last executing test programs: 20m30.027623161s ago: executing program 1 (id=1696): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0x1, 0x1000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 20m27.019363519s ago: executing program 1 (id=1697): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000380)) 20m21.277293979s ago: executing program 1 (id=1699): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000000)=r0) 20m17.893121733s ago: executing program 1 (id=1701): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) 20m13.340151974s ago: executing program 1 (id=1703): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000003c0)={@my=0x1}) 20m9.492313381s ago: executing program 1 (id=1705): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x9500}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) 19m59.537659003s ago: executing program 32 (id=1705): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x9500}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) 4m5.482589605s ago: executing program 2 (id=1874): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x7, r0, 0x0, 0x0, 0x226d}]) 3m21.986797786s ago: executing program 2 (id=1877): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000140)=0x5, 0x4) 2m46.209299777s ago: executing program 2 (id=1880): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) 2m15.664866881s ago: executing program 2 (id=1883): set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x200030e4, 0x0, 0x0, 0x0, 0x0, 0x0) 1m35.742630313s ago: executing program 2 (id=1886): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x1884) 1m30.327768526s ago: executing program 0 (id=1887): r0 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x11, 0x0, 0xffffffffffffff9c, 0x0, 0x0}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) 1m11.013641845s ago: executing program 0 (id=1888): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x802c550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000240), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 58.67589731s ago: executing program 2 (id=1889): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNGETVNETBE(r0, 0x800454df, 0xfffffffffffffffd) 55.174957293s ago: executing program 0 (id=1890): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1210020, &(0x7f0000000240)={[{@gid}]}) 43.366400934s ago: executing program 0 (id=1891): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) read(r0, &(0x7f0000000000)=""/128, 0x80) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) 18.056233781s ago: executing program 0 (id=1892): r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000747f87bf5cf3d29fbbdf0000", 0x18) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f0000000080)) 6.439092563s ago: executing program 33 (id=1889): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNGETVNETBE(r0, 0x800454df, 0xfffffffffffffffd) 0s ago: executing program 0 (id=1894): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:34345' (ED25519) to the list of known hosts. syzkaller login: [ 274.102333][ T3168] cgroup: Unknown subsys name 'net' [ 274.453733][ T3168] cgroup: Unknown subsys name 'cpuset' [ 274.514736][ T3168] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 333.786251][ T3168] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 391.969378][ T3179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.031841][ T3179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.053557][ T3178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.156788][ T3178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.118037][ T3179] hsr_slave_0: entered promiscuous mode [ 401.135316][ T3179] hsr_slave_1: entered promiscuous mode [ 405.887527][ T3178] hsr_slave_0: entered promiscuous mode [ 405.919161][ T3178] hsr_slave_1: entered promiscuous mode [ 405.947569][ T3178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.949872][ T3178] Cannot create hsr debugfs directory [ 407.745670][ T3179] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 408.075344][ T3179] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 408.279637][ T3179] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 408.770849][ T3179] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 411.404035][ T3178] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 411.497081][ T3178] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 411.588702][ T3178] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 411.793608][ T3178] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 415.648114][ T3179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.497031][ T3178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.246872][ T3179] veth0_vlan: entered promiscuous mode [ 455.706708][ T3179] veth1_vlan: entered promiscuous mode [ 456.586650][ T3178] veth0_vlan: entered promiscuous mode [ 457.546396][ T3178] veth1_vlan: entered promiscuous mode [ 458.277292][ T3179] veth0_macvtap: entered promiscuous mode [ 458.500602][ T3179] veth1_macvtap: entered promiscuous mode [ 459.697407][ T3178] veth0_macvtap: entered promiscuous mode [ 460.423404][ T3178] veth1_macvtap: entered promiscuous mode [ 460.755840][ T3179] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.759766][ T3179] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.764523][ T3179] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.766676][ T3179] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.787339][ T3178] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.789895][ T3178] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.796142][ T3178] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.798181][ T3178] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.859788][ T3179] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 474.346152][ T3866] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 474.494615][ T3865] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 474.844752][ T3865] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 474.849022][ T3865] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.856205][ T3865] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 474.859021][ T3865] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.863065][ T3865] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.873845][ T3866] usb 1-1: Using ep0 maxpacket: 8 [ 475.034765][ T3865] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 475.036976][ T3865] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 475.038697][ T3865] usb 2-1: Product: syz [ 475.040175][ T3865] usb 2-1: Manufacturer: syz [ 475.293468][ T3866] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 475.295634][ T3866] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 475.299493][ T3866] usb 1-1: config 0 has no interface number 0 [ 475.306571][ T3866] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 475.308803][ T3866] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 475.353720][ T3866] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 475.448309][ T3866] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 475.450628][ T3866] usb 1-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 475.472139][ T3866] usb 1-1: Product: syz [ 475.473811][ T3866] usb 1-1: Manufacturer: syz [ 475.628520][ T3865] cdc_wdm 2-1:1.0: skipping garbage [ 475.631113][ T3865] cdc_wdm 2-1:1.0: skipping garbage [ 475.720587][ T3866] usb 1-1: config 0 descriptor?? [ 475.826852][ T3865] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 475.850272][ T3875] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 478.618195][ T3866] usb 1-1: USB disconnect, device number 2 [ 478.655071][ T8] usb 2-1: USB disconnect, device number 2 [ 497.504470][ T3920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10'. [ 500.795258][ T25] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 501.166342][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 501.169087][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.210307][ T25] usb 1-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.00 [ 501.220082][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.387192][ T25] usb 1-1: config 0 descriptor?? [ 504.119936][ T25] wacom 0003:056A:0090.0001: hidraw0: USB HID v40.00 Device [HID 056a:0090] on usb-dummy_hcd.0-1/input0 [ 504.332517][ T25] usb 1-1: USB disconnect, device number 3 [ 519.152794][ T3958] netlink: 144 bytes leftover after parsing attributes in process `syz.1.19'. [ 519.155860][ T3958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19'. [ 532.269196][ T3970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25'. [ 561.320877][ T4000] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 585.578758][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 586.243003][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 586.464595][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 586.472891][ T8] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 586.474263][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.628117][ T8] usb 1-1: config 0 descriptor?? [ 587.225915][ T8] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input4 [ 592.884059][ T4034] bcm5974 1-1:0.0: could not read from device [ 593.987532][ T25] usb 1-1: USB disconnect, device number 4 [ 600.184260][ T4061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'. [ 600.186812][ T4061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.53'. [ 600.224108][ T4061] netlink: 'syz.1.53': attribute type 11 has an invalid length. [ 606.616496][ T4069] ptrace attach of "/syz-executor exec"[3179] was attempted by "/syz-executor exec"[4069] [ 607.847994][ T4071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 607.849649][ T4071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'. [ 635.685697][ T4105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.72'. [ 635.728033][ T4105] Zero length message leads to an empty skb [ 653.924562][ T4129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.84'. [ 661.187587][ T3866] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 661.667968][ T3866] usb 1-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 661.670222][ T3866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.688486][ T3866] usb 1-1: Product: syz [ 661.690315][ T3866] usb 1-1: Manufacturer: syz [ 661.700900][ T3866] usb 1-1: SerialNumber: syz [ 661.796821][ T3866] usb 1-1: config 0 descriptor?? [ 663.156542][ T3866] peak_usb 1-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 663.812947][ T3866] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 663.815236][ T3866] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 663.817232][ T3866] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 664.679613][ T3866] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -22 [ 664.952753][ T3866] usb 1-1: USB disconnect, device number 5 [ 674.878397][ T4175] vlan2: entered allmulticast mode [ 674.880889][ T4175] vlan1: entered allmulticast mode [ 675.003136][ T4175] veth0_vlan: entered allmulticast mode [ 685.443536][ T4191] ubi31: attaching mtd0 [ 685.480999][ T4191] ubi31: scanning is finished [ 685.538361][ T4191] ubi31: empty MTD device detected [ 686.539403][ T4191] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 686.540764][ T4191] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3640 bytes [ 686.553108][ T4191] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 686.554568][ T4191] ubi31: VID header offset: 392 (aligned 392), data offset: 456 [ 686.555711][ T4191] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 686.556754][ T4191] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 21 [ 686.558173][ T4191] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1045379406 [ 686.559595][ T4191] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 686.577623][ T4194] ubi31: background thread "ubi_bgt31d" started, PID 4194 [ 696.894987][ T25] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 697.438807][ T25] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 697.458551][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 697.476055][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.478722][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 697.498098][ T25] usb 2-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 697.500521][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.647806][ T25] usb 2-1: config 0 descriptor?? [ 699.394255][ T25] hid-rmi 0003:17EF:6085.0002: item fetching failed at offset 3/5 [ 699.480893][ T25] hid-rmi 0003:17EF:6085.0002: parse failed [ 699.499794][ T25] hid-rmi 0003:17EF:6085.0002: probe with driver hid-rmi failed with error -22 [ 699.748088][ T25] usb 2-1: USB disconnect, device number 3 [ 733.569820][ T4253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'. [ 733.597483][ T4253] netlink: 'syz.0.117': attribute type 3 has an invalid length. [ 733.859430][ T4253] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 733.862936][ T4253] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 733.864744][ T4253] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 733.866078][ T4253] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.357108][ T4269] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 750.865782][ T4274] ubi: mtd0 is already attached to ubi31 [ 754.477201][ T4277] capability: warning: `syz.0.128' uses 32-bit capabilities (legacy support in use) [ 756.613711][ T917] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 756.962670][ T917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.965802][ T917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.977617][ T917] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 756.980323][ T917] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 756.983786][ T917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.144756][ T917] usb 1-1: config 0 descriptor?? [ 758.883666][ T917] hid-multitouch 0003:0EEF:72C4.0003: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.0-1/input0 [ 759.937557][ T3892] usb 1-1: USB disconnect, device number 6 [ 760.527403][ T4302] ubi: mtd0 is already attached to ubi31 [ 770.249568][ T4317] ======================================================= [ 770.249568][ T4317] WARNING: The mand mount option has been deprecated and [ 770.249568][ T4317] and is ignored by this kernel. Remove the mand [ 770.249568][ T4317] option from the mount to silence this warning. [ 770.249568][ T4317] ======================================================= [ 773.104703][ T4321] can0: slcan on ptm0. [ 774.310424][ T4320] can0 (unregistered): slcan off ptm0. [ 803.526580][ T4355] capability: warning: `syz.0.154' uses deprecated v2 capabilities in a way that may be insecure [ 817.085789][ T3718] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 817.336608][ T3718] usb 2-1: Using ep0 maxpacket: 16 [ 817.454832][ T3718] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 817.458223][ T3718] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 817.460301][ T3718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.877443][ T3718] usb 2-1: config 0 descriptor?? [ 818.373715][ T3718] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 825.078270][ T4372] bcm5974 2-1:0.0: could not read from device [ 825.202781][ T3783] usb 2-1: USB disconnect, device number 4 [ 825.335373][ T4388] sock: sock_set_timeout: `syz.0.164' (pid 4388) tries to set negative timeout [ 832.410488][ T4402] netlink: 'syz.0.166': attribute type 1 has an invalid length. [ 839.857876][ T4417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 854.946628][ T4440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 855.294118][ T4440] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 855.307270][ T4440] gretap1: entered promiscuous mode [ 855.309676][ T4440] gretap1: entered allmulticast mode [ 866.103708][ T4458] netlink: 'syz.0.189': attribute type 5 has an invalid length. [ 872.374527][ T4468] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 876.110130][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.124452][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.163220][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.165371][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.167189][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.168949][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.170675][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.200429][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.205627][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.207656][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.209388][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.211193][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.224736][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.227190][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.229076][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.230868][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.233989][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.235727][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.237459][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.239187][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.240863][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.246518][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.248374][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.250139][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.254024][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.255874][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.257698][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.259472][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.262148][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.264227][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.266096][ T4045] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 876.375914][ T4045] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 884.737186][ T4496] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 935.155079][ T3718] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 935.485520][ T3718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.488244][ T3718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.490854][ T3718] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 935.514748][ T3718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.620190][ T3718] usb 2-1: config 0 descriptor?? [ 937.563337][ T3718] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 937.564623][ T3718] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 937.565709][ T3718] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 937.566755][ T3718] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 937.567870][ T3718] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 937.596393][ T3718] cm6533_jd 0003:0D8C:0022.0005: No inputs registered, leaving [ 937.738343][ T3718] cm6533_jd 0003:0D8C:0022.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 937.871106][ T3718] usb 2-1: USB disconnect, device number 5 [ 938.438882][ T4595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'. [ 938.440542][ T4595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.239'. [ 938.449202][ T4595] netlink: 'syz.0.239': attribute type 11 has an invalid length. [ 938.450836][ T4595] netlink: 'syz.0.239': attribute type 12 has an invalid length. [ 955.668485][ T4045] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 956.026500][ T4045] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 956.125240][ T4045] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 956.127637][ T4045] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 956.140097][ T4045] usb 1-1: Product: syz [ 956.143154][ T4045] usb 1-1: Manufacturer: syz [ 956.144769][ T4045] usb 1-1: SerialNumber: syz [ 956.428773][ T4045] usb 1-1: config 0 descriptor?? [ 956.448200][ T4623] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 956.488119][ T4045] hub 1-1:0.0: bad descriptor, ignoring hub [ 956.490819][ T4045] hub 1-1:0.0: probe with driver hub failed with error -5 [ 957.893665][ T3866] usb 1-1: USB disconnect, device number 7 [ 958.965080][ T3866] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 959.275174][ T3866] usb 1-1: Using ep0 maxpacket: 32 [ 959.355921][ T3866] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 959.463377][ T3866] usb 1-1: string descriptor 0 read error: -22 [ 959.468389][ T3866] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 959.470875][ T3866] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 959.624149][ T3866] usb 1-1: config 0 descriptor?? [ 959.666597][ T4623] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 959.735735][ T3866] hub 1-1:0.0: bad descriptor, ignoring hub [ 959.737508][ T3866] hub 1-1:0.0: probe with driver hub failed with error -5 [ 960.848237][ T917] usb 1-1: USB disconnect, device number 8 [ 975.932967][ T4045] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 976.255090][ T4045] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 976.256630][ T4045] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.258290][ T4045] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 976.259435][ T4045] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.334427][ T4045] usb 1-1: config 0 descriptor?? [ 977.386620][ T4680] mmap: syz.1.257 (4680) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 977.951004][ T4045] elo 0003:04E7:0030.0006: unknown main item tag 0xd [ 978.058584][ T4045] elo 0003:04E7:0030.0006: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.0-1/input0 [ 978.270948][ T4045] usb 1-1: USB disconnect, device number 9 [ 989.112534][ T4709] Illegal XDP return value 4294967274 on prog (id 19) dev N/A, expect packet loss! [ 995.587519][ T4714] nbd: socks must be embedded in a SOCK_ITEM attr [ 1011.063085][ T3892] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1011.643509][ T3892] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1011.659948][ T3892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.314690][ T3892] usb 1-1: config 0 descriptor?? [ 1013.594466][ T3892] creative-sb0540 0003:041E:3100.0007: item fetching failed at offset 2/5 [ 1013.639390][ T3892] creative-sb0540 0003:041E:3100.0007: parse failed [ 1013.647640][ T3892] creative-sb0540 0003:041E:3100.0007: probe with driver creative-sb0540 failed with error -22 [ 1013.789901][ T3892] usb 1-1: USB disconnect, device number 10 [ 1021.169570][ T4766] [U]  [ 1027.235233][ T4777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 1063.423491][ T4834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'. [ 1063.425033][ T4834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'. [ 1068.540991][ T4844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'. [ 1076.619509][ T4850] infiniband syz1: set active [ 1076.626399][ T4850] infiniband syz1: added bond_slave_1 [ 1077.804033][ T4850] RDS/IB: syz1: added [ 1077.878473][ T4850] smc: adding ib device syz1 with port count 1 [ 1077.914079][ T4850] smc: ib device syz1 port 1 has pnetid [ 1087.435443][ T8] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1087.697874][ T8] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1087.700436][ T8] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1087.713411][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1087.716352][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 1087.718473][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.890026][ T8] usb 2-1: config 0 descriptor?? [ 1087.910901][ T4866] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1089.327189][ T8] logitech 0003:046D:C24F.0008: collection stack underflow [ 1089.329524][ T8] logitech 0003:046D:C24F.0008: item 0 2 0 12 parsing failed [ 1089.359815][ T8] logitech 0003:046D:C24F.0008: parse failed [ 1089.367150][ T8] logitech 0003:046D:C24F.0008: probe with driver logitech failed with error -22 [ 1089.694274][ T8] usb 2-1: USB disconnect, device number 6 [ 1092.523757][ T3866] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1092.734993][ T3866] usb 1-1: Using ep0 maxpacket: 32 [ 1092.865256][ T3866] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1092.867575][ T3866] usb 1-1: config 0 has no interface number 0 [ 1092.874165][ T3866] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1092.945265][ T3866] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1092.947662][ T3866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.949693][ T3866] usb 1-1: Product: syz [ 1092.966750][ T3866] usb 1-1: Manufacturer: syz [ 1092.968730][ T3866] usb 1-1: SerialNumber: syz [ 1093.078063][ T3866] usb 1-1: config 0 descriptor?? [ 1095.510544][ T3866] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1095.526832][ T3866] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 1095.528217][ T3866] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1095.530658][ T3866] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 1095.634857][ T3866] usb 1-1: USB disconnect, device number 11 [ 1104.301076][ T4908] tmpfs: Bad value for 'mpol' [ 1137.523292][ T4045] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 1138.240328][ T4045] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 1138.311025][ T4045] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1138.325104][ T4045] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1138.327238][ T4045] usb 2-1: Product: syz [ 1138.328746][ T4045] usb 2-1: Manufacturer: syz [ 1138.329997][ T4045] usb 2-1: SerialNumber: syz [ 1138.418098][ T4045] usb 2-1: config 0 descriptor?? [ 1138.556317][ T4962] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1138.595006][ T4045] hub 2-1:0.0: bad descriptor, ignoring hub [ 1138.596550][ T4045] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1139.495267][ T4934] usb 2-1: USB disconnect, device number 7 [ 1140.423708][ T4934] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1140.603229][ T4934] usb 2-1: Using ep0 maxpacket: 32 [ 1140.718385][ T4934] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1141.052533][ T4934] usb 2-1: string descriptor 0 read error: -22 [ 1141.054762][ T4934] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1141.056144][ T4934] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1141.189012][ T4934] usb 2-1: config 0 descriptor?? [ 1141.238812][ T4962] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1141.316177][ T4934] hub 2-1:0.0: bad descriptor, ignoring hub [ 1141.317770][ T4934] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1142.659369][ T8] usb 2-1: USB disconnect, device number 8 [ 1151.290493][ T3892] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1151.564320][ T3892] usb 2-1: Using ep0 maxpacket: 16 [ 1151.685541][ T3892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 1151.688250][ T3892] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1151.691154][ T3892] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1151.717017][ T3892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.926010][ T3892] usb 2-1: config 0 descriptor?? [ 1153.214302][ T3892] kovaplus 0003:1E7D:2D50.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 1153.397373][ T3892] kovaplus 0003:1E7D:2D50.0009: couldn't init struct kovaplus_device [ 1153.399958][ T3892] kovaplus 0003:1E7D:2D50.0009: couldn't install mouse [ 1153.498928][ T3892] kovaplus 0003:1E7D:2D50.0009: probe with driver kovaplus failed with error -71 [ 1153.755273][ T3892] usb 2-1: USB disconnect, device number 9 [ 1159.760097][ T5027] syz.0.362 (5027): drop_caches: 2 [ 1163.375082][ T3866] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1163.623834][ T3866] usb 2-1: Using ep0 maxpacket: 16 [ 1163.685810][ T3866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1163.688406][ T3866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1163.690914][ T3866] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1163.710892][ T3866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.025462][ T3866] usb 2-1: config 0 descriptor?? [ 1166.020319][ T3866] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 1166.039902][ T3866] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 1166.066068][ T3866] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 1166.067349][ T3866] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 1166.068363][ T3866] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 1166.170139][ T3866] lua 0003:1E7D:2C2E.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0 [ 1166.313151][ T3866] usb 2-1: USB disconnect, device number 10 [ 1167.756079][ T3866] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 1168.158882][ T3866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 1168.359861][ T3866] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1168.375877][ T3866] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1168.378191][ T3866] usb 1-1: Product: syz [ 1168.379763][ T3866] usb 1-1: Manufacturer: syz [ 1168.382855][ T3866] usb 1-1: SerialNumber: syz [ 1168.515764][ T3866] usb 1-1: config 0 descriptor?? [ 1168.653092][ T5053] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1168.710108][ T3866] hub 1-1:0.0: bad descriptor, ignoring hub [ 1168.735970][ T3866] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1170.484730][ T8] usb 1-1: USB disconnect, device number 12 [ 1171.103067][ T8] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1171.293213][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 1171.403083][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1171.593155][ T8] usb 1-1: string descriptor 0 read error: -22 [ 1171.595244][ T8] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1171.597676][ T8] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1171.666274][ T8] usb 1-1: config 0 descriptor?? [ 1171.718737][ T5053] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1171.796192][ T8] hub 1-1:0.0: bad descriptor, ignoring hub [ 1171.797839][ T8] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1173.533840][ T4934] usb 1-1: USB disconnect, device number 13 [ 1252.465039][ T3866] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1252.740862][ T3866] usb 2-1: Using ep0 maxpacket: 16 [ 1252.813985][ T3866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1252.816684][ T3866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1252.818731][ T3866] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1252.826553][ T3866] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1252.828931][ T3866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.997133][ T3866] usb 2-1: config 0 descriptor?? [ 1253.968698][ T5225] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1255.542590][ T3866] ryos 0003:1E7D:31CE.000B: collection stack underflow [ 1255.543907][ T3866] ryos 0003:1E7D:31CE.000B: item 0 2 0 12 parsing failed [ 1255.563198][ T3866] ryos 0003:1E7D:31CE.000B: parse failed [ 1255.565101][ T3866] ryos 0003:1E7D:31CE.000B: probe with driver ryos failed with error -22 [ 1256.085509][ T4045] usb 2-1: USB disconnect, device number 11 [ 1293.714240][ T3866] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1293.914230][ T3866] usb 2-1: Using ep0 maxpacket: 16 [ 1294.024685][ T3866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.035542][ T3866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1294.038741][ T3866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1294.041023][ T3866] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1294.050084][ T3866] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1294.123259][ T3866] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1294.125625][ T3866] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1294.127612][ T3866] usb 2-1: Manufacturer: syz [ 1294.340567][ T3866] usb 2-1: config 0 descriptor?? [ 1302.057560][ T3866] rc_core: IR keymap rc-hauppauge not found [ 1302.058979][ T3866] Registered IR keymap rc-empty [ 1302.071077][ T3866] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1302.097209][ T3866] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1302.135017][ T3866] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1302.160969][ T3866] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 1302.254138][ T3866] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1302.289949][ T3866] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1302.344113][ T3866] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1302.368028][ T3866] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1302.436534][ T3866] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1302.473431][ T3866] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1302.524410][ T3866] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1302.554818][ T3866] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1302.577832][ T3866] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1302.603761][ T3866] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1302.734721][ T3866] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1302.736250][ T3866] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1303.166083][ T4045] usb 2-1: USB disconnect, device number 12 [ 1312.015352][ T5325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.445'. [ 1312.017868][ T5325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.445'. [ 1312.861008][ T5327] trusted_key: encrypted_key: key trusted:‘8s‰X not found [ 1327.458416][ T5350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.457'. [ 1327.526217][ T5350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'. [ 1327.527564][ T5350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.457'. [ 1347.007471][ T5380] Invalid logical block size (4093) [ 1363.786846][ T5402] [U] ¦ [ 1365.907251][ T5407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.480'. [ 1384.805736][ T5434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.491'. [ 1384.807414][ T5434] netlink: 'syz.0.491': attribute type 1 has an invalid length. [ 1384.808562][ T5434] netlink: 'syz.0.491': attribute type 2 has an invalid length. [ 1389.128593][ T34] audit: type=1326 audit(1388.270:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5439 comm="syz.1.495" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x0 [ 1397.496661][ T5453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.499'. [ 1397.499180][ T5453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.499'. [ 1413.938552][ T5472] netlink: 'syz.1.508': attribute type 27 has an invalid length. [ 1428.135416][ T5494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.518'. [ 1428.137705][ T5494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.518'. [ 1428.152614][ T5494] netlink: 'syz.0.518': attribute type 20 has an invalid length. [ 1437.459507][ T5506] tmpfs: Cannot disable swap on remount [ 1466.232794][ T34] audit: type=1326 audit(1465.350:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.1.539" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x7fc00000 [ 1471.527704][ T5550] can0: slcan on ttynull. [ 1473.204520][ T5549] can0 (unregistered): slcan off ttynull. [ 1485.177728][ T3893] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1485.564027][ T3893] usb 2-1: Using ep0 maxpacket: 16 [ 1485.636079][ T3893] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 1485.638415][ T3893] usb 2-1: config 0 has no interface number 0 [ 1485.640382][ T3893] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1485.763541][ T3893] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1485.765925][ T3893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.767784][ T3893] usb 2-1: Product: syz [ 1485.769384][ T3893] usb 2-1: Manufacturer: syz [ 1485.770965][ T3893] usb 2-1: SerialNumber: syz [ 1485.901155][ T3893] usb 2-1: config 0 descriptor?? [ 1487.979604][ T3893] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1488.155114][ T3893] usb 2-1: USB disconnect, device number 13 [ 1507.409514][ T5606] [U] : [ 1507.412219][ T5606] [U] [ 1507.413710][ T5606] [U] [ 1507.415031][ T5606] [U] [ 1507.416325][ T5606] [U] [ 1507.417636][ T5606] [U] [ 1507.418932][ T5606] [U] [ 1507.420196][ T5606] [U] [ 1507.458482][ T5606] [U] [ 1507.460148][ T5606] [U] [ 1507.461439][ T5606] [U] [ 1507.462706][ T5606] [U] [ 1507.463969][ T5606] [U] [ 1507.465263][ T5606] [U] [ 1507.466510][ T5606] [U] [ 1507.467755][ T5606] [U] [ 1507.520655][ T5606] [U] [ 1507.522695][ T5606] [U] [ 1507.524053][ T5606] [U] [ 1507.525418][ T5606] [U] [ 1507.526789][ T5606] [U] [ 1507.528170][ T5606] [U] [ 1507.529587][ T5606] [U] [ 1507.530958][ T5606] [U] [ 1507.586392][ T5606] [U] [ 1507.587705][ T5606] [U] [ 1507.588607][ T5606] [U] [ 1507.589583][ T5606] [U] [ 1507.590564][ T5606] [U] [ 1507.591523][ T5606] [U] [ 1507.592376][ T5606] [U] [ 1507.593303][ T5606] [U] [ 1507.624672][ T5606] [U] [ 1507.625897][ T5606] [U] [ 1507.626853][ T5606] [U] [ 1507.627741][ T5606] [U] [ 1507.628568][ T5606] [U] [ 1507.629449][ T5606] [U] [ 1507.630271][ T5606] [U] [ 1507.631178][ T5606] [U] [ 1507.653325][ T5606] [U] [ 1507.654460][ T5606] [U] [ 1507.655250][ T5606] [U] [ 1507.656026][ T5606] [U] [ 1507.656791][ T5606] [U] [ 1507.657899][ T5606] [U] [ 1507.658697][ T5606] [U] [ 1507.659509][ T5606] [U] [ 1507.661052][ T5606] [U] [ 1507.661969][ T5606] [U] [ 1507.662796][ T5606] [U] [ 1507.663665][ T5606] [U] [ 1507.664488][ T5606] [U] [ 1507.665365][ T5606] [U] [ 1507.666194][ T5606] [U] [ 1507.667047][ T5606] [U] [ 1507.702861][ T5606] [U] [ 1507.703997][ T5606] [U] [ 1507.704832][ T5606] [U] [ 1507.705760][ T5606] [U] [ 1507.706787][ T5606] [U] [ 1507.707684][ T5606] [U] [ 1507.708506][ T5606] [U] [ 1507.709379][ T5606] [U] [ 1507.710899][ T5606] [U] [ 1507.711790][ T5606] [U] [ 1507.712572][ T5606] [U] [ 1507.713375][ T5606] [U] [ 1507.714148][ T5606] [U] [ 1507.714912][ T5606] [U] [ 1507.715672][ T5606] [U] [ 1507.716445][ T5606] [U] [ 1507.773133][ T5606] [U] [ 1507.774236][ T5606] [U] [ 1507.775002][ T5606] [U] [ 1507.775751][ T5606] [U] [ 1507.776506][ T5606] [U] [ 1507.777379][ T5606] [U] [ 1507.778184][ T5606] [U] [ 1507.778964][ T5606] [U] [ 1507.780438][ T5606] [U] [ 1507.781292][ T5606] [U] [ 1507.782080][ T5606] [U] [ 1507.782888][ T5606] [U] [ 1507.783670][ T5606] [U] [ 1507.784464][ T5606] [U] [ 1507.785299][ T5606] [U] [ 1507.786109][ T5606] [U] [ 1507.812771][ T5606] [U] [ 1507.813895][ T5606] [U] [ 1507.814723][ T5606] [U] [ 1507.815632][ T5606] [U] [ 1507.816427][ T5606] [U] [ 1507.817262][ T5606] [U] [ 1507.818085][ T5606] [U] [ 1507.818868][ T5606] [U] [ 1507.820316][ T5606] [U] [ 1507.821186][ T5606] [U] [ 1507.821979][ T5606] [U] [ 1507.822787][ T5606] [U] [ 1507.823594][ T5606] [U] [ 1507.824439][ T5606] [U] [ 1507.825300][ T5606] [U] [ 1507.826136][ T5606] [U] [ 1507.878034][ T5606] [U] [ 1507.879216][ T5606] [U] [ 1507.880109][ T5606] [U] [ 1507.881031][ T5606] [U] [ 1507.881891][ T5606] [U] [ 1507.882758][ T5606] [U] [ 1507.883569][ T5606] [U] [ 1507.884373][ T5606] [U] [ 1507.893240][ T5606] [U] [ 1507.894322][ T5606] [U] [ 1507.895069][ T5606] [U] [ 1507.895796][ T5606] [U] [ 1507.896538][ T5606] [U] [ 1507.897418][ T5606] [U] [ 1507.898396][ T5606] [U] [ 1507.899205][ T5606] [U] [ 1507.927174][ T5606] [U] [ 1507.928291][ T5606] [U] [ 1507.929222][ T5606] [U] [ 1507.930028][ T5606] [U] [ 1507.930860][ T5606] [U] [ 1507.931948][ T5606] [U] [ 1507.932937][ T5606] [U] [ 1508.467851][ T5605] [U] [ 1522.298737][ T5633] syz.1.568 uses obsolete (PF_INET,SOCK_PACKET) [ 1527.865254][ T5639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'. [ 1527.866816][ T5639] netlink: 'syz.1.571': attribute type 30 has an invalid length. [ 1557.237607][ T5673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.585'. [ 1606.679366][ T5738] netlink: 60 bytes leftover after parsing attributes in process `syz.1.614'. [ 1616.617873][ T4934] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1616.875669][ T4934] usb 2-1: Using ep0 maxpacket: 16 [ 1616.955611][ T4934] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1616.958421][ T4934] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1616.960739][ T4934] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1616.989016][ T4934] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1617.012060][ T4934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.106859][ T4934] usb 2-1: config 0 descriptor?? [ 1618.296221][ T4934] mcp2200 0003:04D8:00DF.000C: unknown main item tag 0x0 [ 1618.297662][ T4934] mcp2200 0003:04D8:00DF.000C: unknown main item tag 0x0 [ 1618.298772][ T4934] mcp2200 0003:04D8:00DF.000C: unknown main item tag 0x0 [ 1618.302932][ T4934] mcp2200 0003:04D8:00DF.000C: unknown main item tag 0x0 [ 1618.304065][ T4934] mcp2200 0003:04D8:00DF.000C: unknown main item tag 0x0 [ 1618.305138][ T4934] mcp2200 0003:04D8:00DF.000C: unknown main item tag 0x0 [ 1618.306156][ T4934] mcp2200 0003:04D8:00DF.000C: unknown main item tag 0x0 [ 1618.324655][ T4934] mcp2200 0003:04D8:00DF.000C: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.1-1/input0 [ 1618.683586][ T4934] usb 2-1: USB disconnect, device number 14 [ 1622.069517][ T5782] trusted_key: encrypted_key: key user:syz not found [ 1630.801001][ T5792] hugetlbfs: Bad value 'A' for mount option 'nr_inodes' [ 1630.801001][ T5792] [ 1658.669810][ T5832] Invalid ELF header magic: != ELF [ 1668.312558][ T34] audit: type=1326 audit(1667.450:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5846 comm="syz.1.651" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x0 [ 1674.187859][ T8] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 1674.529940][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1674.539156][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 1674.542990][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1674.545771][ T8] usb 2-1: New USB device found, idVendor=056a, idProduct=0326, bcdDevice= 0.00 [ 1674.548627][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.677954][ T8] usb 2-1: config 0 descriptor?? [ 1674.756669][ T5855] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1676.077880][ T5862] random: crng reseeded on system resumption [ 1676.785451][ T8] wacom 0003:056A:0326.000D: Unknown device_type for 'HID 056a:0326'. Ignoring. [ 1677.173274][ T8] usb 2-1: USB disconnect, device number 15 [ 1686.928476][ T34] audit: type=1800 audit(1686.060:5): pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.658" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1692.255167][ T5887] lo speed is unknown, defaulting to 1000 [ 1692.279832][ T5887] lo speed is unknown, defaulting to 1000 [ 1692.297624][ T5887] lo speed is unknown, defaulting to 1000 [ 1692.399618][ T5887] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1692.762812][ T5887] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1694.568041][ T5887] lo speed is unknown, defaulting to 1000 [ 1694.778092][ T5887] lo speed is unknown, defaulting to 1000 [ 1747.107838][ T5965] netlink: 24 bytes leftover after parsing attributes in process `syz.1.696'. [ 1747.109583][ T5965] netlink: 56 bytes leftover after parsing attributes in process `syz.1.696'. [ 1747.110827][ T5965] netlink: 'syz.1.696': attribute type 10 has an invalid length. [ 1759.292969][ T5984] netlink: 'syz.1.704': attribute type 5 has an invalid length. [ 1762.769869][ T5986] syz.0.705: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1762.809746][ T5986] CPU: 0 UID: 0 PID: 5986 Comm: syz.0.705 Not tainted 6.14.0-rc1-syzkaller-g245aece3750d #0 [ 1762.810150][ T5986] Hardware name: riscv-virtio,qemu (DT) [ 1762.810484][ T5986] Call Trace: [ 1762.810721][ T5986] [] dump_backtrace+0x2e/0x3c [ 1762.811919][ T5986] [] show_stack+0x30/0x3c [ 1762.812159][ T5986] [] dump_stack_lvl+0x12e/0x1a6 [ 1762.812478][ T5986] [] dump_stack+0x1c/0x24 [ 1762.812785][ T5986] [] warn_alloc+0x170/0x292 [ 1762.813059][ T5986] [] __vmalloc_node_range_noprof+0xf8a/0x120a [ 1762.813373][ T5986] [] vzalloc_noprof+0xf8/0x126 [ 1762.813662][ T5986] [] packet_set_ring+0xbba/0x19ee [ 1762.813902][ T5986] [] packet_setsockopt+0x179a/0x35c2 [ 1762.814149][ T5986] [] do_sock_setsockopt+0x20a/0x402 [ 1762.814384][ T5986] [] __sys_setsockopt+0x140/0x1cc [ 1762.814641][ T5986] [] __riscv_sys_setsockopt+0xa6/0x114 [ 1762.814914][ T5986] [] syscall_handler+0x94/0x118 [ 1762.815168][ T5986] [] do_trap_ecall_u+0x1aa/0x216 [ 1762.815487][ T5986] [] handle_exception+0x146/0x152 [ 1762.902728][ T5986] Mem-Info: [ 1762.912729][ T5986] active_anon:14375 inactive_anon:0 isolated_anon:0 [ 1762.912729][ T5986] active_file:6251 inactive_file:34675 isolated_file:0 [ 1762.912729][ T5986] unevictable:768 dirty:48 writeback:0 [ 1762.912729][ T5986] slab_reclaimable:2263 slab_unreclaimable:27209 [ 1762.912729][ T5986] mapped:18361 shmem:13160 pagetables:647 [ 1762.912729][ T5986] sec_pagetables:0 bounce:0 [ 1762.912729][ T5986] kernel_misc_reclaimable:0 [ 1762.912729][ T5986] free:204024 free_pcp:1294 free_cma:52224 [ 1762.915837][ T5986] Node 0 active_anon:57500kB inactive_anon:0kB active_file:25004kB inactive_file:138700kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:73444kB dirty:192kB writeback:0kB shmem:52640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5832kB pagetables:2588kB sec_pagetables:0kB all_unreclaimable? no [ 1762.935566][ T5986] Node 0 DMA32 free:816096kB boost:0kB min:22528kB low:28160kB high:33792kB reserved_highatomic:0KB active_anon:57500kB inactive_anon:0kB active_file:25004kB inactive_file:138700kB unevictable:3072kB writepending:192kB present:2097152kB managed:1431724kB mlocked:0kB bounce:0kB free_pcp:5200kB local_pcp:4448kB free_cma:208896kB [ 1762.938516][ T5986] lowmem_reserve[]: 0 0 0 [ 1762.940568][ T5986] Node 0 DMA32: 2*4kB (ME) 0*8kB 1*16kB (U) 5*32kB (UME) 7*64kB (UME) 4*128kB (UME) 1*256kB (M) 1*512kB (E) 3*1024kB (ME) 2*2048kB (E) 197*4096kB (MC) = 815992kB [ 1763.017199][ T5986] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1763.018309][ T5986] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1763.019423][ T5986] 54128 total pagecache pages [ 1763.020252][ T5986] 0 pages in swap cache [ 1763.021062][ T5986] Free swap = 124512kB [ 1763.096762][ T5986] Total swap = 124996kB [ 1763.097857][ T5986] 524288 pages RAM [ 1763.098664][ T5986] 0 pages HighMem/MovableOnly [ 1763.099491][ T5986] 166357 pages reserved [ 1763.100288][ T5986] 52736 pages cma reserved [ 1769.366478][ T5994] sctp: failed to load transform for md5: -2 [ 1809.988482][ T6047] bond0: entered promiscuous mode [ 1809.990256][ T6047] bond_slave_0: entered promiscuous mode [ 1810.005809][ T6047] bond_slave_1: entered promiscuous mode [ 1810.083867][ T6044] bond0: left promiscuous mode [ 1810.085883][ T6044] bond_slave_0: left promiscuous mode [ 1810.089277][ T6044] bond_slave_1: left promiscuous mode [ 1838.465428][ T4934] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1839.007791][ T4934] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1839.008916][ T4934] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1839.010044][ T4934] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1839.010827][ T4934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1839.216298][ T6096] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1839.474683][ T4934] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1842.864511][ T3893] usb 2-1: USB disconnect, device number 16 [ 1861.767461][ T6155] netlink: 32 bytes leftover after parsing attributes in process `syz.1.754'. [ 1864.064673][ T3866] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1864.375403][ T3866] usb 2-1: Using ep0 maxpacket: 32 [ 1864.478334][ T3866] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1864.479872][ T3866] usb 2-1: config 0 has no interface number 0 [ 1864.485701][ T3866] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1864.700157][ T3866] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1864.703953][ T3866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.705085][ T3866] usb 2-1: Product: syz [ 1864.705949][ T3866] usb 2-1: Manufacturer: syz [ 1864.706889][ T3866] usb 2-1: SerialNumber: syz [ 1864.761016][ T3866] usb 2-1: config 0 descriptor?? [ 1864.947431][ T3866] smsc75xx v1.0.0 [ 1867.308128][ T3866] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1867.309713][ T3866] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1867.310895][ T3866] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1867.320932][ T3866] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1867.431024][ T3866] usb 2-1: USB disconnect, device number 17 [ 1886.756082][ T6198] siw: device registration error -23 [ 1889.034930][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'. [ 1892.395599][ T6211] netlink: 28 bytes leftover after parsing attributes in process `syz.0.774'. [ 1911.214948][ T6238] [U] [ 1911.216608][ T6238] [U] [ 1911.217485][ T6238] [U] [ 1911.218289][ T6238] [U] [ 1911.240113][ T6238] [U] [ 1911.241330][ T6238] [U] [ 1911.242102][ T6238] [U] [ 1911.242873][ T6238] [U] [ 1911.260705][ T6238] [U] [ 1911.261904][ T6238] [U] [ 1911.262693][ T6238] [U] [ 1911.263461][ T6238] [U] [ 1911.286865][ T6238] [U] [ 1911.287984][ T6238] [U] [ 1911.288779][ T6238] [U] [ 1911.289594][ T6238] [U] [ 1911.313680][ T6238] [U] [ 1911.314822][ T6238] [U] [ 1911.315603][ T6238] [U] [ 1911.316347][ T6238] [U] [ 1911.318386][ T6238] [U] [ 1911.319164][ T6238] [U] [ 1911.319949][ T6238] [U] [ 1911.320756][ T6238] [U] [ 1911.354304][ T6238] [U] [ 1911.355457][ T6238] [U] [ 1911.356245][ T6238] [U] [ 1911.357050][ T6238] [U] [ 1911.359083][ T6238] [U] [ 1911.359877][ T6238] [U] [ 1911.360630][ T6238] [U] [ 1911.361457][ T6238] [U] [ 1911.384784][ T6238] [U] [ 1911.385883][ T6238] [U] [ 1911.386644][ T6238] [U] [ 1911.387401][ T6238] [U] [ 1911.389364][ T6238] [U] [ 1911.390129][ T6238] [U] [ 1911.390878][ T6238] [U] [ 1911.391760][ T6238] [U] [ 1911.414011][ T6238] [U] [ 1911.415084][ T6238] [U] [ 1911.415853][ T6238] [U] [ 1911.416613][ T6238] [U] [ 1911.418742][ T6238] [U] [ 1911.419538][ T6238] [U] [ 1911.420276][ T6238] [U] [ 1911.421043][ T6238] [U] [ 1911.444799][ T6238] [U] [ 1911.445915][ T6238] [U] [ 1911.446685][ T6238] [U] [ 1911.447465][ T6238] [U] [ 1911.449467][ T6238] [U] [ 1911.450239][ T6238] [U] [ 1911.450996][ T6238] [U] [ 1911.451808][ T6238] [U] [ 1911.477917][ T6238] [U] [ 1911.478969][ T6238] [U] [ 1911.479762][ T6238] [U] [ 1911.480517][ T6238] [U] [ 1911.494246][ T6238] [U] [ 1911.495379][ T6238] [U] [ 1911.496171][ T6238] [U] [ 1911.496982][ T6238] [U] [ 1911.499489][ T6238] [U] [ 1911.500301][ T6238] [U] [ 1911.501084][ T6238] [U] [ 1911.501917][ T6238] [U] [ 1911.524276][ T6238] [U] [ 1911.525364][ T6238] [U] [ 1911.526141][ T6238] [U] [ 1911.526905][ T6238] [U] [ 1911.529373][ T6238] [U] [ 1911.530176][ T6238] [U] [ 1911.530939][ T6238] [U] [ 1911.531795][ T6238] [U] [ 1911.554861][ T6238] [U] [ 1911.555906][ T6238] [U] [ 1911.556670][ T6238] [U] [ 1911.557445][ T6238] [U] [ 1911.559853][ T6238] [U] [ 1911.560655][ T6238] [U] [ 1911.561510][ T6238] [U] [ 1911.562291][ T6238] [U] [ 1911.584774][ T6238] [U] [ 1911.585854][ T6238] [U] [ 1911.586618][ T6238] [U] [ 1911.587362][ T6238] [U] [ 1911.589733][ T6238] [U] [ 1911.590541][ T6238] [U] [ 1911.591318][ T6238] [U] [ 1911.592099][ T6238] [U] [ 1911.617195][ T6238] [U] [ 1911.618233][ T6238] [U] [ 1911.618975][ T6238] [U] [ 1911.619708][ T6238] [U] [ 1911.645735][ T6238] [U] [ 1911.646746][ T6238] [U] [ 1911.647523][ T6238] [U] [ 1911.648247][ T6238] [U] [ 1911.650185][ T6238] [U] [ 1911.650948][ T6238] [U] [ 1911.651741][ T6238] [U] [ 1911.652463][ T6238] [U] [ 1911.679475][ T6238] [U] [ 1911.680501][ T6238] [U] [ 1911.681367][ T6238] [U] [ 1911.682132][ T6238] [U] [ 1911.699811][ T6238] [U] [ 1911.700895][ T6238] [U] [ 1911.701744][ T6238] [U] [ 1911.702487][ T6238] [U] [ 1911.749909][ T6238] [U] [ 1911.750961][ T6238] [U] [ 1911.751791][ T6238] [U] [ 1911.752682][ T6238] [U] [ 1911.786529][ T6238] [U] [ 1911.787609][ T6238] [U] [ 1911.788788][ T6238] [U] [ 1911.789594][ T6238] [U] [ 1911.815759][ T6238] [U] [ 1911.816817][ T6238] [U] [ 1911.817599][ T6238] [U] [ 1911.818330][ T6238] [U] [ 1911.853043][ T6238] [U] [ 1911.854087][ T6238] [U] [ 1911.854836][ T6238] [U] [ 1912.089256][ T6237] [U] [ 1939.745374][ T6299] netlink: 64 bytes leftover after parsing attributes in process `syz.0.811'. [ 1987.503830][ T6376] devpts: called with bogus options [ 2008.824480][ T6407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'. [ 2048.650981][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.871'. [ 2048.656689][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.871'. [ 2048.662639][ T6439] netlink: 'syz.0.871': attribute type 7 has an invalid length. [ 2049.299285][ T6440] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2069.806755][ T6456] netlink: 40 bytes leftover after parsing attributes in process `syz.0.879'. [ 2070.160951][ T6457] smc: net device ip6tnl0 applied user defined pnetid SYZ0 [ 2102.900586][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 2107.747627][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.892'. [ 2107.750704][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.892'. [ 2126.928774][ T6502] tmpfs: Cannot change global quota limit on remount [ 2137.350616][ T6512] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 2148.596056][ T6405] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 2148.978632][ T6405] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2148.996541][ T6405] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2149.038498][ T6405] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2149.047180][ T6405] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2149.235802][ T6405] usb 2-1: config 0 descriptor?? [ 2151.436993][ T6405] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 2151.447743][ T6405] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 2151.451149][ T6405] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 2151.458890][ T6405] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 2151.464179][ T6405] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 2151.467260][ T6405] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 2151.470192][ T6405] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 2151.715878][ T6405] pyra 0003:1E7D:2CF6.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 2151.810013][ T6405] pyra 0003:1E7D:2CF6.000E: couldn't init struct pyra_device [ 2151.824473][ T6405] pyra 0003:1E7D:2CF6.000E: couldn't install mouse [ 2152.025476][ T6405] pyra 0003:1E7D:2CF6.000E: probe with driver pyra failed with error -71 [ 2152.263795][ T6405] usb 2-1: USB disconnect, device number 18 [ 2182.598911][ T6561] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 2250.414224][ T4934] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2251.086241][ T4934] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 2251.090074][ T4934] usb 2-1: config 0 has no interface number 0 [ 2251.123975][ T4934] usb 2-1: config 0 interface 4 has no altsetting 0 [ 2251.127538][ T4934] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2251.129605][ T4934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2251.280901][ T4934] usb 2-1: config 0 descriptor?? [ 2251.429214][ T4934] cp210x 2-1:0.4: cp210x converter detected [ 2252.424869][ T4934] cp210x 2-1:0.4: failed to get vendor val 0x000e size 3: -71 [ 2252.728767][ T4934] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2252.975890][ T4934] usb 2-1: USB disconnect, device number 19 [ 2253.489503][ T4934] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2253.589845][ T4934] cp210x 2-1:0.4: device disconnected [ 2268.337857][ T34] audit: type=1326 audit(2267.390:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.0.947" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x0 [ 2302.666847][ T4934] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2303.270663][ T4934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2303.280437][ T4934] usb 2-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 2303.294417][ T4934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2303.445113][ T4934] usb 2-1: config 0 descriptor?? [ 2306.144972][ T4934] holtek_mouse 0003:04D9:A081.000F: hidraw0: USB HID v0.00 Device [HID 04d9:a081] on usb-dummy_hcd.1-1/input0 [ 2306.444583][ T4934] usb 2-1: USB disconnect, device number 20 [ 2309.100431][ T6710] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 2335.654181][ T6721] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2336.024196][ T6721] usb 2-1: Using ep0 maxpacket: 32 [ 2336.159309][ T6721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2336.175261][ T6721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2336.179290][ T6721] usb 2-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 2336.212602][ T6721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2336.396550][ T6721] usb 2-1: config 0 descriptor?? [ 2338.635405][ T6721] usb 2-1: USB disconnect, device number 21 [ 2356.445708][ T4934] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2356.881104][ T4934] usb 2-1: Using ep0 maxpacket: 16 [ 2357.064509][ T4934] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2357.067512][ T4934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2357.070304][ T4934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2357.133261][ T4934] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2357.137803][ T4934] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2357.299108][ T4934] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2357.333990][ T4934] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2357.336419][ T4934] usb 2-1: Manufacturer: syz [ 2357.781072][ T4934] usb 2-1: config 0 descriptor?? [ 2366.124676][ T4934] rc_core: IR keymap rc-hauppauge not found [ 2366.128330][ T4934] Registered IR keymap rc-empty [ 2366.169176][ T4934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2366.215545][ T4934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2366.273735][ T4934] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2366.353692][ T4934] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 2366.533732][ T4934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2366.556640][ T4934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2366.589419][ T4934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2366.693249][ T4934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2366.763952][ T4934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2366.795488][ T4934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2366.844383][ T4934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2366.884618][ T4934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2366.916719][ T4934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2366.946222][ T4934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2367.314842][ T4934] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 2367.317304][ T4934] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2367.706155][ T4934] usb 2-1: USB disconnect, device number 22 [ 2392.776076][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.985'. [ 2393.124661][ T6805] vlan4: entered allmulticast mode [ 2393.126342][ T6805] gretap0: entered allmulticast mode [ 2393.316107][ T6805] gretap0: left allmulticast mode [ 2406.605591][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'. [ 2406.746874][ T6829] vlan2: entered allmulticast mode [ 2406.748244][ T6829] gretap0: entered allmulticast mode [ 2406.797063][ T6829] gretap0: left allmulticast mode [ 2416.410195][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'. [ 2416.589864][ T6847] vlan4: entered allmulticast mode [ 2416.597689][ T6847] gretap0: entered allmulticast mode [ 2416.690767][ T6847] gretap0: left allmulticast mode [ 2437.776247][ T6873] option changes via remount are deprecated (pid=6872 comm=syz.1.1010) [ 2467.630316][ T6906] sctp: failed to load transform for md5: -2 [ 2470.885939][ T6916] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1023'. [ 2501.086850][ T6954] rdma_op ffffaf80208ce9f0 conn xmit_rdma 0000000000000000 [ 2516.539846][ T6968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1049'. [ 2537.617195][ T6990] random: crng reseeded on system resumption [ 2552.555093][ T7004] ptrace attach of "/syz-executor exec"[7007] was attempted by "/syz-executor exec"[7004] [ 2583.359960][ T7029] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1075'. [ 2598.775251][ T7041] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1080'. [ 2618.283512][ T34] audit: type=1326 audit(2617.360:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7057 comm="syz.0.1089" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x0 [ 2640.806260][ T7080] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1095'. [ 2668.097959][ T7100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1103'. [ 2680.997422][ T7111] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 2681.007695][ T4934] lo speed is unknown, defaulting to 1000 [ 2709.003576][ T7135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1118'. [ 2732.386511][ T7158] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1127'. [ 2739.637168][ T7164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1129'. [ 2790.907780][ T7227] tc_dump_action: action bad kind [ 2801.365068][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1168'. [ 2801.368168][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1168'. [ 2801.370122][ T7242] netlink: 'syz.0.1168': attribute type 18 has an invalid length. [ 2827.438332][ T7268] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1179'. [ 2827.999324][ T7269] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1180'. [ 2837.570218][ T7281] virtiofs: Unknown parameter 'f' [ 2851.296745][ T4934] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 2851.369719][ T4934] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2901.523984][ T7364] new mount options do not match the existing superblock, will be ignored [ 2901.624561][ T7364] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 2926.393626][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1235'. [ 2926.396142][ T7398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1235'. [ 2926.398180][ T7398] netlink: 'syz.1.1235': attribute type 25 has an invalid length. [ 2937.484483][ T4934] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2938.030273][ T4934] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2938.037629][ T4934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2938.039688][ T4934] usb 2-1: Product: syz [ 2938.054339][ T4934] usb 2-1: Manufacturer: syz [ 2938.056310][ T4934] usb 2-1: SerialNumber: syz [ 2938.266760][ T4934] usb 2-1: config 0 descriptor?? [ 2938.541042][ T4934] ch341 2-1:0.0: ch341-uart converter detected [ 2939.754159][ T4934] usb 2-1: failed to receive control message: -110 [ 2939.757030][ T4934] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 2951.200368][ T4934] usb 2-1: USB disconnect, device number 23 [ 2951.349695][ T4934] ch341 2-1:0.0: device disconnected [ 2960.061751][ C1] vkms_vblank_simulate: vblank timer overrun [ 2971.243199][ T7464] tmpfs: Bad value for 'mpol' [ 3006.156469][ T7497] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1273'. [ 3025.890202][ T7517] veth1_macvtap: left promiscuous mode [ 3025.896745][ T7517] macsec0: entered promiscuous mode [ 3025.925671][ T7517] macsec0: entered allmulticast mode [ 3026.550997][ T7517] veth1_macvtap: entered promiscuous mode [ 3026.556176][ T7517] veth1_macvtap: entered allmulticast mode [ 3026.571001][ T7517] macsec0: left promiscuous mode [ 3026.585256][ T7517] macsec0: left allmulticast mode [ 3026.596292][ T7517] veth1_macvtap: left allmulticast mode [ 3035.226780][ T7527] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1287'. [ 3062.317579][ T7550] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1298'. [ 3062.319301][ T7550] nbd: couldn't find a device at index 64 [ 3117.523185][ T4934] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 3118.156343][ T4934] usb 2-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 3118.158635][ T4934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3118.293063][ T4934] usb 2-1: config 0 descriptor?? [ 3119.104554][ T4934] snd-usb-hiface 2-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 3120.147661][ T4934] usb 2-1: USB disconnect, device number 24 [ 3132.429007][ T7635] xt_CT: No such helper "pptp" [ 3147.370393][ T7654] netlink: 'syz.0.1341': attribute type 1 has an invalid length. [ 3163.594057][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1352'. [ 3196.107467][ T7712] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1365'. [ 3258.477324][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1396'. [ 3258.488004][ T7778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1396'. [ 3258.490628][ T7778] netlink: 'syz.0.1396': attribute type 15 has an invalid length. [ 3269.929855][ T7794] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1403'. [ 3269.962805][ T7794] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1403'. [ 3300.353370][ T34] audit: type=1326 audit(3299.420:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7828 comm="syz.0.1419" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x0 [ 3309.709487][ T7839] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1424'. [ 3321.010932][ T7853] PKCS7: Unknown OID: [5] (bad) [ 3321.023822][ T7853] PKCS7: Only support pkcs7_signedData type [ 3326.949362][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1433'. [ 3326.951050][ T7858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1433'. [ 3341.367960][ T7874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1441'. [ 3353.600124][ T7889] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 3389.258594][ T7922] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 3392.825746][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1463'. [ 3403.927625][ T7940] macvtap1: entered promiscuous mode [ 3403.929505][ T7940] vlan0: entered promiscuous mode [ 3404.064205][ T7940] vlan0: left promiscuous mode [ 3418.962673][ T7957] sctp: failed to load transform for md5: -2 [ 3429.569457][ T7971] [U] ^C [ 3499.496703][ T8049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1514'. [ 3499.516570][ T8049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1514'. [ 3501.088893][ T8049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1514'. [ 3501.107146][ T8049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1514'. [ 3504.299379][ T8049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1514'. [ 3504.334642][ T8049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1514'. [ 3513.379858][ T8060] can0: slcan on ptm0. [ 3514.067060][ T8059] can0 (unregistered): slcan off ptm0. [ 3523.465967][ T8081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1523'. [ 3523.468585][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1523'. [ 3528.728724][ T8085] can0: slcan on ptm0. [ 3529.485950][ T8084] can0 (unregistered): slcan off ptm0. [ 3565.370387][ T8125] nbd: must specify a size in bytes for the device [ 3573.140028][ T8131] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 3635.527507][ T8207] netlink: 'syz.0.1575': attribute type 1 has an invalid length. [ 3635.530764][ T8207] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1575'. [ 3642.278660][ T8215] CUSE: info not properly terminated [ 3648.819642][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1584'. [ 3717.938803][ T8299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1619'. [ 3752.997414][ T8334] xt_CT: No such helper "snmp" [ 3755.606601][ T4934] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 3755.823769][ T4934] usb 2-1: Using ep0 maxpacket: 32 [ 3755.984382][ T4934] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 3755.985785][ T4934] usb 2-1: config 0 has no interface number 0 [ 3756.214544][ T4934] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 3756.223374][ T4934] usb 2-1: config 0 has no interface number 0 [ 3756.379424][ T4934] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 3756.382079][ T4934] usb 2-1: config 0 has no interface number 0 [ 3756.616995][ T4934] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 3756.618715][ T4934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3756.620048][ T4934] usb 2-1: Product: syz [ 3756.633957][ T4934] usb 2-1: Manufacturer: syz [ 3756.635180][ T4934] usb 2-1: SerialNumber: syz [ 3756.712702][ T4934] usb 2-1: config 0 descriptor?? [ 3756.938841][ T4934] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 3758.411007][ T4934] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 3758.583194][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 3758.679132][ T4934] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 3758.956255][ T4934] usb 2-1: USB disconnect, device number 25 [ 3759.419606][ T4934] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 3759.892799][ T4934] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 3759.977738][ T4934] quatech2 2-1:0.51: device disconnected [ 3773.058695][ T8381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1642'. [ 3773.395224][ T8382] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1643'. [ 3773.399116][ T8382] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1643'. [ 3773.405647][ T8382] netlink: 'syz.1.1643': attribute type 5 has an invalid length. [ 3773.408947][ T8382] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1643'. [ 3863.204279][ T8480] netlink: 'syz.0.1680': attribute type 4 has an invalid length. [ 3863.206518][ T8480] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1680'. [ 3871.674882][ T8494] process 'syz.1.1683' launched './file2' with NULL argv: empty string added [ 3911.465787][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3912.644451][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3913.668815][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3914.800718][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3927.417918][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3927.708180][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3927.870452][ T12] bond0 (unregistering): Released all slaves [ 3937.846351][ T12] hsr_slave_0: left promiscuous mode [ 3937.992700][ T12] hsr_slave_1: left promiscuous mode [ 3938.743328][ T12] vlan1: left allmulticast mode [ 3938.745419][ T12] veth0_vlan: left allmulticast mode [ 3938.764809][ T12] veth1_macvtap: left promiscuous mode [ 3938.772597][ T12] veth0_macvtap: left promiscuous mode [ 3938.775380][ T12] veth1_vlan: left promiscuous mode [ 3938.777672][ T12] veth0_vlan: left promiscuous mode [ 3958.924067][ T4934] lo speed is unknown, defaulting to 1000 [ 3958.926412][ T4934] infiniband syz2: ib_query_port failed (-19) [ 4006.759556][ T8572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4007.238336][ T8572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4025.296966][ T8572] hsr_slave_0: entered promiscuous mode [ 4025.386963][ T8572] hsr_slave_1: entered promiscuous mode [ 4025.438916][ T8572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 4025.467639][ T8572] Cannot create hsr debugfs directory [ 4027.424800][ T8886] tmpfs: Bad value for 'mpol' [ 4040.387908][ T8572] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 4040.690342][ T8572] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 4041.079673][ T8572] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 4041.525766][ T8572] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 4062.521025][ T8572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4085.630270][ T9007] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 4122.624287][ T8572] veth0_vlan: entered promiscuous mode [ 4123.229211][ T8572] veth1_vlan: entered promiscuous mode [ 4125.170727][ T8572] veth0_macvtap: entered promiscuous mode [ 4125.550506][ T8572] veth1_macvtap: entered promiscuous mode [ 4127.558949][ T8572] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4127.564647][ T8572] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4127.566790][ T8572] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4127.568706][ T8572] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4144.900103][ T9064] ucma_write: process 5 (syz.2.1745) changed security contexts after opening file descriptor, this is not allowed. [ 4153.177979][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1749'. [ 4164.369852][ T9082] geneve2: entered promiscuous mode [ 4164.394134][ T9082] geneve2: entered allmulticast mode [ 4169.780212][ T9092] random: crng reseeded on system resumption [ 4171.435388][ T9095] block nbd0: Unsupported socket: shutdown callout must be supported. [ 4209.357624][ T9133] MPI: mpi too large (30216 bits) [ 4305.560538][ T9194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1798'. [ 4306.435393][ T9194] gretap0: entered promiscuous mode [ 4342.883000][ T9212] netlink: 'syz.0.1805': attribute type 18 has an invalid length. [ 4421.775920][ T9236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1815'. [ 4652.246406][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1847'. [ 4733.505093][ T9354] netlink: 'syz.0.1859': attribute type 29 has an invalid length. [ 4734.056136][ T9354] netlink: 'syz.0.1859': attribute type 29 has an invalid length. [ 4734.154010][ T9354] netlink: 'syz.0.1859': attribute type 29 has an invalid length. [ 4734.158641][ T9354] netlink: 'syz.0.1859': attribute type 29 has an invalid length. [ 4734.935585][ T9354] netlink: 'syz.0.1859': attribute type 29 has an invalid length. [ 4734.940251][ T9354] netlink: 'syz.0.1859': attribute type 29 has an invalid length. [ 4734.974641][ T9354] netlink: 'syz.0.1859': attribute type 29 has an invalid length. [ 4734.978009][ T9354] netlink: 'syz.0.1859': attribute type 29 has an invalid length. [ 4735.030850][ T9354] netlink: 'syz.0.1859': attribute type 29 has an invalid length. [ 4735.434400][ T9354] netlink: 'syz.0.1859': attribute type 29 has an invalid length. [ 4738.881431][ T9354] validate_nla: 7 callbacks suppressed [ 4739.114482][ T9354] netlink: 'syz.0.1859': attribute type 29 has an invalid length. [ 4739.313675][ T9354] netlink: 'syz.0.1859': attribute type 29 has an invalid length. [ 4739.321082][ T9354] netlink: 'syz.0.1859': attribute type 29 has an invalid length. [ 4739.936198][ T9354] netlink: 'syz.0.1859': attribute type 29 has an invalid length. [ 4740.795962][ T9354] netlink: 'syz.0.1859': attribute type 29 has an invalid length. [ 4740.886920][ T9354] netlink: 'syz.0.1859': attribute type 29 has an invalid length. [ 4740.890756][ T9354] netlink: 'syz.0.1859': attribute type 29 has an invalid length. [ 4855.560784][ T9384] random: crng reseeded on system resumption [ 4860.604515][ T9384] Restarting kernel threads ... done. [ 4935.277415][ T9398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1878'. [ 4935.279332][ T9398] block nbd0: not configured, cannot reconfigure [ 5127.113118][ T37] INFO: task kworker/u9:6:9199 blocked for more than 430 seconds. [ 5127.114607][ T37] Not tainted 6.14.0-rc1-syzkaller-g245aece3750d #0 [ 5127.144548][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 5127.145823][ T37] task:kworker/u9:6 state:D stack:0 pid:9199 tgid:9199 ppid:2 task_flags:0x4208060 flags:0x00000000 [ 5127.147761][ T37] Workqueue: events_unbound free_mem_alloc_deferred [ 5127.149304][ T37] Call Trace: [ 5127.150167][ T37] [] __schedule+0xe4c/0x3d70 [ 5127.216184][ T37] [] schedule+0xc4/0x324 [ 5127.217704][ T37] [] schedule_timeout+0x1c6/0x28a [ 5127.218826][ T37] [] __wait_for_common+0x1ca/0x4b6 [ 5127.219844][ T37] [] wait_for_completion+0x1a/0x22 [ 5127.220873][ T37] [] rcu_barrier+0x2dc/0x6cc [ 5127.294000][ T37] [] free_mem_alloc_deferred+0x24/0xee [ 5127.295303][ T37] [] process_one_work+0x96a/0x1f3a [ 5127.296505][ T37] [] worker_thread+0x5be/0xdc6 [ 5127.297759][ T37] [] kthread+0x37e/0x7b6 [ 5127.298966][ T37] [] ret_from_fork+0xe/0x18 [ 5127.300781][ T37] [ 5127.300781][ T37] Showing all locks held in the system: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 5127.403999][ T37] 2 locks held by ksoftirqd/1/24: [ 5127.405492][ T37] 1 lock held by khungtaskd/37: [ 5127.406446][ T37] #0: ffffffff883d8200 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x68/0x288 [ 5127.409923][ T37] 2 locks held by kworker/0:2/917: [ 5127.410918][ T37] 1 lock held by syslogd/2987: [ 5127.455522][ T37] 2 locks held by getty/3141: [ 5127.456668][ T37] #0: ffffaf801c1300a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3a/0x46 [ 5127.459658][ T37] #1: ffff8f800008b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xd7c/0x129a [ 5127.532543][ T37] 2 locks held by syz-executor/3168: [ 5127.533740][ T37] 2 locks held by kworker/1:0/4934: [ 5127.534654][ T37] 3 locks held by kworker/u9:5/6914: [ 5127.535506][ T37] #0: ffffaf8011a89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x848/0x1f3a [ 5127.538184][ T37] #1: ffff8f8003c77bd0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x870/0x1f3a [ 5127.540692][ T37] #2: ffffffff883e8380 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x56/0x6cc [ 5127.615769][ T37] 3 locks held by kworker/u10:0/7414: [ 5127.616664][ T37] 2 locks held by kworker/1:2/8543: [ 5127.617590][ T37] 2 locks held by kworker/1:6/9183: [ 5127.618417][ T37] 3 locks held by kworker/u9:6/9199: [ 5127.619247][ T37] #0: ffffaf8011a89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x848/0x1f3a [ 5127.677516][ T37] #1: ffff8f80042c7bd0 ((work_completion)(©->work)){+.+.}-{0:0}, at: process_one_work+0x870/0x1f3a [ 5127.751856][ T37] #2: ffffffff883e8380 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x56/0x6cc [ 5127.754739][ T37] 5 locks held by kworker/1:10/9291: [ 5127.755600][ T37] 1 lock held by syz.2.1837/9304: [ 5127.756430][ T37] 1 lock held by syz.2.1889/9433: [ 5127.757734][ T37] #0: ffffffff883e8380 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x56/0x6cc [ 5127.826064][ T37] 1 lock held by syz-executor/9447: [ 5127.827995][ T37] [ 5127.828749][ T37] ============================================= [ 5127.828749][ T37] [ 5127.830129][ T37] NMI backtrace for cpu 0 [ 5127.830372][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.14.0-rc1-syzkaller-g245aece3750d #0 [ 5127.830662][ T37] Hardware name: riscv-virtio,qemu (DT) [ 5127.830766][ T37] Call Trace: [ 5127.830868][ T37] [] dump_backtrace+0x2e/0x3c [ 5127.831212][ T37] [] show_stack+0x30/0x3c [ 5127.831442][ T37] [] dump_stack_lvl+0x12e/0x1a6 [ 5127.831749][ T37] [] dump_stack+0x1c/0x24 [ 5127.832056][ T37] [] nmi_cpu_backtrace+0x3b0/0x3b2 [ 5127.832362][ T37] [] nmi_trigger_cpumask_backtrace+0x2b6/0x458 [ 5127.832670][ T37] [] arch_trigger_cpumask_backtrace+0x2c/0x3e [ 5127.833033][ T37] [] watchdog+0xcf2/0x11de [ 5127.833332][ T37] [] kthread+0x37e/0x7b6 [ 5127.833633][ T37] [] ret_from_fork+0xe/0x18 [ 5127.844594][ T37] Sending NMI from CPU 0 to CPUs 1: [ 5127.846254][ C1] NMI backtrace for cpu 1 [ 5127.846757][ C1] CPU: 1 UID: 0 PID: 9291 Comm: kworker/1:10 Not tainted 6.14.0-rc1-syzkaller-g245aece3750d #0 [ 5127.847252][ C1] Hardware name: riscv-virtio,qemu (DT) [ 5127.847490][ C1] Workqueue: wg-crypt-wg1 wg_packet_decrypt_worker [ 5127.848209][ C1] epc : _raw_spin_unlock_irqrestore+0x36/0xd4 [ 5127.848771][ C1] ra : _raw_spin_unlock_irqrestore+0x86/0xd4 [ 5127.849406][ C1] epc : ffffffff86266352 ra : ffffffff862663a2 sp : ffff8f8000017370 [ 5127.849754][ C1] gp : ffffffff89c1d3c0 tp : ffffaf801a3c1a40 t0 : 627a5db73d87dd3b [ 5127.850101][ C1] t1 : fffffffef21d0a5b t2 : 0000000000000000 s0 : ffff8f8000017390 [ 5127.850442][ C1] s1 : 0000000000000002 a0 : 0000000000000001 a1 : ffffffff86842140 [ 5127.850793][ C1] a2 : 0000000000000003 a3 : 0000000000000102 a4 : 0000000000000001 [ 5127.851128][ C1] a5 : 0000000000000000 a6 : ffffaf801a3c25b8 a7 : 1ffff5f0034784b7 [ 5127.851455][ C1] s2 : ffffffff90e852d8 s3 : ffff8f8000017440 s4 : 0000000000000056 [ 5127.851791][ C1] s5 : ffffffff90e852d8 s6 : ffffaf8043340000 s7 : 1ffff1f000002e74 [ 5127.852159][ C1] s8 : ffffffff90e852d0 s9 : ffffffff868589e0 s10: 0000000200000022 [ 5127.852492][ C1] s11: 1ffff5f0060bd99d t3 : ffffaf801a3c2570 t4 : fffffffef21d0a5b [ 5127.852819][ C1] t5 : fffffffef21d0a5c t6 : 0000000000000000 [ 5127.853381][ C1] status: 0000000200000120 badaddr: 0000000000000000 cause: 8000000000000001 [ 5127.853826][ C1] [] _raw_spin_unlock_irqrestore+0x36/0xd4 [ 5127.854511][ C1] [] debug_object_activate+0x25e/0x33e [ 5127.855124][ C1] [] __call_rcu_common.constprop.0+0x3c/0x9f8 [ 5127.855809][ C1] [] call_rcu+0xc/0x14 [ 5127.856412][ C1] [] kmem_cache_free+0x17c/0x63e [ 5127.856826][ C1] [] nf_conntrack_free+0x10c/0x4a4 [ 5127.857265][ C1] [] nf_ct_destroy+0x176/0x272 [ 5127.857667][ C1] [] nf_conntrack_in+0x710/0x1c3c [ 5127.858093][ C1] [] ipv4_conntrack_in+0x20/0x2e [ 5127.858552][ C1] [] nf_hook_slow+0xb8/0x1ec [ 5127.859007][ C1] [] ip_rcv+0x20e/0x44e [ 5127.859427][ C1] [] __netif_receive_skb_one_core+0x106/0x16e [ 5127.859880][ C1] [] __netif_receive_skb+0x2c/0x144 [ 5127.860309][ C1] [] process_backlog+0x4f6/0x1cb0 [ 5127.860723][ C1] [] __napi_poll.constprop.0+0xaa/0x4b8 [ 5127.861213][ C1] [] net_rx_action+0xa12/0xf10 [ 5127.861650][ C1] [] handle_softirqs+0x4b2/0x132e [ 5127.862095][ C1] [] __do_softirq+0x12/0x1a [ 5127.862646][ C1] [] ___do_softirq+0x18/0x20 [ 5127.863050][ C1] [] call_on_irq_stack+0x32/0x40 [ 5128.112594][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 5128.114077][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.14.0-rc1-syzkaller-g245aece3750d #0 [ 5128.114954][ T37] Hardware name: riscv-virtio,qemu (DT) [ 5128.115536][ T37] Call Trace: [ 5128.116057][ T37] [] dump_backtrace+0x2e/0x3c [ 5128.116951][ T37] [] show_stack+0x30/0x3c [ 5128.117762][ T37] [] dump_stack_lvl+0x110/0x1a6 [ 5128.118777][ T37] [] dump_stack+0x1c/0x24 [ 5128.119678][ T37] [] panic+0x38c/0x86a [ 5128.120441][ T37] [] watchdog+0x78a/0x11de [ 5128.121539][ T37] [] kthread+0x37e/0x7b6 [ 5128.122410][ T37] [] ret_from_fork+0xe/0x18 [ 5128.123557][ T37] SMP: stopping secondary CPUs [ 5128.126024][ T37] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:38:06 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff8099a586 mhartid 0000000000000000 mstatus 0000000a000000a2 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff86268630 vstvec 0000000000000000 mepc ffffffff802c28f0 sepc ffffffff86266352 vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 000000008004a000 sscratch 0000000000000000 satp 900660000009cc14 x0/zero 0000000000000000 x1/ra ffffffff80073df6 x2/sp ffff8f80001a6040 x3/gp ffffffff89c1d3c0 x4/tp ffffaf80132b8000 x5/t0 ffff8f80001a63a0 x6/t1 000000000000000c x7/t2 000000000000001b x8/s0 ffff8f80001a6050 x9/s1 ffff8f80001a6b60 x10/a0 0000000000000000 x11/a1 0000000000000000 x12/a2 0000000000f00000 x13/a3 ffffffff80073e0a x14/a4 0000000000000000 x15/a5 ffffaf80132b8000 x16/a6 0000000000f00000 x17/a7 ffffffff89d24940 x18/s2 ffff8f80001a6be0 x19/s3 0000000000000012 x20/s4 0000000000000000 x21/s5 dfffffff00000000 x22/s6 ffffffff855d88aa x23/s7 ffff8f80001a6bf0 x24/s8 dfffffff00000000 x25/s9 0000000000007fff x26/s10 ffffffff86268630 x27/s11 0000000000000007 x28/t3 ffffaf80132b8b30 x29/t4 1ffff5f002657165 x30/t5 1ffff5f00265717e x31/t6 000000000000000a fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff802c4152 mhartid 0000000000000001 mstatus 0000000a000000a2 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff86268630 vstvec 0000000000000000 mepc ffffffff80088636 sepc ffffffff80159166 vsepc 0000000000000000 mcause 0000000000000009 scause 8000000000000009 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080048000 sscratch 0000000000000000 satp 90a7d000000b1be4 x0/zero 0000000000000000 x1/ra ffffffff81c8a40e x2/sp ffff8f8000007590 x3/gp ffffffff89c1d3c0 x4/tp ffffaf80156db480 x5/t0 17c99eb3b9d1cd1b x6/t1 fffff1ef00000f0c x7/t2 0000000000000498 x8/s0 ffff8f80000076d0 x9/s1 ffff8f8000007878 x10/a0 0000000000000000 x11/a1 0000000000000003 x12/a2 0000000000000000 x13/a3 ffffffff831dee10 x14/a4 0000000000000001 x15/a5 0000000000000036 x16/a6 0000000000f00000 x17/a7 0000000000000003 x18/s2 0000000000000001 x19/s3 ffffffff831dee72 x20/s4 ffff8f8000007780 x21/s5 ffffaf801b7f8000 x22/s6 fffff5ef036ff000 x23/s7 ffffaf80123ab800 x24/s8 fffff1ef00000f0f x25/s9 0000000000000000 x26/s10 0000000000000001 x27/s11 ffff8f8000007888 x28/t3 ffffaf80156dbfb0 x29/t4 fffff5ef0370febc x30/t5 fffff5ef0370febd x31/t6 000000000000000b fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000