last executing test programs: 2m56.718801707s ago: executing program 0 (id=10042): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0xfffffffffffffffd) 2m56.612166222s ago: executing program 0 (id=10047): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000003840)={[0x100]}, 0x8) 2m56.511764076s ago: executing program 0 (id=10050): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000140), 0x12) 2m56.420048644s ago: executing program 0 (id=10053): r0 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x1) 2m56.381631468s ago: executing program 0 (id=10056): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) 2m56.262456192s ago: executing program 0 (id=10061): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000032c0)={0x0, 0x20, &(0x7f0000000240)={&(0x7f0000000e80)={0x14, 0x26, 0x1, 0x70b525, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0xffffffff, 0x0, 0x80}, 0x0) 2m40.174205364s ago: executing program 32 (id=10061): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000032c0)={0x0, 0x20, &(0x7f0000000240)={&(0x7f0000000e80)={0x14, 0x26, 0x1, 0x70b525, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0xffffffff, 0x0, 0x80}, 0x0) 2m35.237585042s ago: executing program 4 (id=10582): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) 2m35.14298507s ago: executing program 4 (id=10659): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) close(r0) 2m34.918855054s ago: executing program 4 (id=10666): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000026000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m18.848717988s ago: executing program 33 (id=10666): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000026000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 37.524883411s ago: executing program 5 (id=14293): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}) 37.422138582s ago: executing program 5 (id=14296): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x2) 37.333664305s ago: executing program 5 (id=14299): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) 37.131903166s ago: executing program 5 (id=14307): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="563d00001500599c6d0e0000ded650492d"], 0xfe33) 36.986346026s ago: executing program 5 (id=14311): r0 = socket(0x11, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2f288a8d2", 0x13}, {&(0x7f0000001c00)="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", 0xfdd}], 0x2}}], 0x1, 0x24044015) 36.897542294s ago: executing program 5 (id=14315): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) 20.788456888s ago: executing program 34 (id=14315): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) 19.155180229s ago: executing program 1 (id=14746): r0 = syz_open_dev$sg(&(0x7f0000000100), 0xaa0, 0x40201) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)=0x8000) 15.770949869s ago: executing program 1 (id=14771): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003040)={0x14, 0x2e, 0x9, 0x70bd25, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 12.387398681s ago: executing program 1 (id=14799): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="2000000076001f0b4abd7000fbdbdf25080000000000000008000a"], 0x20}], 0x1, 0x0, 0x0, 0x2400c814}, 0x0) 9.022894688s ago: executing program 1 (id=14825): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 5.647458627s ago: executing program 1 (id=14848): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) 4.933741831s ago: executing program 6 (id=14855): creat(&(0x7f0000000100)='./file0\x00', 0x112) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') 4.341944466s ago: executing program 6 (id=14862): r0 = syz_open_dev$swradio(&(0x7f0000001500), 0x1, 0x2) pwritev2(r0, &(0x7f0000001740)=[{&(0x7f0000001540)="dc", 0x1}], 0x1, 0x3, 0x7fffffff, 0x3) 4.082399299s ago: executing program 6 (id=14866): r0 = syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000008662410804000010203010902600003010000840904000000010100000a240109000a00020102090401"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 3.501620205s ago: executing program 3 (id=14871): futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000100)=0xfffffffc, 0x0) futex(&(0x7f000000cffc), 0xd, 0x1, 0x0, 0x0, 0xfffffffd) 2.45291581s ago: executing program 3 (id=14881): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a00)=ANY=[@ANYBLOB="5c0000000b060108000026a9a143000005000002050001000700000034000700180014bcea000240fe80000000000000000000000000001f1800018014000240fc010000000000000000000000000000090002"], 0x5c}, 0x1, 0x0, 0x0, 0x48}, 0x4800) 2.288478588s ago: executing program 1 (id=14883): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001240)={'wg2\x00', {0x2, 0x4e24, @multicast1}}) 2.287189215s ago: executing program 3 (id=14884): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1401, 0x1, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 2.124354898s ago: executing program 3 (id=14886): r0 = syz_open_dev$video4linux(&(0x7f0000000580), 0x0, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000180)) 1.960770513s ago: executing program 3 (id=14888): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$afs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2, 0x0) 1.773045498s ago: executing program 3 (id=14890): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1.27339082s ago: executing program 2 (id=14893): pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fcntl$lock(r0, 0x26, &(0x7f0000000a80)={0x0, 0x2, 0x6, 0xffffffffffffffff}) 1.030433307s ago: executing program 2 (id=14894): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) 815.939241ms ago: executing program 2 (id=14895): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 593.473486ms ago: executing program 6 (id=14896): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0x5) 567.155471ms ago: executing program 2 (id=14897): r0 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) 374.984097ms ago: executing program 6 (id=14898): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x73, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) 225.615033ms ago: executing program 2 (id=14899): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e20, 0x100003, 'dh\x00', 0x1, 0xa7e, 0x70}, 0x2c) 139.893875ms ago: executing program 6 (id=14900): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000000ae00), 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d25, 0x0) 0s ago: executing program 2 (id=14901): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x1000009}, 0x8) kernel console output (not intermixed with test programs): 507.447448][ T49] usb 3-1: Failed to submit usb control message: -71 [ 507.447717][ T24] usb 3-1: USB disconnect, device number 120 [ 507.462463][ T49] usb 3-1: unable to send the bmi data to the device: -71 [ 507.476448][ T49] usb 3-1: unable to get target info from device [ 507.485472][ T49] usb 3-1: could not get target info (-71) [ 507.491418][ T49] usb 3-1: could not probe fw (-71) [ 507.598339][T29616] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 507.631379][T29524] chnl_net:caif_netlink_parms(): no params data found [ 507.821597][T29524] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.829627][T29524] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.837486][T29524] bridge_slave_0: entered allmulticast mode [ 507.845000][ T986] usb 4-1: USB disconnect, device number 116 [ 507.846043][T29524] bridge_slave_0: entered promiscuous mode [ 507.864691][T29524] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.872389][T29524] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.880496][T29524] bridge_slave_1: entered allmulticast mode [ 507.887799][T29524] bridge_slave_1: entered promiscuous mode [ 507.934142][T29524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.960819][T29524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.016816][T29524] team0: Port device team_slave_0 added [ 508.027031][T29524] team0: Port device team_slave_1 added [ 508.101775][T29524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.124555][T29524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.168376][T29524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.192469][T29524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.211198][T29524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.237731][T29524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.302724][T29669] infiniband syz0: set down [ 508.310192][T29669] infiniband syz0: added bond_slave_0 [ 508.345123][T29669] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 508.355440][T29524] hsr_slave_0: entered promiscuous mode [ 508.361858][T29669] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 508.383969][T29669] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 508.387775][T29524] hsr_slave_1: entered promiscuous mode [ 508.413856][T29524] debugfs: 'hsr0' already exists in 'hsr' [ 508.421086][T29524] Cannot create hsr debugfs directory [ 508.430467][T29669] RDS/IB: syz0: added [ 508.434520][T29669] smc: adding ib device syz0 with port count 1 [ 508.456857][T29669] smc: ib device syz0 port 1 has no pnetid [ 508.554262][T29790] netlink: 666 bytes leftover after parsing attributes in process `syz.3.10602'. [ 508.589194][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 508.610748][ T9] ath9k_htc: Failed to initialize the device [ 508.645728][ T986] usb 4-1: ath9k_htc: USB layer deinitialized [ 509.094776][T29867] sit0: entered promiscuous mode [ 509.100135][ T6081] Bluetooth: hci4: command tx timeout [ 509.123638][T29867] netlink: 'syz.2.10611': attribute type 1 has an invalid length. [ 509.141068][T29867] netlink: 1 bytes leftover after parsing attributes in process `syz.2.10611'. [ 509.155640][T29524] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 509.188497][T29524] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 509.242868][T29524] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 509.282704][T29524] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 509.569000][T29524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.615485][T29524] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.631456][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.638727][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.685229][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.692457][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.050658][T29913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10627'. [ 510.087532][T29524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.532947][T29938] netlink: 260 bytes leftover after parsing attributes in process `syz.3.10636'. [ 510.554776][T29524] veth0_vlan: entered promiscuous mode [ 510.572429][T29524] veth1_vlan: entered promiscuous mode [ 510.674835][T29524] veth0_macvtap: entered promiscuous mode [ 510.691502][T29524] veth1_macvtap: entered promiscuous mode [ 510.752668][T29524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.782610][T29524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.810900][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.835709][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.852074][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.890361][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.154779][ T1048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.177781][ T1048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.281138][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.304435][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.323179][ T6081] Bluetooth: hci4: command tx timeout [ 511.382318][T29979] IPVS: length: 70 != 8 [ 511.436398][T29984] netlink: 'syz.1.10651': attribute type 27 has an invalid length. [ 511.556159][T29984] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 511.935832][T30016] netlink: 'syz.3.10665': attribute type 21 has an invalid length. [ 511.945166][T30016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10665'. [ 512.267459][T30039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10675'. [ 512.673825][T30069] netlink: 'syz.2.10687': attribute type 1 has an invalid length. [ 512.683198][T30069] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10687'. [ 513.543311][ T6081] Bluetooth: hci4: command tx timeout [ 513.598188][T30129] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 513.600222][T30131] netlink: 37 bytes leftover after parsing attributes in process `syz.1.10718'. [ 513.654576][T30129] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 513.940353][T30156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10730'. [ 513.979456][T30159] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 514.513847][T30201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10749'. [ 514.933108][T30235] netlink: 'syz.1.10765': attribute type 3 has an invalid length. [ 514.941082][T30235] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10765'. [ 515.024631][T30241] netlink: 'syz.2.10769': attribute type 4 has an invalid length. [ 515.032620][T30241] netlink: 'syz.2.10769': attribute type 1 has an invalid length. [ 515.042179][T30241] netlink: 228 bytes leftover after parsing attributes in process `syz.2.10769'. [ 515.370649][ T24] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 515.507086][T30278] netlink: 'syz.1.10785': attribute type 12 has an invalid length. [ 515.532608][ T24] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 515.552990][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.568542][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 515.581678][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.593955][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.608528][ T24] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 515.627364][ T24] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 515.637522][ T24] usb 3-1: Product: syz [ 515.642767][ T24] usb 3-1: Manufacturer: syz [ 515.663075][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 515.668334][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 515.677415][ T24] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 515.687525][ T24] cdc_wdm 3-1:1.0: Unknown control protocol [ 515.766968][ T6081] Bluetooth: hci4: command tx timeout [ 515.831782][T30298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10790'. [ 515.842218][T30298] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10790'. [ 515.886588][T30249] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 515.907447][ T6192] usb 3-1: USB disconnect, device number 121 [ 516.596798][T30359] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 516.628798][T30363] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10817'. [ 516.701247][T30367] netlink: 'syz.1.10821': attribute type 4 has an invalid length. [ 517.147223][T30403] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 517.290209][T30416] Scaler: ================= START STATUS ================= [ 517.298973][T30416] Scaler: ================== END STATUS ================== [ 517.351749][T30412] block device autoloading is deprecated and will be removed. [ 517.366247][T30422] : renamed from bond_slave_0 [ 517.524106][T30432] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 517.912604][T30465] tmpfs: Bad value for 'nr_blocks' [ 518.146575][T30484] netlink: 'syz.2.10875': attribute type 1 has an invalid length. [ 518.209313][T30486] netlink: 'syz.3.10877': attribute type 10 has an invalid length. [ 518.278528][T30494] comedi comedi3: s526: I/O port conflict (0x8,64) [ 518.342058][T30498] netlink: 200 bytes leftover after parsing attributes in process `syz.2.10883'. [ 518.351370][T30498] tc_dump_action: action bad kind [ 518.549688][T30514] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 518.627388][T30520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.649447][T30518] can0: slcan on ttyS3. [ 518.798182][T30515] can0 (unregistered): slcan off ttyS3. [ 519.135690][T30564] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.10913' sets config #1 [ 519.225800][T30571] deleting an unspecified loop device is not supported. [ 519.655025][T30611] (syz.2.10934,30611,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 519.667334][T30611] (syz.2.10934,30611,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 519.676398][T30611] (syz.2.10934,30611,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 519.685373][T30611] (syz.2.10934,30611,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 519.805369][ T24] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 519.901758][T30620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10938'. [ 519.982955][ T24] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 519.993965][ T24] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 520.003364][ T24] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 520.013942][ T24] usb 4-1: config 220 has no interface number 2 [ 520.021408][ T24] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 520.035274][ T24] usb 4-1: config 220 interface 0 has no altsetting 0 [ 520.042597][ T24] usb 4-1: config 220 interface 76 has no altsetting 0 [ 520.049495][ T24] usb 4-1: config 220 interface 1 has no altsetting 0 [ 520.059435][ T24] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 520.068928][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.078335][ T24] usb 4-1: Product: syz [ 520.082543][ T24] usb 4-1: Manufacturer: syz [ 520.088706][ T24] usb 4-1: SerialNumber: syz [ 520.245181][T30638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10945'. [ 520.324541][ T24] usb 4-1: selecting invalid altsetting 0 [ 520.332442][ T24] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 520.340106][ T24] uvcvideo 4-1:220.0: No valid video chain found. [ 520.354882][ T24] usb 4-1: selecting invalid altsetting 0 [ 520.361225][ T24] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 520.374901][ T24] usb 4-1: USB disconnect, device number 117 [ 520.381656][T30651] rose0: left allmulticast mode [ 520.393994][ T47] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 520.474010][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 520.576281][ T47] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 520.584572][ T47] usb 3-1: config 0 has no interface number 0 [ 520.598153][ T47] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 520.608900][ T47] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 520.623070][ T47] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 520.632290][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.641904][ T47] usb 3-1: Product: syz [ 520.646277][ T47] usb 3-1: Manufacturer: syz [ 520.651317][ T47] usb 3-1: SerialNumber: syz [ 520.663348][ T47] usb 3-1: config 0 descriptor?? [ 520.674791][T30633] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 520.685008][ T47] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 520.704186][ T47] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 520.802097][T30683] netlink: 'syz.1.10958': attribute type 1 has an invalid length. [ 521.152229][ T47] usb 3-1: USB disconnect, device number 122 [ 521.181911][ T47] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 521.204628][ T47] cyberjack 3-1:0.69: device disconnected [ 521.917602][T30771] netlink: 'syz.3.10996': attribute type 4 has an invalid length. [ 521.935395][T30771] netlink: 17 bytes leftover after parsing attributes in process `syz.3.10996'. [ 522.039758][T30780] tmpfs: Bad value for 'mpol' [ 522.510771][T30816] bad cache= option: none[()bvتr [ 522.510771][T30816] ٟ 9;^d!/7u\ݴMDҏeYo P50eB>KX/TJ*)J()ՀKf5&Lqq2WhWd0 [ 522.510771][T30816] [ 522.536162][T30816] CIFS: VFS: bad cache= option: none[()bvتr [ 522.536162][T30816] ٟ 9;^d!/7u\ݴMDҏeYo P50eB>KX/TJ*)J()ՀKf5&Lqq2WhWd0 [ 523.005907][T30855] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 523.056090][T30857] sp0: Synchronizing with TNC [ 523.178403][T30870] netlink: 'syz.1.11041': attribute type 1 has an invalid length. [ 523.734722][T30914] netlink: 'syz.3.11063': attribute type 1 has an invalid length. [ 523.746481][T30914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11063'. [ 524.033564][T30938] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 524.372357][T30965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11088'. [ 524.429735][T30971] IPv6: Can't replace route, no match found [ 524.745325][T31000] tmpfs: Bad value for 'nr_blocks' [ 524.977374][ T6141] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 525.029372][T31021] cgroup: Invalid name [ 525.148351][ T6141] usb 4-1: Using ep0 maxpacket: 16 [ 525.165741][ T6141] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 525.186212][ T6141] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 525.196205][ T6141] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.206777][ T6141] usb 4-1: Product: syz [ 525.211169][ T6141] usb 4-1: Manufacturer: syz [ 525.216762][ T6141] usb 4-1: SerialNumber: syz [ 525.232572][ T6141] usb 4-1: config 0 descriptor?? [ 525.269509][ T6141] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 525.484030][T31058] openvswitch: netlink: Unknown key attributes 2 [ 525.498507][ T6141] usb 4-1: USB disconnect, device number 118 [ 525.506392][ T1048] usb 4-1: Failed to submit usb control message: -71 [ 525.521202][ T1048] usb 4-1: unable to send the bmi data to the device: -71 [ 525.543271][ T1048] usb 4-1: unable to get target info from device [ 525.554712][ T1048] usb 4-1: could not get target info (-71) [ 525.575935][ T1048] usb 4-1: could not probe fw (-71) [ 525.632951][T31069] CIFS mount error: No usable UNC path provided in device string! [ 525.632951][T31069] [ 525.644330][T31069] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 525.679221][T31075] netlink: 144 bytes leftover after parsing attributes in process `syz.1.11134'. [ 525.774564][T31082] netlink: 76 bytes leftover after parsing attributes in process `syz.1.11136'. [ 525.872363][T31088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.878812][T31090] __vm_enough_memory: pid: 31090, comm: syz.1.11141, bytes: 21200653053952 not enough memory for the allocation [ 525.952998][T31094] comedi comedi3: board detection failed [ 526.003356][T31098] netlink: 'syz.1.11145': attribute type 10 has an invalid length. [ 526.011420][T31098] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11145'. [ 526.026376][T31098] batman_adv: batadv0: Adding interface: vlan1 [ 526.032593][T31098] batman_adv: batadv0: The MTU of interface vlan1 is too small (129) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.061341][T31098] batman_adv: batadv0: Interface activated: vlan1 [ 526.105234][T31102] overlayfs: missing 'lowerdir' [ 526.228724][T31112] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 526.266176][T31116] netlink: 'syz.1.11154': attribute type 21 has an invalid length. [ 526.401016][T31126] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11159'. [ 526.447736][T31130] binder: 31129:31130 ioctl c018620c 200000000380 returned -22 [ 526.492778][T31134] autofs4:pid:31134:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374) [ 526.506505][T31134] autofs4:pid:31134:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 526.711530][T31150] netlink: 'syz.2.11172': attribute type 16 has an invalid length. [ 526.745672][T31154] comedi comedi3: board detection failed [ 526.793279][T31156] netlink: 'syz.2.11174': attribute type 6 has an invalid length. [ 526.968733][T31171] netlink: 'syz.2.11181': attribute type 2 has an invalid length. [ 526.976882][T31171] netlink: 'syz.2.11181': attribute type 1 has an invalid length. [ 527.282887][T31198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11194'. [ 527.729707][T31233] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 527.738446][T31233] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock [ 527.746735][T31233] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 527.754460][T31233] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock [ 527.843021][ T6141] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 527.912589][T31241] openvswitch: netlink: IP tunnel dst address not specified [ 527.973764][T31245] netlink: 'syz.1.11215': attribute type 28 has an invalid length. [ 528.012787][ T6141] usb 3-1: Using ep0 maxpacket: 32 [ 528.024152][ T6141] usb 3-1: unable to get BOS descriptor or descriptor too short [ 528.036121][ T6141] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 528.054318][ T6141] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 528.064952][ T6141] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 528.075172][ T6141] usb 3-1: config 128 has no interface number 0 [ 528.081940][ T6141] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 528.093578][ T6141] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 528.112648][ T6141] usb 3-1: config 128 interface 127 has no altsetting 0 [ 528.128010][ T6141] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 528.138863][T31194] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 528.152470][ T6141] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.170268][ T6141] usb 3-1: Product: syz [ 528.185577][ T6084] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 528.198461][ T6084] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 528.208225][ T6084] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 528.218735][ T6084] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 528.226878][ T6141] usb 3-1: Manufacturer: syz [ 528.231519][ T6141] usb 3-1: SerialNumber: syz [ 528.237043][ T6084] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 528.325396][T31249] xfrm0 speed is unknown, defaulting to 1000 [ 528.599578][ T6141] usb 3-1: USB disconnect, device number 123 [ 528.611836][T31285] openvswitch: netlink: Missing key (keys=40, expected=100) [ 528.672162][T28898] udevd[28898]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 528.744594][T31295] netlink: 'syz.3.11228': attribute type 1 has an invalid length. [ 528.752708][T31295] netlink: 96 bytes leftover after parsing attributes in process `syz.3.11228'. [ 528.763919][T31295] netlink: 1 bytes leftover after parsing attributes in process `syz.3.11228'. [ 528.787092][T31295] netlink: 658 bytes leftover after parsing attributes in process `syz.3.11228'. [ 528.934944][T31301] tmpfs: Bad value for 'size' [ 529.343110][T31249] chnl_net:caif_netlink_parms(): no params data found [ 529.610692][T31249] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.646042][T31249] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.662569][T31249] bridge_slave_0: entered allmulticast mode [ 529.694540][T31249] bridge_slave_0: entered promiscuous mode [ 529.716376][T31249] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.726538][T31249] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.734708][T31249] bridge_slave_1: entered allmulticast mode [ 529.744769][T31249] bridge_slave_1: entered promiscuous mode [ 529.884949][T31249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.898434][T31477] netlink: 'syz.2.11255': attribute type 2 has an invalid length. [ 529.906176][T31249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.977868][T31249] team0: Port device team_slave_0 added [ 530.008341][T31249] team0: Port device team_slave_1 added [ 530.097882][T31249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.113260][T31249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.150350][T31249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.186415][T31249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.207874][T31249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.263937][T31249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.441709][T31249] hsr_slave_0: entered promiscuous mode [ 530.456821][T31563] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 530.458962][T31249] hsr_slave_1: entered promiscuous mode [ 530.476570][T31249] debugfs: 'hsr0' already exists in 'hsr' [ 530.480700][ T6081] Bluetooth: hci5: command tx timeout [ 530.498763][T31249] Cannot create hsr debugfs directory [ 530.594082][T31581] netlink: 188 bytes leftover after parsing attributes in process `syz.2.11278'. [ 530.934615][T31662] bridge0: port 3(dummy0) entered blocking state [ 530.941201][T31662] bridge0: port 3(dummy0) entered forwarding state [ 530.948062][T31662] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.955250][T31662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.962732][T31662] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.969911][T31662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.980176][T31662] bridge0: entered promiscuous mode [ 530.986919][T31662] bridge0: entered allmulticast mode [ 530.993588][ T6141] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 531.156528][ T6141] usb 3-1: config 0 interface 0 has no altsetting 0 [ 531.169166][ T6141] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 531.184561][T31249] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 531.191464][ T6141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.206827][T31249] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 531.214601][ T6141] usb 3-1: config 0 descriptor?? [ 531.244087][T31249] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 531.257474][T31249] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 531.582837][T31249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.683893][T31249] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.684496][ T6141] video4linux radio48: keene_cmd_main failed (-71) [ 531.708162][ T6141] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 531.733418][ T6141] usb 3-1: USB disconnect, device number 124 [ 531.750351][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.757578][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.811559][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.818788][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.307465][T31249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.692918][ T6081] Bluetooth: hci5: command tx timeout [ 532.751389][T31775] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 532.847220][T31249] veth0_vlan: entered promiscuous mode [ 532.853766][T31777] netlink: 'syz.2.11323': attribute type 1 has an invalid length. [ 532.872765][T31777] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11323'. [ 532.890687][T31249] veth1_vlan: entered promiscuous mode [ 533.074366][T31794] netlink: 'syz.3.11327': attribute type 10 has an invalid length. [ 533.092393][T31249] veth0_macvtap: entered promiscuous mode [ 533.118703][T31249] veth1_macvtap: entered promiscuous mode [ 533.169601][T31249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.210486][T31249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.264529][ T3483] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.299620][ T3483] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.337974][ T3483] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.359916][ T3483] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.524810][T31820] netlink: 'syz.3.11339': attribute type 16 has an invalid length. [ 533.548428][T31820] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11339'. [ 533.586298][T31825] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 533.599158][ T3483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.623025][ T3483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.714251][ T3483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.725461][ T3483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.725792][T31835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11343'. [ 533.746176][T31835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11343'. [ 533.755660][T31835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11343'. [ 534.255594][T31873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11359'. [ 534.915565][ T6081] Bluetooth: hci5: command tx timeout [ 534.957936][T31935] faux_driver vkms: [drm] Unknown color mode 7; guessing buffer size. [ 535.176676][T31949] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 535.453723][ T47] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 535.632781][ T47] usb 6-1: Using ep0 maxpacket: 8 [ 535.647788][ T47] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 535.662476][ T47] usb 6-1: config 0 has no interface number 0 [ 535.680189][ T47] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 8174, setting to 1024 [ 535.693521][ T47] usb 6-1: config 0 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 535.706934][ T47] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 535.716074][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.737275][ T47] usb 6-1: config 0 descriptor?? [ 535.755053][T31952] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 535.769741][ T47] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 535.796141][T31998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.022054][ T47] usb 6-1: USB disconnect, device number 2 [ 536.065919][T32027] 9p: Bad value for 'port' [ 536.305595][T32040] netlink: 'syz.3.11430': attribute type 46 has an invalid length. [ 536.442352][T32051] netlink: 'syz.1.11434': attribute type 2 has an invalid length. [ 536.766259][T32076] tmpfs: Bad value for 'mpol' [ 536.983758][T32093] IPv6: NLM_F_CREATE should be specified when creating new route [ 537.138763][ T6081] Bluetooth: hci5: command tx timeout [ 537.177312][T32110] nbd: illegal input index 895345970 [ 537.514181][T32136] kAFS: No cell specified [ 537.532901][T32138] netlink: 'syz.3.11472': attribute type 16 has an invalid length. [ 537.541592][T32138] netlink: 156 bytes leftover after parsing attributes in process `syz.3.11472'. [ 538.038998][T32178] ieee802154 phy1 wpan1: encryption failed: -22 [ 538.045964][T32176] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 538.231938][T32191] netlink: 9 bytes leftover after parsing attributes in process `syz.2.11494'. [ 538.270857][T32191] 0: renamed from hsr0 (while UP) [ 538.318095][T32191] 0: entered allmulticast mode [ 538.339182][T32191] hsr_slave_0: entered allmulticast mode [ 538.351003][T32191] hsr_slave_1: entered allmulticast mode [ 538.359411][T32191] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 538.460861][T32208] vivid-003: ================= START STATUS ================= [ 538.491130][T32208] vivid-003: Radio HW Seek Mode: Bounded [ 538.517090][T32208] vivid-003: Radio Programmable HW Seek: false [ 538.545250][T32208] vivid-003: RDS Rx I/O Mode: Block I/O [ 538.560333][T32208] vivid-003: Generate RBDS Instead of RDS: false [ 538.572747][T32208] vivid-003: RDS Reception: true [ 538.586773][T32208] vivid-003: RDS Program Type: 0 inactive [ 538.622560][T32208] vivid-003: RDS PS Name: inactive [ 538.636714][T32208] vivid-003: RDS Radio Text: inactive [ 538.646938][T32208] vivid-003: RDS Traffic Announcement: false inactive [ 538.667246][T32208] vivid-003: RDS Traffic Program: false inactive [ 538.674045][T32208] vivid-003: RDS Music: false inactive [ 538.682760][T32208] vivid-003: ================== END STATUS ================== [ 538.856815][T32238] bond0: entered promiscuous mode [ 538.873381][T32238] rose0: entered promiscuous mode [ 538.893606][T32238] bond0: entered allmulticast mode [ 538.900743][T32244] comedi comedi3: pcl726: I/O port conflict (0x8,16) [ 538.904868][T32238] rose0: entered allmulticast mode [ 539.350076][ T9] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 539.533123][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 539.561104][ T9] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 539.585143][ T9] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 539.603598][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 539.628562][ T9] usb 4-1: config 1 has no interface number 0 [ 539.634737][ T9] usb 4-1: config 1 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 539.670601][ T9] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 539.707356][ T9] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 539.752117][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.806175][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 539.946477][T32320] random: crng reseeded on system resumption [ 540.016140][ T9] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 540.039649][ T9] snd_usb_pod 4-1:1.1: invalid control EP [ 540.061435][ T9] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 540.078543][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 540.104077][ T9] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 540.279793][ T47] usb 4-1: USB disconnect, device number 119 [ 541.777989][ T10] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 541.825032][T32461] netlink: 'syz.3.11587': attribute type 11 has an invalid length. [ 541.971815][ T10] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 541.999027][ T10] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 542.021702][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.042470][ T10] usb 3-1: Product: syz [ 542.054453][ T10] usb 3-1: Manufacturer: syz [ 542.064348][ T10] usb 3-1: SerialNumber: syz [ 542.079226][ T10] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 542.276611][T32496] sctp: [Deprecated]: syz.3.11600 (pid 32496) Use of struct sctp_assoc_value in delayed_ack socket option. [ 542.276611][T32496] Use struct sctp_sack_info instead [ 542.429964][T32504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 542.528366][ T10] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 542.567291][ T10] usb 3-1: USB disconnect, device number 125 [ 542.626400][T32527] netlink: 'syz.1.11611': attribute type 1 has an invalid length. [ 542.643598][T32527] netlink: 228 bytes leftover after parsing attributes in process `syz.1.11611'. [ 542.751931][T32537] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 543.458949][T32596] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11642'. [ 543.615637][T32608] openvswitch: netlink: IP tunnel dst address not specified [ 543.678207][ T47] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 543.737953][T32616] MINIX-fs: unable to read superblock [ 543.861883][ T47] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 543.871384][ T47] usb 6-1: config 0 has no interface number 0 [ 543.877950][ T47] usb 6-1: config 0 interface 41 has no altsetting 0 [ 543.891295][ T47] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 543.916625][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.940156][ T47] usb 6-1: Product: syz [ 543.955605][ T47] usb 6-1: Manufacturer: syz [ 543.966317][ T47] usb 6-1: SerialNumber: syz [ 543.976491][ T47] usb 6-1: config 0 descriptor?? [ 544.078076][T32642] netlink: 'syz.2.11663': attribute type 1 has an invalid length. [ 544.242676][T32654] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 544.243162][T32653] isofs_fill_super: bread failed, dev=nbd1, iso_blknum=16, block=32 [ 544.425958][ T47] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 544.464760][ T47] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 544.503822][ T47] usb 6-1: USB disconnect, device number 3 [ 544.600310][T32677] nvme_fabrics: missing parameter 'transport=%s' [ 544.608419][T32677] nvme_fabrics: missing parameter 'nqn=%s' [ 544.944290][T32709] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 544.959137][T32712] CIFS mount error: No usable UNC path provided in device string! [ 544.959137][T32712] [ 544.981668][T32712] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 545.122145][T32726] netlink: 830 bytes leftover after parsing attributes in process `syz.5.11697'. [ 545.288106][T32739] raw_sendmsg: syz.1.11704 forgot to set AF_INET. Fix it! [ 546.114444][ T6192] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 546.140666][ T343] netlink: 'syz.1.11725': attribute type 4 has an invalid length. [ 546.170690][ T343] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.11725'. [ 546.299756][ T6192] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 546.337746][ T6192] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.366519][ T6192] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 546.382833][ T6192] usb 3-1: config 1 has no interface number 1 [ 546.390045][ T6192] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 546.411455][ T6192] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 546.439580][ T6192] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 546.459262][ T6192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.481087][ T6192] usb 3-1: Product: syz [ 546.486591][ T6192] usb 3-1: Manufacturer: syz [ 546.503837][ T6192] usb 3-1: SerialNumber: syz [ 546.757376][ T6192] usb 3-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 546.766629][ T6192] usb 3-1: MIDIStreaming interface descriptor not found [ 546.935100][ T6192] usb 3-1: USB disconnect, device number 126 [ 546.935860][ T406] comedi comedi4: bad chanlist[0]=0xfffffff8 chan=65528 range length=2 [ 547.046763][T28651] udevd[28651]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 547.425587][ T6214] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 547.623700][ T6214] usb 4-1: Using ep0 maxpacket: 16 [ 547.656547][ T6214] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 547.676216][ T6214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.693639][ T6214] usb 4-1: Product: syz [ 547.717237][ T6214] usb 4-1: Manufacturer: syz [ 547.725782][ T6214] usb 4-1: SerialNumber: syz [ 547.759031][ T6214] r8152-cfgselector 4-1: Unknown version 0x0000 [ 547.774842][ T6214] r8152-cfgselector 4-1: config 0 descriptor?? [ 548.276920][ T6246] r8152-cfgselector 4-1: USB disconnect, device number 120 [ 548.545899][ T547] netlink: 'syz.2.11781': attribute type 4 has an invalid length. [ 548.554204][ T547] netlink: 17 bytes leftover after parsing attributes in process `syz.2.11781'. [ 549.027845][ T585] netlink: 100 bytes leftover after parsing attributes in process `syz.2.11795'. [ 549.174790][ T596] x_tables: unsorted underflow at hook 2 [ 549.481375][ T623] IPVS: sync thread started: state = MASTER, mcast_ifn = ipvlan0, syncid = 0, id = 0 [ 550.685321][ T719] netlink: 'syz.3.11857': attribute type 21 has an invalid length. [ 550.938133][ T739] netlink: 'syz.2.11864': attribute type 3 has an invalid length. [ 551.204092][ T765] nbd: must specify at least one socket [ 551.630273][ T29] audit: type=1400 audit(530.518:201): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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entered promiscuous mode [ 551.883382][ T811] : left promiscuous mode [ 552.012880][ T826] random: crng reseeded on system resumption [ 552.089425][ T834] netlink: 'syz.5.11904': attribute type 6 has an invalid length. [ 552.238451][ T845] usb usb7: usbfs: process 845 (syz.2.11909) did not claim interface 0 before use [ 552.248511][ T845] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 552.726405][ T883] netlink: 'syz.2.11926': attribute type 16 has an invalid length. [ 552.761053][ T886] netlink: 'syz.5.11927': attribute type 4 has an invalid length. [ 552.769418][ T886] netlink: 152 bytes leftover after parsing attributes in process `syz.5.11927'. [ 552.802198][ T886] .`: renamed from bond0 (while UP) [ 553.059847][ T909] netlink: 'syz.3.11937': attribute type 1 has an invalid length. [ 553.099837][ T909] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11937'. [ 553.961593][ T1000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11969'. [ 554.104844][ T1009] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11973'. [ 554.120325][ T1011] netlink: 'syz.2.11974': attribute type 10 has an invalid length. [ 554.144248][ T1011] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11974'. [ 554.224399][ T1011] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 554.950804][ T1096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12002'. [ 555.324113][ T1124] netlink: 'syz.5.12015': attribute type 1 has an invalid length. [ 555.655476][ T1153] netlink: 'syz.1.12026': attribute type 2 has an invalid length. [ 556.181246][ T9] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 556.351610][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 556.363923][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.376563][ T1209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12049'. [ 556.393602][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 556.406429][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 556.426317][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.447769][ T9] usb 3-1: Product: syz [ 556.452508][ T9] usb 3-1: Manufacturer: syz [ 556.458835][ T9] usb 3-1: SerialNumber: syz [ 556.483591][ T9] usb 3-1: 0:2 : does not exist [ 556.642700][ T1225] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.12055'. [ 556.666472][ T1225] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 556.918434][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 556.996415][ T9] usb 3-1: USB disconnect, device number 127 [ 557.060664][T28898] udevd[28898]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 557.406779][ T1299] netlink: 72 bytes leftover after parsing attributes in process `syz.5.12077'. [ 557.610212][ T1315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12085'. [ 557.723133][ T1327] netlink: 'syz.2.12089': attribute type 10 has an invalid length. [ 557.895729][ T1340] netlink: 'syz.2.12094': attribute type 39 has an invalid length. [ 558.439220][ T1378] netlink: 'syz.5.12103': attribute type 10 has an invalid length. [ 558.461107][ T1383] netlink: 256 bytes leftover after parsing attributes in process `syz.2.12105'. [ 558.480282][ T1378] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12103'. [ 558.521864][ T1378] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 559.498473][ T1461] netlink: 'syz.5.12134': attribute type 1 has an invalid length. [ 559.534043][ T1461] netlink: 'syz.5.12134': attribute type 2 has an invalid length. [ 559.546741][ T1461] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12134'. [ 559.757804][ T1481] netlink: 'syz.2.12142': attribute type 11 has an invalid length. [ 560.425365][ T1529] netlink: 'syz.1.12160': attribute type 63 has an invalid length. [ 560.451117][ T1529] netlink: 5 bytes leftover after parsing attributes in process `syz.1.12160'. [ 560.562594][ T1540] 9p: Bad value for 'rfdno' [ 560.912542][ T1569] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 561.073120][ T1581] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 561.360404][ T1595] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 561.389083][ T1595] block device autoloading is deprecated and will be removed. [ 562.226480][ T1672] netlink: 45 bytes leftover after parsing attributes in process `syz.5.12220'. [ 562.588073][ T1707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12235'. [ 562.636353][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 562.816985][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 562.828587][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.847337][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.865923][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 562.878892][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.892900][ T10] usb 6-1: config 0 descriptor?? [ 562.922726][ T10] hub 6-1:0.0: USB hub found [ 563.143019][ T10] hub 6-1:0.0: config failed, can't read hub descriptor (err -90) [ 563.194198][ T1752] netlink: 'syz.1.12256': attribute type 10 has an invalid length. [ 563.202297][ T1752] netlink: 2 bytes leftover after parsing attributes in process `syz.1.12256'. [ 563.211342][ T1752] syz_tun: entered promiscuous mode [ 563.228863][ T1752] bridge0: port 2(syz_tun) entered blocking state [ 563.240264][ T1752] bridge0: port 2(syz_tun) entered disabled state [ 563.249697][ T1752] syz_tun: entered allmulticast mode [ 563.260743][ T1752] bridge0: port 2(syz_tun) entered blocking state [ 563.267429][ T1752] bridge0: port 2(syz_tun) entered forwarding state [ 563.352949][ T1760] CIFS mount error: No usable UNC path provided in device string! [ 563.352949][ T1760] [ 563.371123][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 563.373340][ T1760] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 563.395462][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 563.426992][ T10] usb 6-1: USB disconnect, device number 4 [ 563.736386][ T1791] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12272'. [ 563.825478][ T1799] netlink: 'syz.2.12276': attribute type 6 has an invalid length. [ 564.053539][ T1817] program syz.1.12285 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 564.064547][ T1818] misc userio: The device must be registered before sending interrupts [ 564.064585][ T1817] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 564.115071][ T1820] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12286'. [ 564.435518][ T1846] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.566482][ T1858] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 564.577623][ T1858] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 564.689570][ T1866] netlink: 'syz.5.12306': attribute type 1 has an invalid length. [ 564.729832][ T1866] netlink: 96 bytes leftover after parsing attributes in process `syz.5.12306'. [ 564.739253][ T1869] delete_channel: no stack [ 564.741434][ T1866] netlink: 658 bytes leftover after parsing attributes in process `syz.5.12306'. [ 564.766560][ T1866] netlink: 1 bytes leftover after parsing attributes in process `syz.5.12306'. [ 565.145156][ T1903] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12323'. [ 565.333828][ T1918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12327'. [ 566.021946][ T1965] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12347'. [ 566.228746][ T1982] netlink: 187320 bytes leftover after parsing attributes in process `syz.1.12353'. [ 566.652933][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 566.765357][ T2027] openvswitch: netlink: Flow actions attr not present in new flow. [ 566.846519][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 566.853563][ T2033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12376'. [ 566.859766][ T10] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.878071][ T10] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.896305][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 566.918122][ T10] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 566.932743][ T10] usb 3-1: Product: syz [ 566.942297][ T10] usb 3-1: Manufacturer: syz [ 566.965610][ T10] hub 3-1:4.0: USB hub found [ 567.182741][ T10] hub 3-1:4.0: 5 ports detected [ 567.193772][ T10] hub 3-1:4.0: insufficient power available to use all downstream ports [ 567.394423][ T2074] netlink: 'syz.3.12389': attribute type 21 has an invalid length. [ 567.416383][ T10] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 567.424823][ T2074] netlink: 388 bytes leftover after parsing attributes in process `syz.3.12389'. [ 567.438461][ T10] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 567.479863][ T10] usb 3-1: USB disconnect, device number 2 [ 567.769046][ T2112] overlayfs: conflicting options: userxattr,metacopy=on [ 567.882042][ T9] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 568.076098][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 568.098341][ T9] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 568.112480][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.124576][ T9] usb 4-1: Product: syz [ 568.129843][ T9] usb 4-1: Manufacturer: syz [ 568.134699][ T9] usb 4-1: SerialNumber: syz [ 568.144827][ T9] usb 4-1: config 0 descriptor?? [ 568.177455][ T2142] kAFS: No cell specified [ 568.450225][ T2166] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 568.606243][ T9] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 568.642772][ T9] peak_usb 4-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 568.735501][ T9] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 568.759048][ T9] usb 4-1: USB disconnect, device number 121 [ 569.382559][ T2249] netlink: 'syz.1.12452': attribute type 10 has an invalid length. [ 569.527580][ T10] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 569.628556][ T2268] netlink: 'syz.1.12460': attribute type 2 has an invalid length. [ 569.703077][ T10] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 569.730746][ T10] usb 4-1: config 1 has no interface number 0 [ 569.742848][ T10] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 569.764234][ T10] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 569.784000][ T10] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.810306][ T10] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 569.824789][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.833947][ T10] usb 4-1: Product: syz [ 569.840726][ T10] usb 4-1: Manufacturer: syz [ 569.846703][ T10] usb 4-1: SerialNumber: syz [ 569.861580][ T2238] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 569.910598][ T2286] netlink: 'syz.1.12467': attribute type 2 has an invalid length. [ 570.105002][ T2238] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 570.357940][ T10] usb 4-1: Incompatible driver and firmware versions [ 570.386156][ T10] usb 4-1: USB disconnect, device number 122 [ 570.409236][ T2329] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 570.498154][ T2338] netlink: 'syz.2.12484': attribute type 2 has an invalid length. [ 570.507737][ T2338] __nla_validate_parse: 1 callbacks suppressed [ 570.507754][ T2338] netlink: 232 bytes leftover after parsing attributes in process `syz.2.12484'. [ 570.607813][ T6192] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 570.682761][ T2354] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 570.690054][ T2354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.789749][ T6192] usb 2-1: Using ep0 maxpacket: 8 [ 570.796878][ T6192] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 570.814943][ T6192] usb 2-1: config 179 has no interface number 0 [ 570.823186][ T6192] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 570.845022][ T6192] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 570.865023][ T6192] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 570.891613][ T6192] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 570.905444][ T6192] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 570.926784][ T6192] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 570.936128][ T6192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.953779][ T2320] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 571.043517][ T2378] netlink: 'syz.5.12497': attribute type 16 has an invalid length. [ 571.052580][ T2378] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.12497'. [ 571.224058][ T2391] netlink: 2 bytes leftover after parsing attributes in process `syz.3.12503'. [ 571.323211][ T6192] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input68 [ 571.452417][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 571.468088][ T47] usb 2-1: USB disconnect, device number 119 [ 571.468100][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 571.483415][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 571.512339][ T2412] cgroup: subsys name conflicts with all [ 571.654149][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 571.662602][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 571.679829][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 571.703114][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 571.725497][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 571.745990][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 571.760144][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 571.770701][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.778838][ T2443] TCP: TCP_TX_DELAY enabled [ 571.784119][ T2440] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 571.805475][ T10] usb 6-1: config 0 descriptor?? [ 571.811282][ T2385] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 571.929930][ T2458] netlink: 'syz.2.12519': attribute type 27 has an invalid length. [ 572.104338][ T2473] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 572.298002][ T47] usb 6-1: USB disconnect, device number 5 [ 572.307295][ T6081] Bluetooth: hci6: Opcode 0x0c03 failed: -19 [ 572.511792][ T2515] netlink: 393 bytes leftover after parsing attributes in process `syz.3.12537'. [ 572.657632][ T2531] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12543'. [ 572.858006][ T2547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12550'. [ 573.005740][ T29] audit: type=1400 audit(550.516:202): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=2561 comm="syz.3.12555" [ 573.292871][ T2586] netlink: 220 bytes leftover after parsing attributes in process `syz.1.12562'. [ 573.324520][ T2586] unsupported nla_type 224 [ 573.369312][ T2592] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 573.389086][ T2592] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 573.413734][ T2592] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 573.424050][ T2592] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 573.568901][ T2609] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 573.735588][ T2631] netlink: 'syz.3.12576': attribute type 25 has an invalid length. [ 573.787156][ T2636] tmpfs: Bad value for 'mpol' [ 574.192333][ T2675] tmpfs: Bad value for 'mpol' [ 574.666744][ T2720] 9pnet_fd: p9_fd_create_unix (2720): problem connecting socket: ./file0: -111 [ 574.869733][ T29] audit: type=1400 audit(552.257:203): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=2744 comm="syz.1.12617" [ 575.013137][ T2762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12622'. [ 575.052134][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 575.070329][ T2764] netlink: 'syz.5.12624': attribute type 5 has an invalid length. [ 575.219206][ T2779] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 575.258956][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 575.277058][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 575.301835][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 575.315313][ T9] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 575.333296][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.361980][ T9] usb 3-1: Product: syz [ 575.367526][ T9] usb 3-1: Manufacturer: syz [ 575.383625][ T9] usb 3-1: SerialNumber: syz [ 575.393191][ T9] usb 3-1: config 0 descriptor?? [ 575.407077][ T2734] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 575.419592][ T2734] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 575.432974][ T9] usb 3-1: ucan: probing device on interface #0 [ 575.586763][ T6141] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 575.654993][ T9] usb 3-1: ucan: device protocol version 0 is not supported [ 575.655663][ T2814] ieee802154 phy1 wpan1: encryption failed: -22 [ 575.675482][ T9] usb 3-1: ucan: probe failed; try to update the device firmware [ 575.749079][ T6141] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 575.762021][ T6141] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 575.773954][ T6141] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 575.791151][ T6141] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 575.803199][ T6141] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.813944][ T6141] usb 6-1: Product: syz [ 575.818486][ T6141] usb 6-1: Manufacturer: syz [ 575.826896][ T6141] usb 6-1: SerialNumber: syz [ 575.838722][ T6141] hub 6-1:1.0: bad descriptor, ignoring hub [ 575.847449][ T6141] hub 6-1:1.0: probe with driver hub failed with error -5 [ 575.898535][ T6246] usb 3-1: USB disconnect, device number 3 [ 576.057355][ T6141] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 576.351193][ T2895] kAFS: unable to lookup cell '.,cL' [ 576.388087][ T6141] usb 6-1: USB disconnect, device number 6 [ 576.408982][ T6141] usblp0: removed [ 576.998221][ T2945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.280079][ T2967] netlink: 'syz.1.12694': attribute type 21 has an invalid length. [ 577.289716][ T2967] netlink: 156 bytes leftover after parsing attributes in process `syz.1.12694'. [ 577.357288][ T2975] netlink: 'syz.1.12698': attribute type 21 has an invalid length. [ 577.367063][ T2975] netlink: 100 bytes leftover after parsing attributes in process `syz.1.12698'. [ 577.542008][ T6192] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 577.609197][ T2996] netlink: 'syz.3.12706': attribute type 1 has an invalid length. [ 577.700142][ T3003] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12709'. [ 577.736240][ T6192] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 577.760382][ T6192] usb 3-1: config 0 has no interface number 0 [ 577.776243][ T3007] netlink: zone id is out of range [ 577.781437][ T6192] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 577.781465][ T6192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.781484][ T6192] usb 3-1: Product: syz [ 577.781499][ T6192] usb 3-1: Manufacturer: syz [ 577.781514][ T6192] usb 3-1: SerialNumber: syz [ 577.787222][ T6192] usb 3-1: config 0 descriptor?? [ 577.819118][ T3007] netlink: zone id is out of range [ 577.827059][ T3007] netlink: get zone limit has 4 unknown bytes [ 578.040107][ T3023] netlink: 'syz.3.12716': attribute type 9 has an invalid length. [ 578.068851][ T6192] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 578.088922][ T6192] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 578.111573][ T6192] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 578.129227][ T6192] usb 3-1: media controller created [ 578.157652][ T6192] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 578.172905][ T3032] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 578.289110][ T6192] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 578.404385][ T6192] usb 3-1: USB disconnect, device number 4 [ 578.481024][ T3065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12728'. [ 578.867027][ T6246] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 579.049282][ T6246] usb 2-1: Using ep0 maxpacket: 16 [ 579.064896][ T6246] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 579.095194][ T6246] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 579.114383][ T6246] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 579.121039][ T3119] Invalid option length (0) for dns_resolver key [ 579.124546][ T6246] usb 2-1: config 0 interface 0 has no altsetting 0 [ 579.142519][ T6246] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 579.153467][ T6246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.179423][ T6246] usb 2-1: Product: syz [ 579.187843][ T6246] usb 2-1: Manufacturer: syz [ 579.194162][ T6246] usb 2-1: SerialNumber: syz [ 579.219952][ T6246] usb 2-1: config 0 descriptor?? [ 579.302984][ T3131] netlink: 830 bytes leftover after parsing attributes in process `syz.5.12753'. [ 579.423253][ T3140] netlink: 'syz.3.12757': attribute type 1 has an invalid length. [ 579.431305][ T3140] netlink: 228 bytes leftover after parsing attributes in process `syz.3.12757'. [ 579.468710][ T6246] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input70 [ 579.490306][ T5185] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 579.566356][ T5185] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 579.639366][T28900] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 579.690732][ T5185] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 579.718255][ T6246] usb 2-1: USB disconnect, device number 120 [ 579.747937][ T3164] netlink: 'syz.2.12765': attribute type 7 has an invalid length. [ 579.917552][ T3184] befs: (nbd2): No write support. Marking filesystem read-only [ 579.974416][ T3191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12772'. [ 580.392858][ T3222] netlink: 'syz.5.12785': attribute type 2 has an invalid length. [ 580.403350][ T3223] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12786'. [ 580.614009][ T3239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12792'. [ 581.276291][ T3296] netlink: 'syz.1.12818': attribute type 8 has an invalid length. [ 581.463788][ T6246] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 581.644701][ T6246] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 581.664919][ T6246] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 581.686754][ T6246] usb 6-1: config 220 has no interface number 2 [ 581.693459][ T6246] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 581.707057][ T6246] usb 6-1: config 220 interface 0 has no altsetting 0 [ 581.717042][ T6246] usb 6-1: config 220 interface 76 has no altsetting 0 [ 581.724310][ T6246] usb 6-1: config 220 interface 1 has no altsetting 0 [ 581.739544][ T6246] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 581.758387][ T6246] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.775376][ T6246] usb 6-1: Product: syz [ 581.785387][ T6246] usb 6-1: Manufacturer: syz [ 581.790815][ T6246] usb 6-1: SerialNumber: syz [ 581.851518][ T10] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 581.930859][ T3345] netlink: 'syz.3.12840': attribute type 46 has an invalid length. [ 582.023577][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 582.035322][ T6246] usb 6-1: selecting invalid altsetting 0 [ 582.043661][ T10] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 582.063995][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.065340][ T6246] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 582.076459][ T10] usb 2-1: Product: syz [ 582.083971][ T6246] uvcvideo 6-1:220.0: No valid video chain found. [ 582.101629][ T10] usb 2-1: Manufacturer: syz [ 582.112420][ T10] usb 2-1: SerialNumber: syz [ 582.113202][ T6246] usb 6-1: selecting invalid altsetting 0 [ 582.132092][ T6246] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 582.133701][ T10] usb 2-1: config 0 descriptor?? [ 582.159463][ T6246] usb 6-1: USB disconnect, device number 7 [ 582.164066][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 582.491999][ T3385] netlink: 'syz.3.12853': attribute type 11 has an invalid length. [ 582.596242][ T10] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 582.618761][ T10] se401 2-1:0.0: probe with driver se401 failed with error -71 [ 582.638459][ T10] usb 2-1: USB disconnect, device number 121 [ 582.779390][ T3422] openvswitch: netlink: IP tunnel TTL not specified. [ 582.864364][ T3427] netlink: 9 bytes leftover after parsing attributes in process `syz.5.12862'. [ 582.919081][ T3427] netlink: 9 bytes leftover after parsing attributes in process `syz.5.12862'. [ 582.958850][ T3434] veth0_to_bond: mtu less than device minimum [ 583.298023][ T3458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12875'. [ 583.317649][ T3459] ieee802154 phy1 wpan1: encryption failed: -22 [ 583.432345][ T3467] netlink: 56 bytes leftover after parsing attributes in process `syz.1.12878'. [ 583.532296][ T3475] x_tables: duplicate underflow at hook 1 [ 583.715193][ T3490] netlink: 'syz.2.12889': attribute type 11 has an invalid length. [ 584.291517][ T3540] tc_dump_action: action bad kind [ 584.364351][ T3545] sg_write: data in/out 294879/136 bytes for SCSI command 0x2-- guessing data in; [ 584.364351][ T3545] program syz.2.12908 not setting count and/or reply_len properly [ 585.115206][ T3604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12934'. [ 585.679018][ T3653] netlink: 212 bytes leftover after parsing attributes in process `syz.2.12956'. [ 585.800366][ T3659] netlink: 'syz.1.12957': attribute type 28 has an invalid length. [ 585.958499][ T3673] netlink: 'syz.2.12964': attribute type 2 has an invalid length. [ 585.994408][ T3673] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12964'. [ 586.106237][ T3684] netlink: 168 bytes leftover after parsing attributes in process `syz.5.12968'. [ 586.129516][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 586.586493][ T3725] QAT: failed to copy from user cfg_data. [ 586.615708][ T10] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 586.754226][ T3739] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12990'. [ 586.798004][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.819506][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.832532][ T10] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 586.844446][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.856082][ T10] usb 2-1: config 0 descriptor?? [ 586.873824][ T10] usbhid 2-1:0.0: fixing wrong optional hid class descriptors count [ 586.885384][ T10] usbhid 2-1:0.0: can't add hid device: -22 [ 586.891429][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 587.131986][ T10] usb 2-1: USB disconnect, device number 122 [ 587.222771][ T3783] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 587.241058][ T3786] netlink: 256 bytes leftover after parsing attributes in process `syz.2.13005'. [ 587.331527][ T3792] openvswitch: netlink: EtherType 80 is less than min 600 [ 587.393414][ T3796] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 587.405564][ T6246] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 587.565476][ T6246] usb 4-1: Using ep0 maxpacket: 8 [ 587.583462][ T6246] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.594796][ T6246] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 587.604273][ T6246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.617108][ T6246] usb 4-1: config 0 descriptor?? [ 587.626414][ T6246] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 588.068908][ T6246] gspca_vc032x: reg_w err -71 [ 588.074471][ T6246] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 588.096232][ T6246] usb 4-1: USB disconnect, device number 123 [ 588.188887][ T3856] netlink: 'syz.5.13027': attribute type 10 has an invalid length. [ 588.239463][ T3859] Invalid source name [ 588.243713][ T3859] UBIFS error (pid: 3859): cannot open "./file0", error -22 [ 588.259349][ T3861] cgroup: Invalid name [ 588.959478][ T3914] __nla_validate_parse: 1 callbacks suppressed [ 588.959497][ T3914] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13043'. [ 589.607309][ T6192] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 589.624784][ T3969] netlink: 188 bytes leftover after parsing attributes in process `syz.5.13063'. [ 589.794741][ T6192] usb 4-1: too many configurations: 125, using maximum allowed: 8 [ 589.842551][ T6192] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 589.868922][ T6192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.896717][ T6192] usb 4-1: Product: syz [ 589.905693][ T6192] usb 4-1: Manufacturer: syz [ 589.918086][ T6192] usb 4-1: SerialNumber: syz [ 589.960255][ T6192] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 590.000641][ T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 590.270381][ C0] usb 4-1: ath9k_htc: invalid pkt_len (edff) [ 590.357235][ T4017] pimreg: left allmulticast mode [ 590.378006][ T4017] dvmrp12: left allmulticast mode [ 590.497492][ T6246] usb 4-1: USB disconnect, device number 124 [ 591.167969][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 591.191299][ T10] ath9k_htc: Failed to initialize the device [ 591.212501][ T6246] usb 4-1: ath9k_htc: USB layer deinitialized [ 592.893529][ T4217] netlink: 'syz.2.13144': attribute type 1 has an invalid length. [ 593.028422][ T4225] netlink: 128 bytes leftover after parsing attributes in process `syz.2.13149'. [ 593.064006][ T4225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13149'. [ 593.486761][ T4258] netlink: 'syz.3.13162': attribute type 13 has an invalid length. [ 593.506983][ T4258] netlink: 164 bytes leftover after parsing attributes in process `syz.3.13162'. [ 593.527729][ T4258] erspan0: refused to change device tx_queue_len [ 593.810222][ T4284] 8021q: VLANs not supported on lo [ 593.897685][ T4288] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13174'. [ 594.031753][ T4296] x_tables: duplicate entry at hook 2 [ 594.530324][ T4334] openvswitch: netlink: EtherType 50a is less than min 600 [ 594.805667][ T4359] overlayfs: overlapping lowerdir path [ 594.816698][ T4361] netlink: 'syz.1.13207': attribute type 41 has an invalid length. [ 594.826762][ T4361] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13207'. [ 595.209230][ T4391] netlink: 'syz.3.13220': attribute type 21 has an invalid length. [ 595.217451][ T4391] netlink: 'syz.3.13220': attribute type 6 has an invalid length. [ 595.225756][ T4391] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13220'. [ 595.401411][ T4408] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 595.476423][ T4415] netlink: 'syz.3.13227': attribute type 63 has an invalid length. [ 595.484880][ T4415] netlink: 5 bytes leftover after parsing attributes in process `syz.3.13227'. [ 595.493941][ T4415] gretap0: entered allmulticast mode [ 595.500469][ T4415] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 595.575060][ T4420] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13229'. [ 595.587338][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 595.751065][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 595.760272][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 595.770613][ T10] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 595.787264][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 595.799424][ T10] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 595.823293][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 595.846444][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 595.867591][ T10] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 595.882382][ T10] usb 6-1: config 168 interface 0 has no altsetting 0 [ 595.894293][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 595.901984][ T10] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 595.930488][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 595.952834][ T10] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 595.974707][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 595.989831][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 596.015347][ T10] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 596.039561][ T10] usb 6-1: config 168 interface 0 has no altsetting 0 [ 596.050561][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 596.058151][ T10] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 596.070758][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 596.086867][ T10] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 596.101038][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 596.113492][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 596.146362][ T10] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 596.173107][ T10] usb 6-1: config 168 interface 0 has no altsetting 0 [ 596.190737][ T10] usb 6-1: string descriptor 0 read error: -22 [ 596.199199][ T10] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 596.209981][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.243489][ T10] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 596.438406][ T4472] openvswitch: netlink: Key type 243 is out of range max 32 [ 596.533548][ T10] usb 6-1: USB disconnect, device number 8 [ 597.018546][ T4523] Invalid source name [ 597.024142][ T4523] UBIFS error (pid: 4523): cannot open "./file0", error -22 [ 597.057126][ T4525] ptrace attach of "./syz-executor exec"[6078] was attempted by "./syz-executor exec"[4525] [ 597.118915][ T6246] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 597.293565][ T6246] usb 3-1: unable to get BOS descriptor or descriptor too short [ 597.323512][ T6246] usb 3-1: not running at top speed; connect to a high speed hub [ 597.333306][ T4538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 597.358743][ T6246] usb 3-1: config 1 has an invalid descriptor of length 254, skipping remainder of the config [ 597.381954][ T6246] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 597.412131][ T6246] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 597.432186][ T6246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.450548][ T6246] usb 3-1: Product: syz [ 597.461546][ T6246] usb 3-1: Manufacturer: syz [ 597.472397][ T6246] usb 3-1: SerialNumber: syz [ 597.567247][ T4551] tmpfs: Unknown parameter 'func' [ 597.712246][ T4558] syz.5.13286: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 597.745823][ T4558] CPU: 0 UID: 0 PID: 4558 Comm: syz.5.13286 Not tainted syzkaller #0 PREEMPT(full) [ 597.745849][ T4558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 597.745866][ T4558] Call Trace: [ 597.745948][ T4558] [ 597.746017][ T4558] dump_stack_lvl+0xe8/0x150 [ 597.746106][ T4558] warn_alloc+0x249/0x340 [ 597.746126][ T4558] ? stack_trace_save+0xa9/0x100 [ 597.746193][ T4558] ? __pfx_warn_alloc+0x10/0x10 [ 597.746219][ T4558] ? kasan_save_track+0x4f/0x80 [ 597.746247][ T4558] ? kasan_save_track+0x3e/0x80 [ 597.746273][ T4558] ? __kasan_kmalloc+0x93/0xb0 [ 597.746289][ T4558] ? __kmalloc_cache_noprof+0x31c/0x660 [ 597.746315][ T4558] ? xskq_create+0x56/0x170 [ 597.746337][ T4558] ? xsk_setsockopt+0x54c/0x990 [ 597.746356][ T4558] ? do_sock_setsockopt+0x17c/0x1b0 [ 597.746380][ T4558] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 597.746402][ T4558] ? do_syscall_64+0x14d/0xf80 [ 597.746431][ T4558] __vmalloc_node_range_noprof+0x132/0x1750 [ 597.746488][ T4558] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 597.746519][ T4558] ? __kasan_kmalloc+0x93/0xb0 [ 597.746543][ T4558] vmalloc_user_noprof+0xad/0xe0 [ 597.746572][ T4558] ? xskq_create+0xbf/0x170 [ 597.746595][ T4558] xskq_create+0xbf/0x170 [ 597.746619][ T4558] xsk_init_queue+0x8a/0xe0 [ 597.746640][ T4558] xsk_setsockopt+0x54c/0x990 [ 597.746663][ T4558] ? __pfx_xsk_setsockopt+0x10/0x10 [ 597.746684][ T4558] ? __pfx_aa_sk_perm+0x10/0x10 [ 597.746711][ T4558] ? aa_sock_opt_perm+0xff/0x1a0 [ 597.746737][ T4558] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 597.746761][ T4558] ? __pfx_xsk_setsockopt+0x10/0x10 [ 597.746783][ T4558] do_sock_setsockopt+0x17c/0x1b0 [ 597.746811][ T4558] __x64_sys_setsockopt+0x13d/0x1b0 [ 597.746842][ T4558] do_syscall_64+0x14d/0xf80 [ 597.746868][ T4558] ? trace_irq_disable+0x3b/0x150 [ 597.746892][ T4558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.746911][ T4558] ? clear_bhb_loop+0x40/0x90 [ 597.746935][ T4558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.746963][ T4558] RIP: 0033:0x7f04d9d9c799 [ 597.747036][ T4558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.747052][ T4558] RSP: 002b:00007f04dacce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 597.747104][ T4558] RAX: ffffffffffffffda RBX: 00007f04da015fa0 RCX: 00007f04d9d9c799 [ 597.747117][ T4558] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 597.747129][ T4558] RBP: 00007f04d9e32c99 R08: 0000000000000004 R09: 0000000000000000 [ 597.747141][ T4558] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.747161][ T4558] R13: 00007f04da016038 R14: 00007f04da015fa0 R15: 00007ffd32656cb8 [ 597.747190][ T4558] [ 597.748719][ T4558] Mem-Info: [ 597.866518][ T6246] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 597.873243][ T4558] active_anon:6513 inactive_anon:0 isolated_anon:0 [ 597.873243][ T4558] active_file:5591 inactive_file:48584 isolated_file:0 [ 597.873243][ T4558] unevictable:768 dirty:346 writeback:0 [ 597.873243][ T4558] slab_reclaimable:12459 slab_unreclaimable:113211 [ 597.873243][ T4558] mapped:35236 shmem:1412 pagetables:1343 [ 597.873243][ T4558] sec_pagetables:0 bounce:0 [ 597.873243][ T4558] kernel_misc_reclaimable:0 [ 597.873243][ T4558] free:1284916 free_pcp:9199 free_cma:0 [ 597.903782][ T6246] usb 3-1: USB disconnect, device number 5 [ 597.925036][T28898] udevd[28898]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 597.983022][ T4558] Node 0 active_anon:26052kB inactive_anon:0kB active_file:22364kB inactive_file:194080kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140888kB dirty:1384kB writeback:0kB shmem:4112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12256kB pagetables:5124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 598.150716][ T4558] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:256kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 598.182195][ T4558] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 598.187811][ T6192] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 598.213017][ T4558] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 598.225802][ T4558] Node 0 DMA32 free:1190676kB boost:0kB min:34080kB low:42600kB high:51120kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26252kB inactive_anon:0kB active_file:22364kB inactive_file:194080kB unevictable:1536kB writepending:1384kB zspages:0kB present:3129332kB managed:2540392kB mlocked:0kB bounce:0kB free_pcp:36628kB local_pcp:20184kB free_cma:0kB [ 598.261201][ T4558] lowmem_reserve[]: 0 0 1 1 1 [ 598.267037][ T4558] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1440kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 598.299057][ T4558] lowmem_reserve[]: 0 0 0 0 0 [ 598.303816][ T4558] Node 1 Normal free:3933644kB boost:0kB min:55800kB low:69748kB high:83696kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:256kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 598.335799][ T4558] lowmem_reserve[]: 0 0 0 0 0 [ 598.342092][ T4558] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 598.356670][ T4558] Node 0 DMA32: 6055*4kB (UM) 4329*8kB (UME) 2157*16kB (UME) 329*32kB (UME) 143*64kB (UME) 93*128kB (UM) 33*256kB (UM) 33*512kB (UME) 44*1024kB (UME) 2*2048kB (M) 242*4096kB (M) = 1190676kB [ 598.356852][ T4558] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 598.389419][ T4558] Node 1 Normal: 1*4kB (M) 3*8kB (U) 11*16kB (U) 6*32kB (U) 5*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (M) 958*4096kB (UM) = 3933644kB [ 598.407127][ T4558] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 598.416995][ T4558] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 598.435535][ T6192] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 598.443888][ T4558] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 598.454502][ T6192] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 598.464708][ T4558] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 598.478644][ T6192] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 598.480168][ T4558] 55583 total pagecache pages [ 598.492170][ T4595] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13293'. [ 598.502388][ T6192] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 598.508008][ T4558] 0 pages in swap cache [ 598.515743][ T6192] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 598.520548][ T4558] Free swap = 124996kB [ 598.525675][ T4595] hsr_slave_1: left promiscuous mode [ 598.529867][ T4558] Total swap = 124996kB [ 598.534778][ T6192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.539035][ T4558] 2097051 pages RAM [ 598.552119][ T4558] 0 pages HighMem/MovableOnly [ 598.554918][ T6192] usb 4-1: Product: syz [ 598.561563][ T6192] usb 4-1: Manufacturer: syz [ 598.566517][ T6192] usb 4-1: SerialNumber: syz [ 598.577860][ T4558] 429978 pages reserved [ 598.593291][ T6192] usb 4-1: config 0 descriptor?? [ 598.598433][ T4558] 0 pages cma reserved [ 598.611047][ T4603] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13295'. [ 598.611681][ T6192] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 598.761460][ T4613] netlink: 'syz.2.13298': attribute type 1 has an invalid length. [ 598.898101][ T6192] ums-isd200 4-1:0.0: probe with driver ums-isd200 failed with error -22 [ 599.129062][ T9] usb 4-1: USB disconnect, device number 125 [ 599.153145][ T4641] netlink: zone id is out of range [ 599.160059][ T4641] netlink: set zone limit has 8 unknown bytes [ 600.105154][ T4723] binder: 4722:4723 ioctl 4018620d 0 returned -22 [ 600.167971][ T4727] No control pipe specified [ 600.311102][ T4740] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 600.910982][ T4787] trusted_key: encrypted_key: hex blob is missing [ 601.035489][ T4796] netlink: 'syz.1.13374': attribute type 23 has an invalid length. [ 601.121642][ T4804] IPv6: NLM_F_CREATE should be specified when creating new route [ 601.809979][ T6246] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 601.992927][ T6246] usb 6-1: Using ep0 maxpacket: 8 [ 602.004533][ T6246] usb 6-1: unable to get BOS descriptor or descriptor too short [ 602.031560][ T6246] usb 6-1: config 0 has an invalid interface number: 58 but max is 0 [ 602.050539][ T6246] usb 6-1: config 0 has no interface number 0 [ 602.060230][ T6246] usb 6-1: config 0 interface 58 has no altsetting 0 [ 602.082011][ T6246] usb 6-1: New USB device found, idVendor=056e, idProduct=4002, bcdDevice=98.ec [ 602.103176][ T6246] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.123041][ T6246] usb 6-1: Product: syz [ 602.138801][ T6246] usb 6-1: Manufacturer: syz [ 602.143659][ T6246] usb 6-1: SerialNumber: syz [ 602.156396][ T6246] usb 6-1: config 0 descriptor?? [ 602.174787][ T6246] pegasus 6-1:0.58: Missing or invalid endpoints [ 602.181384][ T4875] netlink: 'syz.3.13408': attribute type 27 has an invalid length. [ 602.390301][ T4889] netlink: 88 bytes leftover after parsing attributes in process `syz.1.13413'. [ 602.437836][ T6246] usb 6-1: USB disconnect, device number 9 [ 602.509200][ T4903] JFS: discard option not supported on device [ 602.519540][ T4903] Mount JFS Failure: -22 [ 602.525278][ T4903] jfs_mount failed w/return code = -22 [ 602.828768][ T4928] netlink: 'syz.3.13429': attribute type 1 has an invalid length. [ 602.845997][ T4930] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13430'. [ 602.977594][ T4940] netlink: 'syz.2.13434': attribute type 33 has an invalid length. [ 602.994759][ T4940] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13434'. [ 603.261922][ T4962] netlink: 830 bytes leftover after parsing attributes in process `syz.3.13445'. [ 603.644095][ T4992] netdevsim netdevsim5 : renamed from netdevsim0 (while UP) [ 603.792978][ T5001] netlink: 'syz.5.13462': attribute type 2 has an invalid length. [ 603.804664][ T5001] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13462'. [ 604.084200][ T5022] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13472'. [ 604.110559][ T5022] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13472'. [ 604.120137][ T5022] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13472'. [ 604.738045][ T6246] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 604.911873][ T6246] usb 6-1: Using ep0 maxpacket: 8 [ 604.924000][ T6246] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 604.954276][ T6246] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 604.978211][ T6246] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 605.003534][ T6246] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 605.019553][ T6246] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 605.030177][ T6246] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.280128][ T6246] usb 6-1: usb_control_msg returned -71 [ 605.299932][ T6246] usbtmc 6-1:16.0: can't read capabilities [ 605.339850][ T6246] usb 6-1: USB disconnect, device number 10 [ 605.345621][ T5131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13519'. [ 605.359077][ T5131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13519'. [ 605.588362][ T5154] openvswitch: netlink: Invalid VLAN frame [ 605.757968][ T5172] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 605.846771][ T5179] netlink: zone id is out of range [ 605.853887][ T5179] netlink: zone id is out of range [ 605.861205][ T5179] netlink: zone id is out of range [ 605.883991][ T5179] netlink: zone id is out of range [ 605.891229][ T5179] netlink: zone id is out of range [ 605.903881][ T5179] netlink: zone id is out of range [ 605.926024][ T5179] netlink: zone id is out of range [ 605.940825][ T5179] netlink: zone id is out of range [ 605.963114][ T5179] netlink: zone id is out of range [ 606.055119][ T5196] netlink: 'syz.1.13543': attribute type 12 has an invalid length. [ 606.256609][ T5215] netlink: 'syz.3.13551': attribute type 21 has an invalid length. [ 606.274197][ T5215] netlink: 'syz.3.13551': attribute type 6 has an invalid length. [ 606.455195][ T5226] netlink: 'syz.3.13555': attribute type 1 has an invalid length. [ 606.808292][ T5256] netlink: 'syz.3.13570': attribute type 6 has an invalid length. [ 606.823378][ T5256] netlink: 'syz.3.13570': attribute type 5 has an invalid length. [ 607.447573][ T5295] netlink: 'syz.3.13588': attribute type 1 has an invalid length. [ 607.729717][ T5307] gfs2: error -5 reading superblock [ 608.280739][ T5267] syz.5.13574 (5267): drop_caches: 2 [ 608.902026][ T5382] netlink: 'syz.1.13629': attribute type 1 has an invalid length. [ 608.935062][ T5382] __nla_validate_parse: 6 callbacks suppressed [ 608.935081][ T5382] netlink: 224 bytes leftover after parsing attributes in process `syz.1.13629'. [ 609.077355][ T5398] sctp: [Deprecated]: syz.3.13636 (pid 5398) Use of struct sctp_assoc_value in delayed_ack socket option. [ 609.077355][ T5398] Use struct sctp_sack_info instead [ 609.265293][ T5410] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 609.386001][ T5420] dlm: no locking on control device [ 610.048000][ T5471] netlink: 'syz.2.13666': attribute type 1 has an invalid length. [ 610.081873][ T5471] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13666'. [ 610.292338][ T5492] sctp: [Deprecated]: syz.3.13674 (pid 5492) Use of struct sctp_assoc_value in delayed_ack socket option. [ 610.292338][ T5492] Use struct sctp_sack_info instead [ 611.174437][ T5570] usb usb8: usbfs: process 5570 (syz.3.13708) did not claim interface 0 before use [ 611.412592][ T5590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13715'. [ 611.458709][ T5595] netlink: 'syz.3.13718': attribute type 2 has an invalid length. [ 611.494553][ T5595] netlink: 'syz.3.13718': attribute type 1 has an invalid length. [ 611.780174][ T5621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13730'. [ 612.504430][ T5687] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 612.596108][ T5695] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 612.827995][ T5711] netlink: 'syz.2.13766': attribute type 1 has an invalid length. [ 612.836413][ T5711] netlink: 'syz.2.13766': attribute type 2 has an invalid length. [ 612.845418][ T5711] netlink: 'syz.2.13766': attribute type 1 has an invalid length. [ 612.950756][ T5718] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.13771'. [ 613.692890][ T9] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 613.874703][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 613.891455][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 613.906153][ T5793] netlink: 5 bytes leftover after parsing attributes in process `syz.1.13801'. [ 613.918081][ T9] usb 4-1: config 2 has an invalid interface number: 238 but max is 0 [ 613.936708][ T9] usb 4-1: config 2 has no interface number 0 [ 613.963456][ T9] usb 4-1: config 2 interface 238 has no altsetting 0 [ 613.974212][ T9] usb 4-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice=79.f1 [ 613.989906][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.999140][ T9] usb 4-1: Product: syz [ 614.004989][ T9] usb 4-1: Manufacturer: syz [ 614.009713][ T9] usb 4-1: SerialNumber: syz [ 614.119198][ T5806] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 614.255825][ T9] usb-storage 4-1:2.238: USB Mass Storage device detected [ 614.304456][ T5833] ieee802154 phy1 wpan1: encryption failed: -22 [ 614.313560][ T9] usb-storage 4-1:2.238: Quirks match for vid 152d pid 0539: 4000000 [ 614.398127][ T9] usb 4-1: USB disconnect, device number 126 [ 614.752511][ T5872] netlink: 'syz.1.13827': attribute type 10 has an invalid length. [ 614.762183][ T5872] netlink: 156 bytes leftover after parsing attributes in process `syz.1.13827'. [ 614.961548][ T5886] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 614.974343][ T5886] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 615.061427][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13837'. [ 615.070564][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13837'. [ 615.220470][ T5906] usb usb8: usbfs: process 5906 (syz.5.13840) did not claim interface 0 before use [ 615.452885][ T5925] netlink: 294 bytes leftover after parsing attributes in process `syz.5.13849'. [ 615.463086][ T5925] net_ratelimit: 3 callbacks suppressed [ 615.463182][ T5925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.783554][ T5949] netlink: 'syz.3.13860': attribute type 1 has an invalid length. [ 615.804720][ T5949] netlink: 476 bytes leftover after parsing attributes in process `syz.3.13860'. [ 615.820779][ T5949] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.13860'. [ 616.045784][ T5968] netlink: 'syz.1.13868': attribute type 11 has an invalid length. [ 616.084217][ T5968] netlink: 168 bytes leftover after parsing attributes in process `syz.1.13868'. [ 616.221202][ T5982] random: crng reseeded on system resumption [ 616.421041][ T5996] netlink: 'syz.2.13880': attribute type 2 has an invalid length. [ 616.448635][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13881'. [ 616.501530][ T6003] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.13883'. [ 616.519522][ T6003] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 617.050047][ T29] audit: type=1400 audit(591.738:204): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=6053 comm="syz.3.13903" [ 617.166150][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 617.358808][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 617.365197][ T6086] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 617.372282][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 617.392224][ T9] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 617.409085][ T9] usb 6-1: config 0 has no interface number 0 [ 617.422260][ T9] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 617.440870][ T9] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 617.452547][ T9] usb 6-1: config 0 interface 88 has no altsetting 0 [ 617.465979][ T9] usb 6-1: string descriptor 0 read error: -22 [ 617.472373][ T9] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 617.484320][ T9] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 617.501609][ T9] usb 6-1: config 0 descriptor?? [ 617.520846][ T9] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input72 [ 617.527366][ T6121] netlink: 'syz.2.13920': attribute type 21 has an invalid length. [ 617.541271][ T6121] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13920'. [ 617.677426][ T6148] openvswitch: netlink: IP tunnel dst address not specified [ 617.684899][T31715] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 617.743321][T28898] udevd[28898]: Error opening device "/dev/input/event4": Input/output error [ 617.757869][T28898] udevd[28898]: Unable to EVIOCGABS device "/dev/input/event4" [ 617.773874][T28898] udevd[28898]: Unable to EVIOCGABS device "/dev/input/event4" [ 617.849720][T31715] usb 2-1: Using ep0 maxpacket: 8 [ 617.859828][T31715] usb 2-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 617.878825][T31715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.899555][T31715] usb 2-1: config 0 descriptor?? [ 617.917572][T31715] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 617.960896][ T6246] usb 6-1: USB disconnect, device number 11 [ 618.132830][T31715] dvb-usb: bulk message failed: -22 (1/0) [ 618.145495][T31715] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 618.169275][T31715] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 618.180191][T31715] usb 2-1: media controller created [ 618.207769][T31715] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 618.280939][T31715] DVB: Unable to find symbol lgdt330x_attach() [ 618.287453][T31715] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 618.313138][T31715] dvb-usb: bulk message failed: -22 (1/0) [ 618.329406][T31715] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 618.396438][ T10] usb 2-1: USB disconnect, device number 123 [ 618.470370][ T10] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 619.079582][ T6262] bridge0: port 3(veth0_to_bridge) entered blocking state [ 619.113218][ T6262] bridge0: port 3(veth0_to_bridge) entered disabled state [ 619.134609][ T6262] veth0_to_bridge: entered allmulticast mode [ 619.156314][ T6262] veth0_to_bridge: entered promiscuous mode [ 619.162951][ T6262] bridge0: port 3(veth0_to_bridge) entered blocking state [ 619.172126][ T6262] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 619.281105][ T6272] exFAT-fs (nbd3): unable to read boot sector [ 619.305303][ T6272] exFAT-fs (nbd3): failed to read boot sector [ 619.333986][ T6272] exFAT-fs (nbd3): failed to recognize exfat type [ 620.160485][ T6340] __nla_validate_parse: 2 callbacks suppressed [ 620.160504][ T6340] netlink: 52 bytes leftover after parsing attributes in process `syz.5.13988'. [ 620.185193][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13991'. [ 620.206997][ T6346] netlink: 'syz.1.13992': attribute type 13 has an invalid length. [ 620.359371][ T6361] sctp: [Deprecated]: syz.3.13996 (pid 6361) Use of int in maxseg socket option. [ 620.359371][ T6361] Use struct sctp_assoc_value instead [ 620.564226][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 620.679181][ T6387] netlink: 'syz.3.14009': attribute type 1 has an invalid length. [ 620.752618][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 620.770711][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 620.788559][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.807308][ T10] usb 3-1: Product: syz [ 620.813814][ T10] usb 3-1: Manufacturer: syz [ 620.818538][ T10] usb 3-1: SerialNumber: syz [ 620.829813][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 620.837641][ T10] r8152-cfgselector 3-1: config 0 descriptor?? [ 620.856788][ T6401] netlink: 'syz.3.14014': attribute type 75 has an invalid length. [ 621.300482][ T6141] r8152-cfgselector 3-1: USB disconnect, device number 6 [ 621.628689][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14041'. [ 621.875081][ T6485] 9p: Unknown access argument : -22 [ 621.884182][ T6487] netlink: 'syz.3.14048': attribute type 28 has an invalid length. [ 622.022052][ T6496] netlink: 'syz.3.14052': attribute type 4 has an invalid length. [ 622.084114][ T6500] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14055'. [ 622.146446][ T6503] openvswitch: netlink: Duplicate key (type 21). [ 622.294648][ T6516] kAFS: unable to lookup cell '@mTsyz0' [ 622.705504][ T6551] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14077'. [ 623.404945][ T6610] tmpfs: Bad value for 'mpol' [ 623.472645][ T6612] x_tables: unsorted underflow at hook 1 [ 623.834320][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 623.952508][ T6657] netlink: 'syz.3.14120': attribute type 27 has an invalid length. [ 623.983489][ T6657] netlink: 164 bytes leftover after parsing attributes in process `syz.3.14120'. [ 624.010533][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 624.023892][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 624.045922][ T10] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 624.062985][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.090573][ T10] usb 6-1: Product: syz [ 624.094870][ T10] usb 6-1: Manufacturer: syz [ 624.099903][ T10] usb 6-1: SerialNumber: syz [ 624.186770][ T6674] netlink: 220 bytes leftover after parsing attributes in process `syz.1.14128'. [ 624.367428][ T29] audit: type=1400 audit(598.579:205): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=6688 comm="syz.3.14134" [ 624.571511][ T6141] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 624.573958][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 624.700534][ T10] usb 6-1: USB disconnect, device number 12 [ 624.745687][ T6141] usb 3-1: Using ep0 maxpacket: 32 [ 624.770058][ T6141] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 624.771422][T28648] udevd[28648]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 624.795004][ T6141] usb 3-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 624.825494][ T6141] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.857119][ T6141] usb 3-1: Product: syz [ 624.863641][ T6141] usb 3-1: Manufacturer: syz [ 624.870637][ T6141] usb 3-1: SerialNumber: syz [ 625.257452][ T6141] usb 3-1: USB disconnect, device number 7 [ 625.324098][T28900] udevd[28900]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 625.836649][ T6828] IPv6: NLM_F_CREATE should be specified when creating new route [ 626.500520][ T6885] netlink: 'syz.2.14199': attribute type 10 has an invalid length. [ 626.679345][ T6903] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 626.686873][ T6903] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 626.719342][ T10] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 626.724837][ T6910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14206'. [ 626.890107][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 626.910196][ T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 626.910235][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.910255][ T10] usb 2-1: Product: syz [ 626.910269][ T10] usb 2-1: Manufacturer: syz [ 626.910284][ T10] usb 2-1: SerialNumber: syz [ 626.922715][ T10] usb 2-1: config 0 descriptor?? [ 626.940246][ T10] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 627.009821][ T6934] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 627.230697][ T6950] netlink: 256 bytes leftover after parsing attributes in process `syz.5.14220'. [ 627.363431][ T10] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 627.383396][ T10] usb 2-1: USB disconnect, device number 124 [ 627.438504][ T6967] netlink: 'syz.2.14225': attribute type 41 has an invalid length. [ 627.786161][ T6997] netlink: 128 bytes leftover after parsing attributes in process `syz.5.14237'. [ 627.871516][ T7001] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14239'. [ 627.892962][ T7006] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 628.036201][ T7015] netlink: 'syz.1.14244': attribute type 3 has an invalid length. [ 628.289441][ T7036] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 628.482557][ T7053] binder: 7051:7053 ioctl c018620c 200000000140 returned -22 [ 628.793799][ T7080] CIFS mount error: No usable UNC path provided in device string! [ 628.793799][ T7080] [ 628.824357][ T7080] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 628.922536][ T7089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14277'. [ 629.141926][ T7106] netlink: 'syz.2.14285': attribute type 21 has an invalid length. [ 629.156361][ T7106] netlink: 128 bytes leftover after parsing attributes in process `syz.2.14285'. [ 629.187666][ T7106] netlink: 'syz.2.14285': attribute type 6 has an invalid length. [ 629.206454][ T7106] netlink: 3 bytes leftover after parsing attributes in process `syz.2.14285'. [ 629.456961][ T7130] openvswitch: netlink: IP tunnel dst address not specified [ 629.782314][ T7158] netlink: 15678 bytes leftover after parsing attributes in process `syz.5.14307'. [ 630.159664][ T7188] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 630.426959][ T7211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 630.589082][ T7225] netlink: 'syz.1.14337': attribute type 15 has an invalid length. [ 630.606782][ T7225] netlink: 'syz.1.14337': attribute type 7 has an invalid length. [ 630.690953][ T7233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.000724][ T7257] netlink: 'syz.3.14355': attribute type 5 has an invalid length. [ 631.010397][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14355'. [ 631.024688][ T7257] netlink: 'syz.3.14355': attribute type 1 has an invalid length. [ 631.270238][ T7279] netlink: 'syz.1.14366': attribute type 10 has an invalid length. [ 631.270262][ T7279] netlink: 55 bytes leftover after parsing attributes in process `syz.1.14366'. [ 631.276477][ T7279] batman_adv: batadv0: Interface deactivated: vlan1 [ 631.395845][ T7279] batman_adv: batadv0: Removing interface: vlan1 [ 631.539188][ T7318] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 632.062238][ T6141] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 632.245977][ T6141] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 632.266906][ T6141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.285422][ T6141] usb 3-1: config 0 descriptor?? [ 632.588166][ T7378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.732950][ T6141] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0f [ 632.740590][ T6141] hackrf 3-1:0.0: Could not detect board [ 632.752233][ T6141] hackrf 3-1:0.0: probe with driver hackrf failed with error -71 [ 632.773174][ T6141] usb 3-1: USB disconnect, device number 8 [ 633.438436][ T7433] netlink: 'syz.1.14421': attribute type 10 has an invalid length. [ 633.651621][ T7444] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 633.892744][ T7459] netlink: 'syz.3.14433': attribute type 27 has an invalid length. [ 634.372962][ T7488] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 634.464850][ T7495] netlink: 'syz.1.14452': attribute type 10 has an invalid length. [ 634.466363][ T7493] netlink: 'syz.2.14451': attribute type 21 has an invalid length. [ 634.477468][ T7495] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14452'. [ 634.495259][ T7495] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 634.961106][ T7522] netlink: 'syz.1.14465': attribute type 2 has an invalid length. [ 635.019392][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14468'. [ 635.094103][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14472'. [ 635.603085][ T7575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14491'. [ 636.153010][ T7613] netlink: 'syz.3.14508': attribute type 11 has an invalid length. [ 636.418494][ T7636] netlink: 'syz.2.14517': attribute type 15 has an invalid length. [ 636.509080][T31715] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 636.682416][T31715] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 636.696229][T31715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.705060][T31715] usb 4-1: Product: syz [ 636.709258][T31715] usb 4-1: Manufacturer: syz [ 636.714139][T31715] usb 4-1: SerialNumber: syz [ 636.728067][T31715] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 636.757852][ T6141] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 637.228336][ T10] usb 4-1: USB disconnect, device number 127 [ 637.552944][ T7718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14553'. [ 637.591006][ T6081] Bluetooth: hci4: command 0x0406 tx timeout [ 637.840771][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14563'. [ 637.858278][ T7741] dummy0: left allmulticast mode [ 637.863705][ T7741] dummy0: left promiscuous mode [ 637.873282][ T7741] bridge0: port 3(dummy0) entered disabled state [ 637.890054][ T7741] bridge_slave_1: left allmulticast mode [ 637.897390][ T7741] bridge_slave_1: left promiscuous mode [ 637.908198][ T7741] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.926088][ T7741] bridge_slave_0: left allmulticast mode [ 637.934917][ T7741] bridge_slave_0: left promiscuous mode [ 637.941610][ T7741] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.099744][ T6141] usb 4-1: Service connection timeout for: 256 [ 638.119725][ T6141] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 638.136971][ T6141] ath9k_htc: Failed to initialize the device [ 638.162704][ T10] usb 4-1: ath9k_htc: USB layer deinitialized [ 638.208899][ T7770] netlink: 'syz.1.14575': attribute type 21 has an invalid length. [ 638.226035][ T7770] netlink: 156 bytes leftover after parsing attributes in process `syz.1.14575'. [ 638.382985][ T7784] netlink: 1072 bytes leftover after parsing attributes in process `syz.3.14582'. [ 638.397555][ T7784] netlink: 280 bytes leftover after parsing attributes in process `syz.3.14582'. [ 638.753925][ T7816] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.14594'. [ 638.872224][ T7824] netlink: 'syz.2.14599': attribute type 64 has an invalid length. [ 638.965954][ T6141] usb 2-1: new low-speed USB device number 125 using dummy_hcd [ 638.991301][ T7832] netlink: 'syz.2.14603': attribute type 10 has an invalid length. [ 639.138386][ T7844] Unknown options in mask b7f2 [ 639.139555][ T6141] usb 2-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3 [ 639.155170][ T6141] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 639.168822][ T6141] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 639.178112][ T6141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.194092][ T7809] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 639.433908][ T6141] usb 2-1: string descriptor 0 read error: -71 [ 639.450592][ T6141] hub 2-1:32.0: bad descriptor, ignoring hub [ 639.465687][ T6141] hub 2-1:32.0: probe with driver hub failed with error -5 [ 639.591735][ T6141] usb 2-1: USB disconnect, device number 125 [ 639.942857][ T7916] netlink: 'syz.2.14636': attribute type 30 has an invalid length. [ 639.942860][ T7917] netlink: 'syz.3.14635': attribute type 1 has an invalid length. [ 640.297736][ T7942] netlink: 'syz.3.14648': attribute type 13 has an invalid length. [ 640.447416][ T7953] netlink: 'syz.1.14654': attribute type 33 has an invalid length. [ 640.464080][ T7955] netlink: 'syz.2.14655': attribute type 4 has an invalid length. [ 640.472546][ T7953] __nla_validate_parse: 4 callbacks suppressed [ 640.472562][ T7953] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14654'. [ 640.600436][ T7964] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14659'. [ 640.744802][ T7975] CIFS: iocharset name too long [ 642.290326][ T8021] dlm: Unknown command passed to DLM device : 3 [ 642.290326][ T8021] [ 642.704078][ T8030] netlink: 'syz.3.14691': attribute type 20 has an invalid length. [ 643.382831][ T8045] program syz.2.14698 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 644.183620][ T8063] netlink: 'syz.3.14707': attribute type 2 has an invalid length. [ 644.238520][ T8065] overlayfs: cannot append lower layer [ 646.663263][ T6081] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 646.725240][ T6081] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 646.736005][ T6081] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 646.754086][ T6081] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 646.764194][ T6081] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 646.842635][ T8116] xfrm0 speed is unknown, defaulting to 1000 [ 648.958980][ T6081] Bluetooth: hci6: command tx timeout [ 649.360518][ T8196] netlink: 'syz.2.14763': attribute type 1 has an invalid length. [ 649.481117][ T6246] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 649.673707][ T6246] usb 4-1: Using ep0 maxpacket: 16 [ 649.718986][ T6246] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 649.792737][ T6246] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 649.848262][ T6246] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.893471][ T6246] usb 4-1: Product: syz [ 649.922813][ T6246] usb 4-1: Manufacturer: syz [ 649.952094][ T6246] usb 4-1: SerialNumber: syz [ 649.989698][ T6246] r8152-cfgselector 4-1: Unknown version 0x0000 [ 650.020102][ T6246] r8152-cfgselector 4-1: config 0 descriptor?? [ 650.201350][ T8116] chnl_net:caif_netlink_parms(): no params data found [ 650.649683][ T6214] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 650.723997][ T8116] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.731519][ T8116] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.739705][ T8116] bridge_slave_0: entered allmulticast mode [ 650.749309][ T8116] bridge_slave_0: entered promiscuous mode [ 650.759506][ T8116] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.786107][ T8116] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.810159][ T8116] bridge_slave_1: entered allmulticast mode [ 650.932104][ T8116] bridge_slave_1: entered promiscuous mode [ 651.124842][ T8116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.179767][ T6081] Bluetooth: hci6: command tx timeout [ 651.206433][ T8116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.392030][ T8116] team0: Port device team_slave_0 added [ 651.445720][ T8116] team0: Port device team_slave_1 added [ 651.622559][ T8116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.646437][ T8116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.713771][ T8116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.752415][ T8116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.789710][ T8116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.822893][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 651.895059][ T8116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.253789][ T8116] hsr_slave_0: entered promiscuous mode [ 652.287395][ T8116] hsr_slave_1: entered promiscuous mode [ 652.323300][ T8116] debugfs: 'hsr0' already exists in 'hsr' [ 652.351371][ T8116] Cannot create hsr debugfs directory [ 652.564785][ T8421] x_tables: unsorted entry at hook 1 [ 653.402480][ T6081] Bluetooth: hci6: command tx timeout [ 654.363418][ T8520] netlink: 'syz.3.14797': attribute type 10 has an invalid length. [ 654.404576][ T8520] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14797'. [ 654.450850][ T8520] veth0_vlan: entered allmulticast mode [ 654.477660][ T8520] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 654.543429][ T8116] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 654.604545][ T8528] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14800'. [ 654.624501][ T8116] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 654.687379][ T8116] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 654.755864][ T8116] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 655.483789][ T8116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.625129][ T6081] Bluetooth: hci6: command tx timeout [ 655.646150][ C0] sched: DL replenish lagged too much [ 655.696037][ T8116] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.786430][ T1394] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.793674][ T1394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.903398][ T1394] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.910623][ T1394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.275775][ T8556] "syz.2.14811" (8556) uses obsolete ecb(arc4) skcipher [ 657.243346][ T8116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.358693][ T8116] veth0_vlan: entered promiscuous mode [ 658.402742][ T8116] veth1_vlan: entered promiscuous mode [ 658.510091][ T6141] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 658.545347][ T8116] veth0_macvtap: entered promiscuous mode [ 658.589963][ T8116] veth1_macvtap: entered promiscuous mode [ 658.693929][ T6141] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 658.744499][ T8116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.752487][ T6141] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 7354, setting to 64 [ 658.821634][ T6141] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 658.879801][ T8116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.888321][ T6141] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 658.924818][ T6141] usb 4-1: Manufacturer: syz [ 658.972261][ T6141] usb 4-1: config 0 descriptor?? [ 658.995501][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.012748][ T8603] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 659.034395][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.065448][ T6141] igorplugusb 4-1:0.0: endpoint incorrect [ 659.118205][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.162898][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.355198][ T6141] usb 4-1: USB disconnect, device number 3 [ 659.636762][ T8618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.684329][ T8618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.877009][ T8618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.929146][ T8618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.823016][ T8690] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 662.234780][ T8701] netlink: 'syz.2.14858': attribute type 3 has an invalid length. [ 662.274694][ T8703] binder: 8702:8703 ioctl c018620c 200000000640 returned -22 [ 663.162437][ T8726] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 664.990245][ T8766] kAFS: Can only specify source 'none' with -o dyn [ 666.856490][ T30] INFO: task syz.4.10666:30023 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 666.950230][ T30] Tainted: G L syzkaller #0 [ 667.020186][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 667.105919][ T30] task:syz.4.10666 state:D stack:26872 pid:30023 tgid:30020 ppid:29524 task_flags:0x400140 flags:0x00080002 [ 667.210289][ T30] Call Trace: [ 667.232416][ T30] [ 667.260399][ T30] __schedule+0x1665/0x5590 [ 667.299911][ T30] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 667.344969][ T30] ? __pfx___schedule+0x10/0x10 [ 667.387793][ T30] ? schedule+0x90/0x360 [ 667.410323][ T30] schedule+0x164/0x360 [ 667.429058][ T30] schedule_preempt_disabled+0x13/0x30 [ 667.454335][ T30] __mutex_lock+0x7fe/0x1300 [ 667.464346][ T30] ? do_syscall_64+0x14d/0xf80 [ 667.479699][ T30] ? __mutex_lock+0x5ac/0x1300 [ 667.494059][ T30] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 667.530803][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 667.540787][ T30] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 667.561235][ T30] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 667.567575][ T30] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 667.593274][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 667.599846][ T30] ? __asan_memcpy+0x40/0x70 [ 667.615781][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 667.621962][ T30] ? bpf_lsm_capable+0x9/0x20 [ 667.633285][ T30] ? security_capable+0x7e/0x2c0 [ 667.648320][ T30] genl_rcv_msg+0x61c/0x7a0 [ 667.657597][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 667.670470][ T30] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 667.689384][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 667.694667][ T30] netlink_rcv_skb+0x232/0x4b0 [ 667.710566][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 667.717143][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 667.733448][ T30] ? down_read+0x272/0x2e0 [ 667.737955][ T30] ? genl_rcv+0xd/0x40 [ 667.754485][ T30] genl_rcv+0x28/0x40 [ 667.758570][ T30] netlink_unicast+0x80f/0x9b0 [ 667.763369][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 667.786508][ T30] ? netlink_sendmsg+0x650/0xb40 [ 667.793078][ T30] ? skb_put+0x11b/0x210 [ 667.799195][ T30] netlink_sendmsg+0x813/0xb40 [ 667.804036][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.809790][ T30] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 667.816261][ T30] ? __cgroup_account_cputime+0xe5/0x120 [ 667.822532][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.827867][ T30] sock_sendmsg_nosec+0x112/0x150 [ 667.834196][ T30] ____sys_sendmsg+0x589/0x8c0 [ 667.839342][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 667.844687][ T30] ? import_iovec+0x73/0xa0 [ 667.853611][ T30] ___sys_sendmsg+0x2a5/0x360 [ 667.858358][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 667.864867][ T30] ? futex_wake+0x4ac/0x580 [ 667.869447][ T30] ? __fget_files+0x2a/0x420 [ 667.875452][ T30] ? __fget_files+0x3a0/0x420 [ 667.880203][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 667.885657][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 667.891182][ T30] ? rcu_is_watching+0x15/0xb0 [ 667.898530][ T30] do_syscall_64+0x14d/0xf80 [ 667.904790][ T30] ? trace_irq_disable+0x3b/0x150 [ 667.909869][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.916391][ T30] ? clear_bhb_loop+0x40/0x90 [ 667.921119][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.927520][ T30] RIP: 0033:0x7f0695d9c799 [ 667.931976][ T30] RSP: 002b:00007f0696bc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 667.942867][ T30] RAX: ffffffffffffffda RBX: 00007f0696015fa0 RCX: 00007f0695d9c799 [ 667.952080][ T30] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 667.961897][ T30] RBP: 00007f0695e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 667.973561][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 667.982820][ T30] R13: 00007f0696016038 R14: 00007f0696015fa0 R15: 00007ffe762d2ba8 [ 667.992078][ T30] [ 668.007783][ T30] [ 668.007783][ T30] Showing all locks held in the system: [ 668.042031][ T30] 1 lock held by rcu_preempt/16: [ 668.064177][ T30] #0: ffff8880b843ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 668.146467][ T30] 1 lock held by khungtaskd/30: [ 668.162931][ T30] #0: ffffffff8eb5f3a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 668.217156][ T30] 2 locks held by kworker/1:1/47: [ 668.229487][ T30] #0: ffff88813fe03148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x894/0x1780 [ 668.274851][ T30] #1: ffffc90000b77c40 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780 [ 668.318690][ T30] 3 locks held by kworker/u8:6/1048: [ 668.337646][ T30] #0: ffff88813fe44148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x894/0x1780 [ 668.379361][ T30] #1: ffffc900056dfc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780 [ 668.416163][ T30] #2: ffffffff8fff6a88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 668.439490][ T30] 3 locks held by kworker/u8:8/3483: [ 668.456341][ T30] #0: ffff88801c320948 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_one_work+0x894/0x1780 [ 668.494895][ T30] #1: ffffc9000e1dfc40 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780 [ 668.540714][ T30] #2: ffffffff8fff6a88 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_dfs_channels_update_work+0xd6/0x660 [ 668.574110][ T30] 1 lock held by dhcpcd/5495: [ 668.590086][ T30] #0: ffffffff8fff6a88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_deladdr+0x1c1/0x790 [ 668.640459][ T30] 2 locks held by getty/5586: [ 668.646881][ T30] #0: ffff888037baf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 668.676116][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 668.718214][ T30] 3 locks held by kworker/1:4/6141: [ 668.723514][ T30] #0: ffff88813fe03148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x894/0x1780 [ 668.749728][ T30] #1: ffffc90003067c40 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780 [ 668.779414][ T30] #2: ffffffff90310a48 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 668.811434][ T30] 6 locks held by kworker/0:4/6192: [ 668.816733][ T30] 2 locks held by kworker/0:5/6214: [ 668.821955][ T30] 2 locks held by syz.0.10061/28275: [ 668.828556][ T30] #0: ffffffff90064f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 668.841479][ T30] #1: ffffffff8ee89428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 668.853584][ T30] 2 locks held by syz.4.10666/30023: [ 668.864229][ T30] #0: ffffffff90064f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 668.872866][ T30] #1: ffffffff8ee89428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 668.884376][ T30] 3 locks held by syz.5.14315/7176: [ 668.890383][ T30] #0: ffffffff90064f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 668.903874][ T30] #1: ffff88807f8546f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 668.914869][ T30] #2: ffffffff8ee89428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 668.925814][ T30] 4 locks held by syz-executor/8116: [ 668.931464][ T30] #0: ffff888034e9cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 668.941725][ T30] #1: ffff888034e9c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 668.956633][ T30] #2: ffffffff90183928 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 668.969500][ T30] #3: ffff88804ebb82f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5c0 [ 668.980126][ T30] 4 locks held by syz.3.14890/8770: [ 668.985631][ T30] #0: ffffffff90310a48 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x19a/0x5a0 [ 668.996443][ T30] #1: ffffffff8fff6a88 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_rfkill_set_block+0x1e/0x50 [ 669.006779][ T30] #2: ffff888077480788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_stop+0x126/0x240 [ 669.016856][ T30] #3: ffffffff8eb65638 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 669.041380][ T30] [ 669.043770][ T30] ============================================= [ 669.043770][ T30] [ 669.066388][ T30] NMI backtrace for cpu 1 [ 669.066408][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 669.066432][ T30] Tainted: [L]=SOFTLOCKUP [ 669.066439][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 669.066449][ T30] Call Trace: [ 669.066456][ T30] [ 669.066464][ T30] dump_stack_lvl+0xe8/0x150 [ 669.066494][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 669.066513][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 669.066538][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 669.066559][ T30] sys_info+0x135/0x170 [ 669.066582][ T30] watchdog+0x1002/0x1060 [ 669.066609][ T30] ? watchdog+0x1da/0x1060 [ 669.066633][ T30] kthread+0x388/0x470 [ 669.066654][ T30] ? __pfx_watchdog+0x10/0x10 [ 669.066672][ T30] ? __pfx_kthread+0x10/0x10 [ 669.066692][ T30] ret_from_fork+0x51e/0xb90 [ 669.066717][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 669.066738][ T30] ? __switch_to+0xc7d/0x1450 [ 669.066762][ T30] ? __pfx_kthread+0x10/0x10 [ 669.066783][ T30] ret_from_fork_asm+0x1a/0x30 [ 669.066814][ T30] [ 669.066822][ T30] Sending NMI from CPU 1 to CPUs 0: [ 669.183958][ C0] NMI backtrace for cpu 0 [ 669.183977][ C0] CPU: 0 UID: 0 PID: 6192 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 669.183999][ C0] Tainted: [L]=SOFTLOCKUP [ 669.184005][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 669.184017][ C0] Workqueue: wg-kex-wg1 wg_packet_handshake_receive_worker [ 669.184040][ C0] RIP: 0010:lockdep_hardirqs_off+0x0/0xd0 [ 669.184062][ C0] Code: 67 48 0f b9 3a 90 4c 89 f7 e9 67 ff ff ff 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 56 53 83 3d 32 39 96 04 00 0f 84 84 00 00 00 48 89 [ 669.184074][ C0] RSP: 0018:ffffc90000006fb0 EFLAGS: 00000006 [ 669.184087][ C0] RAX: 0000000000000202 RBX: ffffffff818928b1 RCX: dffffc0000000000 [ 669.184098][ C0] RDX: 0000000000000001 RSI: 0000000000000201 RDI: ffffffff818928b1 [ 669.184109][ C0] RBP: ffffc900000071c0 R08: ffff88807726da43 R09: 1ffff1100ee4db48 [ 669.184120][ C0] R10: dffffc0000000000 R11: ffffed100ee4db49 R12: ffffc90003419060 [ 669.184131][ C0] R13: dffffc0000000000 R14: ffffffff8a946f45 R15: 0000000000000000 [ 669.184142][ C0] FS: 0000000000000000(0000) GS:ffff888124dea000(0000) knlGS:0000000000000000 [ 669.184155][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 669.184165][ C0] CR2: 00007fff83ff5078 CR3: 000000000e94c000 CR4: 00000000003526f0 [ 669.184179][ C0] Call Trace: [ 669.184186][ C0] [ 669.184192][ C0] trace_hardirqs_off+0x12/0x40 [ 669.184211][ C0] __local_bh_enable_ip+0x71/0x130 [ 669.184232][ C0] ebt_do_table+0x2665/0x2830 [ 669.184247][ C0] ? br_flood+0x8cf/0xb80 [ 669.184265][ C0] ? br_handle_frame_finish+0x14a3/0x1b70 [ 669.184286][ C0] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 669.184306][ C0] ? __netif_receive_skb_core+0x98f/0x31a0 [ 669.184327][ C0] ? ret_from_fork+0x51e/0xb90 [ 669.184363][ C0] ? __pfx_ebt_do_table+0x10/0x10 [ 669.184381][ C0] ? lock_acquire+0xf0/0x2e0 [ 669.184401][ C0] ? __pfx_ebt_do_table+0x10/0x10 [ 669.184417][ C0] nf_hook_slow+0xc5/0x220 [ 669.184436][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 669.184455][ C0] NF_HOOK+0x23e/0x3f0 [ 669.184474][ C0] ? NF_HOOK+0xa2/0x3f0 [ 669.184492][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 669.184511][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 669.184530][ C0] ? br_flood+0x8e0/0xb80 [ 669.184549][ C0] ? br_handle_vlan+0x61/0x530 [ 669.184568][ C0] __br_forward+0x397/0x540 [ 669.184585][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 669.184605][ C0] br_handle_frame_finish+0x14a3/0x1b70 [ 669.184625][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 669.184649][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 669.184674][ C0] ? ip6t_do_table+0x143/0x1560 [ 669.184691][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 669.184707][ C0] ? nf_hook_slow+0x176/0x220 [ 669.184724][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 669.184745][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 669.184768][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 669.184789][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 669.184808][ C0] ? nf_nat_ipv6_in+0x203/0x2c0 [ 669.184828][ C0] br_nf_pre_routing_finish_ipv6+0xa3a/0xd70 [ 669.184843][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 669.184869][ C0] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 669.184884][ C0] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 669.184898][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 669.184914][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 669.184928][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 669.184951][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 669.184970][ C0] br_handle_frame+0x1277/0x1510 [ 669.184992][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 669.185011][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 669.185033][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 669.185054][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 669.185075][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 669.185095][ C0] __netif_receive_skb_core+0x98f/0x31a0 [ 669.185110][ C0] ? blake2s_final+0x116/0x260 [ 669.185129][ C0] ? kasan_save_track+0x4f/0x80 [ 669.185149][ C0] ? kasan_save_free_info+0x46/0x50 [ 669.185165][ C0] ? __kasan_slab_free+0x5c/0x80 [ 669.185189][ C0] ? __iterate_interfaces+0x2ab/0x590 [ 669.185207][ C0] ? ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 669.185229][ C0] ? mac80211_hwsim_beacon+0xbb/0x180 [ 669.185255][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 669.185276][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 669.185294][ C0] ? ieee80211_get_buffered_bc+0x79c/0x8a0 [ 669.185328][ C0] ? lock_acquire+0xf0/0x2e0 [ 669.185348][ C0] ? process_backlog+0x3eb/0x1950 [ 669.185373][ C0] ? process_backlog+0x3eb/0x1950 [ 669.185397][ C0] ? process_backlog+0x3eb/0x1950 [ 669.185413][ C0] process_backlog+0x76d/0x1950 [ 669.185438][ C0] __napi_poll+0xae/0x340 [ 669.185452][ C0] ? skb_defer_free_flush+0x233/0x260 [ 669.185470][ C0] net_rx_action+0x627/0xf70 [ 669.185492][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 669.185513][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 669.185532][ C0] ? try_to_wake_up+0x7fc/0x1390 [ 669.185553][ C0] handle_softirqs+0x22a/0x870 [ 669.185574][ C0] ? do_softirq+0x76/0xd0 [ 669.185595][ C0] ? kernel_fpu_end+0x62/0x80 [ 669.185610][ C0] do_softirq+0x76/0xd0 [ 669.185628][ C0] [ 669.185634][ C0] [ 669.185640][ C0] __local_bh_enable_ip+0xf8/0x130 [ 669.185659][ C0] blake2s_compress+0xf9/0x1eb0 [ 669.185675][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 669.185695][ C0] ? blake2s_compress+0x1e17/0x1eb0 [ 669.185713][ C0] ? rcu_is_watching+0x15/0xb0 [ 669.185734][ C0] ? __pfx_encode_point+0x10/0x10 [ 669.185752][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 669.185772][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 669.185788][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 669.185812][ C0] ? blake2s_update+0x255/0x450 [ 669.185831][ C0] ? blake2s_update+0x134/0x450 [ 669.185849][ C0] blake2s_update+0x14b/0x450 [ 669.185867][ C0] hmac+0x2d3/0x3b0 [ 669.185886][ C0] ? __pfx_hmac+0x10/0x10 [ 669.185920][ C0] kdf+0xff/0x2b0 [ 669.185939][ C0] ? __pfx_kdf+0x10/0x10 [ 669.185966][ C0] wg_noise_handshake_consume_initiation+0x276/0x9a0 [ 669.185990][ C0] ? __pfx_wg_noise_handshake_consume_initiation+0x10/0x10 [ 669.186011][ C0] ? blake2s_update+0x255/0x450 [ 669.186029][ C0] ? __asan_memset+0x22/0x50 [ 669.186047][ C0] ? blake2s_final+0x14c/0x260 [ 669.186064][ C0] ? compute_mac1+0x184/0x200 [ 669.186082][ C0] ? __pfx_compute_mac1+0x10/0x10 [ 669.186107][ C0] ? __crypto_memneq+0x42/0x470 [ 669.186129][ C0] ? wg_packet_handshake_receive_worker+0x2e6/0x10c0 [ 669.186146][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 669.186167][ C0] wg_packet_handshake_receive_worker+0x674/0x10c0 [ 669.186190][ C0] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 669.186211][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 669.186229][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 669.186254][ C0] ? process_one_work+0x8bb/0x1780 [ 669.186273][ C0] process_one_work+0x9ab/0x1780 [ 669.186301][ C0] ? __pfx_process_one_work+0x10/0x10 [ 669.186320][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 669.186343][ C0] worker_thread+0xb49/0x1140 [ 669.186374][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 669.186396][ C0] kthread+0x388/0x470 [ 669.186412][ C0] ? __pfx_worker_thread+0x10/0x10 [ 669.186431][ C0] ? __pfx_kthread+0x10/0x10 [ 669.186448][ C0] ret_from_fork+0x51e/0xb90 [ 669.186468][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 669.186486][ C0] ? __switch_to+0xc7d/0x1450 [ 669.186504][ C0] ? __pfx_kthread+0x10/0x10 [ 669.186520][ C0] ret_from_fork_asm+0x1a/0x30 [ 669.186541][ C0] [ 669.958917][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 669.965813][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 669.976509][ T30] Tainted: [L]=SOFTLOCKUP [ 669.980834][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 669.990895][ T30] Call Trace: [ 669.994184][ T30] [ 669.997119][ T30] vpanic+0x56c/0xa60 [ 670.001121][ T30] ? __pfx___schedule+0x10/0x10 [ 670.005980][ T30] ? __pfx_vpanic+0x10/0x10 [ 670.010498][ T30] panic+0xc5/0xd0 [ 670.014225][ T30] ? __pfx_panic+0x10/0x10 [ 670.018652][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 670.024039][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 670.030205][ T30] watchdog+0x105b/0x1060 [ 670.034549][ T30] ? watchdog+0x1da/0x1060 [ 670.038975][ T30] kthread+0x388/0x470 [ 670.043061][ T30] ? __pfx_watchdog+0x10/0x10 [ 670.047749][ T30] ? __pfx_kthread+0x10/0x10 [ 670.052354][ T30] ret_from_fork+0x51e/0xb90 [ 670.056959][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 670.062086][ T30] ? __switch_to+0xc7d/0x1450 [ 670.066777][ T30] ? __pfx_kthread+0x10/0x10 [ 670.071379][ T30] ret_from_fork_asm+0x1a/0x30 [ 670.076164][ T30] [ 670.079463][ T30] Kernel Offset: disabled [ 670.083776][ T30] Rebooting in 86400 seconds..