ T7164] usb 4-1: Using ep0 maxpacket: 32 [ 460.364896][ T7164] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.364936][ T7164] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.364981][ T7164] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 460.365008][ T7164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.479368][ T7164] usb 4-1: config 0 descriptor?? [ 460.496856][ T7164] hub 4-1:0.0: USB hub found [ 460.738304][ T7164] hub 4-1:0.0: 26 ports detected [ 460.738879][ T7164] hub 4-1:0.0: insufficient power available to use all downstream ports [ 460.955111][ T7164] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 460.955145][ T7164] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 460.988352][ T7164] usbhid 4-1:0.0: can't add hid device: -71 [ 460.988490][ T7164] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 461.013871][ T7164] usb 4-1: USB disconnect, device number 73 [ 461.623455][T14149] netlink: 'syz.0.3978': attribute type 10 has an invalid length. [ 461.623522][T14149] hsr0: entered promiscuous mode [ 461.765741][T14153] tmpfs: Bad value for 'mpol' [ 461.842542][T14147] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 461.842576][T14147] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock [ 461.843108][T14147] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 461.843134][T14147] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock [ 462.014369][T14161] syz.3.3983 uses old SIOCAX25GETINFO [ 462.245153][T14173] netlink: 'syz.3.3988': attribute type 21 has an invalid length. [ 462.579722][T14183] netlink: 'syz.0.3995': attribute type 2 has an invalid length. [ 462.751695][T14183] !: entered promiscuous mode [ 462.759623][ T6124] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 462.913915][ T6124] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 462.913954][ T6124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.943381][ T6124] usb 2-1: config 0 descriptor?? [ 462.966903][T14191] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 462.967152][T14191] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 462.968587][T14191] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 462.968747][T14191] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 462.968895][T14191] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 462.970693][ T6124] cp210x 2-1:0.0: cp210x converter detected [ 463.025049][T14191] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 463.025194][T14191] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 463.025324][T14191] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 463.025449][T14191] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 463.025589][T14191] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 463.368788][ T6124] usb 2-1: cp210x converter now attached to ttyUSB0 [ 463.452965][ T6124] usb 2-1: USB disconnect, device number 69 [ 463.573674][ T6124] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 463.575254][ T6124] cp210x 2-1:0.0: device disconnected [ 464.527301][T14225] netlink: 'syz.1.4016': attribute type 1 has an invalid length. [ 465.179538][ T6675] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 465.337072][ T6675] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 465.337109][ T6675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.356074][ T6675] usb 4-1: config 0 descriptor?? [ 465.388274][ T6675] cp210x 4-1:0.0: cp210x converter detected [ 465.640065][ T6675] usb 4-1: cp210x converter now attached to ttyUSB0 [ 465.827351][ T6186] usb 4-1: USB disconnect, device number 74 [ 466.043850][ T6186] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 466.047082][ T6186] cp210x 4-1:0.0: device disconnected [ 467.162564][T14301] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4050'. [ 467.242662][T14305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4054'. [ 467.242690][T14305] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4054'. [ 467.418241][T14311] netlink: 'syz.4.4058': attribute type 2 has an invalid length. [ 467.418267][T14311] netlink: 'syz.4.4058': attribute type 1 has an invalid length. [ 467.418282][T14311] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4058'. [ 467.610075][T14317] program syz.0.4060 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 468.258292][ T7164] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 468.461111][ T7164] usb 4-1: Using ep0 maxpacket: 8 [ 468.463501][ T7164] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.463560][ T7164] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 468.463591][ T7164] usb 4-1: config 0 interface 0 has no altsetting 0 [ 468.470006][ T6017] Bluetooth: hci3: unexpected event for opcode 0x2040 [ 468.523309][ T7164] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 468.523346][ T7164] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.523371][ T7164] usb 4-1: Product: syz [ 468.523388][ T7164] usb 4-1: Manufacturer: syz [ 468.523405][ T7164] usb 4-1: SerialNumber: syz [ 468.599608][ T7164] usb 4-1: config 0 descriptor?? [ 468.622605][ T7164] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 468.840562][ T7164] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 468.840890][ T7164] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 468.847952][ T7164] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 468.948459][ T6069] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 469.080982][ T860] usb 4-1: USB disconnect, device number 75 [ 469.101502][ T6069] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 469.101568][ T6069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 469.101599][ T6069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 469.133397][ T6069] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 469.133436][ T6069] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.133460][ T6069] usb 2-1: Product: syz [ 469.133486][ T6069] usb 2-1: Manufacturer: syz [ 469.133504][ T6069] usb 2-1: SerialNumber: syz [ 469.176359][T14373] net_ratelimit: 3410 callbacks suppressed [ 469.176382][T14373] openvswitch: netlink: Missing key (keys=2020040, expected=100) [ 469.210446][ T6069] usb 2-1: config 0 descriptor?? [ 469.217085][ T6069] powermate 2-1:0.0: probe with driver powermate failed with error -5 [ 469.471995][ T10] usb 2-1: USB disconnect, device number 70 [ 469.713051][T14386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4093'. [ 470.357332][ T36] kauditd_printk_skb: 119 callbacks suppressed [ 470.357355][ T36] audit: type=1326 audit(2000000771.383:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14407 comm="syz.4.4104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 470.357407][ T36] audit: type=1326 audit(2000000771.383:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14407 comm="syz.4.4104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 470.398301][ T36] audit: type=1326 audit(2000000771.423:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14407 comm="syz.4.4104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 470.398358][ T36] audit: type=1326 audit(2000000771.423:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14407 comm="syz.4.4104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 470.398403][ T36] audit: type=1326 audit(2000000771.423:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14407 comm="syz.4.4104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f4b7d69c819 code=0x7ffc0000 [ 470.447580][ T36] audit: type=1326 audit(2000000771.473:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14407 comm="syz.4.4104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4b7d65d04e code=0x7ffc0000 [ 470.449492][ T36] audit: type=1326 audit(2000000771.483:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14407 comm="syz.4.4104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4b7d65d04e code=0x7ffc0000 [ 470.451332][ T36] audit: type=1326 audit(2000000771.483:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14407 comm="syz.4.4104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4b7d65d04e code=0x7ffc0000 [ 470.452793][ T36] audit: type=1326 audit(2000000771.483:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14407 comm="syz.4.4104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4b7d65d04e code=0x7ffc0000 [ 470.455206][ T36] audit: type=1326 audit(2000000771.483:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14407 comm="syz.4.4104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4b7d65d04e code=0x7ffc0000 [ 471.363920][T14437] netlink: 'syz.1.4118': attribute type 11 has an invalid length. [ 471.363950][T14437] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4118'. [ 471.503556][T14443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4121'. [ 471.708388][T14451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4125'. [ 471.708416][T14451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4125'. [ 471.867898][T14459] ieee802154 phy0 wpan0: encryption failed: -90 [ 471.940240][T14461] netlink: 'syz.1.4129': attribute type 11 has an invalid length. [ 471.940268][T14461] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.4129'. [ 472.184852][T14469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4134'. [ 472.645880][T14489] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 472.646157][T14489] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 472.646315][T14489] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 472.646470][T14489] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 472.646629][T14489] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 472.646796][T14489] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 472.714840][T14489] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 472.715003][T14489] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 472.715157][T14489] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 473.824611][T14526] netlink: 'syz.1.4160': attribute type 1 has an invalid length. [ 474.931342][T14559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4175'. [ 475.689071][T14585] QAT: failed to copy from user cfg_data. [ 476.484093][T14613] netlink: 'syz.3.4201': attribute type 62 has an invalid length. [ 476.638316][ T860] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 476.810608][ T860] usb 1-1: config 0 interface 0 has no altsetting 0 [ 476.810658][ T860] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 476.810686][ T860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.859066][ T860] usb 1-1: config 0 descriptor?? [ 476.934522][T14628] IPv6: Can't replace route, no match found [ 477.300354][ T860] video4linux radio48: keene_cmd_main failed (-71) [ 477.300389][ T860] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 477.329940][ T860] usb 1-1: USB disconnect, device number 74 [ 477.713895][T14649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4219'. [ 477.733764][T14649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4219'. [ 477.771418][T14649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4219'. [ 477.772291][T14649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4219'. [ 477.773520][T14649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4219'. [ 477.776050][T14649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4219'. [ 477.782754][T14649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4219'. [ 477.911506][T14649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4219'. [ 477.955322][T14649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4219'. [ 478.044829][T14649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4219'. [ 478.228426][T14649] net_ratelimit: 3065 callbacks suppressed [ 478.228442][T14649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 478.320875][T14653] bond2: entered promiscuous mode [ 478.326177][T14653] 8021q: adding VLAN 0 to HW filter on device bond2 [ 479.380406][T14708] tmpfs: Bad value for 'mpol' [ 479.841806][ T36] kauditd_printk_skb: 185 callbacks suppressed [ 479.841830][ T36] audit: type=1326 audit(2000000780.873:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14721 comm="syz.1.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 479.841884][ T36] audit: type=1326 audit(2000000780.873:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14721 comm="syz.1.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 479.853820][ T36] audit: type=1326 audit(2000000780.883:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14721 comm="syz.1.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 479.853874][ T36] audit: type=1326 audit(2000000780.883:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14721 comm="syz.1.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 479.880709][ T36] audit: type=1326 audit(2000000780.913:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14721 comm="syz.1.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 479.880761][ T36] audit: type=1326 audit(2000000780.913:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14721 comm="syz.1.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 479.880804][ T36] audit: type=1326 audit(2000000780.913:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14721 comm="syz.1.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 479.880844][ T36] audit: type=1326 audit(2000000780.913:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14721 comm="syz.1.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f860a25c819 code=0x7ffc0000 [ 480.438272][ T860] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 480.588282][ T860] usb 1-1: Using ep0 maxpacket: 16 [ 480.611332][ T860] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 480.611381][ T860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.611404][ T860] usb 1-1: Product: syz [ 480.611421][ T860] usb 1-1: Manufacturer: syz [ 480.611437][ T860] usb 1-1: SerialNumber: syz [ 480.755942][ T860] usb 1-1: config 0 descriptor?? [ 480.922722][T14752] bond3: option lp_interval: invalid value (0) [ 480.922753][T14752] bond3: option lp_interval: allowed values 1 - 2147483647 [ 481.024938][ T6124] usb 1-1: USB disconnect, device number 75 [ 481.065838][T14752] bond3 (unregistering): Released all slaves [ 481.557083][T14732] ------------[ cut here ]------------ [ 481.557101][T14732] kcov->t != t [ 481.557109][T14732] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#1: syz.0.4259/14732 [ 481.557164][T14732] Modules linked in: [ 481.557187][T14732] CPU: 1 UID: 0 PID: 14732 Comm: syz.0.4259 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 481.557214][T14732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 481.557228][T14732] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 481.557283][T14732] Code: 10 00 00 48 8b bb 90 00 00 00 e8 36 68 55 00 48 89 df 5b 41 5e 41 5f e9 49 25 5b 00 7c 1c 5b 41 5e 41 5f e9 7d cb 69 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 9b 64 68 09 48 89 df be 03 00 [ 481.557303][T14732] RSP: 0018:ffffc9000648fd20 EFLAGS: 00010283 [ 481.557325][T14732] RAX: 6ca653cdf3559600 RBX: ffff888031d83600 RCX: 0000000000000000 [ 481.557344][T14732] RDX: 00000000a8e24bb6 RSI: ffffffff8ba73040 RDI: 00000000ffffffff [ 481.557361][T14732] RBP: ffffc9000648fe78 R08: ffffffff8b2cf750 R09: ffffffff8dfc80c0 [ 481.557389][T14732] R10: dffffc0000000000 R11: fffffbfff1f1717f R12: dffffc0000000000 [ 481.557409][T14732] R13: 0000000000000000 R14: ffff888031d83608 R15: ffff888071b03d80 [ 481.557427][T14732] FS: 000055555ec68500(0000) GS:ffff888126209000(0000) knlGS:0000000000000000 [ 481.557449][T14732] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 481.557466][T14732] CR2: 0000001b34a1fff8 CR3: 0000000035e8c000 CR4: 00000000003526f0 [ 481.557490][T14732] Call Trace: [ 481.557500][T14732] [ 481.557514][T14732] do_exit+0x150/0x22c0 [ 481.557544][T14732] ? lockdep_hardirqs_on+0x7a/0x110 [ 481.557576][T14732] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 481.557610][T14732] ? reacquire_held_locks+0x104/0x190 [ 481.557640][T14732] ? rt_spin_lock+0x1e0/0x400 [ 481.557664][T14732] ? __pfx_do_exit+0x10/0x10 [ 481.557694][T14732] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 481.557730][T14732] ? rt_spin_unlock+0x160/0x200 [ 481.557758][T14732] do_group_exit+0x21b/0x2d0 [ 481.557791][T14732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.557818][T14732] __x64_sys_exit_group+0x3f/0x40 [ 481.557847][T14732] x64_sys_call+0x221a/0x2240 [ 481.557873][T14732] do_syscall_64+0x15f/0xf80 [ 481.557903][T14732] ? trace_irq_disable+0x3b/0x140 [ 481.557926][T14732] ? clear_bhb_loop+0x40/0x90 [ 481.557956][T14732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.557980][T14732] RIP: 0033:0x7f0eefa9c819 [ 481.558003][T14732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.558024][T14732] RSP: 002b:00007fff29c21838 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 481.558050][T14732] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0eefa9c819 [ 481.558068][T14732] RDX: 00007f0eeecf1000 RSI: 0000000000000000 RDI: 0000000000000000 [ 481.558084][T14732] RBP: 00007fff29c2189c R08: 0000000000000000 R09: 00000000000927c0 [ 481.558099][T14732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000322 [ 481.558114][T14732] R13: 00000000000927c0 R14: 000000000007507a R15: 00007fff29c218f0 [ 481.558217][T14732] [ 481.558232][T14732] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 481.558250][T14732] CPU: 1 UID: 0 PID: 14732 Comm: syz.0.4259 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 481.558275][T14732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 481.558291][T14732] Call Trace: [ 481.558300][T14732] [ 481.558310][T14732] vpanic+0x56c/0xa60 [ 481.558337][T14732] ? __pfx__printk+0x10/0x10 [ 481.558366][T14732] ? __pfx_vpanic+0x10/0x10 [ 481.558399][T14732] ? is_bpf_text_address+0x292/0x2b0 [ 481.558427][T14732] ? is_bpf_text_address+0x26/0x2b0 [ 481.558464][T14732] panic+0xc5/0xd0 [ 481.558494][T14732] ? __pfx_panic+0x10/0x10 [ 481.558538][T14732] __warn+0x315/0x4c0 [ 481.558561][T14732] ? kcov_task_exit+0xf5/0x160 [ 481.558598][T14732] ? kcov_task_exit+0xf5/0x160 [ 481.558633][T14732] __report_bug+0x29a/0x540 [ 481.558671][T14732] ? kcov_task_exit+0xf5/0x160 [ 481.558706][T14732] ? __pfx___report_bug+0x10/0x10 [ 481.558737][T14732] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 481.558769][T14732] ? rt_spin_lock+0x1e0/0x400 [ 481.558793][T14732] ? rt_spin_lock+0x1e0/0x400 [ 481.558821][T14732] ? kcov_task_exit+0xf5/0x160 [ 481.558856][T14732] report_bug+0x16a/0x220 [ 481.558885][T14732] ? kcov_task_exit+0xf5/0x160 [ 481.558919][T14732] ? kcov_task_exit+0xf7/0x160 [ 481.558952][T14732] handle_bug+0x9c/0x200 [ 481.558987][T14732] exc_invalid_op+0x1a/0x50 [ 481.559021][T14732] asm_exc_invalid_op+0x1a/0x20 [ 481.559045][T14732] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 481.559079][T14732] Code: 10 00 00 48 8b bb 90 00 00 00 e8 36 68 55 00 48 89 df 5b 41 5e 41 5f e9 49 25 5b 00 7c 1c 5b 41 5e 41 5f e9 7d cb 69 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 9b 64 68 09 48 89 df be 03 00 [ 481.559100][T14732] RSP: 0018:ffffc9000648fd20 EFLAGS: 00010283 [ 481.559121][T14732] RAX: 6ca653cdf3559600 RBX: ffff888031d83600 RCX: 0000000000000000 [ 481.559138][T14732] RDX: 00000000a8e24bb6 RSI: ffffffff8ba73040 RDI: 00000000ffffffff [ 481.559156][T14732] RBP: ffffc9000648fe78 R08: ffffffff8b2cf750 R09: ffffffff8dfc80c0 [ 481.559175][T14732] R10: dffffc0000000000 R11: fffffbfff1f1717f R12: dffffc0000000000 [ 481.559194][T14732] R13: 0000000000000000 R14: ffff888031d83608 R15: ffff888071b03d80 [ 481.559219][T14732] ? rt_spin_lock+0x1e0/0x400 [ 481.559255][T14732] do_exit+0x150/0x22c0 [ 481.559283][T14732] ? lockdep_hardirqs_on+0x7a/0x110 [ 481.559314][T14732] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 481.559347][T14732] ? reacquire_held_locks+0x104/0x190 [ 481.559387][T14732] ? rt_spin_lock+0x1e0/0x400 [ 481.559410][T14732] ? __pfx_do_exit+0x10/0x10 [ 481.559437][T14732] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 481.559473][T14732] ? rt_spin_unlock+0x160/0x200 [ 481.559500][T14732] do_group_exit+0x21b/0x2d0 [ 481.559533][T14732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.559561][T14732] __x64_sys_exit_group+0x3f/0x40 [ 481.559587][T14732] x64_sys_call+0x221a/0x2240 [ 481.559611][T14732] do_syscall_64+0x15f/0xf80 [ 481.559638][T14732] ? trace_irq_disable+0x3b/0x140 [ 481.559660][T14732] ? clear_bhb_loop+0x40/0x90 [ 481.559689][T14732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.559713][T14732] RIP: 0033:0x7f0eefa9c819 [ 481.559734][T14732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.559752][T14732] RSP: 002b:00007fff29c21838 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 481.559774][T14732] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0eefa9c819 [ 481.559790][T14732] RDX: 00007f0eeecf1000 RSI: 0000000000000000 RDI: 0000000000000000 [ 481.559805][T14732] RBP: 00007fff29c2189c R08: 0000000000000000 R09: 00000000000927c0 [ 481.559822][T14732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000322 [ 481.559838][T14732] R13: 00000000000927c0 R14: 000000000007507a R15: 00007fff29c218f0 [ 481.559873][T14732] [ 481.560090][T14732] Kernel Offset: disabled