last executing test programs: 10m25.086148724s ago: executing program 1 (id=5264): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x4, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 10m22.717329879s ago: executing program 1 (id=5266): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2910a000, 0x0, 0x37, 0x0, 0x0, 0x0) 10m16.955436472s ago: executing program 1 (id=5268): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) 10m11.395810765s ago: executing program 1 (id=5271): r0 = msgget$private(0x0, 0x0) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f00000001c0)=""/238) 10m5.382238832s ago: executing program 1 (id=5274): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000080)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 9m59.754694909s ago: executing program 1 (id=5276): unshare(0x68040200) unshare(0x4a000200) 9m13.452499589s ago: executing program 32 (id=5276): unshare(0x68040200) unshare(0x4a000200) 20.362143096s ago: executing program 2 (id=5540): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r0, 0x0, &(0x7f00000004c0)=""/6}, 0x20) 19.084929284s ago: executing program 0 (id=5541): setreuid(0x0, 0xee00) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) 17.851653129s ago: executing program 2 (id=5542): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r0, &(0x7f0000000400), 0x0}, 0x20) 15.566164299s ago: executing program 0 (id=5543): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x2000000) 14.718198454s ago: executing program 2 (id=5544): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@e={0xff, 0x1, 0x0, 0x0, @SEQ_NOTEON}) 11.670140974s ago: executing program 0 (id=5545): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0xc01, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000480)=ANY=[@ANYBLOB="d300000001"]) 10.554791153s ago: executing program 2 (id=5546): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x4) 7.096032485s ago: executing program 0 (id=5547): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc1485544, 0xfffffffffffffffe) 6.497188587s ago: executing program 2 (id=5548): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x4}) 3.304918345s ago: executing program 0 (id=5549): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x330, 0x1b8, 0xe138, 0x198, 0x1b8, 0x198, 0x298, 0x358, 0x358, 0x298, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d000400000000000000cf81dfd28c89544e14cd3e040000000000000046c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c01000000b3af494e39e8fb330200000000000032bba99a8d87298e88a94cb519f5c17631af916a000200000000000000000000000000000000004900", 0xc}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x1, 0xc, [0xd, 0x1a, 0xc, 0x23, 0x3a, 0x3f, 0x37, 0xf, 0x37, 0x3f, 0x36, 0x1b, 0xb, 0x35, 0x7, 0x14], 0x0, 0xd6, 0x50aa00000000000}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x8b, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x390) 2.82211716s ago: executing program 2 (id=5550): r0 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f00000002c0)="e51b2731080200", 0x7, 0xfffffffffffffffc) keyctl$read(0xb, r0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) 0s ago: executing program 0 (id=5551): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) kernel console output (not intermixed with test programs): 52891][ C1] yealink 1-1:36.0: urb_irq_callback - usb_submit_urb failed -19 [ 3163.127591][T10898] tmpfs: Bad value for 'mpol' [ 3163.543122][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 3163.775417][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 3164.254400][ T9] usb 1-1: config 7 has an invalid interface number: 152 but max is 0 [ 3164.256686][ T9] usb 1-1: config 7 has no interface number 0 [ 3164.258650][ T9] usb 1-1: config 7 interface 152 altsetting 190 endpoint 0x4 has an invalid bInterval 253, changing to 7 [ 3164.282144][ T9] usb 1-1: config 7 interface 152 altsetting 190 bulk endpoint 0x2 has invalid maxpacket 8 [ 3164.284710][ T9] usb 1-1: config 7 interface 152 has no altsetting 0 [ 3164.379379][ T9] usb 1-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=66.6d [ 3164.381279][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3164.382299][ T9] usb 1-1: Product: syz [ 3164.383136][ T9] usb 1-1: Manufacturer: syz [ 3164.384011][ T9] usb 1-1: SerialNumber: syz [ 3164.637478][T10899] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3165.557934][ T9] usbtest 1-1:7.152: couldn't get endpoints, -71 [ 3165.559861][ T9] usbtest 1-1:7.152: probe with driver usbtest failed with error -71 [ 3165.643853][ T9] usb 1-1: USB disconnect, device number 3 [ 3169.879457][ T3917] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 3170.182757][ T3917] usb 2-1: Using ep0 maxpacket: 8 [ 3170.220215][ T3917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3170.222232][ T3917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3170.223653][ T3917] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3170.224797][ T3917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3170.287003][ T3917] usb 2-1: config 0 descriptor?? [ 3170.805264][ T3917] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 3170.876039][ T3917] usb 2-1: USB disconnect, device number 124 [ 3179.236362][T10948] tmpfs: Bad value for 'mpol' [ 3186.826159][ T4157] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 3187.284261][ T4157] usb 1-1: Using ep0 maxpacket: 8 [ 3187.369270][ T4157] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3187.374632][ T4157] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 3187.402470][ T4157] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3187.404799][ T4157] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 3187.406538][ T4157] usb 1-1: SerialNumber: syz [ 3187.724723][ T4157] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 3187.726950][ T4157] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 3187.729250][ T4157] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 3188.535483][ T4157] usb 1-1: USB disconnect, device number 4 [ 3197.726637][ T3028] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 3197.993174][ T3028] usb 2-1: Using ep0 maxpacket: 16 [ 3198.283962][ T3028] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3198.286390][ T3028] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 3198.288605][ T3028] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 3198.291905][ T3028] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 3198.294143][ T3028] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3198.682282][ T3028] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 3198.683780][ T3028] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3198.684892][ T3028] usb 2-1: Product: syz [ 3198.685763][ T3028] usb 2-1: Manufacturer: syz [ 3198.686695][ T3028] usb 2-1: SerialNumber: syz [ 3198.824847][ T3028] usb 2-1: config 0 descriptor?? [ 3199.282149][ T3028] appledisplay 2-1:0.0: Error while getting initial brightness: -110 [ 3199.368188][ T3028] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -110 [ 3200.723781][ T9] usb 2-1: USB disconnect, device number 125 [ 3218.102676][ T3854] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 3218.453267][ T3854] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xB2, changing to 0x82 [ 3218.455817][ T3854] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 3218.458050][ T3854] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3218.509834][ T3854] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice= 0.06 [ 3218.521970][ T3854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 3218.524134][ T3854] usb 2-1: SerialNumber: syz [ 3219.970018][ T3854] yealink 2-1:36.0: invalid payload size 0, expected 16 [ 3220.041795][ T3854] input: Yealink usb-p1k as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:36.0/input/input11 [ 3220.116014][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 3220.118602][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 3220.120139][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 3220.124015][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 3220.129291][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 3220.136617][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 3220.139129][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 3220.142196][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 3220.143359][ C0] yealink 2-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 3220.293059][ T3854] usb 2-1: USB disconnect, device number 126 [ 3222.458665][T11058] futex_wake_op: syz.0.1426 tries to shift op by -1; fix this program [ 3227.666939][T10513] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 3228.103916][T10513] usb 1-1: not running at top speed; connect to a high speed hub [ 3228.167878][T10513] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 3228.170325][T10513] usb 1-1: config 1 has no interface number 1 [ 3228.175320][T10513] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3228.282684][T10513] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3228.284137][T10513] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3228.285253][T10513] usb 1-1: Product: syz [ 3228.286112][T10513] usb 1-1: Manufacturer: syz [ 3228.286984][T10513] usb 1-1: SerialNumber: syz [ 3229.859137][T10513] usb 1-1: failed to enable PITCH for EP 0x82 [ 3230.248984][T10513] usb 1-1: USB disconnect, device number 5 [ 3239.185617][ T9958] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 3239.428281][ T9958] usb 1-1: Using ep0 maxpacket: 8 [ 3239.616481][ T9958] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 3239.618344][ T9958] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 3239.619870][ T9958] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 3240.011555][ T9958] usb 1-1: string descriptor 0 read error: -71 [ 3240.024620][ T9958] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3240.026185][ T9958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3240.200295][ T9958] usb 1-1: can't set config #1, error -71 [ 3240.246104][ T9958] usb 1-1: USB disconnect, device number 6 [ 3248.697079][ T4157] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 3249.303454][ T4157] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 3249.305184][ T4157] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 3249.309136][ T4157] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 3249.310553][ T4157] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3249.460065][ T4157] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 3249.468732][ T4157] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3249.469955][ T4157] usb 2-1: Product: syz [ 3249.479556][ T4157] usb 2-1: Manufacturer: syz [ 3249.484453][ T4157] usb 2-1: SerialNumber: syz [ 3249.587382][ T4157] usb 2-1: config 0 descriptor?? [ 3249.729025][ T4157] redrat3 2-1:0.0: Couldn't find all endpoints [ 3250.726203][ T3028] usb 2-1: USB disconnect, device number 127 [ 3261.324912][ T9958] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 3261.736580][ T9958] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 3261.738834][ T9958] usb 2-1: config 179 has no interface number 0 [ 3261.747409][ T9958] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 3261.749836][ T9958] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 3261.764317][ T9958] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 3261.766474][ T9958] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 3261.768422][ T9958] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 3261.783042][ T9958] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 3261.785218][ T9958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3262.185025][T11153] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3262.190355][T11153] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3264.708157][ T9263] usb 2-1: USB disconnect, device number 2 [ 3264.708519][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 3264.710019][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 3279.274587][ T3028] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 3279.604332][ T3028] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3279.644962][ T3028] usb 1-1: not running at top speed; connect to a high speed hub [ 3279.803049][ T3028] usb 1-1: config 106 has an invalid interface number: 8 but max is 0 [ 3279.805308][ T3028] usb 1-1: config 106 has no interface number 0 [ 3279.807150][ T3028] usb 1-1: config 106 interface 8 has no altsetting 0 [ 3280.247750][ T3028] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 3280.250274][ T3028] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3280.273827][ T3028] usb 1-1: Product: syz [ 3280.275450][ T3028] usb 1-1: Manufacturer: syz [ 3280.277021][ T3028] usb 1-1: SerialNumber: syz [ 3282.120367][ T3028] kalmia 1-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 3282.139940][ T3028] kalmia 1-1:106.8: probe with driver kalmia failed with error -22 [ 3282.272313][ T3028] usb 1-1: USB disconnect, device number 7 [ 3293.809267][ T9958] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 3294.027506][ T9958] usb 2-1: Using ep0 maxpacket: 8 [ 3294.097227][ T9958] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 3294.099587][ T9958] usb 2-1: config 0 has no interface number 0 [ 3294.122494][ T9958] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3294.124886][ T9958] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 3294.127007][ T9958] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3294.129329][ T9958] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 3294.152872][ T9958] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3294.155910][ T9958] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3294.157707][ T9958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3294.408719][ T9958] usb 2-1: config 0 descriptor?? [ 3294.692569][ T9958] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 3295.607279][ T9958] usb 2-1: USB disconnect, device number 3 [ 3295.757740][ T9958] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 3329.929300][T11299] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1499'. [ 3331.435547][T11301] random: crng reseeded on system resumption [ 3332.635515][ T6862] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 3333.132527][ T6862] usb 1-1: Using ep0 maxpacket: 16 [ 3333.360249][ T6862] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3333.362817][ T6862] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 3333.368857][ T6862] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 3333.377130][ T6862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3333.547700][ T6862] usb 1-1: config 0 descriptor?? [ 3335.864107][ T3854] usb 1-1: USB disconnect, device number 8 [ 3340.710505][T11331] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 3344.254100][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 3344.752660][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 3344.814354][ T9] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 3344.815692][ T9] usb 2-1: config 0 has no interface number 0 [ 3344.816924][ T9] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 3344.817968][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3344.956890][ T9] usb 2-1: config 0 descriptor?? [ 3345.163298][ T9] viperboard 2-1:0.143: version 0.00 found at bus 002 address 004 [ 3345.899769][ T9] viperboard-i2c viperboard-i2c.1.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 3345.903818][ T9] viperboard-i2c viperboard-i2c.1.auto: probe with driver viperboard-i2c failed with error -5 [ 3346.286412][ T9] usb 2-1: USB disconnect, device number 4 [ 3369.483365][T11397] autofs4:pid:11397:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 3387.527801][T11414] comedi comedi1: Cannot bond this driver to itself! [ 3391.638982][T11419] binfmt_misc: register: failed to install interpreter file ./file0 [ 3406.740383][T11438] ALSA: mixer_oss: invalid OSS volume ';' [ 3409.734069][T11443] cgroup: release_agent respecified [ 3421.749027][T11459] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 3465.448223][T11513] netlink: 'syz.0.1575': attribute type 11 has an invalid length. [ 3465.453499][T11513] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1575'. [ 3474.266759][T11526] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1581'. [ 3485.089894][T11540] comedi comedi4: bad chanlist[0]=0x00400004 chan=4 range length=2 [ 3488.289338][T11544] binder: 11543:11544 ioctl c0306201 200000000540 returned -22 [ 3496.877530][T11551] tmpfs: Bad value for 'mpol' [ 3498.339682][T11553] 8021q: VLANs not supported on ipvlan1 [ 3501.915817][T11555] veth1_macvtap: left promiscuous mode [ 3542.798726][T11603] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1620'. [ 3542.806609][T11603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1620'. [ 3552.253589][T11613] Illegal XDP return value 4294967274 on prog (id 200) dev N/A, expect packet loss! [ 3574.335558][T11637] netlink: 'syz.1.1637': attribute type 10 has an invalid length. [ 3580.884700][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1642'. [ 3580.886945][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1642'. [ 3580.888354][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1642'. [ 3580.905439][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1642'. [ 3580.906927][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1642'. [ 3580.908369][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1642'. [ 3580.909674][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1642'. [ 3580.945478][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1642'. [ 3580.948739][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1642'. [ 3580.983950][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1642'. [ 3583.677446][T11651] IPv6: NLM_F_CREATE should be specified when creating new route [ 3584.196096][T11653] tmpfs: Bad value for 'mpol' [ 3602.104584][T11678] netlink: 'syz.0.1656': attribute type 3 has an invalid length. [ 3602.107828][T11678] netlink: 'syz.0.1656': attribute type 3 has an invalid length. [ 3602.136316][T11678] __nla_validate_parse: 41 callbacks suppressed [ 3602.136692][T11678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1656'. [ 3640.248784][ T4157] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 3640.442722][ T4157] usb 2-1: Using ep0 maxpacket: 16 [ 3640.525742][ T4157] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 3640.527876][ T4157] usb 2-1: config 0 has no interface number 0 [ 3640.529725][ T4157] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3640.545526][ T4157] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 3640.655312][ T4157] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 3640.657624][ T4157] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 3640.659335][ T4157] usb 2-1: Product: syz [ 3640.666260][ T4157] usb 2-1: SerialNumber: syz [ 3640.827379][ T4157] usb 2-1: config 0 descriptor?? [ 3641.038802][ T4157] cm109 2-1:0.8: invalid payload size 1024, expected 4 [ 3641.203844][ T4157] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input13 [ 3645.600762][ C1] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 3645.606307][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3645.609581][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3645.612958][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3645.615822][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3645.618118][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3645.621461][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3645.632510][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3645.638717][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3645.643817][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3645.647687][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3645.833810][ T3917] usb 2-1: USB disconnect, device number 5 [ 3645.839017][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 3645.910246][ T3917] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 3691.396090][T11811] xt_CONNSECMARK: invalid mode: 0 [ 3695.405252][T11818] xt_NFQUEUE: number of queues (65535) out of range (got 129383) [ 3708.810421][T11838] netlink: 'syz.1.1718': attribute type 3 has an invalid length. [ 3708.824422][T11838] netlink: 'syz.1.1718': attribute type 3 has an invalid length. [ 3708.843010][T11838] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1718'. [ 3728.673904][ T3917] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 3728.915140][ T3917] usb 1-1: Using ep0 maxpacket: 32 [ 3728.982512][ T3917] usb 1-1: config 0 has an invalid interface number: 152 but max is 0 [ 3728.985708][ T3917] usb 1-1: config 0 has no interface number 0 [ 3728.988293][ T3917] usb 1-1: config 0 interface 152 altsetting 7 bulk endpoint 0xA has invalid maxpacket 1024 [ 3729.015816][ T3917] usb 1-1: config 0 interface 152 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 8 [ 3729.017859][ T3917] usb 1-1: config 0 interface 152 has no altsetting 0 [ 3729.213384][ T3917] usb 1-1: New USB device found, idVendor=0e7e, idProduct=1001, bcdDevice=a3.17 [ 3729.215773][ T3917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3729.217493][ T3917] usb 1-1: Product: syz [ 3729.218832][ T3917] usb 1-1: Manufacturer: syz [ 3729.220210][ T3917] usb 1-1: SerialNumber: syz [ 3729.417401][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1730'. [ 3729.468987][ T3917] usb 1-1: config 0 descriptor?? [ 3729.545326][T11864] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3729.549134][T11864] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3730.660196][T11864] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3730.692987][T11864] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3731.299800][ T3917] cdc_subset 1-1:0.152 usb0: register 'cdc_subset' at usb-dummy_hcd.0-1, Yopy, 6e:e9:6e:c6:bc:4f [ 3731.709093][ T3917] usb 1-1: USB disconnect, device number 9 [ 3731.907296][ T3917] cdc_subset 1-1:0.152 usb0: unregister 'cdc_subset' usb-dummy_hcd.0-1, Yopy [ 3745.377388][T11899] netlink: 'syz.0.1733': attribute type 7 has an invalid length. [ 3745.379767][T11899] netlink: 'syz.0.1733': attribute type 6 has an invalid length. [ 3751.095537][T11906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1735'. [ 3765.724642][T11956] : renamed from vlan0 (while UP) [ 3779.589942][T11970] tmpfs: Bad value for 'mpol' [ 3794.375792][T11991] netlink: 'syz.1.1757': attribute type 1 has an invalid length. [ 3794.379068][T11991] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1757'. [ 3815.124583][ T35] audit: type=1400 audit(2000000783.650:10): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=12010 comm="syz.1.1767" [ 3871.753399][ T6862] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 3871.997076][ T6862] usb 1-1: Using ep0 maxpacket: 16 [ 3872.083144][ T6862] usb 1-1: config 0 has an invalid interface number: 145 but max is 0 [ 3872.085444][ T6862] usb 1-1: config 0 has no interface number 0 [ 3872.144111][ T6862] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 3872.146209][ T6862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3872.147859][ T6862] usb 1-1: Product: syz [ 3872.149175][ T6862] usb 1-1: Manufacturer: syz [ 3872.150522][ T6862] usb 1-1: SerialNumber: syz [ 3872.329473][ T6862] usb 1-1: config 0 descriptor?? [ 3872.499971][ T6862] hub 1-1:0.145: bad descriptor, ignoring hub [ 3872.527007][ T6862] hub 1-1:0.145: probe with driver hub failed with error -5 [ 3872.777934][ T6862] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.145/input/input14 [ 3874.587496][ T6862] usb 1-1: USB disconnect, device number 10 [ 3889.015110][T12140] No such timeout policy "syz1" [ 3889.778866][T12142] tmpfs: Bad value for 'mpol' [ 3904.898859][T12165] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 3918.549922][T12180] wg0: entered promiscuous mode [ 3930.605406][T12195] cgroup: name respecified [ 3935.458243][T12204] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 3938.056327][T12206] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 3943.755209][T12215] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 3947.274666][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 3947.553518][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 3947.662438][ T9] usb 2-1: config 0 has an invalid interface number: 152 but max is 0 [ 3947.664894][ T9] usb 2-1: config 0 has no interface number 0 [ 3947.666806][ T9] usb 2-1: config 0 interface 152 altsetting 7 bulk endpoint 0xA has invalid maxpacket 1024 [ 3947.668893][ T9] usb 2-1: config 0 interface 152 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 8 [ 3947.687725][ T9] usb 2-1: config 0 interface 152 has no altsetting 0 [ 3948.365720][ T9] usb 2-1: New USB device found, idVendor=0e7e, idProduct=1001, bcdDevice=a3.17 [ 3948.369419][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3948.424665][ T9] usb 2-1: Product: syz [ 3948.426723][ T9] usb 2-1: Manufacturer: syz [ 3948.428444][ T9] usb 2-1: SerialNumber: syz [ 3948.699031][ T9] usb 2-1: config 0 descriptor?? [ 3948.860373][T12221] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3948.957708][T12221] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3950.463121][T12221] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3950.469463][T12221] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3950.785531][ T9] cdc_subset 2-1:0.152 usb0: register 'cdc_subset' at usb-dummy_hcd.1-1, Yopy, ba:65:7d:41:6f:d6 [ 3952.156027][ T6862] usb 2-1: USB disconnect, device number 6 [ 3952.366384][ T6862] cdc_subset 2-1:0.152 usb0: unregister 'cdc_subset' usb-dummy_hcd.1-1, Yopy [ 3967.397400][T12262] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 3967.780475][T12262] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3990.440551][T12282] netlink: 'syz.1.1858': attribute type 1 has an invalid length. [ 3990.456705][T12282] netlink: 'syz.1.1858': attribute type 3 has an invalid length. [ 3990.458669][T12282] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1858'. [ 3990.503907][T12282] NCSI netlink: No device for ifindex 0 [ 3994.280652][T12286] xt_CT: You must specify a L4 protocol and not use inversions on it [ 4010.771479][T12309] xt_recent: Unsupported userspace flags (000000de) [ 4045.555676][T12349] netlink: 'syz.1.1891': attribute type 4 has an invalid length. [ 4047.636790][T12351] netlink: 'syz.0.1892': attribute type 15 has an invalid length. [ 4047.639292][T12351] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1892'. [ 4049.707063][T12353] netlink: 'syz.1.1893': attribute type 32 has an invalid length. [ 4051.583237][T12357] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1894'. [ 4059.943389][T12368] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 4096.157618][T12438] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1916'. [ 4096.160065][T12438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1916'. [ 4096.194960][T12438] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1916'. [ 4100.847726][T12444] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1919'. [ 4134.650445][ T35] audit: type=1107 audit(2000001103.160:11): pid=12512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 4149.527222][T12531] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1945'. [ 4184.835686][T12570] netlink: 'syz.1.1963': attribute type 1 has an invalid length. [ 4194.595187][T12580] tmpfs: Bad value for 'mpol' [ 4272.797273][T12676] netlink: 'syz.0.2012': attribute type 5 has an invalid length. [ 4274.639324][T12678] netlink: 'syz.1.2013': attribute type 22 has an invalid length. [ 4311.148257][T12717] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2032'. [ 4332.495708][T12770] capability: warning: `syz.1.2042' uses 32-bit capabilities (legacy support in use) [ 4342.199788][T12780] netlink: 'syz.0.2047': attribute type 1 has an invalid length. [ 4342.232454][T12780] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2047'. [ 4347.816218][T12784] netlink: 'syz.0.2049': attribute type 14 has an invalid length. [ 4352.936094][T12790] netlink: 'syz.0.2051': attribute type 28 has an invalid length. [ 4352.938351][T12790] netlink: 'syz.0.2051': attribute type 3 has an invalid length. [ 4352.940112][T12790] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2051'. [ 4360.314602][T12796] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2055'. [ 4369.411691][T12808] binder: 12805:12808 ioctl c0306201 200000000a00 returned -14 [ 4381.407766][T12820] IPv6: Can't replace route, no match found [ 4383.639002][T12822] xt_hashlimit: overflow, try lower: 3/0 [ 4398.899879][T12838] netlink: 'syz.1.2076': attribute type 1 has an invalid length. [ 4398.926484][T12838] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2076'. [ 4401.543721][T12840] syz.0.2077: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 4401.583772][T12840] CPU: 0 UID: 0 PID: 12840 Comm: syz.0.2077 Not tainted 6.16.0-rc1-syzkaller-gfda589c28604 #0 PREEMPT [ 4401.584459][T12840] Hardware name: riscv-virtio,qemu (DT) [ 4401.584892][T12840] Call Trace: [ 4401.585177][T12840] [] dump_backtrace+0x2e/0x3c [ 4401.586920][T12840] [] show_stack+0x30/0x3c [ 4401.587268][T12840] [] dump_stack_lvl+0x12e/0x1a6 [ 4401.587878][T12840] [] dump_stack+0x1c/0x24 [ 4401.588325][T12840] [] warn_alloc+0x170/0x292 [ 4401.588676][T12840] [] __vmalloc_node_range_noprof+0xe62/0x11b0 [ 4401.589113][T12840] [] vmalloc_user_noprof+0xfc/0x128 [ 4401.589564][T12840] [] xskq_create+0xf2/0x1ae [ 4401.589966][T12840] [] xsk_setsockopt+0x338/0x908 [ 4401.590357][T12840] [] do_sock_setsockopt+0x208/0x400 [ 4401.590881][T12840] [] __sys_setsockopt+0x142/0x1e6 [ 4401.591368][T12840] [] __riscv_sys_setsockopt+0xa6/0x114 [ 4401.591941][T12840] [] syscall_handler+0x94/0x118 [ 4401.592387][T12840] [] do_trap_ecall_u+0x396/0x530 [ 4401.592965][T12840] [] handle_exception+0x146/0x152 [ 4401.673100][T12840] Mem-Info: [ 4401.676016][T12840] active_anon:2037 inactive_anon:0 isolated_anon:0 [ 4401.676016][T12840] active_file:10821 inactive_file:35802 isolated_file:0 [ 4401.676016][T12840] unevictable:768 dirty:112 writeback:0 [ 4401.676016][T12840] slab_reclaimable:2491 slab_unreclaimable:26274 [ 4401.676016][T12840] mapped:12521 shmem:832 pagetables:775 [ 4401.676016][T12840] sec_pagetables:0 bounce:0 [ 4401.676016][T12840] kernel_misc_reclaimable:0 [ 4401.676016][T12840] free:210601 free_pcp:6324 free_cma:52608 [ 4401.702929][T12840] Node 0 active_anon:8148kB inactive_anon:0kB active_file:43284kB inactive_file:143208kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:50084kB dirty:448kB writeback:0kB shmem:3328kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6104kB pagetables:3100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 4401.708432][T12840] Node 0 DMA32 free:842404kB boost:0kB min:22528kB low:28160kB high:33792kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8148kB inactive_anon:0kB active_file:43284kB inactive_file:143208kB unevictable:3072kB writepending:448kB present:2097152kB managed:1431536kB mlocked:0kB bounce:0kB free_pcp:25312kB local_pcp:13588kB free_cma:210432kB [ 4401.754950][T12840] lowmem_reserve[]: 0 0 0 [ 4401.757500][T12840] Node 0 DMA32: 429*4kB (UM) 494*8kB (UM) 428*16kB (ME) 450*32kB (UM) 338*64kB (UM) 66*128kB (UM) 46*256kB (UM) 47*512kB (UMEC) 28*1024kB (UMEC) 0*2048kB 176*4096kB (UMC) = 842404kB [ 4401.838561][T12840] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 4401.839993][T12840] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 4401.860354][T12840] 47457 total pagecache pages [ 4401.876673][T12840] 0 pages in swap cache [ 4401.877704][T12840] Free swap = 124996kB [ 4401.879190][T12840] Total swap = 124996kB [ 4401.887175][T12840] 524288 pages RAM [ 4401.904043][T12840] 0 pages HighMem/MovableOnly [ 4401.905120][T12840] 166404 pages reserved [ 4401.908967][T12840] 52736 pages cma reserved [ 4418.412726][T12846] infiniband syz1: set active [ 4418.414914][T12846] infiniband syz1: added veth1_virt_wifi [ 4418.449941][T12846] syz1: rxe_create_cq: returned err = -12 [ 4418.459870][T12846] infiniband syz1: Couldn't create ib_mad CQ [ 4418.486026][T12846] infiniband syz1: Couldn't open port 1 [ 4419.056975][T12846] RDS/IB: syz1: added [ 4419.086753][T12846] smc: adding ib device syz1 with port count 1 [ 4419.097135][T12846] smc: ib device syz1 port 1 has pnetid [ 4453.357661][T12892] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 4478.369567][T12920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2111'. [ 4497.434589][T12941] nft_compat: unsupported protocol 0 [ 4525.684448][ C1] vkms_vblank_simulate: vblank timer overrun [ 4533.938267][T12981] netlink: 'syz.1.2140': attribute type 4 has an invalid length. [ 4545.544157][T12993] syz.1.2146: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 4545.562343][T12993] CPU: 1 UID: 0 PID: 12993 Comm: syz.1.2146 Not tainted 6.16.0-rc1-syzkaller-gfda589c28604 #0 PREEMPT [ 4545.563081][T12993] Hardware name: riscv-virtio,qemu (DT) [ 4545.563289][T12993] Call Trace: [ 4545.563484][T12993] [] dump_backtrace+0x2e/0x3c [ 4545.564135][T12993] [] show_stack+0x30/0x3c [ 4545.564596][T12993] [] dump_stack_lvl+0x12e/0x1a6 [ 4545.565538][T12993] [] dump_stack+0x1c/0x24 [ 4545.566155][T12993] [] warn_alloc+0x170/0x292 [ 4545.566742][T12993] [] __vmalloc_node_range_noprof+0xe62/0x11b0 [ 4545.567448][T12993] [] vmalloc_user_noprof+0xfc/0x128 [ 4545.568185][T12993] [] xskq_create+0xf2/0x1ae [ 4545.568837][T12993] [] xsk_setsockopt+0x338/0x908 [ 4545.569494][T12993] [] do_sock_setsockopt+0x208/0x400 [ 4545.570171][T12993] [] __sys_setsockopt+0x142/0x1e6 [ 4545.570934][T12993] [] __riscv_sys_setsockopt+0xa6/0x114 [ 4545.571697][T12993] [] syscall_handler+0x94/0x118 [ 4545.572216][T12993] [] do_trap_ecall_u+0x396/0x530 [ 4545.572897][T12993] [] handle_exception+0x146/0x152 [ 4545.642561][T12993] Mem-Info: [ 4545.644289][T12993] active_anon:2050 inactive_anon:0 isolated_anon:0 [ 4545.644289][T12993] active_file:10821 inactive_file:35856 isolated_file:0 [ 4545.644289][T12993] unevictable:768 dirty:53 writeback:0 [ 4545.644289][T12993] slab_reclaimable:2518 slab_unreclaimable:27120 [ 4545.644289][T12993] mapped:12582 shmem:833 pagetables:792 [ 4545.644289][T12993] sec_pagetables:0 bounce:0 [ 4545.644289][T12993] kernel_misc_reclaimable:0 [ 4545.644289][T12993] free:209209 free_pcp:6657 free_cma:52608 [ 4545.648061][T12993] Node 0 active_anon:8200kB inactive_anon:0kB active_file:43284kB inactive_file:143424kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:50328kB dirty:212kB writeback:0kB shmem:3332kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5936kB pagetables:3168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 4545.693724][T12993] Node 0 DMA32 free:836836kB boost:0kB min:22528kB low:28160kB high:33792kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8200kB inactive_anon:0kB active_file:43284kB inactive_file:143424kB unevictable:3072kB writepending:212kB present:2097152kB managed:1431536kB mlocked:0kB bounce:0kB free_pcp:26628kB local_pcp:14000kB free_cma:210432kB [ 4545.698122][T12993] lowmem_reserve[]: 0 0 0 [ 4545.733346][T12993] Node 0 DMA32: 15*4kB (UM) 359*8kB (M) 429*16kB (UME) 391*32kB (UM) 339*64kB (UM) 64*128kB (UM) 43*256kB (UM) 47*512kB (UMEC) 28*1024kB (UMEC) 0*2048kB 176*4096kB (UMC) = 836836kB [ 4545.795100][T12993] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 4545.796825][T12993] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 4545.798445][T12993] 47510 total pagecache pages [ 4545.799696][T12993] 0 pages in swap cache [ 4545.843389][T12993] Free swap = 124996kB [ 4545.845148][T12993] Total swap = 124996kB [ 4545.846397][T12993] 524288 pages RAM [ 4545.847574][T12993] 0 pages HighMem/MovableOnly [ 4545.848859][T12993] 166404 pages reserved [ 4545.850100][T12993] 52736 pages cma reserved [ 4565.070449][T13019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2158'. [ 4570.057777][T13023] bond0: (slave bond_slave_0): Releasing backup interface [ 4570.577053][T13027] rdma_rxe: rxe_newlink: failed to add veth1_virt_wifi [ 4580.845596][T13038] netlink: 'syz.1.2168': attribute type 3 has an invalid length. [ 4580.849010][T13038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2168'. [ 4584.884215][T13042] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 4604.416318][ T35] audit: type=1326 audit(2000001572.940:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.0.2180" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x0 [ 4604.883308][T13063] netlink: 'syz.1.2179': attribute type 3 has an invalid length. [ 4604.943021][ T35] audit: type=1326 audit(2000001573.440:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.0.2180" exe="/syz-executor" sig=31 arch=c00000f3 syscall=436 compat=0 ip=0xdb95a code=0x0 [ 4615.065134][T12359] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 4615.304623][T12359] usb 2-1: Using ep0 maxpacket: 16 [ 4615.453192][T12359] usb 2-1: unable to get BOS descriptor or descriptor too short [ 4615.618948][T12359] usb 2-1: config 1 has an invalid interface number: 231 but max is 0 [ 4615.634140][T12359] usb 2-1: config 1 has no interface number 0 [ 4615.636540][T12359] usb 2-1: config 1 interface 231 has no altsetting 0 [ 4616.234901][T12359] usb 2-1: string descriptor 0 read error: -22 [ 4616.239209][T12359] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=5c.f5 [ 4616.254230][T12359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4618.409135][T12359] usbtest 2-1:1.231: Linux gadget zero [ 4618.412369][T12359] usbtest 2-1:1.231: high-speed {control in/out int-out} tests (+alt) [ 4619.260500][T12359] usb 2-1: USB disconnect, device number 7 [ 4621.973637][T13086] netlink: 'syz.0.2184': attribute type 21 has an invalid length. [ 4621.984919][T13086] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2184'. [ 4621.990245][T13086] netlink: 'syz.0.2184': attribute type 4 has an invalid length. [ 4622.013758][T13086] netlink: 'syz.0.2184': attribute type 5 has an invalid length. [ 4622.016762][T13086] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2184'. [ 4674.054135][T13138] netlink: 'syz.1.2206': attribute type 1 has an invalid length. [ 4674.056442][T13138] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2206'. [ 4677.592970][T13142] dlm: plock device version mismatch: kernel (1.2.0), user (1.3.327680) [ 4687.273715][T12359] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 4687.502606][T12359] usb 2-1: Using ep0 maxpacket: 8 [ 4687.825678][T12359] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 4687.828620][T12359] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 4687.830518][T12359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4687.974284][T12359] usb 2-1: config 0 descriptor?? [ 4688.347660][T12359] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 4689.239066][ T9] usb 2-1: USB disconnect, device number 8 [ 4717.697570][T13194] netlink: 392 bytes leftover after parsing attributes in process `syz.0.2228'. [ 4721.843590][T13198] No such timeout policy "syz0" [ 4753.880059][T13237] siw: device registration error -23 [ 4758.436078][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 4758.624178][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 4758.723971][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 4758.726374][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 4758.846332][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 4758.849151][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4758.855771][ T9] usb 1-1: Product: syz [ 4758.857616][ T9] usb 1-1: Manufacturer: syz [ 4758.859116][ T9] usb 1-1: SerialNumber: syz [ 4760.456246][ T9] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 4761.577554][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 4761.690411][ T9] usb 1-1: USB disconnect, device number 11 [ 4765.545524][T13264] netlink: 296 bytes leftover after parsing attributes in process `syz.1.2252'. [ 4765.547302][T13264] netlink: 296 bytes leftover after parsing attributes in process `syz.1.2252'. [ 4770.248132][T12359] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 4770.514383][T12359] usb 2-1: Using ep0 maxpacket: 16 [ 4770.748868][T12359] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 4770.755153][T12359] usb 2-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 4770.757091][T12359] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 4770.758775][T12359] usb 2-1: config 1 has no interface number 1 [ 4770.772372][T12359] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 4770.774937][T12359] usb 2-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x74, changing to 0x4 [ 4770.776866][T12359] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x4 has an invalid bInterval 97, changing to 10 [ 4770.778665][T12359] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x4 has invalid maxpacket 25183, setting to 1024 [ 4770.909370][T12359] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 4770.932218][T12359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4770.935872][T12359] usb 2-1: Product: syz [ 4770.937773][T12359] usb 2-1: Manufacturer: syz [ 4770.939340][T12359] usb 2-1: SerialNumber: syz [ 4773.544269][T12359] usb 2-1: USB disconnect, device number 9 [ 4798.166560][T13320] netlink: 'syz.0.2267': attribute type 58 has an invalid length. [ 4798.168154][T13320] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2267'. [ 4819.459667][T13350] xt_hashlimit: size too large, truncated to 1048576 [ 4819.476240][T13350] xt_hashlimit: overflow, rate too high: 0 [ 4837.620541][T13371] netlink: 'syz.0.2291': attribute type 3 has an invalid length. [ 4837.954918][T13372] IPv6: sit1: Disabled Multicast RS [ 4844.986123][T13384] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2296'. [ 4862.315591][T13410] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 4867.035852][T13415] netlink: 'syz.1.2311': attribute type 58 has an invalid length. [ 4867.038810][T13415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2311'. [ 4882.174579][T13437] syz.0.2321 uses obsolete (PF_INET,SOCK_PACKET) [ 4883.895988][T13439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2320'. [ 4883.899255][T13439] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2320'. [ 4911.883187][T13473] syz.1.2337 (13473): drop_caches: 0 [ 4929.119805][T13496] netlink: 'syz.1.2348': attribute type 11 has an invalid length. [ 4933.938390][T13504] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2353'. [ 4939.809176][T13509] Process accounting resumed [ 4946.088726][ T35] audit: type=1400 audit(2000001914.620:14): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=13519 comm="syz.0.2361" [ 4973.989437][T13555] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 4992.989611][T13073] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 4993.307865][T13073] usb 1-1: Using ep0 maxpacket: 32 [ 4993.402860][T13073] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 4993.663780][T13073] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 4993.665914][T13073] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4993.667512][T13073] usb 1-1: Product: syz [ 4993.668889][T13073] usb 1-1: Manufacturer: syz [ 4993.670288][T13073] usb 1-1: SerialNumber: syz [ 4993.818056][T13073] usb 1-1: config 0 descriptor?? [ 4994.008179][T13073] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 4994.774590][T13073] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 4994.778310][T13073] quatech2 1-1:0.0: probe with driver quatech2 failed with error -8 [ 4995.460491][T13073] usb 1-1: USB disconnect, device number 12 [ 5015.466215][ T35] audit: type=1326 audit(2000001984.000:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13617 comm="syz.1.2400" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5015.493986][ T35] audit: type=1326 audit(2000001984.020:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13617 comm="syz.1.2400" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5015.631553][ T35] audit: type=1326 audit(2000001984.160:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13617 comm="syz.1.2400" exe="/syz-executor" sig=0 arch=c00000f3 syscall=141 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5015.658733][ T35] audit: type=1326 audit(2000001984.160:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13617 comm="syz.1.2400" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5016.596148][T13620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2401'. [ 5031.609983][ T35] audit: type=1400 audit(2000002000.140:19): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=13639 comm="syz.1.2410" [ 5077.013193][T13702] dvmrp0: entered allmulticast mode [ 5087.189493][T13716] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2441'. [ 5117.710377][T13754] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2459'. [ 5125.895334][T13767] xfrm0: entered promiscuous mode [ 5125.897819][T13767] xfrm0: entered allmulticast mode [ 5133.676817][T13775] AppArmor: change_hat: Invalid input 'p' [ 5145.523976][T13789] dvmrp0: entered allmulticast mode [ 5167.800564][T13821] netlink: 'syz.0.2492': attribute type 3 has an invalid length. [ 5170.808058][T13825] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2494'. [ 5170.809529][T13825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2494'. [ 5170.818458][T13825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2494'. [ 5175.348126][T13832] xt_ecn: cannot match TCP bits for non-tcp packets [ 5198.864672][T13858] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 5198.868099][T13858] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 5198.877061][T13858] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 5198.879390][T13858] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 5198.939063][T13858] geneve2: entered promiscuous mode [ 5198.960447][T13858] geneve2: entered allmulticast mode [ 5221.493116][T13921] xt_cluster: node mask cannot exceed total number of nodes [ 5227.467326][T13931] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2528'. [ 5246.054933][T13956] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check. [ 5274.918814][T13990] gtp0: entered promiscuous mode [ 5274.973554][T13990] gtp0: entered allmulticast mode [ 5301.703060][T14029] netlink: 'syz.1.2575': attribute type 2 has an invalid length. [ 5301.707660][T14029] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2575'. [ 5309.073615][T14036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2579'. [ 5349.900087][T14093] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2604'. [ 5380.680297][T14122] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 5387.634204][T14128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2620'. [ 5396.762908][T13073] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 5397.032457][T13073] usb 2-1: not running at top speed; connect to a high speed hub [ 5397.099877][T13073] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 5397.102958][T13073] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 5397.104920][T13073] usb 2-1: config 1 has no interface number 1 [ 5397.106726][T13073] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 5397.865455][T13073] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 5397.866991][T13073] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5397.868222][T13073] usb 2-1: Product: syz [ 5397.878197][T13073] usb 2-1: Manufacturer: syz [ 5397.879387][T13073] usb 2-1: SerialNumber: syz [ 5400.522866][T13073] usb 2-1: USB disconnect, device number 10 [ 5410.909459][T14171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2628'. [ 5418.095392][T13073] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 5418.333718][T13073] usb 1-1: Using ep0 maxpacket: 32 [ 5418.390597][T13073] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 5418.399720][T13073] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 5418.404898][T13073] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 5418.415144][T13073] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 5418.417313][T13073] usb 1-1: config 1 has no interface number 0 [ 5418.523143][T13073] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 5418.525406][T13073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5418.845027][T13073] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 5420.007896][T13073] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 5420.037234][T13073] snd_usb_pod 1-1:1.1: invalid control EP [ 5420.039360][T13073] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 5420.054323][T13073] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 5420.087439][T13073] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 5421.743508][T13073] usb 1-1: USB disconnect, device number 13 [ 5446.343670][T13485] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 5446.617496][T13485] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 5446.644884][T13485] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 5446.647526][T13485] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 5446.649522][T13485] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5446.837751][T14206] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 5446.992942][T13485] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 5449.267654][T14223] netlink: 'syz.1.2640': attribute type 1 has an invalid length. [ 5449.323673][T14223] netlink: 'syz.1.2640': attribute type 2 has an invalid length. [ 5451.722956][ T3917] usb 1-1: USB disconnect, device number 14 [ 5461.894402][T14244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2642'. [ 5461.896833][T14244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2642'. [ 5478.085055][T13073] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 5478.323091][T13073] usb 2-1: Using ep0 maxpacket: 32 [ 5478.602873][T13073] usb 2-1: config 0 has an invalid interface number: 37 but max is 1 [ 5478.605461][T13073] usb 2-1: config 0 has no interface number 1 [ 5478.800390][T13073] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 5478.823786][T13073] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 5478.825656][T13073] usb 2-1: Product: syz [ 5478.827082][T13073] usb 2-1: Manufacturer: syz [ 5478.828559][T13073] usb 2-1: SerialNumber: syz [ 5479.027150][T13073] usb 2-1: config 0 descriptor?? [ 5480.337164][T13073] qcserial 2-1:0.37: Qualcomm USB modem converter detected [ 5482.128086][T13485] usb 2-1: USB disconnect, device number 11 [ 5482.316775][T13485] qcserial 2-1:0.37: device disconnected [ 5497.132493][T13073] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 5497.372569][T13073] usb 2-1: Using ep0 maxpacket: 16 [ 5497.625042][T13073] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 5497.647063][T13073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 5497.649218][T13073] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 5497.853805][T13073] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 5497.856280][T13073] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5497.858169][T13073] usb 2-1: Product: syz [ 5497.859780][T13073] usb 2-1: Manufacturer: syz [ 5497.870335][T13073] usb 2-1: SerialNumber: syz [ 5498.166869][T13073] usb 2-1: config 0 descriptor?? [ 5498.249362][T14286] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 5498.496326][T13073] mceusb 2-1:0.0: mceusb_dev_probe: device setup failed! [ 5498.499019][T13073] mceusb 2-1:0.0: probe with driver mceusb failed with error -12 [ 5501.642562][T13073] usb 2-1: USB disconnect, device number 12 [ 5518.823341][T14318] comedi: valid board names for 8255 driver are: [ 5518.824917][T14318] 8255 [ 5518.825817][T14318] comedi: valid board names for vmk80xx driver are: [ 5518.826921][T14318] vmk80xx [ 5518.827844][T14318] comedi: valid board names for usbduxsigma driver are: [ 5518.828975][T14318] usbduxsigma [ 5518.829904][T14318] comedi: valid board names for usbduxfast driver are: [ 5518.836096][T14318] usbduxfast [ 5518.837124][T14318] comedi: valid board names for usbdux driver are: [ 5518.838247][T14318] usbdux [ 5518.839217][T14318] comedi: valid board names for ni6501 driver are: [ 5518.840364][T14318] ni6501 [ 5518.843429][T14318] comedi: valid board names for dt9812 driver are: [ 5518.844570][T14318] dt9812 [ 5518.845604][T14318] comedi: valid board names for ni_labpc_cs driver are: [ 5518.848425][T14318] ni_labpc_cs [ 5518.849597][T14318] comedi: valid board names for ni_daq_700 driver are: [ 5518.859811][T14318] ni_daq_700 [ 5518.869395][T14318] comedi: valid board names for labpc_pci driver are: [ 5518.872429][T14318] labpc_pci [ 5518.873511][T14318] comedi: valid board names for adl_pci9118 driver are: [ 5518.877820][T14318] pci9118dg [ 5518.879525][T14318] pci9118hg [ 5518.885264][T14318] pci9118hr [ 5518.886821][T14318] comedi: valid board names for 8255_pci driver are: [ 5518.893343][T14318] 8255_pci [ 5518.895115][T14318] comedi: valid board names for comedi_parport driver are: [ 5518.896779][T14318] comedi_parport [ 5518.898440][T14318] comedi: valid board names for comedi_test driver are: [ 5518.900453][T14318] comedi_test [ 5518.933727][T14318] comedi: valid board names for comedi_bond driver are: [ 5518.952409][T14318] comedi_bond [ 5541.690191][T14348] syz.0.2679 (14348): /proc/14347/oom_adj is deprecated, please use /proc/14347/oom_score_adj instead. [ 5551.314300][T13073] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 5551.546138][T13073] usb 1-1: Using ep0 maxpacket: 16 [ 5551.864763][T13073] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 5551.867489][T13073] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5551.869416][T13073] usb 1-1: Product: syz [ 5551.892485][T13073] usb 1-1: Manufacturer: syz [ 5551.899529][T13073] usb 1-1: SerialNumber: syz [ 5552.046527][T13073] usb 1-1: config 0 descriptor?? [ 5552.278011][T13073] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 5554.227268][T13073] usb 1-1: clie_3_5_startup: get config number bad return length: 0 [ 5554.233569][T13073] visor 1-1:0.0: probe with driver visor failed with error -5 [ 5555.405308][T13073] usb 1-1: USB disconnect, device number 15 [ 5584.059667][T14398] netlink: 'syz.0.2697': attribute type 4 has an invalid length. [ 5584.083307][T14398] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2697'. [ 5588.312404][T14402] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 5615.304147][T14434] netlink: 'syz.0.2715': attribute type 1 has an invalid length. [ 5623.984605][T14441] tmpfs: Bad value for 'mpol' [ 5635.730490][T14460] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 5667.639649][T14503] netlink: 'syz.0.2742': attribute type 4 has an invalid length. [ 5668.678827][T14499] syz.1.2740 (14499): drop_caches: 2 [ 5687.945915][T14520] batadv_slave_1: entered promiscuous mode [ 5698.005200][T14530] binder: 14529:14530 ioctl c018620c 0 returned -14 [ 5701.087169][T14534] batadv_slave_1: entered promiscuous mode [ 5708.189470][T14542] netlink: 'syz.1.2761': attribute type 8 has an invalid length. [ 5765.286457][T14654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2797'. [ 5765.288054][T14654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2797'. [ 5767.856787][T14658] netlink: 'syz.0.2799': attribute type 5 has an invalid length. [ 5770.046381][T14660] ipt_REJECT: TCP_RESET invalid for non-tcp [ 5773.957216][T14664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2802'. [ 5773.959604][T14664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2802'. [ 5778.269449][T14668] nvme_fabrics: missing parameter 'transport=%s' [ 5778.289327][T14668] nvme_fabrics: missing parameter 'nqn=%s' [ 5787.270418][T14683] tc_dump_action: action bad kind [ 5840.535480][T14756] netlink: 'syz.1.2845': attribute type 30 has an invalid length. [ 5840.553007][T14756] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 5840.564388][T14756] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 5841.569109][T14758] xt_nfacct: accounting object `syz1' does not exists [ 5846.533539][T14764] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2849'. [ 5860.458533][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2857'. [ 5860.481362][T14782] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2857'. [ 5868.246477][T14790] netlink: 'syz.1.2862': attribute type 4 has an invalid length. [ 5882.954895][T14817] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 5904.563104][T14853] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2893'. [ 5905.378149][T14855] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2894'. [ 5908.674981][T14863] xt_policy: output policy not valid in PREROUTING and INPUT [ 5915.399931][T14871] netlink: 'syz.0.2902': attribute type 21 has an invalid length. [ 5915.414949][T14871] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2902'. [ 5915.418366][T14871] netlink: 'syz.0.2902': attribute type 4 has an invalid length. [ 5915.420107][T14871] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2902'. [ 5919.453826][T13073] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 5919.714634][T13073] usb 2-1: Using ep0 maxpacket: 16 [ 5919.969624][T13073] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 5919.984269][T13073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 5919.986613][T13073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 5919.988488][T13073] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 5919.990304][T13073] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 5920.092730][T13073] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 5920.094904][T13073] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 5920.096656][T13073] usb 2-1: Manufacturer: syz [ 5920.274916][T13073] usb 2-1: config 0 descriptor?? [ 5926.274144][T13073] rc_core: IR keymap rc-hauppauge not found [ 5926.275507][T13073] Registered IR keymap rc-empty [ 5926.296464][T13073] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 5926.325322][T13073] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 5926.403800][T13073] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 5926.460316][T13073] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input20 [ 5926.562255][T13073] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 5926.595278][T13073] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 5926.647095][T13073] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 5926.710218][T13073] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 5926.766304][T13073] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 5926.794010][T13073] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 5926.814447][T13073] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 5926.872447][T13073] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 5926.942438][T13073] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 5926.979345][T13073] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 5927.294445][T13073] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 5927.296709][T13073] mceusb 2-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 5927.598303][T13073] usb 2-1: USB disconnect, device number 13 [ 5937.313710][T14913] mmap: syz.1.2910 (14913): VmData 29102080 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 5950.899042][T14932] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 5990.062062][T15016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2942'. [ 5997.215409][T15024] netlink: 'syz.1.2945': attribute type 21 has an invalid length. [ 5997.216944][T15024] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2945'. [ 5997.218881][T15024] netlink: 'syz.1.2945': attribute type 4 has an invalid length. [ 5997.220298][T15024] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2945'. [ 6003.560303][T15032] ip6gre1: entered allmulticast mode [ 6047.685228][T15102] netlink: 'syz.1.2983': attribute type 12 has an invalid length. [ 6064.858152][T15126] random: crng reseeded on system resumption [ 6111.438022][T15191] ip6gre1: entered allmulticast mode [ 6138.142803][T15230] xt_TPROXY: Can be used only with -p tcp or -p udp [ 6140.517908][T13073] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 6141.243236][T13073] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 6141.245745][T13073] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 6141.247790][T13073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 6141.249700][T13073] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 6141.742676][T13073] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 6141.744168][T13073] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6141.745507][T13073] usb 2-1: Product: syz [ 6141.746628][T13073] usb 2-1: Manufacturer: syz [ 6141.748038][T13073] usb 2-1: SerialNumber: syz [ 6141.915396][T13073] usb 2-1: config 0 descriptor?? [ 6144.216547][T13073] usb 2-1: USB disconnect, device number 14 [ 6166.529872][T15288] netlink: 'syz.1.3057': attribute type 2 has an invalid length. [ 6166.532670][T15288] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3057'. [ 6191.718794][T15327] netlink: 'syz.0.3075': attribute type 15 has an invalid length. [ 6191.726416][T15327] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3075'. [ 6201.098526][T15342] netlink: 'syz.1.3082': attribute type 4 has an invalid length. [ 6207.914960][T15352] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 20001 - 0 [ 6207.917626][T15352] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 20001 - 0 [ 6207.919772][T15352] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 20001 - 0 [ 6207.936136][T15352] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 20001 - 0 [ 6210.177469][T15358] netlink: 'syz.0.3089': attribute type 1 has an invalid length. [ 6210.202218][T15358] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3089'. [ 6212.099318][T15362] netlink: 'syz.0.3091': attribute type 2 has an invalid length. [ 6217.127266][T15366] netlink: 'syz.1.3093': attribute type 21 has an invalid length. [ 6226.448124][T15382] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3101'. [ 6231.738955][T15388] netlink: 'syz.1.3104': attribute type 2 has an invalid length. [ 6248.642560][ T35] audit: type=1326 audit(2000003217.170:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.3115" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x50000 [ 6248.659098][ T35] audit: type=1326 audit(2000003217.190:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.3115" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x50000 [ 6248.693171][ T35] audit: type=1326 audit(2000003217.200:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.3115" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x50000 [ 6248.702836][ T35] audit: type=1326 audit(2000003217.230:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.3115" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x50000 [ 6248.722337][ T35] audit: type=1326 audit(2000003217.250:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.3115" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x50000 [ 6248.733164][ T35] audit: type=1326 audit(2000003217.260:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.3115" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x50000 [ 6248.746803][ T35] audit: type=1326 audit(2000003217.280:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.3115" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x50000 [ 6248.778972][ T35] audit: type=1326 audit(2000003217.310:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.3115" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x50000 [ 6248.803236][ T35] audit: type=1326 audit(2000003217.320:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.3115" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x50000 [ 6248.852314][ T35] audit: type=1326 audit(2000003217.380:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.3115" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x50000 [ 6252.538549][T15414] netlink: 'syz.0.3117': attribute type 21 has an invalid length. [ 6253.657763][ T35] kauditd_printk_skb: 229 callbacks suppressed [ 6253.658290][ T35] audit: type=1326 audit(2000003222.190:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.3115" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x50000 [ 6253.697177][ T35] audit: type=1326 audit(2000003222.230:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.3115" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x50000 [ 6253.706913][ T35] audit: type=1326 audit(2000003222.230:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.3115" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x50000 [ 6253.710261][ T35] audit: type=1326 audit(2000003222.230:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.3115" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x50000 [ 6253.765783][ T35] audit: type=1326 audit(2000003222.230:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.3115" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x50000 [ 6253.769481][ T35] audit: type=1326 audit(2000003222.280:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.3115" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x50000 [ 6253.789306][ T35] audit: type=1326 audit(2000003222.280:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.3115" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x50000 [ 6253.803763][ T35] audit: type=1326 audit(2000003222.280:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.3115" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x50000 [ 6253.836577][ T35] audit: type=1326 audit(2000003222.370:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.3115" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x50000 [ 6254.209880][ T35] audit: type=1326 audit(2000003222.740:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.3115" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x50000 [ 6258.682148][ T35] kauditd_printk_skb: 219 callbacks suppressed [ 6258.682683][ T35] audit: type=1326 audit(2000003227.200:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.3115" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x50000 [ 6258.772737][ T35] audit: type=1326 audit(2000003227.210:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.3115" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x50000 [ 6258.775071][ T35] audit: type=1326 audit(2000003227.300:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.3115" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x50000 [ 6258.777059][ T35] audit: type=1326 audit(2000003227.300:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.3115" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x50000 [ 6258.808149][ T35] audit: type=1326 audit(2000003227.340:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.3115" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x50000 [ 6258.818187][ T35] audit: type=1326 audit(2000003227.350:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.3115" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x50000 [ 6258.843783][ T35] audit: type=1326 audit(2000003227.370:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.3115" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x50000 [ 6258.848932][ T35] audit: type=1326 audit(2000003227.380:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.3115" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x50000 [ 6258.872361][ T35] audit: type=1326 audit(2000003227.390:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.3115" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x50000 [ 6258.874465][ T35] audit: type=1326 audit(2000003227.390:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.3115" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x50000 [ 6262.354493][T15424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3121'. [ 6281.125600][T15459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3138'. [ 6309.958631][T15497] netlink: 'syz.0.3156': attribute type 2 has an invalid length. [ 6309.962358][T15497] netlink: 'syz.0.3156': attribute type 1 has an invalid length. [ 6314.297930][T15501] dvmrp0: left allmulticast mode [ 6315.376968][T15505] netlink: 'syz.0.3159': attribute type 12 has an invalid length. [ 6362.094613][T15564] binder: 15563:15564 ioctl 40046210 0 returned -14 [ 6388.856990][T15600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3199'. [ 6394.497726][T15606] tmpfs: Bad value for 'mpol' [ 6396.228454][T15608] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3203'. [ 6408.085996][T15622] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.3210' sets config #1 [ 6424.731853][T15637] xt_NFQUEUE: number of total queues is 0 [ 6425.305416][T15639] netlink: 'syz.0.3218': attribute type 11 has an invalid length. [ 6425.307765][T15639] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3218'. [ 6452.888525][T15681] xt_CT: You must specify a L4 protocol and not use inversions on it [ 6491.270453][T15727] random: crng reseeded on system resumption [ 6500.469930][T15739] xt_hashlimit: invalid interval [ 6530.478693][T15775] xt_connbytes: Forcing CT accounting to be enabled [ 6530.496096][T15775] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 6530.500677][T15775] xt_bpf: check failed: parse error [ 6534.508840][T15779] xt_l2tp: v2 sid > 0xffff: 100663296 [ 6570.986055][T15822] netlink: 'syz.0.3308': attribute type 5 has an invalid length. [ 6570.990315][T15822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3308'. [ 6611.548404][T15893] cgroup: Unknown subsys name 'cpuset' [ 6615.354846][T15897] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 6618.077285][T15899] xt_limit: Overflow, try lower: 0/0 [ 6636.467872][T15927] ubi31: attaching mtd0 [ 6636.536206][T15927] ubi31: scanning is finished [ 6636.539879][T15927] ubi31: empty MTD device detected [ 6637.279134][T15927] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 6637.327844][T15927] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 6637.330454][T15927] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 6637.365721][T15927] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 6637.368125][T15927] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 6637.369933][T15927] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 6637.435390][T15927] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2236378302 [ 6637.492954][T15927] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 6637.504396][T15929] ubi31: background thread "ubi_bgt31d" started, PID 15929 [ 6687.662875][T15986] netlink: 'syz.1.3368': attribute type 2 has an invalid length. [ 6687.668635][T15986] netlink: 'syz.1.3368': attribute type 11 has an invalid length. [ 6687.670490][T15986] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3368'. [ 6690.506259][T15991] ubi: mtd0 is already attached to ubi31 [ 6693.963790][T15995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3372'. [ 6697.325595][T15998] netlink: 'syz.1.3373': attribute type 7 has an invalid length. [ 6712.239356][T16011] !: renamed from dummy0 (while UP) [ 6742.369309][T16047] ipt_REJECT: ECHOREPLY no longer supported. [ 6788.607444][T16102] netlink: 'syz.1.3421': attribute type 64 has an invalid length. [ 6788.610162][T16102] netlink: 'syz.1.3421': attribute type 4 has an invalid length. [ 6788.666869][T16102] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3421'. [ 6814.827074][T16129] xt_CT: You must specify a L4 protocol and not use inversions on it [ 6840.430492][T16155] netlink: 2756 bytes leftover after parsing attributes in process `syz.0.3445'. [ 6840.444243][T16155] netlink: 1740 bytes leftover after parsing attributes in process `syz.0.3445'. [ 6840.450012][T16155] netlink: 1740 bytes leftover after parsing attributes in process `syz.0.3445'. [ 6873.909181][T16199] cgroup: subsys name conflicts with all [ 6887.268371][T16215] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3474'. [ 6891.960248][T16221] netlink: 'syz.0.3477': attribute type 1 has an invalid length. [ 6899.757865][T16229] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 6912.750582][T16245] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 6932.536002][T16269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3500'. [ 6954.017496][T16295] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 6955.784159][T16297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3514'. [ 6955.786779][T16297] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3514'. [ 6978.989829][T16325] Invalid ELF header magic: != ELF [ 6986.854974][T16333] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3532'. [ 6986.857399][T16333] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3532'. [ 6996.773712][T16348] xt_ecn: cannot match TCP bits for non-tcp packets [ 7004.087381][T16356] comedi comedi0: Minor 4 specified more than once! [ 7014.209233][T16369] netdevsim netdevsim0: Direct firmware load for . [ 7014.209233][T16369] failed with error -2 [ 7014.233027][T16369] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 7014.233027][T16369] [ 7042.838127][T16407] netdevsim netdevsim1: Direct firmware load for . [ 7042.838127][T16407] failed with error -2 [ 7042.840125][T16407] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 7042.840125][T16407] [ 7047.959029][T16413] netlink: 'syz.1.3567': attribute type 3 has an invalid length. [ 7054.555480][T16423] netlink: 'syz.1.3571': attribute type 7 has an invalid length. [ 7054.558913][T16423] netlink: 'syz.1.3571': attribute type 8 has an invalid length. [ 7056.334108][T16427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3573'. [ 7058.073495][T16429] dns_resolver: Unsupported server list version (0) [ 7078.973459][T16455] netlink: 'syz.1.3587': attribute type 15 has an invalid length. [ 7083.187244][T16461] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3590'. [ 7083.206488][T16461] 0X: renamed from veth0 (while UP) [ 7083.408022][T16461] 0X: entered allmulticast mode [ 7083.475425][T16461] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 7085.856207][T16466] netlink: 488 bytes leftover after parsing attributes in process `syz.0.3593'. [ 7089.826736][T16473] cgroup: Bad value for 'name' [ 7117.715538][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3616'. [ 7122.609091][T16525] netlink: 'syz.0.3619': attribute type 1 has an invalid length. [ 7138.379683][T16542] (unnamed net_device) (uninitialized): option arp_validate: invalid value (7) [ 7140.344744][T16545] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config [ 7145.587252][T16553] netlink: 'syz.0.3632': attribute type 1 has an invalid length. [ 7166.916986][T16583] xt_TPROXY: Can be used only with -p tcp or -p udp [ 7177.592854][T16599] tmpfs: Bad value for 'mpol' [ 7193.706653][T16621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3667'. [ 7208.010373][T16635] tmpfs: Bad value for 'mpol' [ 7213.778988][T16645] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3678'. [ 7213.795296][T16645] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3678'. [ 7242.602708][T16689] netlink: 'syz.0.3698': attribute type 39 has an invalid length. [ 7256.467058][T16704] netlink: 'syz.1.3705': attribute type 6 has an invalid length. [ 7273.745309][T16728] netlink: 'syz.0.3716': attribute type 39 has an invalid length. [ 7273.746857][T16728] netlink: 'syz.0.3716': attribute type 4 has an invalid length. [ 7273.748110][T16728] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3716'. [ 7273.897142][T16728] veth1_vlan: left promiscuous mode [ 7279.147487][T16736] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffb,4) [ 7279.158699][T16736] comedi comedi0: 8255: I/O port conflict (0x6,4) [ 7279.232256][T16736] comedi comedi0: 8255: I/O port conflict (0xb,4) [ 7279.234080][T16736] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 7279.235481][T16736] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffa,4) [ 7279.236974][T16736] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 7279.238275][T16736] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 7279.239557][T16736] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 7279.274638][T16736] comedi comedi0: 8255: I/O port conflict (0x6,4) [ 7279.276583][T16736] comedi comedi0: 8255: I/O port conflict (0x7,4) [ 7279.278156][T16736] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 7279.279894][T16736] comedi comedi0: 8255: I/O port conflict (0x7,4) [ 7279.294341][T16736] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 7279.296138][T16736] comedi comedi0: 8255: I/O port conflict (0x10,4) [ 7279.297536][T16736] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 7279.298879][T16736] comedi comedi0: 8255: I/O port conflict (0x9,4) [ 7279.300229][T16736] comedi comedi0: 8255: I/O port conflict (0x9,4) [ 7279.313700][T16736] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 7279.315394][T16736] comedi comedi0: 8255: I/O port conflict (0xffffffffffffffff,4) [ 7281.949490][T16740] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 7299.349597][T16764] [U]  [ 7299.352291][T16764] [U] K{ [ 7299.383674][T16764] [U] t 1ŠFfˊ`GJgo/mC [ 7299.387500][T16764] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 7299.389754][T16764] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 7299.416447][T16764] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 7299.457090][T16764] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 7299.460542][T16764] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 7299.494483][T16764] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 7299.497131][T16764] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 7299.582298][T16764] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 7299.587931][T16764] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 7299.589866][T16764] [U] 22Ʃx?0;3u [ 7299.644928][T16764] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 7299.648762][T16764] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 7299.718359][T16764] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 7299.745881][T16764] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 7299.748162][T16764] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 7299.750404][T16764] [U] ec [ 7299.751591][T16764] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 7300.113380][T16763] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 7312.563974][T16784] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3743'. [ 7321.614742][T16794] batadv_slave_0: entered promiscuous mode [ 7321.616307][T16794] batadv_slave_0: entered allmulticast mode [ 7330.660527][T16802] geneve1: entered allmulticast mode [ 7352.769596][T16831] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3766'. [ 7375.840071][T16863] netlink: 'syz.0.3781': attribute type 10 has an invalid length. [ 7376.065886][T16863] bond0: (slave bond_slave_1): Releasing backup interface [ 7402.040283][T16896] vlan0: entered promiscuous mode [ 7457.530399][T16983] netlink: 'syz.1.3838': attribute type 1 has an invalid length. [ 7457.537181][T16983] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3838'. [ 7479.970425][T17016] xt_CT: You must specify a L4 protocol and not use inversions on it [ 7482.466465][T17020] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 7513.469531][T17055] tmpfs: Bad value for 'mpol' [ 7527.056550][ T35] kauditd_printk_skb: 56 callbacks suppressed [ 7527.056865][ T35] audit: type=1326 audit(2000004495.590:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17078 comm="syz.0.3883" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 7527.076040][ T35] audit: type=1326 audit(2000004495.610:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17078 comm="syz.0.3883" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 7527.440462][ T35] audit: type=1326 audit(2000004495.970:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17078 comm="syz.0.3883" exe="/syz-executor" sig=0 arch=c00000f3 syscall=116 compat=0 ip=0xdb95a code=0x7ffc0000 [ 7527.474923][ T35] audit: type=1326 audit(2000004496.000:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17078 comm="syz.0.3883" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 7527.478906][ T35] audit: type=1326 audit(2000004496.000:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17078 comm="syz.0.3883" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 7529.524727][T17083] x_tables: unsorted underflow at hook 3 [ 7536.435073][T17093] netlink: 'syz.0.3890': attribute type 5 has an invalid length. [ 7541.014123][T13073] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 7541.212730][T13073] usb 2-1: Using ep0 maxpacket: 16 [ 7541.334776][T13073] usb 2-1: unable to get BOS descriptor or descriptor too short [ 7541.375275][T13073] usb 2-1: config 1 interface 0 has no altsetting 0 [ 7541.492640][T13073] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.40 [ 7541.494045][T13073] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 7541.495156][T13073] usb 2-1: Product: syz [ 7541.496109][T13073] usb 2-1: Manufacturer: syz [ 7541.497038][T13073] usb 2-1: SerialNumber: syz [ 7542.387074][T13073] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input24 [ 7542.527331][T13073] usb 2-1: USB disconnect, device number 15 [ 7547.219870][T17126] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551615) [ 7562.937790][T17147] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3906'. [ 7575.804709][T17165] xt_TPROXY: Can be used only with -p tcp or -p udp [ 7615.497027][T17225] snd_dummy snd_dummy.0: control 3:0:0:syz1:0 is already present [ 7638.356285][T17250] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3956'. [ 7651.680626][T17267] C: renamed from lo (while UP) [ 7652.319870][T17267] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 7679.984961][T17300] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3981'. [ 7689.438237][T17310] netlink: 'syz.1.3986': attribute type 7 has an invalid length. [ 7710.098224][T17338] ip6t_REJECT: ECHOREPLY is not supported [ 7745.084347][T17387] comedi: No check for data length of config insn id 7 is implemented [ 7745.086359][T17387] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 7745.088087][T17387] comedi: Assuming n=15 is correct [ 7763.605539][T17410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4033'. [ 7768.405076][T17415] [U]  [ 7795.022895][T17520] netlink: 'syz.1.4040': attribute type 2 has an invalid length. [ 7795.027721][T17520] netlink: 'syz.1.4040': attribute type 1 has an invalid length. [ 7825.950144][T17559] netlink: 'syz.0.4054': attribute type 2 has an invalid length. [ 7826.410229][T17561] AppArmor: change_hat: Invalid input '0' [ 7842.908832][T17584] tmpfs: Bad value for 'mpol' [ 7849.550287][T17593] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4070'. [ 7850.434715][T17595] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 7852.419404][T17599] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4074'. [ 7875.185621][T17660] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4088'. [ 7890.657983][T17680] netlink: 'syz.0.4098': attribute type 4 has an invalid length. [ 7946.533637][T17754] netlink: 'syz.1.4134': attribute type 1 has an invalid length. [ 7946.535942][T17754] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4134'. [ 7967.835406][T17787] netlink: 'syz.0.4151': attribute type 10 has an invalid length. [ 7995.235839][T17825] netlink: 92148 bytes leftover after parsing attributes in process `syz.0.4167'. [ 8010.291496][ T35] audit: type=1326 audit(2000004978.820:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17850 comm="syz.0.4180" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x0 [ 8073.914208][T17953] xt_l2tp: wrong L2TP version: 0 [ 8076.615852][T17960] tmpfs: Bad value for 'mpol' [ 8078.715685][T17966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4234'. [ 8078.717542][T17966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4234'. [ 8078.718642][T17966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4234'. [ 8078.720099][T17966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4234'. [ 8092.814024][T17992] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 8094.353757][T13073] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 8094.553292][T13073] usb 2-1: Using ep0 maxpacket: 8 [ 8094.613370][T13073] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 8094.615708][T13073] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 8094.617820][T13073] usb 2-1: config 0 has no interface number 0 [ 8094.619659][T13073] usb 2-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 8094.634402][T13073] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 8094.636850][T13073] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 8094.638989][T13073] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 8094.654151][T13073] usb 2-1: config 0 interface 52 has no altsetting 0 [ 8094.709904][T13073] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 8094.723362][T13073] usb 2-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 8094.725510][T13073] usb 2-1: Product: syz [ 8094.727035][T13073] usb 2-1: SerialNumber: syz [ 8094.858124][T13073] usb 2-1: config 0 descriptor?? [ 8096.636670][T13073] input: syz (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input26 [ 8097.126022][T13073] usb 2-1: USB disconnect, device number 16 [ 8121.075249][T18048] binder: 18046:18048 ioctl c0306201 0 returned -14 [ 8142.324416][T18090] netlink: 'syz.0.4276': attribute type 4 has an invalid length. [ 8153.376735][T18110] xt_CT: You must specify a L4 protocol and not use inversions on it [ 8175.639255][T18148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4305'. [ 8199.589168][T18188] !: entered promiscuous mode [ 8203.664853][T18194] PKCS8: Unsupported PKCS#8 version [ 8209.780336][T18204] xt_TCPMSS: Only works on TCP SYN packets [ 8211.085067][T18206] netlink: 'syz.1.4332': attribute type 9 has an invalid length. [ 8211.086994][T18206] netlink: 'syz.1.4332': attribute type 7 has an invalid length. [ 8211.088529][T18206] netlink: 'syz.1.4332': attribute type 8 has an invalid length. [ 8257.984398][T18282] siw: device registration error -23 [ 8268.797942][T18302] usb usb1: usbfs: process 18302 (syz.0.4380) did not claim interface 0 before use [ 8278.697044][T18318] IPv6: Can't replace route, no match found [ 8366.323551][T18474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4450'. [ 8368.029081][T18476] tmpfs: Bad value for 'mpol' [ 8373.568264][T18484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4455'. [ 8374.855321][T18486] xt_HMARK: proto mask must be zero with L3 mode [ 8399.293225][T18526] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4473'. [ 8404.555218][T18536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4478'. [ 8409.549247][T18544] netlink: 'syz.0.4482': attribute type 4 has an invalid length. [ 8416.007311][T18552] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.4486'. [ 8430.327759][T18599] cgroup: Invalid name [ 8449.253787][T18629] xt_nat: multiple ranges no longer supported [ 8464.963571][T18653] netlink: 'syz.1.4520': attribute type 21 has an invalid length. [ 8464.965263][T18653] IPv6: NLM_F_CREATE should be specified when creating new route [ 8469.468333][T18658] netlink: 'syz.1.4522': attribute type 21 has an invalid length. [ 8469.499679][T18658] netlink: 'syz.1.4522': attribute type 1 has an invalid length. [ 8493.119114][T18687] comedi comedi1: Minor -2147450880 is invalid! [ 8520.067970][T18725] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 8525.786978][T18735] ./file0: Can't lookup blockdev [ 8546.885925][T18768] binder: 18765:18768 ioctl c00c620f 200000000580 returned -22 [ 8564.918006][T18792] comedi comedi4: bad chanlist[0]=0x0000b8eb chan=47339 range length=2 [ 8601.172731][T18849] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4600'. [ 8608.927756][T18859] tmpfs: Group quota inode hardlimit too large. [ 8618.928099][T18867] netlink: 252 bytes leftover after parsing attributes in process `syz.0.4609'. [ 8618.934625][T18867] netlink: 252 bytes leftover after parsing attributes in process `syz.0.4609'. [ 8659.449278][T18928] netlink: 'syz.0.4636': attribute type 1 has an invalid length. [ 8665.513824][T13073] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 8665.936401][T13073] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 8665.938487][T13073] usb 2-1: config 0 has no interface number 0 [ 8665.949957][T13073] usb 2-1: config 0 interface 84 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 8665.953091][T13073] usb 2-1: config 0 interface 84 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 8665.954877][T13073] usb 2-1: config 0 interface 84 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 8666.090014][T13073] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 8666.106081][T13073] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 8666.109742][T13073] usb 2-1: Product: syz [ 8666.132974][T13073] usb 2-1: Manufacturer: syz [ 8666.135256][T13073] usb 2-1: SerialNumber: syz [ 8666.308823][T13073] usb 2-1: config 0 descriptor?? [ 8666.505886][T13073] ljca 2-1:0.84: bulk endpoints not found [ 8668.213818][T14363] usb 2-1: USB disconnect, device number 17 [ 8670.405044][T18951] comedi comedi3: comedi_parport: a I/O base address must be specified [ 8687.017089][T18969] xt_recent: hitcount (4294967040) is larger than allowed maximum (65535) [ 8698.286529][T18983] netlink: 'syz.0.4657': attribute type 13 has an invalid length. [ 8698.288685][T18983] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4657'. [ 8698.487561][T18983] syz_tun: refused to change device tx_queue_len [ 8698.493847][T18983] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 8701.918500][T18987] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4660'. [ 8716.903948][T19006] .: renamed from bond0 (while UP) [ 8724.605558][T19014] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4672'. [ 8765.045407][ T35] audit: type=1326 audit(2000005733.560:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19068 comm="syz.0.4694" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 8765.048854][ T35] audit: type=1326 audit(2000005733.580:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19068 comm="syz.0.4694" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 8765.258233][ T35] audit: type=1326 audit(2000005733.790:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19068 comm="syz.0.4694" exe="/syz-executor" sig=0 arch=c00000f3 syscall=116 compat=0 ip=0xdb95a code=0x7ffc0000 [ 8765.297736][ T35] audit: type=1326 audit(2000005733.810:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19068 comm="syz.0.4694" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 8765.312264][ T35] audit: type=1326 audit(2000005733.810:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19068 comm="syz.0.4694" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 8787.377798][T19093] block device autoloading is deprecated and will be removed. [ 8787.405411][T19093] syz.0.4707: attempt to access beyond end of device [ 8787.405411][T19093] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 8790.458706][T19098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4708'. [ 8790.475815][T19098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4708'. [ 8790.477924][T19098] netlink: 'syz.1.4708': attribute type 6 has an invalid length. [ 8790.857988][T19100] netlink: 'syz.0.4709': attribute type 13 has an invalid length. [ 8792.083416][T19100] gretap0: refused to change device tx_queue_len [ 8792.085176][T19100] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 8801.085725][T19110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4714'. [ 8804.689607][T19116] netlink: 'syz.0.4717': attribute type 11 has an invalid length. [ 8806.706161][T19118] netlink: 196 bytes leftover after parsing attributes in process `syz.1.4718'. [ 8812.990537][T19126] xt_CT: You must specify a L4 protocol and not use inversions on it [ 8815.664744][T19130] nbd: must specify at least one socket [ 8853.256199][T19156] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4737'. [ 8853.273544][T19156] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4737'. [ 8875.385747][T19186] random: crng reseeded on system resumption [ 8875.977698][T19186] Hibernate image not generated by this kernel! [ 8875.984837][T19186] PM: hibernation: Image mismatch: architecture specific data [ 8878.827913][T19192] IPv6: NLM_F_REPLACE set, but no existing node found! [ 8886.906058][T13073] hid-generic D158:334EB097:0E39.0001: item fetching failed at offset 0/1 [ 8886.965980][T13073] hid-generic D158:334EB097:0E39.0001: probe with driver hid-generic failed with error -22 [ 8906.191945][T19235] xt_NFQUEUE: number of total queues is 0 [ 8909.599830][T19239] cgroup: No subsys list or none specified [ 8911.564831][T19241] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4776'. [ 8911.567300][T19241] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4776'. [ 8920.155499][T19249] autofs4:pid:19249:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 8938.145104][T19273] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 8944.356104][T19283] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 8963.378896][T19308] [U] [ 8963.380775][T19308] [U] [ 8963.381606][T19308] [U] [ 8963.382561][T19308] [U] [ 8963.388591][T19308] [U] [ 8963.389727][T19308] [U] [ 8963.390762][T19308] [U] [ 8963.391835][T19308] [U] [ 8963.395017][T19308] [U] [ 8963.396447][T19308] [U] [ 8963.397522][T19308] [U] [ 8963.420099][T19307] [U] [ 9005.444883][T19367] netlink: 'syz.0.4833': attribute type 5 has an invalid length. [ 9013.113894][T19379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4839'. [ 9014.624730][T19053] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 9014.834735][T19053] usb 2-1: Using ep0 maxpacket: 32 [ 9014.913109][T19053] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 9014.915221][T19053] usb 2-1: config 0 has no interface number 0 [ 9014.917122][T19053] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 9014.919198][T19053] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 9014.931800][T19053] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 9015.073598][T19053] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 9015.082341][T19053] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 9015.084667][T19053] usb 2-1: Product: syz [ 9015.086206][T19053] usb 2-1: Manufacturer: syz [ 9015.087668][T19053] usb 2-1: SerialNumber: syz [ 9015.264516][T19053] usb 2-1: config 0 descriptor?? [ 9015.319187][T19381] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 9015.420249][T19053] ums-sddr09 2-1:0.20: USB Mass Storage device detected [ 9015.663522][T19053] ums-sddr09 2-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 9016.040069][T19053] usb 2-1: USB disconnect, device number 18 [ 9045.619444][T19425] ip6t_srh: unknown srh invflags 7D00 [ 9050.569406][T19432] xt_TCPMSS: Only works on TCP SYN packets [ 9056.296861][T19439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4861'. [ 9062.049246][T19480] wg0 speed is unknown, defaulting to 1000 [ 9062.182828][T19480] wg0 speed is unknown, defaulting to 1000 [ 9062.198685][T19480] wg0 speed is unknown, defaulting to 1000 [ 9067.747984][T19484] xt_CT: You must specify a L4 protocol and not use inversions on it [ 9068.346327][T18064] wg0 speed is unknown, defaulting to 1000 [ 9068.366542][T19480] infiniband syz2: set active [ 9068.368370][T19480] infiniband syz2: added wg0 [ 9068.392080][T19480] syz2: rxe_create_cq: returned err = -12 [ 9068.399152][T19480] infiniband syz2: Couldn't create ib_mad CQ [ 9068.405147][T19480] infiniband syz2: Couldn't open port 1 [ 9069.646707][T19480] RDS/IB: syz2: added [ 9069.649439][T19480] smc: adding ib device syz2 with port count 1 [ 9069.682891][T19480] smc: ib device syz2 port 1 has pnetid [ 9069.686369][T18936] wg0 speed is unknown, defaulting to 1000 [ 9069.824162][T19480] wg0 speed is unknown, defaulting to 1000 [ 9077.346042][T19480] wg0 speed is unknown, defaulting to 1000 [ 9087.845482][T19502] netlink: 'syz.1.4874': attribute type 13 has an invalid length. [ 9090.193795][T19502] gretap0: refused to change device tx_queue_len [ 9090.250034][T19502] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 9090.274504][T19507] netlink: 'syz.0.4875': attribute type 13 has an invalid length. [ 9143.984416][T19586] netlink: 'syz.0.4914': attribute type 21 has an invalid length. [ 9143.989031][T19586] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4914'. [ 9157.419946][T19601] netlink: 'syz.0.4921': attribute type 21 has an invalid length. [ 9157.435527][T19601] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4921'. [ 9157.437730][T19601] netlink: 'syz.0.4921': attribute type 1 has an invalid length. [ 9157.463817][T19601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4921'. [ 9169.905172][T19617] usb usb1: usbfs: process 19617 (syz.0.4927) did not claim interface 0 before use [ 9183.548743][T19636] dlm: no local IP address has been set [ 9183.563794][T19636] dlm: cannot start dlm midcomms -107 [ 9186.334129][T19640] xt_CT: You must specify a L4 protocol and not use inversions on it [ 9196.884748][T19656] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 9216.293606][T19706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4954'. [ 9242.534868][T19743] netlink: 'syz.1.4972': attribute type 21 has an invalid length. [ 9273.184694][T19785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4993'. [ 9279.718173][T19791] tmpfs: Bad value for 'mpol' [ 9299.438695][T19816] tmpfs: Bad value for 'mpol' [ 9321.154961][T19849] netlink: 'syz.0.5023': attribute type 21 has an invalid length. [ 9333.099795][T19863] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5030'. [ 9335.107366][T19865] autofs4:pid:19865:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2), cmd(0xc0189374) [ 9335.114285][T19865] autofs4:pid:19865:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 9362.938879][T19901] tmpfs: Bad value for 'mpol' [ 9377.380436][T19923] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 9396.236921][T19945] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 9399.314591][T19949] netlink: 'syz.1.5073': attribute type 2 has an invalid length. [ 9399.333408][T19949] netlink: 'syz.1.5073': attribute type 1 has an invalid length. [ 9399.354588][T19949] netlink: 'syz.1.5073': attribute type 1 has an invalid length. [ 9408.140523][T19959] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 9408.696857][T19959] infiniband s9z1: RDMA CMA: cma_listen_on_dev, error -98 [ 9423.615240][T19980] Zero length message leads to an empty skb [ 9426.179223][T19985] lo: entered promiscuous mode [ 9426.189701][T19985] lo: entered allmulticast mode [ 9426.353602][T19985] tunl0: entered promiscuous mode [ 9426.356202][T19985] tunl0: entered allmulticast mode [ 9426.549889][T19985] gre0: entered promiscuous mode [ 9426.563367][T19985] gre0: entered allmulticast mode [ 9428.248421][T19985] gretap0: entered promiscuous mode [ 9428.250430][T19985] gretap0: entered allmulticast mode [ 9428.698299][T19985] erspan0: entered promiscuous mode [ 9428.699766][T19985] erspan0: entered allmulticast mode [ 9428.790134][T19985] ip_vti0: entered promiscuous mode [ 9428.803384][T19985] ip_vti0: entered allmulticast mode [ 9428.944185][T19985] ip6_vti0: entered promiscuous mode [ 9428.945623][T19985] ip6_vti0: entered allmulticast mode [ 9429.038403][T19985] sit0: entered promiscuous mode [ 9429.040000][T19985] sit0: entered allmulticast mode [ 9429.225790][T19985] ip6tnl0: entered promiscuous mode [ 9429.227873][T19985] ip6tnl0: entered allmulticast mode [ 9429.396654][T19985] ip6gre0: entered promiscuous mode [ 9429.403780][T19985] ip6gre0: entered allmulticast mode [ 9429.623520][T19985] syz_tun: entered promiscuous mode [ 9429.624813][T19985] syz_tun: entered allmulticast mode [ 9430.195244][T19985] ip6gretap0: entered promiscuous mode [ 9430.197306][T19985] ip6gretap0: entered allmulticast mode [ 9430.358980][T19985] vcan0: entered promiscuous mode [ 9430.362978][T19985] vcan0: entered allmulticast mode [ 9430.469721][T19985] bond0: entered promiscuous mode [ 9430.472727][T19985] bond_slave_1: entered promiscuous mode [ 9430.477905][T19985] bond0: entered allmulticast mode [ 9430.479557][T19985] bond_slave_1: entered allmulticast mode [ 9430.793197][T19985] nlmon0: entered promiscuous mode [ 9430.794980][T19985] nlmon0: entered allmulticast mode [ 9430.906931][T19985] vxcan0: entered promiscuous mode [ 9430.908803][T19985] vxcan0: entered allmulticast mode [ 9430.936125][T19985] vxcan1: entered promiscuous mode [ 9430.938260][T19985] vxcan1: entered allmulticast mode [ 9431.002623][T19985] 0X: entered promiscuous mode [ 9431.376440][T19985] veth1: entered promiscuous mode [ 9431.378509][T19985] veth1: entered allmulticast mode [ 9431.967375][T19985] wg0: entered promiscuous mode [ 9431.975213][T19985] wg0: entered allmulticast mode [ 9432.272545][T19985] wg1: entered promiscuous mode [ 9432.274521][T19985] wg1: entered allmulticast mode [ 9432.550133][T19985] wg2: entered promiscuous mode [ 9432.559187][T19985] wg2: entered allmulticast mode [ 9432.836587][T19985] veth0_to_bridge: entered promiscuous mode [ 9432.838452][T19985] veth0_to_bridge: entered allmulticast mode [ 9433.257655][T19985] bridge_slave_0: entered promiscuous mode [ 9433.259547][T19985] bridge_slave_0: entered allmulticast mode [ 9433.490526][T19985] veth1_to_bridge: entered promiscuous mode [ 9433.493784][T19985] veth1_to_bridge: entered allmulticast mode [ 9433.788941][T19985] bridge_slave_1: entered promiscuous mode [ 9433.796903][T19985] bridge_slave_1: entered allmulticast mode [ 9433.957827][T19985] veth0_to_bond: entered promiscuous mode [ 9433.959926][T19985] veth0_to_bond: entered allmulticast mode [ 9434.249754][T19985] bond_slave_0: entered promiscuous mode [ 9434.256861][T19985] bond_slave_0: entered allmulticast mode [ 9434.280213][T19985] veth1_to_bond: entered promiscuous mode [ 9434.295539][T19985] veth1_to_bond: entered allmulticast mode [ 9434.773613][T19985] veth0_to_team: entered promiscuous mode [ 9434.776393][T19985] veth0_to_team: entered allmulticast mode [ 9435.027199][T19985] team_slave_0: entered promiscuous mode [ 9435.033426][T19985] team_slave_0: entered allmulticast mode [ 9435.038675][T19985] veth1_to_team: entered promiscuous mode [ 9435.040514][T19985] veth1_to_team: entered allmulticast mode [ 9435.076933][T19985] team_slave_1: entered promiscuous mode [ 9435.078729][T19985] team_slave_1: entered allmulticast mode [ 9435.136387][T19985] veth0_to_batadv: entered promiscuous mode [ 9435.144442][T19985] veth0_to_batadv: entered allmulticast mode [ 9435.442849][T19985] batadv_slave_0: entered promiscuous mode [ 9435.445387][T19985] batadv_slave_0: entered allmulticast mode [ 9435.708377][T19985] veth1_to_batadv: entered promiscuous mode [ 9435.710366][T19985] veth1_to_batadv: entered allmulticast mode [ 9435.945218][T19985] batadv_slave_1: entered allmulticast mode [ 9435.978435][T19985] veth0_to_hsr: entered promiscuous mode [ 9435.985972][T19985] veth0_to_hsr: entered allmulticast mode [ 9436.548732][T19985] hsr_slave_0: entered allmulticast mode [ 9436.838136][T19985] veth1_to_hsr: entered promiscuous mode [ 9436.841878][T19985] veth1_to_hsr: entered allmulticast mode [ 9437.165492][T19985] hsr_slave_1: entered allmulticast mode [ 9437.344613][T19985] hsr0: entered promiscuous mode [ 9437.347390][T19985] hsr0: entered allmulticast mode [ 9437.562267][T19985] veth1_virt_wifi: entered promiscuous mode [ 9437.564300][T19985] veth1_virt_wifi: entered allmulticast mode [ 9437.773330][T19985] veth0_virt_wifi: entered promiscuous mode [ 9437.774700][T19985] veth0_virt_wifi: entered allmulticast mode [ 9437.878017][T19985] veth1_vlan: entered allmulticast mode [ 9437.899832][T19985] veth0_vlan: entered allmulticast mode [ 9438.758186][T19985] vlan0: entered allmulticast mode [ 9438.766386][T19985] vlan1: entered promiscuous mode [ 9438.772722][T19985] vlan1: entered allmulticast mode [ 9438.777196][T19985] macvlan0: entered promiscuous mode [ 9438.778919][T19985] macvlan0: entered allmulticast mode [ 9438.838666][T19985] macvlan1: entered promiscuous mode [ 9438.844393][T19985] macvlan1: entered allmulticast mode [ 9439.212788][T19985] ipvlan0: entered promiscuous mode [ 9439.215722][T19985] ipvlan0: entered allmulticast mode [ 9439.278006][T19985] ipvlan1: entered promiscuous mode [ 9439.281093][T19985] ipvlan1: entered allmulticast mode [ 9440.267915][T19985] veth1_macvtap: entered promiscuous mode [ 9440.270077][T19985] veth1_macvtap: entered allmulticast mode [ 9440.450105][T19985] veth0_macvtap: entered allmulticast mode [ 9440.704133][T19985] macvtap0: entered promiscuous mode [ 9440.705947][T19985] macvtap0: entered allmulticast mode [ 9440.839996][T19985] macsec0: entered promiscuous mode [ 9440.849440][T19985] macsec0: entered allmulticast mode [ 9440.927646][T19985] geneve0: entered promiscuous mode [ 9440.929484][T19985] geneve0: entered allmulticast mode [ 9441.166480][T19985] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 9441.169813][T19985] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 9441.193882][T19985] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 9441.230685][T19985] geneve1: entered promiscuous mode [ 9441.232634][T19985] geneve1: entered allmulticast mode [ 9441.662589][T19985] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 9441.695563][T19985] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 9441.696889][T19985] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 9441.945787][T19985] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 9441.949423][T19985] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 9442.206767][T19985] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 9442.209567][T19985] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 9442.496409][T19985] veth2: entered promiscuous mode [ 9442.498986][T19985] veth2: entered allmulticast mode [ 9442.527025][T19985] veth3: entered promiscuous mode [ 9442.528899][T19985] veth3: entered allmulticast mode [ 9442.556721][T19985] bond1: entered promiscuous mode [ 9442.558899][T19985] bond1: entered allmulticast mode [ 9442.586898][T19985] geneve2: entered promiscuous mode [ 9442.588970][T19985] geneve2: entered allmulticast mode [ 9442.617096][T19985] erspan1: entered promiscuous mode [ 9442.619948][T19985] erspan1: entered allmulticast mode [ 9442.647247][T19985] syztnl1: entered promiscuous mode [ 9442.649356][T19985] syztnl1: entered allmulticast mode [ 9442.678535][T19985] sit1: entered promiscuous mode [ 9442.680682][T19985] sit1: entered allmulticast mode [ 9443.275706][T19985] ip6_vti1: entered promiscuous mode [ 9443.277481][T19985] ip6_vti1: entered allmulticast mode [ 9443.304626][T19985] vxlan0: entered promiscuous mode [ 9443.306710][T19985] vxlan0: entered allmulticast mode [ 9443.342372][T19985] vti0: entered promiscuous mode [ 9443.344484][T19985] vti0: entered allmulticast mode [ 9443.412438][T19985] ipip0: entered promiscuous mode [ 9443.414463][T19985] ipip0: entered allmulticast mode [ 9443.418968][T19985] gretap1: entered promiscuous mode [ 9443.447931][T19985] gretap1: entered allmulticast mode [ 9443.454267][T19985] bond2: entered promiscuous mode [ 9443.456133][T19985] bond2: entered allmulticast mode [ 9443.460292][T19985] ip6gre1: entered promiscuous mode [ 9443.475952][T19985] gretap2: entered promiscuous mode [ 9443.477716][T19985] gretap2: entered allmulticast mode [ 9443.494258][T19985] bond3: entered promiscuous mode [ 9443.496335][T19985] bond3: entered allmulticast mode [ 9443.500319][T19985] gretap3: entered promiscuous mode [ 9443.518488][T19985] gretap3: entered allmulticast mode [ 9443.523636][T19985] bond4: entered promiscuous mode [ 9443.525288][T19985] bond4: entered allmulticast mode [ 9443.529488][T19985] ip6erspan0: entered promiscuous mode [ 9443.543464][T19985] ip6erspan0: entered allmulticast mode [ 9443.547642][T19985] ip6gre2: entered promiscuous mode [ 9443.549308][T19985] ip6gre2: entered allmulticast mode [ 9443.593768][T19053] wg0 speed is unknown, defaulting to 1000 [ 9443.596094][T19053] syz2: Port: 1 Link DOWN [ 9443.600455][T19821] syz1: Port: 1 Link DOWN [ 9443.633601][T19053] wg0 speed is unknown, defaulting to 1000 [ 9453.148674][T20008] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.5100'. [ 9508.985226][T20098] netlink: 'syz.0.5142': attribute type 10 has an invalid length. [ 9508.987228][T20098] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5142'. [ 9509.015864][T20098] ipvlan0: entered promiscuous mode [ 9509.017824][T20098] ipvlan0: entered allmulticast mode [ 9509.019244][T20098] veth0_vlan: entered allmulticast mode [ 9509.184713][T20098] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 9513.969785][T20104] netlink: 'syz.1.5145': attribute type 1 has an invalid length. [ 9513.994528][T20104] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5145'. [ 9516.274194][T20106] process 'syz.0.5146' launched '/dev/fd/3' with NULL argv: empty string added [ 9523.125368][T20114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5150'. [ 9523.129081][T20114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5150'. [ 9532.945443][T20130] netlink: 'syz.1.5157': attribute type 12 has an invalid length. [ 9576.883782][T20198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5189'. [ 9586.984354][T20212] netlink: 'syz.0.5196': attribute type 21 has an invalid length. [ 9586.985763][T20212] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5196'. [ 9586.989259][T20212] netlink: 'syz.0.5196': attribute type 6 has an invalid length. [ 9586.990427][T20212] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5196'. [ 9612.945969][T20257] gre1: entered promiscuous mode [ 9615.583681][T20261] xt_cgroup: invalid path, errno=-2 [ 9636.848171][T20287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5230'. [ 9636.850441][T20287] netlink: 'syz.0.5230': attribute type 1 has an invalid length. [ 9660.206336][T20324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5246'. [ 9667.338631][T20336] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 9727.186202][T20390] wg0 speed is unknown, defaulting to 1000 [ 9731.855947][T20409] xt_CT: You must specify a L4 protocol and not use inversions on it [ 9736.745760][T20413] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 9736.748063][T20413] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 9743.384271][T20391] wg0 speed is unknown, defaulting to 1000 [ 9803.858232][T20494] xt_CT: No such helper "syz0" [ 9814.757057][T20474] wg0 speed is unknown, defaulting to 1000 [ 9828.040529][T13025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 9828.192942][T13025] bond0 (unregistering): Released all slaves [ 9828.845160][T13025] bond1 (unregistering): Released all slaves [ 9829.704228][T13025] bond2 (unregistering): Released all slaves [ 9830.483824][T13025] bond3 (unregistering): Released all slaves [ 9831.020523][T13025] bond4 (unregistering): Released all slaves [ 9858.343231][T17483] smc: removing ib device syz1 [ 9864.607988][ C1] vkms_vblank_simulate: vblank timer overrun [ 9866.275238][T20436] smc: removing ib device syz2 [ 9898.454487][T20474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 9898.936917][T20474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 9912.520457][T20788] netlink: 'syz.0.5325': attribute type 1 has an invalid length. [ 9912.539477][T20788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5325'. [ 9920.387698][T20474] hsr_slave_0: entered promiscuous mode [ 9920.455779][T20474] hsr_slave_1: entered promiscuous mode [ 9932.887899][T20474] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 9933.263106][T20474] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 9933.527860][T20474] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 9933.807736][T20474] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 9949.774038][T20925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5332'. [ 9953.753549][T20474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 9968.545517][T20948] binder: 20946:20948 ioctl c00c620f 0 returned -14 [10004.873654][T20474] veth0_vlan: entered promiscuous mode [10005.057741][T20474] veth1_vlan: entered promiscuous mode [10005.894819][T20474] veth0_macvtap: entered promiscuous mode [10006.146261][T20474] veth1_macvtap: entered promiscuous mode [10007.900191][T20474] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [10007.904028][T20474] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [10007.905810][T20474] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [10007.907514][T20474] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [10012.385053][T21003] xt_TCPMSS: Only works on TCP SYN packets [10032.580463][T21022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5345'. [10032.609680][T21022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5345'. [10032.666162][T21022] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [10039.769620][T21014] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [10039.792068][T21014] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [10039.793637][T21014] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [10039.794911][T21014] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [10049.644650][T21045] bpf: Bad value for 'gid' [10049.888362][T21047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5355'. [10049.975034][T21047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5355'. [10049.977202][T21047] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [10068.850489][T21075] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [10069.444136][T21077] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [10103.810385][T21134] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5396'. [10119.337898][T21158] xt_l2tp: v2 doesn't support IP mode [10123.853481][T21164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5410'. [10126.778550][T21168] xt_l2tp: v2 doesn't support IP mode [10134.775960][T21178] xt_TCPMSS: Only works on TCP SYN packets [10138.659796][T21215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5419'. [10149.370302][T21229] dlm: no locking on control device [10178.303851][T21278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5450'. [10194.374085][T21312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5465'. [10206.391400][T21338] netlink: 'syz.2.5478': attribute type 7 has an invalid length. [10210.686370][T21350] bond0: (slave veth1_macvtap): Error: Device is in use and cannot be enslaved [10211.728898][T21352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5485'. [10232.159545][T21386] netlink: 'syz.0.5501': attribute type 4 has an invalid length. [10232.163185][T21386] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5501'. [10232.238842][T21386] : renamed from 0! [10257.190351][T21416] netlink: 'syz.0.5515': attribute type 1 has an invalid length. [10285.434904][T21460] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5535'. [10285.505231][T21460] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5535'. [10285.507179][T21460] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5535'. [10297.214919][T21476] geneve1: left allmulticast mode [10310.404474][ T37] INFO: task kworker/u9:12:17483 blocked for more than 430 seconds. [10310.433736][ T37] Not tainted 6.16.0-rc1-syzkaller-gfda589c28604 #0 [10310.435552][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [10310.437297][ T37] task:kworker/u9:12 state:D stack:0 pid:17483 tgid:17483 ppid:2 task_flags:0x4208060 flags:0x00000000 [10310.440303][ T37] Workqueue: ib-unreg-wq ib_unregister_work [10310.455684][ T37] Call Trace: [10310.457015][ T37] [] __schedule+0x1022/0x4094 [10310.458598][ T37] [] schedule+0xc4/0x35e [10310.460094][ T37] [] schedule_timeout+0x1c6/0x2ae [10310.507716][ T37] [] __wait_for_common+0x1d2/0x3e8 [10310.509919][ T37] [] wait_for_completion+0x1a/0x22 [10310.523792][ T37] [] disable_device+0x1b2/0x2ba [10310.525713][ T37] [] __ib_unregister_device+0x28e/0x402 [10310.527325][ T37] [] ib_unregister_work+0x20/0x36 [10310.529009][ T37] [] process_one_work+0x96a/0x1f32 [10310.563207][ T37] [] worker_thread+0x5ce/0xde8 [10310.565266][ T37] [] kthread+0x39c/0x7d4 [10310.566740][ T37] [] ret_from_fork_kernel+0x2a/0xbb2 [10310.568341][ T37] [] ret_from_fork_kernel_asm+0x16/0x18 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [10310.602408][ T37] [10310.602408][ T37] Showing all locks held in the system: [10310.606396][ T37] 1 lock held by khungtaskd/37: [10310.607913][ T37] #0: ffffffff883dc420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2a/0x1a0 [10310.633930][ T37] 2 locks held by getty/3156: [10310.635298][ T37] #0: ffffaf80189450a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3a/0x46 [10310.674476][ T37] #1: ffff8f800008e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x3e4/0x12b6 [10310.678967][ T37] 3 locks held by syz-executor/3184: [10310.680317][ T37] 1 lock held by syz-executor/3216: [10310.706958][ T37] 4 locks held by kworker/u8:2/13025: [10310.708710][ T37] #0: ffffaf80126e2148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x848/0x1f32 [10310.725353][ T37] #1: ffff8f8000b37b70 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x870/0x1f32 [10310.729168][ T37] #2: ffffffff89855570 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xcc/0x7ce [10310.755739][ T37] #3: ffffffff883ec640 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x56/0x6cc [10310.759728][ T37] 3 locks held by kworker/u9:12/17483: [10310.787150][ T37] #0: ffffaf8012789148 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_one_work+0x848/0x1f32 [10310.813243][ T37] #1: ffff8f80042a7b70 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_one_work+0x870/0x1f32 [10310.817645][ T37] #2: ffffaf80321d46d0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x200/0x402 [10310.838548][ T37] 3 locks held by kworker/u10:0/19792: [10310.840281][ T37] 3 locks held by kworker/u10:2/20436: [10310.857152][ T37] 2 locks held by kworker/0:3/20999: [10310.858868][ T37] 2 locks held by syz.2.5550/21489: [10310.860574][ T37] [10310.928680][ T37] ============================================= [10310.928680][ T37] [10310.933214][ T37] NMI backtrace for cpu 0 [10310.933650][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-gfda589c28604 #0 PREEMPT [10310.934123][ T37] Hardware name: riscv-virtio,qemu (DT) [10310.934400][ T37] Call Trace: [10310.934562][ T37] [] dump_backtrace+0x2e/0x3c [10310.935100][ T37] [] show_stack+0x30/0x3c [10310.935476][ T37] [] dump_stack_lvl+0x12e/0x1a6 [10310.936059][ T37] [] dump_stack+0x1c/0x24 [10310.936592][ T37] [] nmi_cpu_backtrace+0x3b0/0x3b2 [10310.937092][ T37] [] nmi_trigger_cpumask_backtrace+0x2b6/0x458 [10310.937617][ T37] [] arch_trigger_cpumask_backtrace+0x2c/0x3c [10310.938249][ T37] [] watchdog+0xcf2/0x11de [10310.938801][ T37] [] kthread+0x39c/0x7d4 [10310.939231][ T37] [] ret_from_fork_kernel+0x2a/0xbb2 [10310.939705][ T37] [] ret_from_fork_kernel_asm+0x16/0x18 [10310.952705][ T37] Sending NMI from CPU 0 to CPUs 1: [10310.954853][ C1] NMI backtrace for cpu 1 [10310.955242][ C1] CPU: 1 UID: 0 PID: 16 Comm: rcu_preempt Not tainted 6.16.0-rc1-syzkaller-gfda589c28604 #0 PREEMPT [10310.955782][ C1] Hardware name: riscv-virtio,qemu (DT) [10310.956056][ C1] epc : _raw_spin_unlock_irqrestore+0x36/0xd4 [10310.956669][ C1] ra : _raw_spin_unlock_irqrestore+0x86/0xd4 [10310.957252][ C1] epc : ffffffff86347012 ra : ffffffff86347062 sp : ffff8f8000117a60 [10310.957599][ C1] gp : ffffffff89c83ca0 tp : ffffaf8012ae4ec0 t0 : ffff8f80078a7790 [10310.957937][ C1] t1 : fffffffef107d8ab t2 : ffffaf806ed476c0 s0 : ffff8f8000117a80 [10310.958271][ C1] s1 : 0000000000000002 a0 : 0000000000000001 a1 : ffffffff87d71b68 [10310.958574][ C1] a2 : 0000000000000002 a3 : 0000000000000001 a4 : 0000000000000001 [10310.958886][ C1] a5 : 0000000000000000 a6 : 0000000000000003 a7 : ffffffff883ec55b [10310.959211][ C1] s2 : ffffffff883ec558 s3 : 0000000000000000 s4 : ffffaf8012ae4ec0 [10310.959572][ C1] s5 : 0000000000000402 s6 : ffffffff883ec5a0 s7 : ffff8f8000117b88 [10310.959946][ C1] s8 : 1ffff1f000022f71 s9 : ffffffff883ec598 s10: ffffffff883ec598 [10310.960282][ C1] s11: 1ffffffff107d8b4 t3 : 62386d2500000000 t4 : fffffffef107d8ab [10310.960586][ C1] t5 : fffffffef107d8ac t6 : 0000000000000002 [10310.960930][ C1] status: 0000000200000120 badaddr: 0000000000000000 cause: 8000000000000001 [10310.961366][ C1] [] _raw_spin_unlock_irqrestore+0x36/0xd4 [10310.962040][ C1] [] prepare_to_swait_event+0xfe/0x39e [10310.962683][ C1] [] rcu_gp_fqs_loop+0x744/0xa80 [10310.963284][ C1] [] rcu_gp_kthread+0x22c/0x2a2 [10310.963909][ C1] [] kthread+0x39c/0x7d4 [10310.964332][ C1] [] ret_from_fork_kernel+0x2a/0xbb2 [10310.964790][ C1] [] ret_from_fork_kernel_asm+0x16/0x18 [10311.052691][ T37] Kernel panic - not syncing: hung_task: blocked tasks [10311.054982][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-gfda589c28604 #0 PREEMPT [10311.056594][ T37] Hardware name: riscv-virtio,qemu (DT) [10311.057534][ T37] Call Trace: [10311.058353][ T37] [] dump_backtrace+0x2e/0x3c [10311.059734][ T37] [] show_stack+0x30/0x3c [10311.060936][ T37] [] dump_stack_lvl+0x110/0x1a6 [10311.062234][ T37] [] dump_stack+0x1c/0x24 [10311.063683][ T37] [] panic+0x38c/0x86a [10311.064822][ T37] [] watchdog+0x78a/0x11de [10311.066149][ T37] [] kthread+0x39c/0x7d4 [10311.067297][ T37] [] ret_from_fork_kernel+0x2a/0xbb2 [10311.068671][ T37] [] ret_from_fork_kernel_asm+0x16/0x18 [10311.070452][ T37] SMP: stopping secondary CPUs [10311.073668][ T37] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:26:09 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff80078624 mhartid 0000000000000000 mstatus 0000000a000000a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff8634b694 vstvec 0000000000000000 mepc ffffffff8008eba2 sepc ffffffff80a4d250 vsepc 0000000000000000 mcause 0000000000000009 scause 8000000000000009 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 000000008004a000 sscratch 0000000000000000 satp 90130000000af7c0 x0/zero 0000000000000000 x1/ra ffffffff802cffd0 x2/sp ffff8f800cdf7b20 x3/gp ffffffff89c83ca0 x4/tp ffffaf801b8a0000 x5/t0 ffff8f800cdf7be0 x6/t1 0000000000000001 x7/t2 ffffffff868068d0 x8/s0 ffff8f800cdf7c50 x9/s1 0000000000000002 x10/a0 0000000000000001 x11/a1 0000000000000000 x12/a2 0000000000000002 x13/a3 ffffffff80c67280 x14/a4 0000000000000000 x15/a5 ffffaf801b8a1000 x16/a6 ffffffff80c6729c x17/a7 ffffffff80c25212 x18/s2 ffffffff86325b4a x19/s3 0000000000000000 x20/s4 ffffffff89d900e0 x21/s5 0000000000000000 x22/s6 0000000000000000 x23/s7 ffffffff80c6729c x24/s8 ffffffffffffff9c x25/s9 ffff8f800cdf7d60 x26/s10 00007fffe9f63a28 x27/s11 1ffff1f0019befa0 x28/t3 f6c9380b00000000 x29/t4 0000000000001fff x30/t5 00000000000000c8 x31/t6 0000000000000002 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff803e2cd2 mhartid 0000000000000001 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff8634b694 vstvec 0000000000000000 mepc ffffffff80259818 sepc ffffffff86323e60 vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080048000 sscratch 0000000000000000 satp 9011f0000009f51f x0/zero 0000000000000000 x1/ra ffffffff8028b0f4 x2/sp ffff8f8000017a40 x3/gp ffffffff89c83ca0 x4/tp ffffaf80187b1a40 x5/t0 ffffaf806ed4b260 x6/t1 0000000000000001 x7/t2 ffffffff868068d0 x8/s0 ffff8f80000179f0 x9/s1 ffffaf80187b1a40 x10/a0 ffffaf801528fba0 x11/a1 000000000098967f x12/a2 1ffff5f002a51efe x13/a3 ffffffff804fc65e x14/a4 0000000000000000 x15/a5 ffffaf80187b1a40 x16/a6 0000000000ff0100 x17/a7 ffffffff8041df90 x18/s2 0000000000000100 x19/s3 000009608ace25f3 x20/s4 dfffffff00000000 x21/s5 0000000000001000 x22/s6 1ffffffff1042838 x23/s7 ffffffff9103c3c0 x24/s8 0000000000000000 x25/s9 ffffffff882141c0 x26/s10 ffffffff9103c3c0 x27/s11 1ffff1f000002f68 x28/t3 2fbca24600000000 x29/t4 0000000000000000 x30/t5 0000000000000000 x31/t6 0000000000000002 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000