last executing test programs: 2m48.257019109s ago: executing program 1 (id=3084): r0 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000280)={0x7ff, 0xd, 0x2, "134607cea4fcbc704c17bc74772190f5070001ebfffdbffffee793000000a000", 0x3247504d}) 2m48.143669057s ago: executing program 1 (id=3085): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010003b0cffffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="04b1050000000000280012800b00010065727370616e00001800028004001200080015004b340510"], 0x48}}, 0x0) 2m47.857843823s ago: executing program 1 (id=3093): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x34) 2m47.571882731s ago: executing program 1 (id=3095): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)={0x10, 0x3c, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}, {&(0x7f0000000140)={0x10, 0x1000, 0x200, 0x70bd25, 0x25dfdbfb}, 0x10}], 0x2, 0x0, 0x0, 0x4000000}, 0x4048014) 2m47.368329802s ago: executing program 1 (id=3097): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xb5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) 2m47.281765298s ago: executing program 1 (id=3098): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005a40)={0x0, 0x0, &(0x7f0000005a00)={&(0x7f0000005940)=ANY=[@ANYBLOB="14000000260001002b678d82ffdbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4000881}, 0x10) 2m32.898473622s ago: executing program 32 (id=3098): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005a40)={0x0, 0x0, &(0x7f0000005a00)={&(0x7f0000005940)=ANY=[@ANYBLOB="14000000260001002b678d82ffdbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4000881}, 0x10) 2m26.3355645s ago: executing program 0 (id=3494): syz_emit_ethernet(0x2a, &(0x7f00000008c0)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000003c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x4, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e60, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9, 0x100}}}}}}}, 0x0) 2m26.103095063s ago: executing program 0 (id=3496): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2, &(0x7f0000000100)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f000009b000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 2m25.886093995s ago: executing program 0 (id=3498): unshare(0x28000600) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) 2m25.813516309s ago: executing program 0 (id=3500): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891f, &(0x7f0000000040)={'sit0\x00', 0x0}) 2m25.695651001s ago: executing program 0 (id=3502): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38) 2m25.509836357s ago: executing program 0 (id=3505): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m11.157189405s ago: executing program 33 (id=3505): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 45.404793242s ago: executing program 3 (id=5311): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000000)=0x1, 0x1) 44.982426217s ago: executing program 3 (id=5315): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0c00040000004000280012800b000100627269646765000018000280090014"], 0x48}}, 0x4040) 44.156460887s ago: executing program 3 (id=5323): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 43.974034755s ago: executing program 3 (id=5327): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x8, 0x14, 0x0, 0x70bd2c, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @in=@multicast2, @in=@broadcast}}, @sadb_address={0x5, 0x5, 0x32, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x8}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}]}, 0xa0}}, 0x114) 43.719779311s ago: executing program 3 (id=5332): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 43.433245853s ago: executing program 3 (id=5337): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)={0x14, 0x26, 0x1, 0x70bd29, 0x25dfdbfb, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xc040) 43.016956778s ago: executing program 4 (id=5346): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r0, 0xffffc000) 42.920434747s ago: executing program 4 (id=5349): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f0000001b00)=[{0xfff, 0x0, 0x6}], 0x1, 0x0, 0x0, 0x1) 42.726595701s ago: executing program 4 (id=5352): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000180)=[{0x2, 0x1, {0x0, 0x1, 0x1}, {0x2, 0xf0, 0x4}, 0x0, 0x1}, {0x2, 0x2, {0x0, 0xff, 0x2}, {0x1, 0x1, 0x1}, 0x1}], 0x40) 42.47179034s ago: executing program 4 (id=5356): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xcb, 0x0, 0x0) 42.333727609s ago: executing program 4 (id=5359): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x30, 0x4a, 0x3, 0x2000, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44090}, 0x900) 42.132939161s ago: executing program 4 (id=5362): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e80)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x3}}, 0x14}, 0x1, 0xffffffff, 0x0, 0x1}, 0x0) 29.080941163s ago: executing program 34 (id=5337): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)={0x14, 0x26, 0x1, 0x70bd29, 0x25dfdbfb, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xc040) 27.743118275s ago: executing program 35 (id=5362): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e80)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x3}}, 0x14}, 0x1, 0xffffffff, 0x0, 0x1}, 0x0) 3.776384922s ago: executing program 8 (id=5957): r0 = syz_clone3(&(0x7f0000000100)={0x901400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) waitid(0x2, r0, 0x0, 0x2, 0x0) 3.466311957s ago: executing program 8 (id=5962): r0 = syz_open_dev$vim2m(&(0x7f0000005680), 0x7d, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xc, 0x1, 0x0, "268100ba7af9819e79b058d9f2a15b8c4800000000010011000000000200", 0x32314d56}) 3.269154535s ago: executing program 8 (id=5967): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) 2.572787192s ago: executing program 5 (id=5979): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="05000000010000000b00000002"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x50) 2.395397468s ago: executing program 5 (id=5980): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth1\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x5, 0x9, 0x10, 0x40, 0x3, 0x8, 0xfffffeff, 0x2174]}}) 1.898655509s ago: executing program 5 (id=5988): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfb, 0x60, 0x6, 0xe, 0x0, 0xcac0, 0xb}}}, 0x0) 1.869943745s ago: executing program 8 (id=5989): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x68241) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0x8000000000000000, 0x3, 0x3, @scatter={0x0, 0xfeffffff, 0x0}, &(0x7f0000000240)="5db1ca", 0x0, 0x80000001, 0x1, 0xffffffffffffffff, 0x0}) 1.684720171s ago: executing program 8 (id=5993): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) 1.655837587s ago: executing program 7 (id=5994): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.457850224s ago: executing program 7 (id=5998): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r0, 0xffffffffffffffff, 0x16, 0x0, @val=@tracing={0x0, 0x4}}, 0x20) 1.417598935s ago: executing program 8 (id=5999): r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005242000000d240f0100000000000000000009058103200000000009058202080080000009050302"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.279886717s ago: executing program 7 (id=6000): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000180)=@generic={0x0, 0x2, 0xfffffffffffffffe}) 1.260373278s ago: executing program 2 (id=6001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8}]}]}, 0x28}}, 0x0) 1.1648192s ago: executing program 7 (id=6002): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, 0x0) 1.039834282s ago: executing program 2 (id=6004): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000050017000100000006001800"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x4000880) 1.014073046s ago: executing program 6 (id=6005): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f0832f9e0ff008001fffffe1ffff8100632f0806", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 954.244173ms ago: executing program 7 (id=6006): r0 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) pwrite64(r0, 0x0, 0x0, 0x2) 860.603346ms ago: executing program 6 (id=6007): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]}) 807.325115ms ago: executing program 2 (id=6008): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@d, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 788.348254ms ago: executing program 7 (id=6009): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 593.272226ms ago: executing program 6 (id=6010): r0 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '}) 257.60814ms ago: executing program 2 (id=6015): r0 = memfd_create(&(0x7f0000000200)='\x18P\xe8\x9b\x1c0\xfep<{@\x8dMt\xca\"\xa7\x1c\xf1\xf9\xe7\xf8\xbc\xc3\xa9\xf5\xd6\x0f\xd90\xf72\x93\xf9\x0fI04\xae;\xf0\x8ej\x04\x01\xd0d\xf6\x10<\x8fk3\t\xa73\xfb\xbb,\xb1\xcf\xee\xff\xff\xff\xff\xff\xff\xff\xff\xfc,\x10\xd8\xad\x01\x03\x8c\xbb\x94\xa0fn\r7v\xfb\x01\xc9j\x80\xdb\xa1+L\xcdR\x96\x1a\xc1\xab*1?n\xa5\xfaS\xba\x9fh\xb5\xe0d5\xd3\xf2\x88\xf5\xd7\xd8\xd4\xf4\x93\xf3qN\xe1f\x12\xaav\xe9w\xe5k[sMtb*\xbe\xa9\xac\xa6\xdd\xb6\x97\x0f\xdb\xec)\xf2d?\f\x05\xb5/\xe8{\xac>\xc3)M\xbc\x19\xa0\xd1Q\xfd\xa9\xb8/\x7f\x952\xea\x98@u\x84\xdd\xa9\xf7\xbc\x96\x19\xceB\r\xf0L\xda\xe2\xa5\x91\xfe&|\x81]\x80~Z/[\x99\xe6\x8b\xb8W\xa1\x88)7\x9a\b#\xfd\xd8\x9fAN\xd4\xeb\x19\xdcCH\xd7U\"c\xe2\xc3\xe6', 0x0) fcntl$getflags(r0, 0x40a) 163.076721ms ago: executing program 6 (id=6016): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, 0x0) 151.15304ms ago: executing program 2 (id=6017): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@mcast2, 0x800, 0x0, 0x0, 0x2, 0x20}, 0x20) 74.753967ms ago: executing program 5 (id=6018): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@setlink={0x50, 0x13, 0x1, 0x70bd28, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x20, 0x4}, [@IFLA_GROUP={0x8, 0x1b, 0x9}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x7e, 0xf71}}]}]}]}, 0x50}}, 0x0) 0s ago: executing program 5 (id=6019): r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029300030100000009040000000101"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x807}}}, 0x0) kernel console output (not intermixed with test programs): t: syz [ 405.186782][ T5941] usb 6-1: Manufacturer: syz [ 405.186799][ T5941] usb 6-1: SerialNumber: syz [ 405.218886][T13987] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 405.222064][T13987] block device autoloading is deprecated and will be removed. [ 405.248507][ T5941] usb 6-1: config 0 descriptor?? [ 405.271164][ T5941] usb 6-1: bad CDC descriptors [ 405.272753][ T5941] usb 6-1: unsupported MDLM descriptors [ 405.461196][ T5941] usb 6-1: USB disconnect, device number 2 [ 405.578532][T13829] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 405.618405][T13829] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 405.663630][T13829] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 405.703838][T13829] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 405.762008][ T1232] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 405.931045][ T37] audit: type=1326 audit(2000000928.306:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14024 comm="syz.4.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0483e9c799 code=0x7ffc0000 [ 405.932670][ T37] audit: type=1326 audit(2000000928.306:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14024 comm="syz.4.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0483e9c799 code=0x7ffc0000 [ 405.934316][ T1232] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 405.934402][ T1232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.996638][ T37] audit: type=1326 audit(2000000928.379:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14024 comm="syz.4.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0483e9c799 code=0x7ffc0000 [ 405.996697][ T37] audit: type=1326 audit(2000000928.379:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14024 comm="syz.4.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f0483e9c799 code=0x7ffc0000 [ 405.996769][ T37] audit: type=1326 audit(2000000928.379:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14024 comm="syz.4.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0483e9c799 code=0x7ffc0000 [ 406.000383][ T37] audit: type=1326 audit(2000000928.379:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14024 comm="syz.4.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0483e9c799 code=0x7ffc0000 [ 406.000440][ T37] audit: type=1326 audit(2000000928.379:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14024 comm="syz.4.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0483e9c799 code=0x7ffc0000 [ 406.000487][ T37] audit: type=1326 audit(2000000928.379:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14024 comm="syz.4.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0483e9c799 code=0x7ffc0000 [ 406.000534][ T37] audit: type=1326 audit(2000000928.379:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14024 comm="syz.4.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0483e9c799 code=0x7ffc0000 [ 406.007400][ T1232] usb 4-1: config 0 descriptor?? [ 406.166051][ T1232] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 406.319433][T13829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.496301][T13829] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.596044][ T1232] gp8psk: usb in 128 operation failed. [ 406.596470][ T1232] gp8psk: usb in 137 operation failed. [ 406.596600][ T1232] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 406.596669][ T1232] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 406.603435][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.611740][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.658592][ T1232] usb 4-1: USB disconnect, device number 78 [ 406.711983][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.712145][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.829411][ T5805] Bluetooth: hci6: command tx timeout [ 407.300357][T13829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.508093][T14069] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3875'. [ 407.710351][T14076] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 407.710376][T14076] CIFS mount error: No usable UNC path provided in device string! [ 407.710376][T14076] [ 407.710555][T14076] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 408.207629][T14096] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3887'. [ 408.354463][T13829] veth0_vlan: entered promiscuous mode [ 408.373566][T13829] veth1_vlan: entered promiscuous mode [ 408.524030][ T1232] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 408.584696][T13829] veth0_macvtap: entered promiscuous mode [ 408.596565][T13829] veth1_macvtap: entered promiscuous mode [ 408.679322][ T1232] usb 4-1: unable to get BOS descriptor or descriptor too short [ 408.689779][ T1232] usb 4-1: not running at top speed; connect to a high speed hub [ 408.703295][T14112] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.707935][ T1232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 408.707978][ T1232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 408.708004][ T1232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 64 [ 408.708035][ T1232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 408.708061][ T1232] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6E, changing to 0xE [ 408.708089][ T1232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 105, changing to 4 [ 408.708119][ T1232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 12148, setting to 1023 [ 408.711419][ T1232] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 408.711454][ T1232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.711478][ T1232] usb 4-1: Product: syz [ 408.711495][ T1232] usb 4-1: Manufacturer: syz [ 408.711513][ T1232] usb 4-1: SerialNumber: syz [ 408.810204][ T5805] Bluetooth: hci6: command tx timeout [ 408.810578][ T1232] usb 4-1: config 0 descriptor?? [ 408.840735][T14093] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 408.872693][ T1232] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 408.885493][T13829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.914928][ T10] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 408.938485][T13829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.012301][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.018000][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.043045][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.043502][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.076531][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 409.079039][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.105335][ T10] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 409.105368][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.105390][ T10] usb 3-1: Product: syz [ 409.105405][ T10] usb 3-1: Manufacturer: syz [ 409.105420][ T10] usb 3-1: SerialNumber: syz [ 409.152389][ T10] usb 3-1: config 0 descriptor?? [ 409.182610][ T10] hub 3-1:0.0: bad descriptor, ignoring hub [ 409.182653][ T10] hub 3-1:0.0: probe with driver hub failed with error -5 [ 409.444005][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 409.573585][ T1232] usb 4-1: USB disconnect, device number 79 [ 409.575385][ T37] audit: type=1326 audit(2000000932.138:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14121 comm="syz.5.3901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 409.671519][ T6462] udevd[6462]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.853448][ T10] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 410.000678][ T10] usb 3-1: USB disconnect, device number 73 [ 410.073152][ T5956] udevd[5956]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 410.086624][ T1075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.086648][ T1075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.301481][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.301507][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.486307][ T1232] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 410.631414][ T1232] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 410.631454][ T1232] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 410.631495][ T1232] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 410.631521][ T1232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.700698][T14139] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 410.718708][ T1232] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 410.855561][T14159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3917'. [ 411.039013][T14162] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3920'. [ 411.039041][T14162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3920'. [ 411.514040][ T5902] usb 5-1: USB disconnect, device number 86 [ 412.171938][ T5883] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 412.172155][ T5902] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 412.322959][ T5902] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 412.323021][ T5902] usb 4-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 412.323054][ T5902] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 412.323334][ T5883] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 412.323362][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.361258][ T5902] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 412.361295][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 412.361319][ T5902] usb 4-1: SerialNumber: syz [ 412.525101][ T5883] usb 7-1: config 0 descriptor?? [ 412.740882][ T5902] rndis_host 4-1:253.0: RNDIS init failed, -71 [ 412.741363][ T5902] rndis_host 4-1:253.0: probe with driver rndis_host failed with error -71 [ 412.769307][ T5883] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 412.769795][ T5883] [drm:udl_init] *ERROR* Selecting channel failed [ 412.820692][ T5902] usb 4-1: USB disconnect, device number 80 [ 412.876265][ T5883] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 412.876294][ T5883] [drm] Initialized udl on minor 2 [ 412.911531][ T5883] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 412.934254][ T5883] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 412.961675][ T5883] usb 7-1: USB disconnect, device number 2 [ 412.970807][ T810] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 412.990377][ T810] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 413.187855][T14224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.229917][T14227] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3951'. [ 413.230215][T14227] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3951'. [ 413.466091][T14237] tc_dump_action: action bad kind [ 413.651171][T14248] netlink: 'syz.4.3961': attribute type 2 has an invalid length. [ 413.724860][ T810] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 413.790548][T14252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 413.790569][T14252] IPv6: NLM_F_CREATE should be set when creating new route [ 413.790623][T14252] IPv6: NLM_F_CREATE should be set when creating new route [ 413.872225][ T810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 413.872259][ T810] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 413.872288][ T810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 413.872313][ T810] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 413.872356][ T810] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 413.872383][ T810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.969630][ T810] usb 4-1: config 0 descriptor?? [ 414.187445][ T810] hdpvr 4-1:0.0: firmware version 0xf6 dated U-** [ 414.187493][ T810] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 414.219871][ T5862] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 414.391873][ T810] hdpvr 4-1:0.0: device init failed [ 414.391922][ T5862] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.392115][ T810] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 414.394935][ T5862] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 414.394969][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.394993][ T5862] usb 3-1: Product: syz [ 414.395009][ T5862] usb 3-1: Manufacturer: syz [ 414.395026][ T5862] usb 3-1: SerialNumber: syz [ 414.477648][ T810] usb 4-1: USB disconnect, device number 81 [ 414.730055][ T5862] usb 3-1: unit 8 not found! [ 414.730084][ T5862] usb 3-1: unit 6 not found! [ 414.897223][ T5862] usb 3-1: USB disconnect, device number 74 [ 415.060622][ T5956] udevd[5956]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 415.124063][T14281] netlink: 'syz.6.3976': attribute type 1 has an invalid length. [ 415.124092][T14281] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3976'. [ 415.777403][T14307] comedi: No check for data length of config insn id 4 is implemented [ 415.777423][T14307] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 415.777439][T14307] comedi: Assuming n=15 is correct [ 416.119601][T14323] kAFS: unparsable volume name [ 416.296057][ T5862] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 416.454717][ T5862] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.454764][ T5862] usb 7-1: config 0 interface 0 has no altsetting 0 [ 416.457867][ T5862] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 416.457984][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.458060][ T5862] usb 7-1: Product: syz [ 416.458113][ T5862] usb 7-1: Manufacturer: syz [ 416.458128][ T5862] usb 7-1: SerialNumber: syz [ 416.468618][T14342] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4006'. [ 416.468844][T14342] IPv6: Can't replace route, no match found [ 416.526459][ T5862] usb 7-1: config 0 descriptor?? [ 416.557752][ T5862] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 416.587768][ T5862] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 416.603440][ T5862] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 416.603577][ T5862] usb 7-1: media controller created [ 416.706051][ T5862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 416.817576][T14357] netlink: 276 bytes leftover after parsing attributes in process `syz.3.4012'. [ 416.883916][ T5862] DVB: Unable to find symbol tda10046_attach() [ 416.883931][ T5862] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 416.884028][ T5862] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 417.076526][ T5862] dvb_usb_m920x 7-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 417.125224][ T5862] usb 7-1: USB disconnect, device number 3 [ 417.471773][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4022'. [ 417.471811][T14377] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4022'. [ 417.632931][T14386] openvswitch: netlink: IP tunnel dst address not specified [ 417.686611][ T5902] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 417.840781][T14391] netlink: 'syz.6.4028': attribute type 7 has an invalid length. [ 417.842849][ T5902] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 417.842876][ T5902] usb 3-1: config 0 has no interface number 0 [ 417.842923][ T5902] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 417.842950][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.893995][ T5902] usb 3-1: config 0 descriptor?? [ 417.920392][ T5902] usb 3-1: selecting invalid altsetting 1 [ 417.934357][ T5902] dvb_ttusb_budget: ttusb_init_controller: error [ 417.934383][ T5902] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 418.054037][T14391] : entered promiscuous mode [ 418.256845][ T5902] DVB: Unable to find symbol cx22700_attach() [ 418.425936][ T5902] DVB: Unable to find symbol tda10046_attach() [ 418.425955][ T5902] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 418.447444][ T5902] usb 3-1: USB disconnect, device number 75 [ 418.741967][T14419] lo: entered promiscuous mode [ 418.752016][T14420] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 418.782068][ T5882] lo speed is unknown, defaulting to 1000 [ 418.782161][ T5882] syz0: Port: 1 Link DOWN [ 418.782721][ T5882] lo speed is unknown, defaulting to 1000 [ 419.335040][T14448] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4055'. [ 419.418323][T14452] netlink: zone id is out of range [ 419.418346][T14452] netlink: zone id is out of range [ 419.418358][T14452] netlink: zone id is out of range [ 419.419041][T14452] netlink: del zone limit has 8 unknown bytes [ 419.443646][T14453] netlink: 'syz.5.4059': attribute type 10 has an invalid length. [ 419.511180][T14458] netlink: 'syz.3.4062': attribute type 1 has an invalid length. [ 419.704793][T14467] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4066'. [ 419.705059][T14467] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4066'. [ 419.705080][T14467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4066'. [ 420.059039][T14485] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.404076][T14502] xfrm0: entered promiscuous mode [ 420.404108][T14502] xfrm0: entered allmulticast mode [ 420.570507][T14506] bond1: option fail_over_mac: invalid value (127) [ 420.733442][T14506] bond1 (unregistering): Released all slaves [ 421.863728][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 421.863759][ T37] audit: type=1326 audit(2000000945.031:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14564 comm="syz.5.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 421.863812][ T37] audit: type=1326 audit(2000000945.041:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14564 comm="syz.5.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 421.927009][ T37] audit: type=1326 audit(2000000945.104:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14564 comm="syz.5.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 421.927072][ T37] audit: type=1326 audit(2000000945.104:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14564 comm="syz.5.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 422.000601][T14567] binfmt_misc: register: failed to install interpreter file ./file0 [ 422.059347][ T5862] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 422.222432][ T5862] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 422.222467][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.228379][ T5862] usb 4-1: config 0 descriptor?? [ 422.445807][ T5862] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 422.446288][ T5862] [drm:udl_init] *ERROR* Selecting channel failed [ 422.537610][ T5862] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 422.537641][ T5862] [drm] Initialized udl on minor 2 [ 422.573281][ T5862] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 422.573992][ T5862] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 422.586612][ T5882] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 422.670033][ T5862] usb 4-1: USB disconnect, device number 82 [ 422.695746][ T5882] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 422.695986][ T5882] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 422.697102][T14590] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4126'. [ 423.128300][T14609] netlink: 'syz.4.4137': attribute type 8 has an invalid length. [ 423.338785][ T37] audit: type=1326 audit(2000000946.585:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14616 comm="syz.2.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374adc799 code=0x7ffc0000 [ 423.338846][ T37] audit: type=1326 audit(2000000946.585:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14616 comm="syz.2.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374adc799 code=0x7ffc0000 [ 423.392556][ T37] audit: type=1326 audit(2000000946.585:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14616 comm="syz.2.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374adc799 code=0x7ffc0000 [ 423.392620][ T37] audit: type=1326 audit(2000000946.637:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14616 comm="syz.2.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f6374adc799 code=0x7ffc0000 [ 423.392668][ T37] audit: type=1326 audit(2000000946.648:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14616 comm="syz.2.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374adc799 code=0x7ffc0000 [ 423.395619][ T37] audit: type=1326 audit(2000000946.648:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14616 comm="syz.2.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374adc799 code=0x7ffc0000 [ 423.732045][T14634] netlink: 'syz.2.4147': attribute type 10 has an invalid length. [ 423.808970][T14634] veth0_to_bond: entered allmulticast mode [ 423.810404][T14634] team0: Port device veth0_to_bond added [ 424.052730][T14650] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 425.106649][ T5902] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 425.250375][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 425.253060][ T5902] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 425.253096][ T5902] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 425.253125][ T5902] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0xF has invalid wMaxPacketSize 0 [ 425.253151][ T5902] usb 3-1: config 0 interface 0 has no altsetting 0 [ 425.263324][ T5902] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 425.263361][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.263385][ T5902] usb 3-1: Product: syz [ 425.263402][ T5902] usb 3-1: Manufacturer: syz [ 425.263419][ T5902] usb 3-1: SerialNumber: syz [ 425.342118][ T5902] usb 3-1: config 0 descriptor?? [ 425.465339][T14711] bond2: option fail_over_mac: invalid value (127) [ 425.545419][T14711] bond2 (unregistering): Released all slaves [ 425.742512][ T5882] usb 3-1: USB disconnect, device number 76 [ 425.792390][ T5862] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 425.921832][T14731] netlink: 'syz.4.4195': attribute type 2 has an invalid length. [ 425.944631][ T5862] usb 6-1: Using ep0 maxpacket: 8 [ 425.968530][ T5862] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 425.968565][ T5862] usb 6-1: config 179 has no interface number 0 [ 425.968625][ T5862] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 425.968656][ T5862] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 425.968688][ T5862] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 425.968718][ T5862] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 425.968744][ T5862] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 425.968776][ T5862] usb 6-1: config 179 interface 65 has no altsetting 0 [ 425.968813][ T5862] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 425.968838][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.273050][ T5862] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input25 [ 426.413438][ T5862] usb 6-1: USB disconnect, device number 3 [ 426.545540][T14750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4203'. [ 426.788752][T14757] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 427.291911][T14777] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 427.495632][T14791] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4222'. [ 427.495675][T14791] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4222'. [ 427.545100][T14794] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4225'. [ 427.645521][T14796] cgroup: Unexpected value for 'nofavordynmods' [ 428.045376][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 428.045399][ T37] audit: type=1326 audit(2000000951.530:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14817 comm="syz.6.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 428.046712][ T37] audit: type=1326 audit(2000000951.530:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14817 comm="syz.6.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 428.103635][ T37] audit: type=1326 audit(2000000951.530:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14817 comm="syz.6.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 428.103975][ T37] audit: type=1326 audit(2000000951.593:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14817 comm="syz.6.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 428.104373][ T37] audit: type=1326 audit(2000000951.593:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14817 comm="syz.6.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 428.104651][ T37] audit: type=1326 audit(2000000951.593:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14817 comm="syz.6.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 428.104978][ T37] audit: type=1326 audit(2000000951.593:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14817 comm="syz.6.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 428.105986][ T37] audit: type=1326 audit(2000000951.593:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14817 comm="syz.6.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 428.106271][ T37] audit: type=1326 audit(2000000951.593:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14817 comm="syz.6.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 428.735456][T14846] netlink: 'syz.5.4250': attribute type 13 has an invalid length. [ 429.601530][T14878] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4265'. [ 429.601565][T14878] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4265'. [ 429.601601][T14878] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4265'. [ 429.701121][T14882] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4269'. [ 430.258181][T14907] netlink: 'syz.3.4279': attribute type 1 has an invalid length. [ 430.440051][T14912] bond1: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 430.440091][T14912] bond1: peer notification delay (280) is not a multiple of miimon (100), value rounded to 200 ms [ 430.479020][T14912] bond1: entered allmulticast mode [ 430.491380][T14912] 8021q: adding VLAN 0 to HW filter on device bond1 [ 432.019601][T14987] netlink: 798 bytes leftover after parsing attributes in process `syz.4.4320'. [ 432.158475][T14995] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4323'. [ 432.234442][ T37] audit: type=1326 audit(2000000955.929:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14997 comm="syz.3.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34874fc799 code=0x7ffc0000 [ 432.303159][T15001] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4324'. [ 432.303188][T15001] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4324'. [ 432.303206][T15001] netlink: 'syz.4.4324': attribute type 6 has an invalid length. [ 432.303222][T15001] netlink: 'syz.4.4324': attribute type 5 has an invalid length. [ 432.303237][T15001] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4324'. [ 432.555377][T15007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.559492][T15007] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 432.576090][T15007] bond0: (slave sit0): Error -95 calling set_mac_address [ 432.859597][T15025] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4334'. [ 433.567959][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 433.567980][ T37] audit: type=1326 audit(2000000957.325:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15054 comm="syz.3.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34874fc799 code=0x7ffc0000 [ 433.568291][ T37] audit: type=1326 audit(2000000957.325:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15054 comm="syz.3.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34874fc799 code=0x7ffc0000 [ 433.633390][ T37] audit: type=1326 audit(2000000957.325:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15054 comm="syz.3.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f34874fc799 code=0x7ffc0000 [ 433.633708][ T37] audit: type=1326 audit(2000000957.399:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15054 comm="syz.3.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34874fc799 code=0x7ffc0000 [ 433.634122][ T37] audit: type=1326 audit(2000000957.399:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15054 comm="syz.3.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34874fc799 code=0x7ffc0000 [ 434.053656][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.664977][T15099] Process accounting resumed [ 434.777154][T15110] netlink: 'syz.2.4367': attribute type 3 has an invalid length. [ 434.872318][T15117] binder: 15116:15117 ioctl c0306201 200000000c80 returned -14 [ 435.326252][ T5862] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 435.482092][ T5862] usb 4-1: unable to get BOS descriptor or descriptor too short [ 435.482848][ T5862] usb 4-1: not running at top speed; connect to a high speed hub [ 435.484617][ T5862] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.484644][ T5862] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 435.487052][ T5862] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 435.487084][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.487106][ T5862] usb 4-1: Product: syz [ 435.487123][ T5862] usb 4-1: Manufacturer: syz [ 435.487138][ T5862] usb 4-1: SerialNumber: syz [ 435.768827][T15150] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 436.040428][ T5902] usb 4-1: USB disconnect, device number 83 [ 436.597052][T15179] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4396'. [ 437.807721][T15236] MTD: Couldn't look up './file0': -15 [ 437.974825][ T37] audit: type=1326 audit(2000000961.955:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15242 comm="syz.6.4425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 437.974883][ T37] audit: type=1326 audit(2000000961.955:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15242 comm="syz.6.4425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 437.975273][ T37] audit: type=1326 audit(2000000961.955:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15242 comm="syz.6.4425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 437.984513][ T37] audit: type=1326 audit(2000000961.966:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15242 comm="syz.6.4425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 437.984826][ T37] audit: type=1326 audit(2000000961.966:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15242 comm="syz.6.4425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 437.989757][T15246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4426'. [ 438.429846][T15262] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4435'. [ 438.429874][T15262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4435'. [ 438.429930][T15262] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4435'. [ 438.449232][T15263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4434'. [ 438.963869][T15291] trusted_key: encrypted_key: master key parameter '' is invalid [ 438.983688][ T5941] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 439.126912][ T5941] usb 5-1: Using ep0 maxpacket: 16 [ 439.129995][ T5941] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 439.144122][ T5941] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 439.144245][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.144301][ T5941] usb 5-1: Product: syz [ 439.144344][ T5941] usb 5-1: Manufacturer: syz [ 439.144389][ T5941] usb 5-1: SerialNumber: syz [ 439.195911][ T5941] r8152-cfgselector 5-1: Unknown version 0x0000 [ 439.195943][ T5941] r8152-cfgselector 5-1: config 0 descriptor?? [ 439.307279][ T5902] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 439.467388][T15305] netlink: 'syz.2.4455': attribute type 1 has an invalid length. [ 439.478240][ T5902] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 439.478272][ T5902] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 439.478297][ T5902] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 439.478320][ T5902] usb 6-1: config 1 has no interface number 0 [ 439.478367][ T5902] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 439.478391][ T5902] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 439.478438][ T5902] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 439.478462][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.598251][ T5902] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 439.626880][ T810] r8152-cfgselector 5-1: USB disconnect, device number 87 [ 439.789203][ T5902] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values [ 439.799442][ T5902] snd_usb_pod 6-1:1.1: invalid control EP [ 439.799515][ T5902] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 439.800290][ T5902] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 439.801828][ T5902] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 440.013813][ T810] usb 6-1: USB disconnect, device number 4 [ 440.292799][T15334] netlink: 'syz.2.4470': attribute type 7 has an invalid length. [ 440.330386][T15330] bond1 (unregistering): Released all slaves [ 440.457951][T15341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4473'. [ 441.273936][T15382] netlink: 876 bytes leftover after parsing attributes in process `syz.3.4492'. [ 441.659954][ T5902] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 441.803134][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 441.807219][ T5902] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 441.807252][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.841827][ T5902] usb 3-1: config 0 descriptor?? [ 441.861088][ T5902] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 442.055875][ T5902] usb 3-1: Detected FT232B [ 442.249967][ T5902] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 442.251142][ T5902] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 442.268818][ T5902] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 442.298784][ T5902] usb 3-1: USB disconnect, device number 77 [ 442.306677][ T5902] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 442.307424][ T5902] ftdi_sio 3-1:0.0: device disconnected [ 442.382871][T15426] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4513'. [ 442.937843][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 442.937865][ T37] audit: type=1326 audit(2000000967.173:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15444 comm="syz.2.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374adc799 code=0x7ffc0000 [ 442.937917][ T37] audit: type=1326 audit(2000000967.173:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15444 comm="syz.2.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374adc799 code=0x7ffc0000 [ 443.016002][ T37] audit: type=1326 audit(2000000967.247:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15444 comm="syz.2.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f6374adc799 code=0x7ffc0000 [ 443.016069][ T37] audit: type=1326 audit(2000000967.247:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15444 comm="syz.2.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374adc799 code=0x7ffc0000 [ 443.016118][ T37] audit: type=1326 audit(2000000967.247:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15444 comm="syz.2.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374adc799 code=0x7ffc0000 [ 443.139224][T15447] binder: 15446:15447 ioctl 40046205 0 returned -22 [ 443.169369][T15449] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4524'. [ 443.348927][T15457] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4529'. [ 443.627825][T15467] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 443.729993][T15473] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4537'. [ 443.746692][T15475] netlink: 'syz.3.4539': attribute type 2 has an invalid length. [ 444.291264][ T5882] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 444.374914][T15507] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 444.443722][ T5882] usb 5-1: Using ep0 maxpacket: 8 [ 444.445609][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 444.445647][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 444.445672][ T5882] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 444.445697][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 444.445726][ T5882] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 444.445768][ T5882] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 444.445794][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.458432][ T5882] usb 5-1: config 0 descriptor?? [ 444.527449][T15488] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 445.021104][ T810] usb 5-1: USB disconnect, device number 88 [ 445.021151][ T5805] Bluetooth: hci7: Opcode 0x0c03 failed: -71 [ 445.263722][T15540] netlink: 'syz.5.4568': attribute type 11 has an invalid length. [ 445.674837][T15551] bond0 (unregistering): Released all slaves [ 446.527399][T15601] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4598'. [ 446.875220][T15611] random: crng reseeded on system resumption [ 447.204422][T15619] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 448.143532][T15662] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4626'. [ 448.143562][T15662] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 449.198438][T15709] netlink: zone id is out of range [ 449.198455][T15709] netlink: zone id is out of range [ 449.198466][T15709] netlink: zone id is out of range [ 449.198476][T15709] netlink: zone id is out of range [ 449.198486][T15709] netlink: zone id is out of range [ 449.198496][T15709] netlink: zone id is out of range [ 449.198506][T15709] netlink: zone id is out of range [ 449.198516][T15709] netlink: zone id is out of range [ 449.198525][T15709] netlink: zone id is out of range [ 449.198535][T15709] netlink: zone id is out of range [ 449.875651][T15740] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4663'. [ 449.875680][T15740] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4663'. [ 449.875703][T15740] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4663'. [ 449.927598][T15744] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4667'. [ 450.394402][T15767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4678'. [ 450.394436][T15767] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4678'. [ 450.394469][T15767] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4678'. [ 451.426840][T15809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4699'. [ 451.496737][T15809] bond4: up delay (4) is not a multiple of miimon (7), value rounded to 0 ms [ 451.496771][T15809] bond4: down delay (8) is not a multiple of miimon (7), value rounded to 7 ms [ 451.496804][T15809] bond4: entered allmulticast mode [ 451.756432][T15820] netlink: 'syz.3.4704': attribute type 4 has an invalid length. [ 451.756460][T15820] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4704'. [ 451.831817][T15820] .`: renamed from bond0 (while UP) [ 453.113618][T15887] __nla_validate_parse: 3 callbacks suppressed [ 453.113643][T15887] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4736'. [ 453.113661][T15887] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4736'. [ 453.446021][T15902] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 453.979771][T15933] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4759'. [ 454.094211][ T37] audit: type=1326 audit(2000000978.880:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15937 comm="syz.5.4761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 454.156494][ T37] audit: type=1326 audit(2000000978.943:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15937 comm="syz.5.4761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 454.156556][ T37] audit: type=1326 audit(2000000978.953:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15937 comm="syz.5.4761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 454.157074][ T37] audit: type=1326 audit(2000000978.953:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15937 comm="syz.5.4761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 454.157126][ T37] audit: type=1326 audit(2000000978.953:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15937 comm="syz.5.4761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 454.406285][T15952] trusted_key: encrypted_key: master key parameter 'u' is invalid [ 454.590759][ T37] audit: type=1326 audit(2000000979.394:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15956 comm="syz.5.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 454.592337][ T37] audit: type=1326 audit(2000000979.394:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15956 comm="syz.5.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 454.647574][ T37] audit: type=1326 audit(2000000979.415:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15956 comm="syz.5.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 454.647773][ T37] audit: type=1326 audit(2000000979.457:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15956 comm="syz.5.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 454.648049][ T37] audit: type=1326 audit(2000000979.457:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15956 comm="syz.5.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 455.660655][T16005] bond1: Unable to set up delay as MII monitoring is disabled [ 455.695270][T16005] bond1 (unregistering): Released all slaves [ 455.746830][ T810] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 455.891769][ T810] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 455.891819][ T810] usb 4-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 455.891846][ T810] usb 4-1: config 2 interface 0 has no altsetting 0 [ 455.894333][ T810] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 455.894363][ T810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.894384][ T810] usb 4-1: Product: syz [ 455.894400][ T810] usb 4-1: Manufacturer: syz [ 455.894416][ T810] usb 4-1: SerialNumber: syz [ 455.975393][ T5882] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 456.137399][ T5882] usb 5-1: Using ep0 maxpacket: 8 [ 456.140384][ T5882] usb 5-1: unable to get BOS descriptor or descriptor too short [ 456.141903][ T5882] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 456.141932][ T5882] usb 5-1: config 0 has no interface number 0 [ 456.141981][ T5882] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 456.142012][ T5882] usb 5-1: config 0 interface 88 has no altsetting 0 [ 456.192283][ T5882] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 456.192318][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 456.192364][ T5882] usb 5-1: Product: syz [ 456.192408][ T5882] usb 5-1: SerialNumber: syz [ 456.235794][ T810] ims_pcu 4-1:2.0: probe with driver ims_pcu failed with error -22 [ 456.253964][ T5882] usb 5-1: config 0 descriptor?? [ 456.255578][ T810] usb 4-1: USB disconnect, device number 84 [ 456.427402][T16024] netlink: 'syz.5.4805': attribute type 3 has an invalid length. [ 456.427432][T16024] netlink: 'syz.5.4805': attribute type 3 has an invalid length. [ 456.427452][T16024] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4805'. [ 456.540543][ T5882] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input29 [ 456.627007][T16027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4806'. [ 456.644270][ C0] usb_acecad 5-1:0.88: can't resubmit intr, dummy_hcd.4-1/input0, status -1 [ 456.688963][ T5882] usb 5-1: USB disconnect, device number 89 [ 457.017403][T16044] net_ratelimit: 413 callbacks suppressed [ 457.017570][T16044] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 457.273029][T16057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4821'. [ 457.676723][T16077] IPv6: NLM_F_REPLACE set, but no existing node found! [ 457.860282][T16085] [U] v3f"S/4:XTzWtlW= [ 457.860423][T16085] [U] J"e:" [ 458.098462][T16100] netlink: 'syz.4.4842': attribute type 1 has an invalid length. [ 458.562757][T16116] netlink: 'syz.2.4850': attribute type 3 has an invalid length. [ 458.868053][T16134] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 459.129734][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 459.129756][ T37] audit: type=1326 audit(2000000984.161:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16143 comm="syz.5.4864" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69cb96c799 code=0x0 [ 459.158859][T16147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4865'. [ 459.158948][T16147] netlink: 'syz.2.4865': attribute type 3 has an invalid length. [ 459.414114][T16155] ieee802154 phy1 wpan1: encryption failed: -22 [ 459.482260][ T37] audit: type=1326 audit(2000000984.539:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16160 comm="syz.3.4872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34874fc799 code=0x7ffc0000 [ 459.483601][ T37] audit: type=1326 audit(2000000984.539:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16160 comm="syz.3.4872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34874fc799 code=0x7ffc0000 [ 459.555856][ T37] audit: type=1326 audit(2000000984.602:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16160 comm="syz.3.4872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f34874fc799 code=0x7ffc0000 [ 459.555916][ T37] audit: type=1326 audit(2000000984.602:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16160 comm="syz.3.4872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34874fc799 code=0x7ffc0000 [ 459.555977][ T37] audit: type=1326 audit(2000000984.602:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16160 comm="syz.3.4872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34874fc799 code=0x7ffc0000 [ 459.723450][T16168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.017322][T16176] netlink: zone id is out of range [ 460.017343][T16176] netlink: zone id is out of range [ 460.017353][T16176] netlink: zone id is out of range [ 460.017363][T16176] netlink: zone id is out of range [ 460.017373][T16176] netlink: zone id is out of range [ 460.017383][T16176] netlink: zone id is out of range [ 460.017393][T16176] netlink: zone id is out of range [ 460.017402][T16176] netlink: zone id is out of range [ 461.023539][ T1232] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 461.178465][ T1232] usb 3-1: config 1 has an invalid descriptor of length 109, skipping remainder of the config [ 461.178499][ T1232] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 461.182459][ T1232] usb 3-1: New USB device found, idVendor=0763, idProduct=1ff9, bcdDevice= 0.40 [ 461.182495][ T1232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.182519][ T1232] usb 3-1: Product: syz [ 461.182536][ T1232] usb 3-1: Manufacturer: syz [ 461.182554][ T1232] usb 3-1: SerialNumber: syz [ 461.233254][ T5902] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 461.335181][T16224] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4904'. [ 461.383529][ T37] audit: type=1326 audit(2000000986.534:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16226 comm="syz.4.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0483e9c799 code=0x7ffc0000 [ 461.383984][ T37] audit: type=1326 audit(2000000986.534:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16226 comm="syz.4.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0483e9c799 code=0x7ffc0000 [ 461.395003][ T37] audit: type=1326 audit(2000000986.534:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16226 comm="syz.4.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0483e9c799 code=0x7ffc0000 [ 461.402378][ T37] audit: type=1326 audit(2000000986.544:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16226 comm="syz.4.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f0483e9c799 code=0x7ffc0000 [ 461.404715][ T5902] usb 6-1: Using ep0 maxpacket: 16 [ 461.423877][ T5902] usb 6-1: unable to get BOS descriptor or descriptor too short [ 461.455482][ T5902] usb 6-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 461.455609][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.455638][ T5902] usb 6-1: Product: syz [ 461.455658][ T5902] usb 6-1: Manufacturer: syz [ 461.455688][ T5902] usb 6-1: SerialNumber: syz [ 461.575830][ T1232] usb 3-1: 0:1 : does not exist [ 461.575932][ T1232] usb 3-1: unit 4 not found! [ 461.641608][ T1232] usb 3-1: USB disconnect, device number 78 [ 461.990474][ T5902] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 461.991831][ T5902] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 462.246903][ T5902] usb 6-1: USB disconnect, device number 5 [ 462.459534][ T5956] udevd[5956]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 462.515683][T16254] netlink: 'syz.2.4918': attribute type 11 has an invalid length. [ 462.583911][T16256] random: crng reseeded on system resumption [ 462.705380][T16261] netlink: 'syz.4.4920': attribute type 1 has an invalid length. [ 462.705406][T16261] netlink: 'syz.4.4920': attribute type 2 has an invalid length. [ 463.023849][ T5902] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 463.190095][ T5902] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 463.190129][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.224604][ T5902] usb 6-1: config 0 descriptor?? [ 463.244795][ T5902] cp210x 6-1:0.0: cp210x converter detected [ 463.266373][T16281] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4931'. [ 463.266413][T16281] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4931'. [ 463.470508][ T5902] usb 6-1: cp210x converter now attached to ttyUSB0 [ 463.481246][T16283] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 463.664999][ T5902] usb 6-1: USB disconnect, device number 6 [ 463.683792][ T5902] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 463.685803][ T5902] cp210x 6-1:0.0: device disconnected [ 463.890246][ T5862] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 463.939272][T16287] netlink: 1020 bytes leftover after parsing attributes in process `syz.4.4935'. [ 464.044822][ T5862] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.044855][ T5862] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 464.074757][ T5862] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00 [ 464.074790][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 464.074814][ T5862] usb 4-1: SerialNumber: syz [ 464.122424][ T5862] usb 4-1: 0:2 : does not exist [ 464.142725][T16295] net_ratelimit: 10 callbacks suppressed [ 464.142746][T16295] veth1_macvtap: mtu greater than device maximum [ 464.356657][T16300] netlink: 'syz.4.4940': attribute type 3 has an invalid length. [ 464.356681][T16300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4940'. [ 464.384795][T16302] netlink: 'syz.5.4942': attribute type 11 has an invalid length. [ 464.420950][T16303] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 464.524465][ T1232] usb 4-1: USB disconnect, device number 85 [ 464.746771][ T5956] udevd[5956]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 464.995651][T16328] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4955'. [ 465.338380][ T5902] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 465.360477][T16348] binder: 16346:16348 unknown command 0 [ 465.360505][T16348] binder: 16346:16348 ioctl c0306201 200000000300 returned -22 [ 465.436446][T16350] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4967'. [ 465.436487][T16350] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 465.483003][ T5902] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 465.483074][ T5902] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 465.483102][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.543199][ T5902] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 466.424449][T16386] nbd: couldn't find device at index -2133000188 [ 466.569553][ T5902] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 466.761456][ T5902] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 466.761484][ T5902] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 466.781703][ T5902] usb 5-1: USB disconnect, device number 90 [ 466.865334][T16395] netlink: 'syz.2.4988': attribute type 13 has an invalid length. [ 466.993172][T16402] netlink: 'syz.3.4991': attribute type 10 has an invalid length. [ 467.060313][T16360] syz.5.4970 (16360): drop_caches: 2 [ 467.186316][T16408] net veth1_virt_wifi c@0: renamed from virt_wifi0 [ 467.604837][ T5902] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 467.763545][ T5902] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.763577][ T5902] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 467.763600][ T5902] usb 5-1: config 1 has no interface number 0 [ 467.763646][ T5902] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 467.766217][ T5902] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 467.766256][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.766279][ T5902] usb 5-1: Product: syz [ 467.766296][ T5902] usb 5-1: Manufacturer: syz [ 467.766312][ T5902] usb 5-1: SerialNumber: syz [ 467.872646][ T5902] usb 5-1: selecting invalid altsetting 1 [ 467.963197][T16431] netlink: 'syz.2.5005': attribute type 1 has an invalid length. [ 468.250398][ T5902] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 468.250452][ T5902] cdc_ncm 5-1:1.1: bind() failure [ 468.251249][T16438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5009'. [ 468.333387][ T5902] usb 5-1: USB disconnect, device number 91 [ 469.338317][ T5902] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 469.473391][T16478] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5029'. [ 469.508392][ T5902] usb 5-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=67.7a [ 469.508428][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.508450][ T5902] usb 5-1: Product: syz [ 469.508467][ T5902] usb 5-1: Manufacturer: syz [ 469.508483][ T5902] usb 5-1: SerialNumber: syz [ 469.568467][ T5902] gspca_main: spca501-2.14.0 probing 0497:c001 [ 469.717066][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 469.717087][ T37] audit: type=1326 audit(2000000995.280:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16480 comm="syz.6.5032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 469.752986][ T37] audit: type=1326 audit(2000000995.280:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16480 comm="syz.6.5032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 469.753900][ T37] audit: type=1326 audit(2000000995.322:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16480 comm="syz.6.5032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 469.754221][ T37] audit: type=1326 audit(2000000995.322:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16480 comm="syz.6.5032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 469.754517][ T37] audit: type=1326 audit(2000000995.322:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16480 comm="syz.6.5032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 469.754824][ T37] audit: type=1326 audit(2000000995.322:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16480 comm="syz.6.5032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 469.755124][ T37] audit: type=1326 audit(2000000995.322:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16480 comm="syz.6.5032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 469.755579][ T37] audit: type=1326 audit(2000000995.322:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16480 comm="syz.6.5032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 469.755864][ T37] audit: type=1326 audit(2000000995.322:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16480 comm="syz.6.5032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 470.169460][T16489] netlink: 'syz.2.5035': attribute type 61 has an invalid length. [ 470.170326][ T5902] gspca_spca501: reg write: error -71 [ 470.170469][ T5902] spca501 5-1:68.0: Reg write failed for 0x02,0xa048,0x00 [ 470.170569][ T5902] spca501 5-1:68.0: probe with driver spca501 failed with error -22 [ 470.178556][ T5902] usb 5-1: USB disconnect, device number 92 [ 470.330869][T16427] syz.3.5004 (16427): drop_caches: 2 [ 470.559556][T16504] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5042'. [ 471.193136][T16533] tmpfs: Bad value for 'nr_blocks' [ 471.455476][T16541] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 471.586093][ T37] audit: type=1326 audit(2000000997.243:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16546 comm="syz.2.5063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374adc799 code=0x7ffc0000 [ 471.866520][T16551] syz.6.5065 uses old SIOCAX25GETINFO [ 472.557668][ T5862] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 472.742537][ T5862] usb 6-1: Using ep0 maxpacket: 16 [ 472.745034][ T5862] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.745095][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 262, setting to 64 [ 472.745126][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.745155][ T5862] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 472.808016][ T5862] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 472.808051][ T5862] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 472.808141][ T5862] usb 6-1: Manufacturer: syz [ 472.858884][T16580] syz.4.5078 (16580): /proc/16577/oom_adj is deprecated, please use /proc/16577/oom_score_adj instead. [ 472.869060][ T5862] usb 6-1: config 0 descriptor?? [ 473.071112][T16588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5084'. [ 473.094821][ T5862] usb 6-1: USB disconnect, device number 7 [ 473.956283][T16622] IPv6: Can't replace route, no match found [ 474.072162][ T1232] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 474.215313][ T1232] usb 6-1: Using ep0 maxpacket: 8 [ 474.233644][ T1232] usb 6-1: unable to get BOS descriptor or descriptor too short [ 474.244181][ T1232] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.244212][ T1232] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 474.266028][T16630] block nbd3: NBD_DISCONNECT [ 474.283357][ T1232] usb 6-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 474.283392][ T1232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.283415][ T1232] usb 6-1: Product: syz [ 474.283433][ T1232] usb 6-1: Manufacturer: syz [ 474.283449][ T1232] usb 6-1: SerialNumber: syz [ 474.529526][T16638] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5109'. [ 474.531593][T16638] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5109'. [ 474.748502][ T1232] usb 6-1: cannot find UAC_HEADER [ 474.867632][ T1232] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 474.889710][ T1232] usb 6-1: USB disconnect, device number 8 [ 474.943952][ T5956] udevd[5956]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 475.021817][T16596] syz.4.5087 (16596): drop_caches: 2 [ 475.380210][ C1] sd 0:0:1:0: [sda] tag#6302 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 475.380265][ C1] sd 0:0:1:0: [sda] tag#6302 CDB: Read(6) 08 00 00 00 00 00 [ 475.473865][T16668] nbd: socks must be embedded in a SOCK_ITEM attr [ 475.522246][ T5941] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 475.672116][ T5941] usb 7-1: Using ep0 maxpacket: 32 [ 475.674567][ T5941] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 475.674599][ T5941] usb 7-1: config 0 has no interface number 0 [ 475.674647][ T5941] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 475.674677][ T5941] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 475.674701][ T5941] usb 7-1: config 0 interface 89 has no altsetting 0 [ 475.677681][ T5941] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 475.677714][ T5941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.677738][ T5941] usb 7-1: Product: syz [ 475.677756][ T5941] usb 7-1: Manufacturer: syz [ 475.677773][ T5941] usb 7-1: SerialNumber: syz [ 475.756824][ T5941] usb 7-1: config 0 descriptor?? [ 475.805783][ T5941] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 475.805917][ T5941] em28xx 7-1:0.89: Video interface 89 found: isoc [ 475.835855][T16674] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 476.063637][ T5941] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 476.128897][T16686] wg1: entered promiscuous mode [ 476.128928][T16686] wg1: entered allmulticast mode [ 476.203527][ T5941] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 476.203647][ T5941] em28xx 7-1:0.89: board has no eeprom [ 476.272580][ T5941] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 476.272778][ T5941] em28xx 7-1:0.89: analog set to isoc mode. [ 476.274609][ T5902] em28xx 7-1:0.89: Registering V4L2 extension [ 476.354033][ T5941] usb 7-1: USB disconnect, device number 4 [ 476.356630][ T5941] em28xx 7-1:0.89: Disconnecting em28xx [ 476.370341][ T5902] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 476.370403][ T5902] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 476.370420][ T5902] em28xx 7-1:0.89: No AC97 audio processor [ 476.516607][ T5902] usb 7-1: Decoder not found [ 476.516633][ T5902] em28xx 7-1:0.89: failed to create media graph [ 476.516721][ T5902] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 476.696003][ T5902] em28xx 7-1:0.89: Registering snapshot button... [ 476.800542][ T5902] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input31 [ 476.925732][ T5902] em28xx 7-1:0.89: Remote control support is not available for this card. [ 476.925910][ T5883] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 476.930608][ T5941] em28xx 7-1:0.89: Closing input extension [ 476.932291][ T5941] em28xx 7-1:0.89: Deregistering snapshot button [ 477.068239][ T5883] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.068271][ T5883] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 477.069523][ T5883] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 477.069554][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 477.069578][ T5883] usb 6-1: SerialNumber: syz [ 477.389151][ T5883] usb 6-1: 0:2 : does not exist [ 477.389240][ T5883] usb 6-1: unit 5: unexpected type 0x03 [ 477.428891][T16724] netlink: 388 bytes leftover after parsing attributes in process `syz.6.5149'. [ 477.603129][T16726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5151'. [ 477.745516][ T5941] em28xx 7-1:0.89: Freeing device [ 477.751732][ T5883] usb 6-1: USB disconnect, device number 9 [ 477.957187][ T6036] udevd[6036]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 478.228571][T16747] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5158'. [ 478.786157][T16772] netlink: 'syz.4.5173': attribute type 7 has an invalid length. [ 478.786184][T16772] netlink: 'syz.4.5173': attribute type 8 has an invalid length. [ 479.199306][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 479.199328][ T37] audit: type=1326 audit(2000001005.243:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.6.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 479.203678][ T37] audit: type=1326 audit(2000001005.243:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.6.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 479.205001][ T37] audit: type=1326 audit(2000001005.243:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.6.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 479.255881][ T37] audit: type=1326 audit(2000001005.254:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.6.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 479.256037][ T37] audit: type=1326 audit(2000001005.275:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.6.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 479.256171][ T37] audit: type=1326 audit(2000001005.275:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.6.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 479.272750][ T37] audit: type=1326 audit(2000001005.296:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.6.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 479.273835][ T37] audit: type=1326 audit(2000001005.317:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.6.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 479.273889][ T37] audit: type=1326 audit(2000001005.317:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.6.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f27e24bc799 code=0x7ffc0000 [ 479.398574][T16794] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5183'. [ 479.439349][T16796] netlink: 'syz.3.5184': attribute type 1 has an invalid length. [ 479.488236][T16796] ip6erspan0: entered promiscuous mode [ 481.044050][ T5805] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 481.044232][ T5805] Bluetooth: hci4: Injecting HCI hardware error event [ 481.048427][ T5114] Bluetooth: hci4: hardware error 0x00 [ 481.814862][T16895] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 481.815136][T16895] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 482.004776][ T37] audit: type=1326 audit(2000001008.183:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16899 comm="syz.4.5235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0483e9c799 code=0x7ffc0000 [ 482.329826][ T5941] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 482.367505][T16915] ptrace attach of "./syz-executor exec"[16916] was attempted by "./syz-executor exec"[16915] [ 482.487280][ T5941] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.487313][ T5941] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 482.493518][ T5941] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 482.493611][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 482.493675][ T5941] usb 4-1: SerialNumber: syz [ 482.776919][ T5941] usb 4-1: unknown interface protocol 0x6, assuming v1 [ 482.776949][ T5941] usb 4-1: cannot find UAC_HEADER [ 482.992365][ T5941] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 483.019683][ T5941] usb 4-1: USB disconnect, device number 86 [ 483.025448][ T5114] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 483.170540][ T5956] udevd[5956]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 483.356476][ T5883] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 483.453660][T16957] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 483.498888][ T5883] usb 5-1: Using ep0 maxpacket: 8 [ 483.503558][ T5883] usb 5-1: config 0 has an invalid interface number: 99 but max is 0 [ 483.503590][ T5883] usb 5-1: config 0 has no interface number 0 [ 483.503920][ T5883] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 483.503993][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.547724][ T5883] usb 5-1: config 0 descriptor?? [ 483.566667][ T5883] usb-storage 5-1:0.99: USB Mass Storage device detected [ 483.599481][ T5883] usb-storage 5-1:0.99: device ignored [ 483.692410][T16963] netlink: 'syz.3.5266': attribute type 7 has an invalid length. [ 483.869804][ T5883] usb 5-1: USB disconnect, device number 93 [ 483.949656][T16972] netlink: 'syz.3.5268': attribute type 10 has an invalid length. [ 483.949683][T16972] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5268'. [ 483.949978][T16972] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 484.182054][T16980] netlink: 'syz.3.5273': attribute type 2 has an invalid length. [ 484.202935][T16980] : entered promiscuous mode [ 485.295101][T17015] veth3: entered promiscuous mode [ 485.839316][T17047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5304'. [ 486.038556][T17056] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5308'. [ 486.038587][T17056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5308'. [ 486.038604][T17056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5308'. [ 486.131485][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 486.275220][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.275252][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 486.275291][ T10] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 486.275317][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 486.281047][ T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 486.281082][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 486.281105][ T10] usb 6-1: SerialNumber: syz [ 486.387380][ T6282] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 486.549111][ T6282] usb 3-1: Using ep0 maxpacket: 32 [ 486.560946][ T6282] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 486.560979][ T6282] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 486.561008][ T6282] usb 3-1: config 0 interface 0 has no altsetting 0 [ 486.579315][ T6282] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 486.579349][ T6282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.579373][ T6282] usb 3-1: Product: syz [ 486.579390][ T6282] usb 3-1: Manufacturer: syz [ 486.579407][ T6282] usb 3-1: SerialNumber: syz [ 486.628313][ T6282] usb 3-1: config 0 descriptor?? [ 486.649672][ T10] usb 6-1: 0:2 : does not exist [ 486.649764][ T10] usb 6-1: unit 5 not found! [ 486.781638][ T10] usb 6-1: USB disconnect, device number 10 [ 486.857012][T17071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5315'. [ 487.018635][ T5956] udevd[5956]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 487.126185][ T6282] gs_usb 3-1:0.0: Couldn't get device config: (err=-71) [ 487.126236][ T6282] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 487.154282][ T6282] usb 3-1: USB disconnect, device number 79 [ 488.309301][T17123] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5340'. [ 488.309327][T17123] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5340'. [ 488.986756][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 488.986778][ T37] audit: type=1800 audit(2000001015.501:280): pid=17139 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.5.5347" name="/" dev="sockfs" ino=46564 res=0 errno=0 [ 489.335318][T17163] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 489.335342][T17163] overlayfs: missing 'lowerdir' [ 489.635552][T17177] tmpfs: Unknown parameter 'smackfsdefd' [ 489.966547][T17187] kAFS: unable to lookup cell 'syz1' [ 490.368243][ T37] audit: type=1326 audit(2000001016.960:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17203 comm="syz.2.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374adc799 code=0x7ffc0000 [ 490.396228][ T37] audit: type=1326 audit(2000001016.992:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17203 comm="syz.2.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374adc799 code=0x7ffc0000 [ 490.426568][ T37] audit: type=1326 audit(2000001017.023:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17203 comm="syz.2.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374adc799 code=0x7ffc0000 [ 490.427036][ T37] audit: type=1326 audit(2000001017.034:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17203 comm="syz.2.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f6374adc799 code=0x7ffc0000 [ 490.427331][ T37] audit: type=1326 audit(2000001017.034:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17203 comm="syz.2.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374adc799 code=0x7ffc0000 [ 490.427619][ T37] audit: type=1326 audit(2000001017.034:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17203 comm="syz.2.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374adc799 code=0x7ffc0000 [ 490.428868][ T37] audit: type=1326 audit(2000001017.034:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17203 comm="syz.2.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374adc799 code=0x7ffc0000 [ 490.429473][ T37] audit: type=1326 audit(2000001017.034:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17203 comm="syz.2.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6374adc799 code=0x7ffc0000 [ 490.429736][ T37] audit: type=1326 audit(2000001017.034:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17203 comm="syz.2.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6374adc799 code=0x7ffc0000 [ 490.623996][T17208] ieee802154 phy1 wpan1: encryption failed: -22 [ 491.013976][T17227] comedi comedi4: bad chanlist[1]=0x000000ff chan=255 range length=2 [ 491.285621][T17240] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 491.367396][T17245] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 491.471496][T17251] usb usb8: usbfs: process 17251 (syz.2.5401) did not claim interface 0 before use [ 491.627614][ T5882] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 491.787857][ T5882] usb 6-1: Using ep0 maxpacket: 16 [ 491.795736][ T5882] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 491.795769][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.795792][ T5882] usb 6-1: Product: syz [ 491.795808][ T5882] usb 6-1: Manufacturer: syz [ 491.795825][ T5882] usb 6-1: SerialNumber: syz [ 491.848227][ T5882] usb 6-1: config 0 descriptor?? [ 491.863715][ T5882] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 492.058452][ T5882] ssu100 6-1:0.0: probe with driver ssu100 failed with error -32 [ 492.087661][ T5882] usb 6-1: USB disconnect, device number 11 [ 492.290460][T17281] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 492.562092][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 492.769490][ T5883] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 492.915166][ T5883] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 492.915217][ T5883] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 24, changing to 4 [ 492.915248][ T5883] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 492.958836][ T5883] usb 3-1: string descriptor 0 read error: -22 [ 492.958939][ T5883] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 492.958957][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.004594][ T5883] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 493.041885][T17301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5426'. [ 493.041926][T17301] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5426'. [ 493.202220][ T5883] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 493.408516][ T5883] usb 3-1: USB disconnect, device number 80 [ 494.164901][T17315] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5433'. [ 494.165493][T17315] unsupported nlmsg_type 40 [ 494.253409][T17319] kAFS: Can only specify source 'none' with -o dyn [ 494.323661][T17323] netlink: 'syz.5.5436': attribute type 1 has an invalid length. [ 494.323686][T17323] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5436'. [ 494.484956][T17331] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5441'. [ 494.615232][ T37] audit: type=1326 audit(2000001021.423:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17336 comm="syz.2.5444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374adc799 code=0x7ffc0000 [ 494.615557][ T37] audit: type=1326 audit(2000001021.423:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17336 comm="syz.2.5444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374adc799 code=0x7ffc0000 [ 494.628353][ T37] audit: type=1326 audit(2000001021.433:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17336 comm="syz.2.5444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374adc799 code=0x7ffc0000 [ 494.639269][ T37] audit: type=1326 audit(2000001021.444:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17336 comm="syz.2.5444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374adc799 code=0x7ffc0000 [ 494.639413][ T37] audit: type=1326 audit(2000001021.454:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17336 comm="syz.2.5444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f6374adc799 code=0x7ffc0000 [ 494.642486][ T37] audit: type=1326 audit(2000001021.454:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17336 comm="syz.2.5444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374adc799 code=0x7ffc0000 [ 494.642724][ T37] audit: type=1326 audit(2000001021.454:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17336 comm="syz.2.5444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374adc799 code=0x7ffc0000 [ 494.642861][ T37] audit: type=1326 audit(2000001021.454:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17336 comm="syz.2.5444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6374adc799 code=0x7ffc0000 [ 494.642994][ T37] audit: type=1326 audit(2000001021.454:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17336 comm="syz.2.5444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6374adc799 code=0x7ffc0000 [ 494.751117][T17339] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5445'. [ 495.300842][T17365] netlink: 'syz.5.5457': attribute type 2 has an invalid length. [ 495.300870][T17365] netlink: 'syz.5.5457': attribute type 1 has an invalid length. [ 496.607384][T17429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5489'. [ 496.916085][T17438] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5492'. [ 497.010230][T17439] delete_channel: no stack [ 497.143835][T17446] netlink: 'syz.2.5497': attribute type 1 has an invalid length. [ 497.547077][T17463] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 497.547103][T17463] openvswitch: netlink: Message has 16 unknown bytes. [ 497.668461][T17467] netlink: 'syz.5.5507': attribute type 10 has an invalid length. [ 497.668488][T17467] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5507'. [ 497.668525][T17467] batadv0: entered promiscuous mode [ 497.668547][T17467] batadv0: entered allmulticast mode [ 497.669658][T17467] bridge0: port 3(batadv0) entered blocking state [ 497.669934][T17467] bridge0: port 3(batadv0) entered disabled state [ 497.689458][T17467] bridge0: port 3(batadv0) entered blocking state [ 497.689872][T17467] bridge0: port 3(batadv0) entered listening state [ 498.055847][ T43] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 498.055870][ T43] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 498.293201][ T10] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 498.455078][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 498.459032][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 498.460825][ T10] usb 3-1: config 1 has an invalid interface number: 2 but max is 0 [ 498.460856][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.460886][ T10] usb 3-1: config 1 has no interface number 0 [ 498.460920][ T10] usb 3-1: too many endpoints for config 1 interface 2 altsetting 144: 195, using maximum allowed: 30 [ 498.460965][ T10] usb 3-1: config 1 interface 2 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 195 [ 498.460996][ T10] usb 3-1: config 1 interface 2 has no altsetting 0 [ 498.463939][ T10] usb 3-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice= 0.40 [ 498.463972][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.463996][ T10] usb 3-1: Product: syz [ 498.464014][ T10] usb 3-1: Manufacturer: syz [ 498.464032][ T10] usb 3-1: SerialNumber: syz [ 498.802185][ T10] usb 3-1: can't set first interface for hiFace device. [ 498.802228][ T10] snd-usb-hiface 3-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 498.806639][ T10] usb 3-1: USB disconnect, device number 81 [ 499.048900][T17508] XFS (nullb0): Invalid superblock magic number [ 499.372764][ T5114] Bluetooth: hci6: connection err: -111 [ 499.412488][ T5114] Bluetooth: hci5: command 0x0406 tx timeout [ 499.759151][ T37] audit: type=1326 audit(2000001026.819:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17545 comm="syz.5.5541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 499.768223][ T37] audit: type=1326 audit(2000001026.819:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17545 comm="syz.5.5541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 499.769381][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 499.824518][ T37] audit: type=1326 audit(2000001026.893:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17545 comm="syz.5.5541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 499.824679][ T37] audit: type=1326 audit(2000001026.893:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17545 comm="syz.5.5541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 499.914840][ T10] usb 7-1: config 0 has an invalid interface number: 120 but max is 0 [ 499.914875][ T10] usb 7-1: config 0 has no interface number 0 [ 499.914922][ T10] usb 7-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 499.914952][ T10] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 499.914998][ T10] usb 7-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 499.915024][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.920467][ T10] usb 7-1: config 0 descriptor?? [ 500.005610][ T10] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.120/input/input32 [ 500.303920][ T5883] usb 7-1: USB disconnect, device number 5 [ 500.378974][ T5902] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 500.522894][ T5902] usb 3-1: Using ep0 maxpacket: 8 [ 500.525842][ T5902] usb 3-1: unable to get BOS descriptor or descriptor too short [ 500.527276][ T5902] usb 3-1: config 4 has an invalid interface number: 96 but max is 0 [ 500.527307][ T5902] usb 3-1: config 4 has no interface number 0 [ 500.527341][ T5902] usb 3-1: config 4 interface 96 has no altsetting 0 [ 500.530132][ T5902] usb 3-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice=4b.37 [ 500.530167][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.530191][ T5902] usb 3-1: Product: syz [ 500.530209][ T5902] usb 3-1: Manufacturer: syz [ 500.530226][ T5902] usb 3-1: SerialNumber: syz [ 500.833244][ T5902] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:4.96/input/input33 [ 500.858010][ T5149] bcm5974 3-1:4.96: could not read from device [ 500.943506][ T5149] bcm5974 3-1:4.96: could not read from device [ 500.943659][ T5902] usb 3-1: USB disconnect, device number 82 [ 501.081351][T17553] udevd[17553]: Error opening device "/dev/input/event4": No such file or directory [ 501.081490][T17553] udevd[17553]: Unable to EVIOCGABS device "/dev/input/event4" [ 501.081614][T17553] udevd[17553]: Unable to EVIOCGABS device "/dev/input/event4" [ 501.081727][T17553] udevd[17553]: Unable to EVIOCGABS device "/dev/input/event4" [ 501.081863][T17553] udevd[17553]: Unable to EVIOCGABS device "/dev/input/event4" [ 501.164640][T17567] netlink: 212 bytes leftover after parsing attributes in process `syz.5.5549'. [ 501.164795][T17567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5549'. [ 501.164820][T17567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5549'. [ 501.164838][T17567] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5549'. [ 501.406549][T17577] netlink: 'syz.6.5555': attribute type 13 has an invalid length. [ 501.406574][T17577] netlink: 'syz.6.5555': attribute type 17 has an invalid length. [ 501.469747][T17577] gretap0: refused to change device tx_queue_len [ 501.470411][T17577] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 501.475997][T17581] binfmt_misc: register: failed to install interpreter file ./file0 [ 501.805986][T17597] netlink: 'syz.5.5566': attribute type 12 has an invalid length. [ 502.089661][T17612] netlink: 'syz.6.5572': attribute type 5 has an invalid length. [ 502.224438][T17618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5575'. [ 502.224467][T17618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5575'. [ 502.804724][ T5114] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 502.821508][ T5114] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 502.838586][ T5114] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 502.839914][ T5114] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 502.841020][ T5114] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 502.987927][T17644] lo speed is unknown, defaulting to 1000 [ 503.934896][T17644] chnl_net:caif_netlink_parms(): no params data found [ 504.200805][ T37] audit: type=1326 audit(2000001031.491:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17691 comm="syz.5.5608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 504.206226][ T37] audit: type=1326 audit(2000001031.491:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17691 comm="syz.5.5608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 504.207236][ T37] audit: type=1326 audit(2000001031.491:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17691 comm="syz.5.5608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 504.207498][ T37] audit: type=1326 audit(2000001031.491:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17691 comm="syz.5.5608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 504.215377][ T5805] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 504.255829][ T5805] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 504.258911][ T5805] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 504.285081][ T5805] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 504.298609][ T5805] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 504.380366][ T37] audit: type=1326 audit(2000001031.491:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17691 comm="syz.5.5608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 504.380429][ T37] audit: type=1326 audit(2000001031.575:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17691 comm="syz.5.5608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 504.512618][ T5882] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 504.595373][T17644] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.595500][T17644] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.595941][T17644] bridge_slave_0: entered allmulticast mode [ 504.597912][T17644] bridge_slave_0: entered promiscuous mode [ 504.634179][T17644] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.637891][T17644] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.638666][T17644] bridge_slave_1: entered allmulticast mode [ 504.670399][T17644] bridge_slave_1: entered promiscuous mode [ 504.677046][ T5882] usb 3-1: Using ep0 maxpacket: 16 [ 504.680407][ T5882] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 504.691885][ T5882] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 504.691975][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.692040][ T5882] usb 3-1: Product: syz [ 504.692085][ T5882] usb 3-1: Manufacturer: syz [ 504.692128][ T5882] usb 3-1: SerialNumber: syz [ 504.826956][ T5114] Bluetooth: hci7: command tx timeout [ 504.860231][T17687] lo speed is unknown, defaulting to 1000 [ 504.883136][T17644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.907631][T17644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.027607][T17644] team0: Port device team_slave_0 added [ 505.031671][ T5882] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 505.031701][ T5882] usb 3-1: 1:1 : sample bitwidth 111 in over sample bytes 2 [ 505.031753][ T5882] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 505.031774][ T5882] usb 3-1: 1:1 : invalid channels 0 [ 505.031818][T17644] team0: Port device team_slave_1 added [ 505.034381][ T5882] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 505.210865][T17644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.210885][T17644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.210918][T17644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.213278][T17644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.213296][T17644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.213326][T17644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.389045][ T5882] usb 3-1: USB disconnect, device number 83 [ 505.670020][T17644] hsr_slave_0: entered promiscuous mode [ 505.674275][T17644] hsr_slave_1: entered promiscuous mode [ 505.689725][T17644] debugfs: 'hsr0' already exists in 'hsr' [ 505.689757][T17644] Cannot create hsr debugfs directory [ 505.825637][T17725] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 506.200303][T17736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5628'. [ 506.235736][T17738] trusted_key: encrypted_key: master key parameter is missing [ 506.271753][T17740] netlink: 'syz.5.5630': attribute type 32 has an invalid length. [ 506.427510][ T5114] Bluetooth: hci8: command tx timeout [ 506.466963][T17747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5634'. [ 506.808529][ T5114] Bluetooth: hci7: command tx timeout [ 506.852577][T17759] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5638'. [ 507.281815][T17770] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5643'. [ 507.382258][T17644] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 508.033934][T17644] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 508.070031][T17687] chnl_net:caif_netlink_parms(): no params data found [ 508.092355][T17644] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 508.166362][T17644] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 508.410116][ T5114] Bluetooth: hci8: command tx timeout [ 508.487962][T17687] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.488182][T17687] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.488464][T17687] bridge_slave_0: entered allmulticast mode [ 508.491511][T17687] bridge_slave_0: entered promiscuous mode [ 508.533961][T17687] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.534323][T17687] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.534578][T17687] bridge_slave_1: entered allmulticast mode [ 508.540537][T17687] bridge_slave_1: entered promiscuous mode [ 508.748229][T17687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.769326][T17687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.790670][ T5114] Bluetooth: hci7: command tx timeout [ 508.927977][T17687] team0: Port device team_slave_0 added [ 508.931839][T17687] team0: Port device team_slave_1 added [ 509.057962][T17687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.057984][T17687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.058015][T17687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.141215][T17687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.141255][T17687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.141286][T17687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.581893][T17687] hsr_slave_0: entered promiscuous mode [ 509.625588][T17687] hsr_slave_1: entered promiscuous mode [ 509.626678][T17687] debugfs: 'hsr0' already exists in 'hsr' [ 509.626705][T17687] Cannot create hsr debugfs directory [ 509.740691][T17835] netlink: 80 bytes leftover after parsing attributes in process `syz.6.5671'. [ 509.773322][T17644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.828183][ T5941] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 509.972278][ T5941] usb 6-1: Using ep0 maxpacket: 8 [ 509.985932][ T5941] usb 6-1: config 0 has no interfaces? [ 509.987216][ T5941] usb 6-1: config 0 has no interfaces? [ 509.988709][ T5941] usb 6-1: config 0 has no interfaces? [ 510.006922][ T5941] usb 6-1: config 0 has no interfaces? [ 510.006964][ T5941] usb 6-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 510.006990][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.044208][ T5941] usb 6-1: config 0 descriptor?? [ 510.063416][T17844] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 510.136219][T17644] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.247004][ T5882] usb 6-1: USB disconnect, device number 12 [ 510.250627][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.262400][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.268881][T17850] netlink: 'syz.6.5678': attribute type 2 has an invalid length. [ 510.268908][T17850] netlink: 228 bytes leftover after parsing attributes in process `syz.6.5678'. [ 510.349128][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.360323][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.389675][ T5114] Bluetooth: hci8: command tx timeout [ 510.650834][T17687] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 510.714307][T17687] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 510.768921][T17687] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 510.771743][ T5114] Bluetooth: hci7: command tx timeout [ 510.870848][T17687] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 510.945249][T17870] netlink: 'syz.6.5687': attribute type 4 has an invalid length. [ 511.216544][T17687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.325385][T17687] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.350290][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.350597][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.384813][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.385018][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.437440][ T1232] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 511.590174][ T1232] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 511.590217][ T1232] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 511.590245][ T1232] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 200 [ 511.630232][ T1232] usb 7-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 511.630265][ T1232] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.630288][ T1232] usb 7-1: Product: syz [ 511.630304][ T1232] usb 7-1: Manufacturer: syz [ 511.630321][ T1232] usb 7-1: SerialNumber: syz [ 511.686812][ T1232] usb 7-1: config 0 descriptor?? [ 511.687758][T17883] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 511.693001][ T1232] ums-isd200 7-1:0.0: USB Mass Storage device detected [ 511.858708][T17902] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 511.891989][ T1232] scsi host1: usb-storage 7-1:0.0 [ 511.945756][ T1232] usb 7-1: USB disconnect, device number 6 [ 512.007309][T17644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.061989][ C1] bridge0: port 3(batadv0) entered learning state [ 512.361814][ T5114] Bluetooth: hci8: command tx timeout [ 512.461961][T17924] dummy0: entered allmulticast mode [ 512.589498][T17687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.110974][T17644] veth0_vlan: entered promiscuous mode [ 513.178460][T17644] veth1_vlan: entered promiscuous mode [ 513.340077][T17644] veth0_macvtap: entered promiscuous mode [ 513.370260][T17644] veth1_macvtap: entered promiscuous mode [ 513.481098][T17644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.522155][T17961] program syz.2.5719 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 513.539759][T17961] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 513.563748][T17644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.597023][T17687] veth0_vlan: entered promiscuous mode [ 513.650257][ T5930] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.670452][ T5930] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.673577][ T5930] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.711208][ T5930] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.746241][T17687] veth1_vlan: entered promiscuous mode [ 513.774217][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 513.774238][ T37] audit: type=1326 audit(2000001041.539:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17970 comm="syz.5.5724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 513.776332][ T37] audit: type=1326 audit(2000001041.539:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17970 comm="syz.5.5724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 513.777899][ T37] audit: type=1326 audit(2000001041.539:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17970 comm="syz.5.5724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 513.778180][ T37] audit: type=1326 audit(2000001041.539:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17970 comm="syz.5.5724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f69cb92cfce code=0x7ffc0000 [ 513.778680][ T37] audit: type=1326 audit(2000001041.539:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17970 comm="syz.5.5724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 513.778922][ T37] audit: type=1326 audit(2000001041.539:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17970 comm="syz.5.5724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 513.779195][ T37] audit: type=1326 audit(2000001041.539:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17970 comm="syz.5.5724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 513.779736][ T37] audit: type=1326 audit(2000001041.539:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17970 comm="syz.5.5724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 513.964909][ T37] audit: type=1326 audit(2000001041.539:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17970 comm="syz.5.5724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f69cb96c799 code=0x7ffc0000 [ 514.296166][T17979] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5728'. [ 514.542922][T17687] veth0_macvtap: entered promiscuous mode [ 514.562649][ T7436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.562674][ T7436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.590323][T17687] veth1_macvtap: entered promiscuous mode [ 514.833937][ T1075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.833962][ T1075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.868374][T17687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.901857][T17687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.956986][ T140] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.957268][ T140] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.979656][ T140] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.002031][ T140] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.056835][ T810] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 515.199618][ T810] usb 3-1: Using ep0 maxpacket: 32 [ 515.205546][ T810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 515.205586][ T810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 515.207515][ T810] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 515.207548][ T810] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 515.207572][ T810] usb 3-1: Product: syz [ 515.207589][ T810] usb 3-1: SerialNumber: syz [ 515.269790][ T810] usb 3-1: config 0 descriptor?? [ 515.508568][ T6282] usb 3-1: USB disconnect, device number 84 [ 515.827341][T18013] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 515.971133][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.971158][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.204679][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.204704][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.380085][ T1232] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 516.536834][ T1232] usb 8-1: Using ep0 maxpacket: 16 [ 516.541232][ T1232] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 516.541275][ T1232] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.541299][ T1232] usb 8-1: Product: syz [ 516.541315][ T1232] usb 8-1: Manufacturer: syz [ 516.541332][ T1232] usb 8-1: SerialNumber: syz [ 516.603707][ T1232] r8152-cfgselector 8-1: Unknown version 0x0000 [ 516.603740][ T1232] r8152-cfgselector 8-1: config 0 descriptor?? [ 516.685442][T18043] program syz.5.5757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 516.685803][T18043] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 516.804078][ T1232] r8152-cfgselector 8-1: Unknown version 0x0000 [ 516.804579][ T1232] r8152-cfgselector 8-1: bad CDC descriptors [ 517.034484][ T5941] r8152-cfgselector 8-1: USB disconnect, device number 2 [ 517.269075][T18064] : renamed from vlan0 [ 518.240917][T18108] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5788'. [ 518.390275][ T5882] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 518.429933][T18116] netdevsim netdevsim6: Firmware load for './file0/file0/..' refused, path contains '..' component [ 518.551006][ T5882] usb 9-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 518.551042][ T5882] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.551065][ T5882] usb 9-1: Product: syz [ 518.551082][ T5882] usb 9-1: Manufacturer: syz [ 518.551099][ T5882] usb 9-1: SerialNumber: syz [ 518.885893][ T5882] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 518.936448][ T5882] usb 9-1: USB disconnect, device number 2 [ 518.995778][ T5882] usblp0: removed [ 519.059549][T18136] netlink: 'syz.7.5801': attribute type 10 has an invalid length. [ 519.081491][T18136] team0: Port device virt_wifi0 added [ 520.738481][T18213] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5839'. [ 521.241050][ T37] audit: type=1326 audit(2000001049.371:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18235 comm="syz.8.5851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2e92c799 code=0x7ffc0000 [ 521.241111][ T37] audit: type=1326 audit(2000001049.371:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18235 comm="syz.8.5851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2e92c799 code=0x7ffc0000 [ 521.241159][ T37] audit: type=1326 audit(2000001049.382:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18235 comm="syz.8.5851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2e92c799 code=0x7ffc0000 [ 521.241205][ T37] audit: type=1326 audit(2000001049.382:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18235 comm="syz.8.5851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2e92c799 code=0x7ffc0000 [ 521.295520][ T37] audit: type=1326 audit(2000001049.434:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18235 comm="syz.8.5851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f1d2e92c799 code=0x7ffc0000 [ 521.295682][ T37] audit: type=1326 audit(2000001049.434:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18235 comm="syz.8.5851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2e92c799 code=0x7ffc0000 [ 521.295820][ T37] audit: type=1326 audit(2000001049.434:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18235 comm="syz.8.5851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2e92c799 code=0x7ffc0000 [ 521.305144][ T37] audit: type=1326 audit(2000001049.434:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18235 comm="syz.8.5851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2e92c799 code=0x7ffc0000 [ 521.305311][ T37] audit: type=1326 audit(2000001049.434:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18235 comm="syz.8.5851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1d2e92c799 code=0x7ffc0000 [ 521.305439][ T37] audit: type=1326 audit(2000001049.434:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18235 comm="syz.8.5851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1d2e92c799 code=0x7ffc0000 [ 521.790732][ T6282] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 521.942862][ T6282] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 521.942897][ T6282] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.942919][ T6282] usb 9-1: config 0 has no interface number 0 [ 521.942966][ T6282] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 521.942996][ T6282] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8E has invalid wMaxPacketSize 0 [ 521.943022][ T6282] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 521.943052][ T6282] usb 9-1: config 0 interface 52 has no altsetting 0 [ 521.944890][ T6282] usb 9-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 521.944924][ T6282] usb 9-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 521.944948][ T6282] usb 9-1: Manufacturer: syz [ 522.002720][ T6282] usb 9-1: config 0 descriptor?? [ 522.095458][ T6282] hub 9-1:0.52: bad descriptor, ignoring hub [ 522.095501][ T6282] hub 9-1:0.52: probe with driver hub failed with error -5 [ 522.226914][ T6282] synaptics_usb 9-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 522.227185][ T6282] synaptics_usb 9-1:0.52: probe with driver synaptics_usb failed with error -5 [ 522.543244][ T5902] usb 9-1: USB disconnect, device number 3 [ 522.943019][ T5902] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 523.088629][ T5902] usb 8-1: unable to get BOS descriptor or descriptor too short [ 523.094341][ T5902] usb 8-1: config 0 has an invalid interface number: 86 but max is 0 [ 523.094374][ T5902] usb 8-1: config 0 has no interface number 0 [ 523.094424][ T5902] usb 8-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8 [ 523.094454][ T5902] usb 8-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32 [ 523.094481][ T5902] usb 8-1: config 0 interface 86 has no altsetting 0 [ 523.123075][ T5902] usb 8-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e [ 523.123111][ T5902] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.123135][ T5902] usb 8-1: Product: syz [ 523.123152][ T5902] usb 8-1: Manufacturer: syz [ 523.123170][ T5902] usb 8-1: SerialNumber: syz [ 523.192201][ T5902] usb 8-1: config 0 descriptor?? [ 523.193055][T18273] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 523.193198][T18273] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 523.403326][T18294] netlink: 'syz.5.5880': attribute type 1 has an invalid length. [ 523.403353][T18294] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5880'. [ 523.429555][ T5902] omninet 8-1:0.86: ZyXEL - omni.net usb converter detected [ 523.452333][ T5902] usb 8-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 523.496010][ T5902] usb 8-1: USB disconnect, device number 3 [ 523.512333][ T5902] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 523.513286][ T5902] omninet 8-1:0.86: device disconnected [ 524.129543][T18317] netlink: 'syz.7.5890': attribute type 5 has an invalid length. [ 524.468270][ T6282] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 524.636557][ T6282] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 524.636597][ T6282] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 59382, setting to 1024 [ 524.636644][ T6282] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 524.636671][ T6282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.692398][ T6282] usb 6-1: config 0 descriptor?? [ 524.693420][T18320] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 524.741730][ T6282] gspca_main: spca561-2.14.0 probing abcd:cdee [ 524.895184][ T6282] spca561 6-1:0.0: probe with driver spca561 failed with error -22 [ 524.904076][ T6282] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 524.904137][ T6282] usb 6-1: MIDIStreaming interface descriptor not found [ 525.048987][T18341] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5902'. [ 525.313805][ T6282] usb 6-1: USB disconnect, device number 13 [ 525.322461][T18347] ieee802154 phy1 wpan1: encryption failed: -22 [ 525.651171][T18353] netlink: 'syz.7.5908': attribute type 3 has an invalid length. [ 526.097900][T18371] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5916'. [ 526.690154][ C1] bridge0: port 3(batadv0) entered forwarding state [ 526.690185][ C1] bridge0: topology change detected, propagating [ 526.891289][T18404] netlink: 'syz.7.5930': attribute type 29 has an invalid length. [ 527.815733][T18450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5954'. [ 528.247964][T18468] usb usb1: usbfs: process 18468 (syz.7.5964) did not claim interface 0 before use [ 528.573568][T18485] binder: Bad value for 'stats' [ 528.629210][ T8180] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 528.783757][ T8180] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 528.783820][ T8180] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 528.783852][ T8180] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 528.783900][ T8180] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 528.783926][ T8180] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.867953][ T8180] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 528.869043][ T8180] usb 9-1: invalid MIDI out EP 0 [ 529.201544][T17553] udevd[17553]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 529.336251][ T8180] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 529.363509][ T8180] usb 9-1: USB disconnect, device number 4 [ 529.368403][T18501] bond1: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 529.437556][T18501] bond1 (unregistering): Released all slaves [ 529.473673][T18512] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5984'. [ 529.991203][ T5883] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 530.002796][T18532] bridge0: entered promiscuous mode [ 530.002882][T18532] bridge0: entered allmulticast mode [ 530.134363][ T5883] usb 6-1: Using ep0 maxpacket: 32 [ 530.138196][ T5883] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.138234][ T5883] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.140949][ T5883] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 530.140982][ T5883] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 530.141006][ T5883] usb 6-1: Product: syz [ 530.141022][ T5883] usb 6-1: Manufacturer: syz [ 530.276234][ T5883] hub 6-1:4.0: USB hub found [ 530.452556][ T5883] hub 6-1:4.0: config failed, hub has too many ports! (err -19) [ 530.514019][T18548] program syz.7.6002 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 530.600686][ T810] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 530.766144][ T810] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 530.766183][ T810] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 530.771401][ T810] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 530.771433][ T810] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 530.771456][ T810] usb 9-1: SerialNumber: syz [ 530.806652][ T5902] usb 6-1: USB disconnect, device number 14 [ 530.858854][ T810] usb 9-1: bad CDC descriptors [ 530.859846][ T810] usb-storage 9-1:1.0: USB Mass Storage device detected [ 530.915549][ T810] usb-storage 9-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 530.932473][ T810] scsi host1: usb-storage 9-1:1.0 [ 531.161538][T18571] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6012'. [ 531.570475][ T38] INFO: task syz.0.3505:13294 blocked for more than 143 seconds. [ 531.570503][ T38] Not tainted syzkaller #0 [ 531.570516][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 531.570533][ T38] task:syz.0.3505 state:D stack:27144 pid:13294 tgid:13293 ppid:5799 task_flags:0x400140 flags:0x00080002 [ 531.570614][ T38] Call Trace: [ 531.570623][ T38] [ 531.570640][ T38] __schedule+0x1553/0x5240 [ 531.570846][ T38] ? trace_irq_disable+0x3b/0x150 [ 531.570904][ T38] ? __pfx___schedule+0x10/0x10 [ 531.570945][ T38] rt_mutex_schedule+0x76/0xf0 [ 531.570970][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 531.571028][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 531.571055][ T38] rt_mutex_slowlock+0x2dc/0x7b0 [ 531.571083][ T38] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 531.571205][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 531.571258][ T38] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 531.571377][ T38] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 531.571399][ T38] mutex_lock_nested+0x168/0x1d0 [ 531.571428][ T38] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 531.571458][ T38] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 531.571487][ T38] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 531.571575][ T38] genl_family_rcv_msg_doit+0x22a/0x330 [ 531.571595][ T38] ? __asan_memcpy+0x40/0x70 [ 531.571786][ T38] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 531.571820][ T38] ? bpf_lsm_capable+0x9/0x20 [ 531.571883][ T38] ? security_capable+0x7e/0x2c0 [ 531.571982][ T38] genl_rcv_msg+0x61c/0x7a0 [ 531.572008][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 531.572026][ T38] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 531.572055][ T38] ? __pfx_ref_tracker_free+0x10/0x10 [ 531.572125][ T38] ? __skb_clone+0x63/0x7a0 [ 531.572192][ T38] netlink_rcv_skb+0x232/0x4b0 [ 531.572313][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 531.572336][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 531.572373][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 531.572398][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 531.572426][ T38] genl_rcv+0x28/0x40 [ 531.572443][ T38] netlink_unicast+0x831/0x9f0 [ 531.572474][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 531.572498][ T38] ? netlink_sendmsg+0x650/0xb40 [ 531.572522][ T38] ? skb_put+0x11b/0x210 [ 531.572592][ T38] netlink_sendmsg+0x813/0xb40 [ 531.572625][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.572657][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 531.572734][ T38] ____sys_sendmsg+0x94c/0x9c0 [ 531.572780][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 531.572807][ T38] ? import_iovec+0x73/0xa0 [ 531.572869][ T38] ___sys_sendmsg+0x2a5/0x360 [ 531.572893][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 531.572919][ T38] ? futex_wait+0x29a/0x380 [ 531.572962][ T38] ? __fget_files+0x2a/0x420 [ 531.573018][ T38] ? __fget_files+0x3a6/0x420 [ 531.573050][ T38] __x64_sys_sendmsg+0x1c3/0x2a0 [ 531.573073][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 531.573101][ T38] ? rcu_is_watching+0x15/0xb0 [ 531.573145][ T38] do_syscall_64+0x14d/0xf80 [ 531.573242][ T38] ? trace_irq_disable+0x3b/0x150 [ 531.573271][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.573317][ T38] ? clear_bhb_loop+0x40/0x90 [ 531.573449][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.573476][ T38] RIP: 0033:0x7ff2c8a6c799 [ 531.573509][ T38] RSP: 002b:00007ff2c6cbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.573570][ T38] RAX: ffffffffffffffda RBX: 00007ff2c8ce5fa0 RCX: 00007ff2c8a6c799 [ 531.573589][ T38] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 531.573606][ T38] RBP: 00007ff2c8b02c99 R08: 0000000000000000 R09: 0000000000000000 [ 531.573622][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.573726][ T38] R13: 00007ff2c8ce6038 R14: 00007ff2c8ce5fa0 R15: 00007ffcb8467ce8 [ 531.573768][ T38] [ 531.573819][ T38] [ 531.573819][ T38] Showing all locks held in the system: [ 531.573831][ T38] 2 locks held by kworker/u8:0/12: [ 531.573848][ T38] 1 lock held by khungtaskd/38: [ 531.573861][ T38] #0: ffffffff8ddcb980 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 531.573949][ T38] 2 locks held by kworker/u8:2/43: [ 531.573963][ T38] #0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 531.574029][ T38] #1: ffffc90000b57c40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 531.574119][ T38] 2 locks held by getty/5551: [ 531.574134][ T38] #0: ffff8880323ad0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 531.574279][ T38] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 531.574344][ T38] 2 locks held by syz.1.3098/12443: [ 531.574359][ T38] #0: ffffffff8f1c91a0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 531.574410][ T38] #1: ffffffff8e0e5f18 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x13e/0x1630 [ 531.574561][ T38] 9 locks held by syz-executor/13074: [ 531.574578][ T38] 2 locks held by syz.0.3505/13294: [ 531.574593][ T38] #0: ffffffff8f1c91a0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 531.574646][ T38] #1: ffffffff8e0e5f18 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 531.574710][ T38] 2 locks held by syz.3.5337/17119: [ 531.574723][ T38] #0: ffffffff8f1c91a0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 531.574776][ T38] #1: ffffffff8e0e5f18 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 531.574836][ T38] 2 locks held by syz.4.5362/17168: [ 531.574849][ T38] #0: ffffffff8f1c91a0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 531.574901][ T38] #1: ffffffff8e0e5f18 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 531.574966][ T38] 2 locks held by syz.2.6017/18580: [ 531.574981][ T38] 5 locks held by syz.6.6016/18584: [ 531.574997][ T38] [ 531.575003][ T38] ============================================= [ 531.575003][ T38] [ 531.575021][ T38] NMI backtrace for cpu 0 [ 531.575043][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 531.575069][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 531.575084][ T38] Call Trace: [ 531.575094][ T38] [ 531.575103][ T38] dump_stack_lvl+0xe8/0x150 [ 531.575155][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 531.575216][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 531.575260][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 531.575293][ T38] sys_info+0x135/0x170 [ 531.575317][ T38] watchdog+0xfd9/0x1030 [ 531.575352][ T38] ? watchdog+0x21a/0x1030 [ 531.575388][ T38] kthread+0x388/0x470 [ 531.575413][ T38] ? __pfx_watchdog+0x10/0x10 [ 531.575440][ T38] ? __pfx_kthread+0x10/0x10 [ 531.575467][ T38] ret_from_fork+0x51e/0xb90 [ 531.575502][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 531.575532][ T38] ? __switch_to+0xc7d/0x1450 [ 531.575578][ T38] ? __pfx_kthread+0x10/0x10 [ 531.575609][ T38] ret_from_fork_asm+0x1a/0x30 [ 531.575649][ T38] [ 531.575674][ T38] Sending NMI from CPU 0 to CPUs 1: [ 531.575703][ C1] NMI backtrace for cpu 1 [ 531.575719][ C1] CPU: 1 UID: 0 PID: 18580 Comm: syz.2.6017 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 531.575749][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 531.575761][ C1] RIP: 0010:__memcg_slab_post_alloc_hook+0x93b/0xa20 [ 531.575837][ C1] Code: 8b 3f 4c 3b 3d f6 b1 3b 0d 4c 8b 6c 24 10 4c 8b 64 24 30 75 8d eb 11 e8 03 d5 ff ff 48 89 c3 48 85 db 0f 85 c2 f7 ff ff b0 01 <48> 81 c4 90 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 4f 32 f8 08 [ 531.575854][ C1] RSP: 0018:ffffc9000b24fa48 EFLAGS: 00000246 [ 531.575870][ C1] RAX: 1ffff11004c58a01 RBX: 0000000000000000 RCX: dffffc0000000000 [ 531.575885][ C1] RDX: 0000000000000820 RSI: 0000000000000000 RDI: ffff88801b2a1dc0 [ 531.575897][ C1] RBP: 0000000000000820 R08: ffffc9000b24fb28 R09: 0000000000000000 [ 531.575910][ C1] R10: ffff8880728035b0 R11: ffffffff81af88b0 R12: 0000000000000001 [ 531.575923][ C1] R13: ffffc9000b24fb28 R14: ffff8880262c5390 R15: 0000000000000000 [ 531.575937][ C1] FS: 0000000000000000(0000) GS:ffff88812643c000(0000) knlGS:0000000000000000 [ 531.575952][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 531.575964][ C1] CR2: 00007f69cc7156b8 CR3: 000000003d21a000 CR4: 00000000003526f0 [ 531.575981][ C1] Call Trace: [ 531.575988][ C1] [ 531.576006][ C1] kmem_cache_alloc_noprof+0x3f4/0x680 [ 531.576089][ C1] ? __send_signal_locked+0x22c/0xec0 [ 531.576123][ C1] __send_signal_locked+0x22c/0xec0 [ 531.576149][ C1] do_notify_parent+0xb8a/0xda0 [ 531.576178][ C1] ? __pfx_do_notify_parent+0x10/0x10 [ 531.576211][ C1] ? preempt_count_add+0x91/0x190 [ 531.576237][ C1] ? kill_orphaned_pgrp+0x5ea/0x610 [ 531.576263][ C1] do_exit+0x13f1/0x23c0 [ 531.576288][ C1] ? __pfx_do_exit+0x10/0x10 [ 531.576307][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 531.576334][ C1] ? __rcu_read_unlock+0x83/0xe0 [ 531.576362][ C1] ? rt_spin_unlock+0x160/0x200 [ 531.576388][ C1] do_group_exit+0x21b/0x2d0 [ 531.576411][ C1] __x64_sys_exit_group+0x3f/0x40 [ 531.576431][ C1] x64_sys_call+0x221a/0x2240 [ 531.576448][ C1] do_syscall_64+0x14d/0xf80 [ 531.576476][ C1] ? trace_irq_disable+0x3b/0x150 [ 531.576498][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.576517][ C1] ? clear_bhb_loop+0x40/0x90 [ 531.576539][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.576557][ C1] RIP: 0033:0x7f6374adc799 [ 531.576574][ C1] Code: Unable to access opcode bytes at 0x7f6374adc76f. [ 531.576583][ C1] RSP: 002b:00007fff47147868 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 531.576602][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6374adc799 [ 531.576615][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 531.576626][ C1] RBP: 00007fff471478cc R08: 0000000000000000 R09: 00000000000927c0 [ 531.576639][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000004fd [ 531.576650][ C1] R13: 00000000000927c0 R14: 000000000008454e R15: 00007fff47147920 [ 531.576673][ C1] [ 531.576788][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 531.576806][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 531.576831][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 531.576845][ T38] Call Trace: [ 531.576854][ T38] [ 531.576864][ T38] vpanic+0x56c/0xa60 [ 531.576902][ T38] ? __pfx___schedule+0x10/0x10 [ 531.576937][ T38] ? __pfx_vpanic+0x10/0x10 [ 531.576984][ T38] panic+0xc5/0xd0 [ 531.577019][ T38] ? __pfx_panic+0x10/0x10 [ 531.577068][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 531.577099][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 531.577134][ T38] watchdog+0x1023/0x1030 [ 531.577167][ T38] ? watchdog+0x21a/0x1030 [ 531.577205][ T38] kthread+0x388/0x470 [ 531.577240][ T38] ? __pfx_watchdog+0x10/0x10 [ 531.577269][ T38] ? __pfx_kthread+0x10/0x10 [ 531.577297][ T38] ret_from_fork+0x51e/0xb90 [ 531.577335][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 531.577368][ T38] ? __switch_to+0xc7d/0x1450 [ 531.577403][ T38] ? __pfx_kthread+0x10/0x10 [ 531.577431][ T38] ret_from_fork_asm+0x1a/0x30 [ 531.577472][ T38] [ 531.578085][ T38] Kernel Offset: disabled