last executing test programs: 4m30.802652284s ago: executing program 3 (id=2877): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@hopopts_2292={{0x28, 0x29, 0xb, {0x0, 0x1, '\x00', [@calipso={0x7, 0x8, {0xb1bbf2d6b755cdf8, 0x0, 0x0, 0x3}}]}}}], 0x28}, 0xff00) 4m30.583143674s ago: executing program 3 (id=2884): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0xfffffffffffffffc, &(0x7f00000002c0)=0x60) 4m30.448829413s ago: executing program 3 (id=2888): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x14, 0x1, 0x8c35, 0x1f68}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x4000000) 4m30.341023476s ago: executing program 3 (id=2893): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000100)={0x0, 0x33524742, 0x640, 0x4b0, 0x3, @stepwise={{0x80000001, 0x9}, {0x97c1, 0xffffffff}, {0xffffffff, 0x36}}}) 4m30.230554656s ago: executing program 3 (id=2896): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000000380)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x24040000) 4m25.259837644s ago: executing program 3 (id=2987): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000032c0)={0x0, 0x20, &(0x7f0000000240)={&(0x7f0000000e80)={0x14, 0x26, 0x1, 0x70b525, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0xffffffff, 0x0, 0x80}, 0x0) 4m10.251184887s ago: executing program 32 (id=2987): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000032c0)={0x0, 0x20, &(0x7f0000000240)={&(0x7f0000000e80)={0x14, 0x26, 0x1, 0x70b525, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0xffffffff, 0x0, 0x80}, 0x0) 2m37.556153768s ago: executing program 2 (id=5500): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="040100001000010400400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="0000000000000000bc00128009000100766c616e00000000ac00028004000480280004800c000100000001000100000086fd010000080000080000000c0001000100000009fe0000100003800c00010000020000ff000000580003800c00010002000000020000000c000100ffffff7f000200000c000100ff0f0000040000000c00010009000000000001000c00010000000000070000000c000100ffffffff000200000c000104b90a0000ff07000006000500810000000c0002000a000000f7ffffff13000300766c616e30"], 0x104}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 2m37.409928029s ago: executing program 2 (id=5505): r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8936, 0x0) 2m37.299799169s ago: executing program 2 (id=5507): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) 2m37.219205659s ago: executing program 2 (id=5511): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000001c0)=0x38) 2m37.143136096s ago: executing program 2 (id=5513): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 2m36.981741641s ago: executing program 2 (id=5518): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x26, 0x301, 0x20010002, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) 2m21.928327673s ago: executing program 33 (id=5518): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x26, 0x301, 0x20010002, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) 2.719315259s ago: executing program 0 (id=9092): mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0xa145c7, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x0, 0x0, 0x13}, 0x18) 2.57053061s ago: executing program 0 (id=9097): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x2, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) 2.456286068s ago: executing program 0 (id=9099): unshare(0x22020600) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) 2.362536766s ago: executing program 0 (id=9102): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xe}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x8, 0xdc9}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0x7, 0xa9, 0x1, 0x1}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4c840}, 0x40800) 2.213794539s ago: executing program 0 (id=9107): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x6, 0x2, 0x4246}, @TIPC_NLA_NET_NODEID={0x0, 0x3, 0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) 2.114583147s ago: executing program 0 (id=9108): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b1b", @ANYRES16=r0]) 1.139678378s ago: executing program 4 (id=9135): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x0, 0x80000}) 802.19522ms ago: executing program 4 (id=9144): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x14) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x2], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7d7b], [0x7ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0xfffffffd]], '\x00', [{0x0, 0xf8}, {}, {0xffffffff, 0x2}, {0x3f050be3, 0x1, 0x0, 0x1}, {}, {}, {0x400, 0x4}, {0xff}, {0x0, 0x2b2b}, {0x2, 0x3}, {}, {0xfffffff8}], '\x00', 0x1, 0x0, 0x0, 0xf8}) 766.741366ms ago: executing program 6 (id=9145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x4048000}, 0x880) 749.164557ms ago: executing program 4 (id=9146): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101840, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x4) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0001) 654.395969ms ago: executing program 5 (id=9148): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f0000000400)='//\xf2/\x06\b\xa30\\/\x00\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c 1 [ 360.565125][ T5807] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 360.574502][ T5807] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 360.580675][ T1237] usb 6-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 360.580703][ T1237] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.580722][ T1237] usb 6-1: Product: syz [ 360.580734][ T1237] usb 6-1: Manufacturer: syz [ 360.580746][ T1237] usb 6-1: SerialNumber: syz [ 360.588123][ T5807] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 360.590014][ T5807] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 360.628092][ T1237] usb 6-1: config 0 descriptor?? [ 360.718763][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 360.743252][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12408, setting to 64 [ 360.746491][ T5870] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 360.746520][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.746538][ T5870] usb 5-1: Product: syz [ 360.746550][ T5870] usb 5-1: Manufacturer: syz [ 360.746563][ T5870] usb 5-1: SerialNumber: syz [ 360.778753][T19108] wg1 speed is unknown, defaulting to 1000 [ 360.806460][ T5870] usb 5-1: config 0 descriptor?? [ 360.858708][ T1237] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 360.858736][ T1237] peak_usb 6-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 360.867420][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 360.902987][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 360.938735][ T9] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 360.938767][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.938786][ T9] usb 2-1: Product: syz [ 360.938800][ T9] usb 2-1: Manufacturer: syz [ 360.938813][ T9] usb 2-1: SerialNumber: syz [ 360.959328][ T3508] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 361.033457][ T9] usb 2-1: config 0 descriptor?? [ 361.034287][T19104] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 361.076219][ T5870] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input30 [ 361.149379][ T9] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input31 [ 361.270851][ T1237] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 361.365020][ T9] usb 5-1: USB disconnect, device number 23 [ 361.464396][ T1237] usb 6-1: USB disconnect, device number 15 [ 361.512877][ T48] usb 2-1: USB disconnect, device number 27 [ 361.512975][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 362.203306][T19194] FAT-fs (nbd4): unable to read boot sector [ 362.649722][ T5815] Bluetooth: hci6: command tx timeout [ 362.650435][ T1158] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 362.826525][T19256] netlink: 752 bytes leftover after parsing attributes in process `syz.0.5931'. [ 363.122881][T19108] chnl_net:caif_netlink_parms(): no params data found [ 363.510465][T19108] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.512009][T19108] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.512233][T19108] bridge_slave_0: entered allmulticast mode [ 363.514780][T19108] bridge_slave_0: entered promiscuous mode [ 363.551876][T19108] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.553613][T19108] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.553850][T19108] bridge_slave_1: entered allmulticast mode [ 363.556345][T19108] bridge_slave_1: entered promiscuous mode [ 363.628079][T19108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.631980][T19108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.696657][T19108] team0: Port device team_slave_0 added [ 363.707591][T19108] team0: Port device team_slave_1 added [ 363.762047][T19108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.762063][T19108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.762085][T19108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.766966][T19108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.766989][T19108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.767010][T19108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.967043][T19108] hsr_slave_0: entered promiscuous mode [ 363.975809][T19108] hsr_slave_1: entered promiscuous mode [ 363.976670][T19108] debugfs: 'hsr0' already exists in 'hsr' [ 363.976692][T19108] Cannot create hsr debugfs directory [ 364.449180][T19487] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5966'. [ 364.727482][ T5815] Bluetooth: hci6: command tx timeout [ 364.748242][T19544] netlink: 'syz.5.5975': attribute type 1 has an invalid length. [ 364.748265][T19544] netlink: 276 bytes leftover after parsing attributes in process `syz.5.5975'. [ 364.992190][T19108] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 365.017792][ T1237] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 365.041319][T19108] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 365.075973][T19108] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 365.112598][T19108] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 365.179979][ T1237] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.180033][ T1237] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4B, changing to 0xB [ 365.180057][ T1237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 365.180081][ T1237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 50562, setting to 64 [ 365.180106][ T1237] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD9, changing to 0x89 [ 365.180128][ T1237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 365.180148][ T1237] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 365.181613][ T1237] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.ff [ 365.181637][ T1237] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 365.181655][ T1237] usb 5-1: Manufacturer: syz [ 365.185929][ T1237] usb 5-1: config 0 descriptor?? [ 365.193854][T19554] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 365.206424][ T1237] mceusb 5-1:0.0: mceusb_dev_probe: device setup failed! [ 365.206459][ T1237] mceusb 5-1:0.0: probe with driver mceusb failed with error -12 [ 365.446401][ T9] usb 5-1: USB disconnect, device number 24 [ 365.447028][T19108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.561899][T19108] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.589506][T19371] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.594177][T19371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.630289][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.630444][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.980959][T19639] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5999'. [ 366.012031][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 366.110186][T19642] openvswitch: netlink: Flow key attr not present in new flow. [ 366.192815][T19650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.204172][T19108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.807588][ T5815] Bluetooth: hci6: command tx timeout [ 366.816683][T19108] veth0_vlan: entered promiscuous mode [ 366.843563][T19108] veth1_vlan: entered promiscuous mode [ 366.871146][T19691] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6021'. [ 366.916056][T19108] veth0_macvtap: entered promiscuous mode [ 366.936923][T19108] veth1_macvtap: entered promiscuous mode [ 366.971793][T19108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.000621][T19108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.025476][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.044463][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.045490][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.046385][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.422288][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.422309][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.598380][ T1419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.598401][ T1419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.908030][T19749] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 367.908069][T19749] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 367.908087][T19749] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 367.934818][ T1419] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 368.694923][T19790] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 368.740758][T19790] bond4 (unregistering): Released all slaves [ 368.887438][ T5815] Bluetooth: hci6: command tx timeout [ 369.165346][T19885] openvswitch: netlink: IP tunnel dst address not specified [ 369.463257][T19907] netlink: 10 bytes leftover after parsing attributes in process `syz.5.6084'. [ 370.171401][T19957] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 370.207481][T19960] netlink: 256 bytes leftover after parsing attributes in process `syz.6.6107'. [ 370.370828][T19970] netlink: 'syz.4.6110': attribute type 1 has an invalid length. [ 370.559962][T19985] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6119'. [ 370.584142][T19982] gretap1: entered allmulticast mode [ 370.787513][ T5783] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 370.954083][ T5783] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 4 [ 370.954115][ T5783] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 370.954151][ T5783] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 0 [ 370.979581][ T5783] usb 6-1: string descriptor 0 read error: -22 [ 370.979729][ T5783] usb 6-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 370.979750][ T5783] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.013805][ T5783] usb 6-1: low speed audio streaming not supported [ 371.013828][ T5783] usb 6-1: low speed audio streaming not supported [ 371.447540][ T5886] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 371.467769][ T5783] usb 6-1: us122l: couldn't allocate write buffer [ 371.468678][ T5783] snd-usb-us122l 6-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 371.529271][ T5783] usb 6-1: USB disconnect, device number 16 [ 371.610120][ T5886] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 371.610148][ T5886] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.610165][ T5886] usb 7-1: config 0 has no interface number 0 [ 371.610208][ T5886] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 371.610229][ T5886] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 371.612607][ T5886] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 371.612631][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.612650][ T5886] usb 7-1: Product: syz [ 371.612660][ T5886] usb 7-1: Manufacturer: syz [ 371.612672][ T5886] usb 7-1: SerialNumber: syz [ 371.655191][T20073] CIFS mount error: No usable UNC path provided in device string! [ 371.655191][T20073] [ 371.655212][T20073] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 371.722829][ T5886] usb 7-1: config 0 descriptor?? [ 371.771777][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 372.152390][ T5886] usbtouchscreen 7-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 372.187886][ T5886] usb 7-1: USB disconnect, device number 2 [ 372.860306][T20154] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6176'. [ 373.098050][T20169] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 373.425614][T20193] netlink: 'syz.4.6194': attribute type 1 has an invalid length. [ 373.713101][ T164] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 373.771607][ T5794] cgroup: fork rejected by pids controller in /syz0 [ 374.067552][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 374.223358][ T9] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 374.223396][ T9] usb 5-1: config 0 has no interface number 0 [ 374.223437][ T9] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 374.223461][ T9] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.223495][ T9] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 374.223515][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.234301][ T9] usb 5-1: config 0 descriptor?? [ 374.257819][ T9] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input33 [ 374.340614][T20233] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 374.340641][T20233] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 374.411377][T20233] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 374.649641][ T9] usb 5-1: USB disconnect, device number 25 [ 374.998869][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 375.019453][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 375.042896][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 375.044016][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 375.044754][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 375.389551][T19371] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.415136][ T36] audit: type=1326 audit(375.237:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20308 comm="syz.6.6235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f9e0c799 code=0x7ffc0000 [ 375.415923][ T36] audit: type=1326 audit(375.237:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20308 comm="syz.6.6235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f9e0c799 code=0x7ffc0000 [ 375.465005][ T36] audit: type=1326 audit(375.287:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20308 comm="syz.6.6235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f9e0c799 code=0x7ffc0000 [ 375.465417][ T36] audit: type=1326 audit(375.287:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20308 comm="syz.6.6235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f31f9e0c799 code=0x7ffc0000 [ 375.465459][ T36] audit: type=1326 audit(375.287:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20308 comm="syz.6.6235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f9e0c799 code=0x7ffc0000 [ 375.465800][ T36] audit: type=1326 audit(375.287:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20308 comm="syz.6.6235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f9e0c799 code=0x7ffc0000 [ 375.466333][ T36] audit: type=1326 audit(375.287:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20308 comm="syz.6.6235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f31f9e0c799 code=0x7ffc0000 [ 375.466375][ T36] audit: type=1326 audit(375.287:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20308 comm="syz.6.6235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f9e0c799 code=0x7ffc0000 [ 375.466639][ T36] audit: type=1326 audit(375.287:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20308 comm="syz.6.6235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f31f9e0c799 code=0x7ffc0000 [ 375.767376][ T5807] Bluetooth: hci5: command 0x0406 tx timeout [ 375.791432][T20283] wg1 speed is unknown, defaulting to 1000 [ 375.990458][T20339] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6245'. [ 376.178629][T19371] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.080845][T19371] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.127467][ T5815] Bluetooth: hci1: command tx timeout [ 377.530276][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 377.566416][T20438] netlink: 'syz.5.6283': attribute type 10 has an invalid length. [ 377.566438][T20438] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6283'. [ 377.626502][T19371] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.663640][ T36] audit: type=1326 audit(377.487:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20442 comm="syz.6.6285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f9e0c799 code=0x7ffc0000 [ 377.718236][T20438] batman_adv: batadv0: Adding interface: vlan1 [ 377.718256][T20438] batman_adv: batadv0: Interface activated: vlan1 [ 377.985108][T20465] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6291'. [ 378.730916][T19371] bridge_slave_1: left allmulticast mode [ 378.730943][T19371] bridge_slave_1: left promiscuous mode [ 378.731190][T19371] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.818878][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.871416][T19371] bridge_slave_0: left allmulticast mode [ 378.871446][T19371] bridge_slave_0: left promiscuous mode [ 378.871722][T19371] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.190266][T20572] netlink: 'syz.5.6315': attribute type 10 has an invalid length. [ 379.207411][ T5815] Bluetooth: hci1: command tx timeout [ 379.459429][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 380.583193][T19371] bond0 (unregistering): (slave 10): Releasing backup interface [ 380.662539][T19371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.701782][T19371] bond0 (unregistering): Released all slaves [ 380.720678][T19371] bond1 (unregistering): Released all slaves [ 380.751522][T19371] bond2 (unregistering): Released all slaves [ 380.770786][T19371] bond3 (unregistering): Released all slaves [ 380.842092][T20564] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 380.843035][T20572] veth1_vlan: entered allmulticast mode [ 380.856947][T20572] team0: Device veth1_vlan failed to register rx_handler [ 380.958643][T20283] chnl_net:caif_netlink_parms(): no params data found [ 380.986334][T20586] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 381.063073][T20586] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 381.296819][T19371] m1I: left promiscuous mode [ 381.307401][ T5815] Bluetooth: hci1: command tx timeout [ 381.542754][T20716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6363'. [ 381.700581][T20283] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.700778][T20283] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.700967][T20283] bridge_slave_0: entered allmulticast mode [ 381.767215][T20283] bridge_slave_0: entered promiscuous mode [ 381.790522][T20283] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.790720][T20283] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.790966][T20283] bridge_slave_1: entered allmulticast mode [ 381.825514][T20283] bridge_slave_1: entered promiscuous mode [ 382.179962][T20283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.208529][T20283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.294553][T20283] team0: Port device team_slave_0 added [ 382.305306][T20283] team0: Port device team_slave_1 added [ 382.537059][T20283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.537077][T20283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.537102][T20283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.588319][T20283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.588335][T20283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.588359][T20283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.003934][T20283] hsr_slave_0: entered promiscuous mode [ 383.005246][T20283] hsr_slave_1: entered promiscuous mode [ 383.006111][T20283] debugfs: 'hsr0' already exists in 'hsr' [ 383.006134][T20283] Cannot create hsr debugfs directory [ 383.326693][ T3508] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 383.375242][ T5815] Bluetooth: hci1: command tx timeout [ 383.432577][T20910] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 383.591860][ T5870] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 383.630623][T20937] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 384.021026][T20970] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6407'. [ 384.027839][ T5886] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 384.515499][T21003] IPVS: length: 218 != 24 [ 384.571173][ T68] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 385.213891][ T3508] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 385.426083][T21063] netlink: 'syz.5.6427': attribute type 8 has an invalid length. [ 385.426644][T21063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 385.890037][ T1042] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 385.890286][ T1042] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 385.969960][T21101] netlink: 'syz.4.6439': attribute type 1 has an invalid length. [ 385.969982][T21101] netlink: 'syz.4.6439': attribute type 2 has an invalid length. [ 386.315540][T21093] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 386.315619][T21093] block device autoloading is deprecated and will be removed. [ 386.658041][T21134] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6451'. [ 386.658182][T21134] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6451'. [ 386.808034][ T1237] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 386.937571][T19371] hsr_slave_0: left promiscuous mode [ 386.955766][T21152] netlink: 'syz.5.6459': attribute type 10 has an invalid length. [ 386.977697][T19371] hsr_slave_1: left promiscuous mode [ 386.978816][T19371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.978845][T19371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.039327][T19371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.039355][T19371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.161016][T19371] veth1_macvtap: left promiscuous mode [ 387.161113][T19371] veth0_macvtap: left promiscuous mode [ 387.161344][T19371] veth1_vlan: left promiscuous mode [ 387.161518][T19371] veth0_vlan: left promiscuous mode [ 387.243069][T21167] netlink: 'syz.4.6467': attribute type 9 has an invalid length. [ 387.243091][T21167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6467'. [ 387.512194][T21180] futex_wake_op: syz.4.6472 tries to shift op by 36; fix this program [ 388.023474][T21204] netlink: 'syz.4.6484': attribute type 1 has an invalid length. [ 388.023497][T21204] netlink: 2096 bytes leftover after parsing attributes in process `syz.4.6484'. [ 388.023513][T21204] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6484'. [ 388.388079][T19371] team0 (unregistering): Port device 5 removed [ 388.410359][ T1158] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 388.438252][T19371] team0 (unregistering): Port device team_slave_0 removed [ 388.756726][T21152] bridge0: port 4(bond0) entered disabled state [ 388.780301][T21152] bond0: left allmulticast mode [ 388.780322][T21152] bond_slave_0: left allmulticast mode [ 388.780338][T21152] bond_slave_1: left allmulticast mode [ 388.780357][T21152] bond0: left promiscuous mode [ 388.780367][T21152] bond_slave_0: left promiscuous mode [ 388.780677][T21152] bond_slave_1: left promiscuous mode [ 388.784527][T21152] bridge0: port 4(bond0) entered disabled state [ 388.886609][T21152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.913799][T21152] team0: Port device bond0 added [ 389.451777][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 389.451795][ T36] audit: type=1326 audit(389.277:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21262 comm="syz.6.6509" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31f9e0c799 code=0x0 [ 389.927636][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 390.331410][ T36] audit: type=1326 audit(390.137:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21308 comm="syz.6.6524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f9e0c799 code=0x7ffc0000 [ 390.331462][ T36] audit: type=1326 audit(390.137:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21308 comm="syz.6.6524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f9e0c799 code=0x7ffc0000 [ 390.340065][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 390.418379][ T36] audit: type=1326 audit(390.177:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21308 comm="syz.6.6524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f9e0c799 code=0x7ffc0000 [ 390.418425][ T36] audit: type=1326 audit(390.247:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21308 comm="syz.6.6524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f9e0c799 code=0x7ffc0000 [ 390.419102][ T36] audit: type=1326 audit(390.247:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21308 comm="syz.6.6524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f31f9e0c799 code=0x7ffc0000 [ 390.419139][ T36] audit: type=1326 audit(390.247:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21308 comm="syz.6.6524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f9e0c799 code=0x7ffc0000 [ 390.419167][ T36] audit: type=1326 audit(390.247:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21308 comm="syz.6.6524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f9e0c799 code=0x7ffc0000 [ 390.420350][ T36] audit: type=1326 audit(390.247:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21308 comm="syz.6.6524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f31f9e0c799 code=0x7ffc0000 [ 390.420392][ T36] audit: type=1326 audit(390.247:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21308 comm="syz.6.6524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f31f9e0c799 code=0x7ffc0000 [ 390.950328][T20283] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 391.097569][T20283] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 391.175930][T20283] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 391.269880][T20283] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 391.693107][T20283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.938583][T20283] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.950401][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.957530][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.034622][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.044783][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.455918][T21432] netlink: 88 bytes leftover after parsing attributes in process `syz.6.6559'. [ 393.011960][T20283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.201807][T20283] veth0_vlan: entered promiscuous mode [ 393.238894][ T5870] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 393.249603][T20283] veth1_vlan: entered promiscuous mode [ 393.367552][ T808] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 393.389337][ T5870] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 393.389363][ T5870] usb 6-1: config 0 has no interface number 0 [ 393.389391][ T5870] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 393.389427][ T5870] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 393.389451][ T5870] usb 6-1: config 0 interface 255 has no altsetting 0 [ 393.389481][ T5870] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 393.389500][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.394871][ T5870] usb 6-1: config 0 descriptor?? [ 393.473908][ T5870] ums-realtek 6-1:0.255: USB Mass Storage device detected [ 393.528760][ T68] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 393.552570][ T808] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 393.552610][ T808] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 393.552630][ T808] usb 5-1: Product: syz [ 393.552643][ T808] usb 5-1: Manufacturer: syz [ 393.552654][ T808] usb 5-1: SerialNumber: syz [ 393.570061][ T808] usb 5-1: config 0 descriptor?? [ 393.612337][T20283] veth0_macvtap: entered promiscuous mode [ 393.617146][T20283] veth1_macvtap: entered promiscuous mode [ 393.633458][ T808] ch341 5-1:0.0: ch341-uart converter detected [ 393.667077][ T5870] usb 6-1: USB disconnect, device number 17 [ 393.785848][ T808] usb 5-1: failed to receive control message: -121 [ 393.785904][ T808] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 393.851042][T20283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.921409][T20283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.945028][T21520] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6580'. [ 393.945047][T21520] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6580'. [ 393.973020][ T164] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.973267][ T164] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.973470][ T164] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.030262][ T164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.042788][ T1237] usb 5-1: USB disconnect, device number 26 [ 394.045045][ T1237] ch341 5-1:0.0: device disconnected [ 394.631604][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.631626][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.871612][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.871632][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.010011][T21579] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6594'. [ 395.010383][T21579] Unknown options in mask b7f2 [ 395.174061][T21587] netlink: 'syz.4.6597': attribute type 11 has an invalid length. [ 395.174118][T21587] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6597'. [ 395.448395][T19371] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 395.717472][T21620] netlink: 'syz.4.6610': attribute type 11 has an invalid length. [ 396.354417][T21663] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 396.859342][T21698] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6646'. [ 397.420451][T21740] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6662'. [ 397.578800][T21748] netlink: 'syz.5.6666': attribute type 21 has an invalid length. [ 397.797421][ T808] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 397.951790][ T808] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 397.951818][ T808] usb 5-1: config 0 interface 0 has no altsetting 0 [ 397.954064][ T808] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 397.954090][ T808] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 397.954107][ T808] usb 5-1: Product: syz [ 397.954118][ T808] usb 5-1: Manufacturer: syz [ 397.954129][ T808] usb 5-1: SerialNumber: syz [ 398.021698][ T808] usb 5-1: config 0 descriptor?? [ 398.044380][ T808] usb 5-1: selecting invalid altsetting 0 [ 398.117465][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 398.269067][ T10] usb 7-1: config 0 has an invalid interface number: 238 but max is 0 [ 398.269093][ T10] usb 7-1: config 0 has no interface number 0 [ 398.269134][ T10] usb 7-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 398.269153][ T10] usb 7-1: config 0 interface 238 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 398.269254][ T10] usb 7-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 128 [ 398.322140][ T808] usb 5-1: USB disconnect, device number 27 [ 398.337759][ T10] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 398.337786][ T10] usb 7-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 398.337805][ T10] usb 7-1: Product: syz [ 398.337817][ T10] usb 7-1: Manufacturer: syz [ 398.337829][ T10] usb 7-1: SerialNumber: syz [ 398.389154][ T10] usb 7-1: config 0 descriptor?? [ 398.390057][T21769] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 398.442622][ T10] ni6501 7-1:0.238: driver 'ni6501' failed to auto-configure device. [ 398.647460][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 398.686165][ T10] usb 7-1: USB disconnect, device number 3 [ 398.692140][T21828] openvswitch: netlink: Duplicate or invalid key (type 0). [ 398.692174][T21828] openvswitch: netlink: Actions may not be safe on all matching packets [ 399.015416][T21848] netlink: 'syz.4.6694': attribute type 1 has an invalid length. [ 399.304237][ T1158] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 399.630133][T21876] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6708'. [ 399.910760][ T36] audit: type=1326 audit(399.737:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21888 comm="syz.4.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea81ec799 code=0x7ffc0000 [ 399.911007][ T36] audit: type=1326 audit(399.737:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21888 comm="syz.4.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea81ec799 code=0x7ffc0000 [ 399.911329][ T36] audit: type=1326 audit(399.737:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21888 comm="syz.4.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea81ec799 code=0x7ffc0000 [ 399.921890][ T36] audit: type=1326 audit(399.747:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21888 comm="syz.4.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea81ec799 code=0x7ffc0000 [ 399.922162][ T36] audit: type=1326 audit(399.747:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21888 comm="syz.4.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7feea81ec799 code=0x7ffc0000 [ 399.922433][ T36] audit: type=1326 audit(399.747:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21888 comm="syz.4.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea81ec799 code=0x7ffc0000 [ 399.925457][ T36] audit: type=1326 audit(399.747:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21888 comm="syz.4.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea81ec799 code=0x7ffc0000 [ 399.925804][ T36] audit: type=1326 audit(399.747:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21888 comm="syz.4.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea81ec799 code=0x7ffc0000 [ 399.926256][ T36] audit: type=1326 audit(399.747:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21888 comm="syz.4.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7feea81ec799 code=0x7ffc0000 [ 399.926751][ T36] audit: type=1326 audit(399.747:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21888 comm="syz.4.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7feea81ec799 code=0x7ffc0000 [ 401.225598][T19371] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 401.859084][T22007] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 402.706137][T22063] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6791'. [ 402.977542][T22082] netlink: 872 bytes leftover after parsing attributes in process `syz.5.6801'. [ 402.977568][T22082] netlink: 872 bytes leftover after parsing attributes in process `syz.5.6801'. [ 403.782905][T22132] netlink: 'syz.4.6825': attribute type 1 has an invalid length. [ 403.940707][T22143] !: renamed from dummy0 (while UP) [ 404.206784][T22163] netlink: 292 bytes leftover after parsing attributes in process `syz.5.6839'. [ 405.049142][T19371] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 405.247407][ T31] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 405.405869][ T31] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 405.405898][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.420997][ T31] usb 7-1: config 0 descriptor?? [ 405.863843][ T31] ath6kl: Failed to submit usb control message: -71 [ 405.863896][ T31] ath6kl: unable to send the bmi data to the device: -71 [ 405.863910][ T31] ath6kl: Unable to send get target info: -71 [ 405.867869][ T31] ath6kl: Failed to init ath6kl core: -71 [ 405.869215][ T31] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 405.948319][ T31] usb 7-1: USB disconnect, device number 4 [ 406.314626][T22292] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6892'. [ 406.968723][ T1158] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 407.264580][T22355] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6920'. [ 407.384417][T22363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6923'. [ 407.744885][T22391] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 408.790192][T22462] unsupported nla_type 142 [ 408.905694][T22471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6972'. [ 408.905715][T22471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6972'. [ 409.077415][ T5783] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 409.122167][T22485] netlink: 'syz.4.6977': attribute type 8 has an invalid length. [ 409.237457][ T5783] usb 6-1: Using ep0 maxpacket: 8 [ 409.242201][ T5783] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 409.242228][ T5783] usb 6-1: config 179 has no interface number 0 [ 409.242271][ T5783] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 409.242296][ T5783] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 409.242321][ T5783] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 409.242344][ T5783] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 409.242369][ T5783] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 409.242408][ T5783] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 409.242429][ T5783] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.354466][T22464] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 409.592602][ T808] usb 6-1: USB disconnect, device number 18 [ 409.592613][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 409.592758][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 409.627771][T22508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6984'. [ 409.746288][T22521] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6988'. [ 409.746311][T22521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6988'. [ 409.796608][T22526] lo: entered promiscuous mode [ 409.821290][T22526] tunl0: entered promiscuous mode [ 409.843196][T22526] gre0: entered promiscuous mode [ 409.887696][T22526] gretap0: entered promiscuous mode [ 409.919476][T22526] erspan0: entered promiscuous mode [ 409.949076][T22526] ip_vti0: entered promiscuous mode [ 410.094467][ T1158] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 410.551428][T22572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7009'. [ 410.551463][T22572] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7009'. [ 410.748789][T22589] nft_compat: unsupported protocol 0 [ 411.508161][T22635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7034'. [ 411.816817][T22656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.622253][T22709] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7068'. [ 412.695551][T22720] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7071'. [ 412.737803][ T1158] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 412.887438][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 412.931881][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 412.931899][ T36] audit: type=1326 audit(412.757:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22733 comm="syz.4.7077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea81ec799 code=0x7ffc0000 [ 412.934575][ T36] audit: type=1326 audit(412.757:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22733 comm="syz.4.7077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea81ec799 code=0x7ffc0000 [ 412.941621][ T36] audit: type=1326 audit(412.767:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22733 comm="syz.4.7077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7feea81ec799 code=0x7ffc0000 [ 412.945492][ T36] audit: type=1326 audit(412.767:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22733 comm="syz.4.7077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea81ec799 code=0x7ffc0000 [ 413.039577][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 413.051967][ T10] usb 6-1: string descriptor 0 read error: -22 [ 413.052117][ T10] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 413.052138][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.139791][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 413.139860][ T10] usb 6-1: MIDIStreaming interface descriptor not found [ 413.433101][T22770] netlink: 'syz.6.7086': attribute type 2 has an invalid length. [ 413.462562][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 413.559129][ T10] usb 6-1: USB disconnect, device number 19 [ 413.609860][ T9] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 413.609916][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.611842][ T9] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 413.611868][ T9] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 413.611886][ T9] usb 5-1: Manufacturer: syz [ 413.704805][ T9] usb 5-1: config 0 descriptor?? [ 413.947545][ T9] rc_core: IR keymap rc-hauppauge not found [ 413.947564][ T9] Registered IR keymap rc-empty [ 413.959190][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 413.993761][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input35 [ 414.018206][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 414.060043][ T9] usb 5-1: USB disconnect, device number 28 [ 414.105041][T22823] netlink: 772 bytes leftover after parsing attributes in process `syz.0.7097'. [ 414.105105][T22823] netlink: del zone limit has 4 unknown bytes [ 414.647463][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 415.023893][T22886] netlink: 'syz.5.7119': attribute type 29 has an invalid length. [ 415.077361][ T808] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 415.129099][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 415.159933][ T36] audit: type=1400 audit(414.987:393): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="TIPCv2" requested=w pid=22895 comm="syz.5.7123" daddr=2001:: dest=7 [ 415.227152][ T36] audit: type=1326 audit(415.047:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22901 comm="syz.5.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3137cc799 code=0x7ffc0000 [ 415.234137][ T36] audit: type=1326 audit(415.057:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22901 comm="syz.5.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3137cc799 code=0x7ffc0000 [ 415.234428][ T36] audit: type=1326 audit(415.057:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22901 comm="syz.5.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fa3137cc799 code=0x7ffc0000 [ 415.238008][ T36] audit: type=1326 audit(415.057:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22901 comm="syz.5.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3137cc799 code=0x7ffc0000 [ 415.238356][ T36] audit: type=1326 audit(415.067:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22901 comm="syz.5.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3137cc799 code=0x7ffc0000 [ 415.277525][ T808] usb 7-1: Using ep0 maxpacket: 32 [ 415.282551][ T808] usb 7-1: unable to get BOS descriptor or descriptor too short [ 415.298962][ T808] usb 7-1: config 4 has an invalid interface number: 82 but max is 3 [ 415.298988][ T808] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 415.299004][ T808] usb 7-1: config 4 has 1 interface, different from the descriptor's value: 4 [ 415.299022][ T808] usb 7-1: config 4 has no interface number 0 [ 415.299061][ T808] usb 7-1: config 4 interface 82 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 415.299079][ T808] usb 7-1: config 4 interface 82 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 415.299099][ T808] usb 7-1: config 4 interface 82 has no altsetting 0 [ 415.414169][ T808] usb 7-1: New USB device found, idVendor=0830, idProduct=0020, bcdDevice=7a.d6 [ 415.414199][ T808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.414217][ T808] usb 7-1: Product: syz [ 415.414230][ T808] usb 7-1: Manufacturer: syz [ 415.414243][ T808] usb 7-1: SerialNumber: syz [ 415.678476][ T808] usb 7-1: active config #4 != 1 ?? [ 415.683568][ T808] usb 7-1: USB disconnect, device number 5 [ 415.894550][T22943] kAFS: unparsable volume name [ 415.971111][T22945] netlink: 'syz.4.7141': attribute type 3 has an invalid length. [ 416.259513][T22957] bond1 (unregistering): Released all slaves [ 416.368730][T23033] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7152'. [ 416.368850][T23033] openvswitch: netlink: Missing key (keys=40, expected=80) [ 416.716760][T23051] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7160'. [ 417.003145][T23072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7171'. [ 417.532971][T23108] netlink: 'syz.4.7185': attribute type 1 has an invalid length. [ 417.532991][T23108] netlink: 'syz.4.7185': attribute type 2 has an invalid length. [ 417.778823][T23130] IPv6: NLM_F_CREATE should be specified when creating new route [ 417.937428][ T1237] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 418.090150][ T1237] usb 7-1: unable to get BOS descriptor or descriptor too short [ 418.090709][ T1237] usb 7-1: not running at top speed; connect to a high speed hub [ 418.092789][ T1237] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 418.092819][ T1237] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 418.096060][ T1237] usb 7-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 418.096084][ T1237] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.096101][ T1237] usb 7-1: Product: syz [ 418.096112][ T1237] usb 7-1: Manufacturer: syz [ 418.096125][ T1237] usb 7-1: SerialNumber: syz [ 418.119544][T23122] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 418.327680][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 418.360900][ T1237] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 418.360953][ T1237] usb 7-1: MIDIStreaming interface descriptor not found [ 418.490065][ T3508] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 418.491928][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.491981][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 418.492002][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.525435][ T9] usb 6-1: config 0 descriptor?? [ 418.581509][ T1237] usb 7-1: USB disconnect, device number 6 [ 418.785708][T16891] udevd[16891]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 418.953461][ T9] ath6kl: Failed to read usb control message: -71 [ 418.953509][ T9] ath6kl: Unable to read the bmi data from the device: -71 [ 418.953522][ T9] ath6kl: Unable to recv target info: -71 [ 418.956376][ T9] ath6kl: Failed to init ath6kl core: -71 [ 418.956873][ T9] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 418.969219][ T9] usb 6-1: USB disconnect, device number 20 [ 419.559043][ T5886] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 419.721269][ T5886] usb 5-1: Using ep0 maxpacket: 8 [ 419.723633][ T5886] usb 5-1: unable to get BOS descriptor or descriptor too short [ 419.724751][ T5886] usb 5-1: config 4 interface 0 has no altsetting 0 [ 419.749053][ T5886] usb 5-1: string descriptor 0 read error: -22 [ 419.749146][ T5886] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 419.749168][ T5886] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 419.796261][ T5886] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 419.816034][ T5886] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 419.816426][ T5886] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 419.816475][ T5886] usb 5-1: media controller created [ 419.865886][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 420.189019][T23301] openvswitch: netlink: IP tunnel TTL not specified. [ 420.274192][T23305] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 420.279916][ T9] usb 5-1: USB disconnect, device number 29 [ 420.411605][ T1158] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 420.917468][T23354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7265'. [ 422.753708][T23483] netlink: 'syz.0.7320': attribute type 10 has an invalid length. [ 423.020601][T23500] trusted_key: encrypted_key: keylen parameter is missing [ 423.122992][T23505] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7330'. [ 423.436407][T23528] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7340'. [ 423.464048][T23528] ip6erspan0: entered allmulticast mode [ 423.528132][ T68] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 423.769439][T23553] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7347'. [ 423.769466][T23553] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7347'. [ 423.769481][T23553] netlink: 'syz.0.7347': attribute type 6 has an invalid length. [ 424.271872][T23588] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7366'. [ 424.528027][T23602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7372'. [ 424.528088][T23602] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7372'. [ 424.578457][T23605] tmpfs: Bad value for 'mpol' [ 424.579504][T23602] bridge10: entered promiscuous mode [ 424.579526][T23602] bridge10: entered allmulticast mode [ 425.316809][T23715] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7392'. [ 425.589924][T23734] lo: entered promiscuous mode [ 425.616891][T23734] tunl0: entered promiscuous mode [ 425.692205][T23741] program syz.6.7405 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 425.692467][T23741] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 425.698345][T23734] gre0: entered promiscuous mode [ 425.806486][T23734] gretap0: entered promiscuous mode [ 425.892582][T23734] erspan0: entered promiscuous mode [ 425.903217][T23734] ip_vti0: entered promiscuous mode [ 426.168680][ T68] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 426.419874][T23787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.869067][T23824] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.7441'. [ 426.869336][T23824] bridge_slave_1: default FDB implementation only supports local addresses [ 427.037420][ T1237] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 427.197384][ T1237] usb 6-1: Using ep0 maxpacket: 16 [ 427.205940][ T1237] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.205965][ T1237] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 427.207116][ T1237] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 427.207141][ T1237] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 427.207160][ T1237] usb 6-1: SerialNumber: syz [ 427.287676][ T1237] usb 6-1: 0:2 : does not exist [ 427.497558][ T1237] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 427.529256][ T1237] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 427.586881][ T1237] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 427.628274][ T1237] usb 6-1: USB disconnect, device number 21 [ 427.684169][T16407] udevd[16407]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 427.920289][T23893] tipc: Can't bind to reserved service type 0 [ 428.370811][T23927] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7478'. [ 428.576905][T23939] bridge2: entered promiscuous mode [ 428.728201][ T68] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 429.077627][T23973] netlink: 'syz.5.7499': attribute type 64 has an invalid length. [ 429.325117][T23990] tmpfs: Bad value for 'mpol' [ 429.395459][T24000] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 429.909180][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 429.909199][ T36] audit: type=1800 audit(429.717:408): pid=24019 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.4.7520" name="/" dev="sockfs" ino=63439 res=0 errno=0 [ 430.220118][T24051] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 430.249529][T24054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7533'. [ 430.249561][T24054] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7533'. [ 430.249575][T24054] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7533'. [ 430.530336][T24070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 431.043892][T24106] binder: 24105:24106 ioctl 40046205 0 returned -22 [ 431.287765][ T1446] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 431.768952][T24158] autofs4:pid:24158:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.32), cmd(0xc018937e) [ 431.769055][T24158] autofs4:pid:24158:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 432.127628][ T5886] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 432.301608][ T5886] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.301634][ T5886] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 432.301694][ T5886] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 432.301713][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.305073][T24206] bond5: option downdelay: invalid value (18446744073709551615) [ 432.305089][T24206] bond5: option downdelay: allowed values 0 - 2147483647 [ 432.309248][ T5886] usb 7-1: config 0 descriptor?? [ 432.356807][ T5886] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 432.356866][ T5886] dvb-usb: bulk message failed: -22 (3/0) [ 432.357386][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 432.415625][ T5886] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 432.419253][ T5886] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 432.419314][ T5886] usb 7-1: media controller created [ 432.421655][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 432.474226][ T5886] dvb-usb: bulk message failed: -22 (6/0) [ 432.474357][ T5886] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 432.487077][ T5886] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input36 [ 432.510657][T24206] bond5 (unregistering): Released all slaves [ 432.516008][ T5886] dvb-usb: schedule remote query interval to 150 msecs. [ 432.516028][ T5886] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 432.539575][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 432.546767][ T10] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 432.566238][ T10] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 432.566267][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.566285][ T10] usb 6-1: Product: syz [ 432.566298][ T10] usb 6-1: Manufacturer: syz [ 432.566310][ T10] usb 6-1: SerialNumber: syz [ 432.611757][ T10] r8152-cfgselector 6-1: Unknown version 0x0000 [ 432.611780][ T10] r8152-cfgselector 6-1: config 0 descriptor?? [ 432.652525][ T31] usb 7-1: USB disconnect, device number 7 [ 432.693861][ T5886] dvb-usb: bulk message failed: -22 (1/0) [ 432.693911][ T5886] dvb-usb: error while querying for an remote control event. [ 432.923273][ T31] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 433.046089][ T5886] r8152-cfgselector 6-1: USB disconnect, device number 22 [ 433.121017][T24328] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7605'. [ 433.536711][T24354] program syz.6.7615 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 434.071156][T24383] ip6erspan0: entered allmulticast mode [ 434.769677][T24425] process 'syz.6.7645' launched './file0' with NULL argv: empty string added [ 435.740783][T24432] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 435.740913][T24432] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 435.863388][T24432] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 435.863506][T24432] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 435.957741][T24432] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 436.040340][T24432] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 436.040458][T24432] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 436.137013][T24432] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 436.409345][ T68] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 436.447422][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 436.607444][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 436.609496][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.613209][ T9] usb 5-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 436.613235][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.613251][ T9] usb 5-1: Product: syz [ 436.613262][ T9] usb 5-1: Manufacturer: syz [ 436.613273][ T9] usb 5-1: SerialNumber: syz [ 436.620189][ T9] usb 5-1: config 0 descriptor?? [ 436.641361][ T9] cdc_ether 5-1:0.0: skipping garbage [ 436.641382][ T9] cdc_ether 5-1:0.0: invalid descriptor buffer length [ 436.641400][ T9] usb 5-1: bad CDC descriptors [ 436.642457][ T9] usb 5-1: unsupported MDLM descriptors [ 436.643144][ T9] cdc_acm 5-1:0.0: skipping garbage [ 436.643156][ T9] cdc_acm 5-1:0.0: invalid descriptor buffer length [ 436.848279][ T31] usb 5-1: USB disconnect, device number 30 [ 437.048751][ T5815] Bluetooth: hci5: command 0x0406 tx timeout [ 437.205829][T24591] netlink: 188 bytes leftover after parsing attributes in process `syz.0.7710'. [ 437.927495][ T5807] Bluetooth: hci6: command 0x0c1a tx timeout [ 438.087642][ T5807] Bluetooth: hci1: command 0x0c1a tx timeout [ 438.328576][ T1158] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 438.384911][T24658] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7739'. [ 439.127402][ T5807] Bluetooth: hci5: command 0x0406 tx timeout [ 439.437713][T24725] openvswitch: netlink: Key type 30 is not supported [ 439.801364][T24742] overlay: Bad value for 'workdir' [ 439.998043][T24752] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7768'. [ 440.012434][ T5807] Bluetooth: hci6: command 0x0c1a tx timeout [ 440.168488][ T5807] Bluetooth: hci1: command 0x0c1a tx timeout [ 440.252422][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.267513][ T31] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 440.417326][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 440.432801][ T31] usb 6-1: config index 0 descriptor too short (expected 526, got 367) [ 440.432829][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.436648][ T31] usb 6-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=a4.96 [ 440.436676][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.436692][ T31] usb 6-1: Product: syz [ 440.436703][ T31] usb 6-1: Manufacturer: syz [ 440.436714][ T31] usb 6-1: SerialNumber: syz [ 440.508671][ T31] usb 6-1: config 0 descriptor?? [ 440.597423][ T9] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 440.718658][T24807] openvswitch: netlink: Multiple metadata blocks provided [ 440.738479][ T1238] usb 6-1: USB disconnect, device number 23 [ 440.758603][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.760897][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 440.760924][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 440.760942][ T9] usb 5-1: Product: syz [ 440.760954][ T9] usb 5-1: Manufacturer: syz [ 440.760967][ T9] usb 5-1: SerialNumber: syz [ 440.791703][ T9] usb 5-1: config 0 descriptor?? [ 440.831581][T24820] netlink: 'syz.0.7790': attribute type 21 has an invalid length. [ 440.831698][T24820] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7790'. [ 440.900220][T24825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7791'. [ 441.019581][ T36] audit: type=1326 audit(440.847:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24830 comm="syz.0.7793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39fd06c799 code=0x7ffc0000 [ 441.029234][ T36] audit: type=1326 audit(440.857:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24830 comm="syz.0.7793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f39fd06c799 code=0x7ffc0000 [ 441.029280][ T36] audit: type=1326 audit(440.857:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24830 comm="syz.0.7793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39fd06c799 code=0x7ffc0000 [ 441.029318][ T36] audit: type=1326 audit(440.857:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24830 comm="syz.0.7793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39fd06c799 code=0x7ffc0000 [ 441.091187][ T9] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 441.131615][ T9] usb 5-1: USB disconnect, device number 31 [ 441.181505][T16407] udevd[16407]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 441.776160][T24883] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7811'. [ 441.776977][T24885] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7812'. [ 441.812986][T24888] netlink: 'syz.0.7814': attribute type 4 has an invalid length. [ 441.813008][T24888] netlink: 17 bytes leftover after parsing attributes in process `syz.0.7814'. [ 441.980224][T24899] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 442.087451][ T5807] Bluetooth: hci6: command 0x0c1a tx timeout [ 442.191340][T24915] netlink: 'syz.0.7826': attribute type 62 has an invalid length. [ 442.193843][ T164] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 442.247393][ T5807] Bluetooth: hci1: command 0x0c1a tx timeout [ 442.796253][T24958] netlink: 'syz.0.7845': attribute type 4 has an invalid length. [ 442.796731][T24957] netlink: 220 bytes leftover after parsing attributes in process `syz.6.7844'. [ 442.796749][T24957] tc_dump_action: action bad kind [ 442.978760][T24967] netlink: 260 bytes leftover after parsing attributes in process `syz.0.7850'. [ 443.709677][T25017] netlink: 1340 bytes leftover after parsing attributes in process `syz.0.7872'. [ 444.089779][T19371] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 445.849811][T25151] bridge0: port 4(syz_tun) entered blocking state [ 445.849921][T25151] bridge0: port 4(syz_tun) entered disabled state [ 445.850160][T25151] syz_tun: entered allmulticast mode [ 445.853142][T25151] syz_tun: entered promiscuous mode [ 445.853988][T25151] bridge0: port 4(syz_tun) entered blocking state [ 445.854104][T25151] bridge0: port 4(syz_tun) entered forwarding state [ 446.007522][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 446.527610][T25199] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7955'. [ 446.527671][T25199] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7955'. [ 446.757426][T25199] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7955'. [ 446.757490][T25199] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7955'. [ 446.898582][T25217] netlink: 'syz.6.7963': attribute type 10 has an invalid length. [ 446.985922][T25217] team0: Port device syz_tun added [ 447.204560][T25199] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7955'. [ 447.204630][T25199] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7955'. [ 447.290510][ T164] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 447.530107][T25246] netlink: 112 bytes leftover after parsing attributes in process `syz.5.7973'. [ 447.597417][ T31] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 447.750891][ T31] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 447.750920][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 447.755037][ T31] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 447.755065][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.755083][ T31] usb 5-1: Product: syz [ 447.755095][ T31] usb 5-1: Manufacturer: syz [ 447.755108][ T31] usb 5-1: SerialNumber: syz [ 447.771218][ T31] usb 5-1: config 0 descriptor?? [ 447.794203][ T31] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 448.184269][ T31] gspca_sunplus: reg_r err -71 [ 448.184368][ T31] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 448.190322][ T31] usb 5-1: USB disconnect, device number 32 [ 448.235104][T25270] netlink: 'syz.5.7982': attribute type 3 has an invalid length. [ 449.024714][T25317] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 449.056353][T25317] bond1 (unregistering): Released all slaves [ 449.358144][T25394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.858395][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 449.952932][T25424] netlink: 'syz.5.8020': attribute type 10 has an invalid length. [ 449.991651][T25424] team0: Port device veth0_to_bond added [ 450.097588][T25429] openvswitch: netlink: Tunnel attr 154 out of range max 16 [ 450.168104][T25432] __nla_validate_parse: 3 callbacks suppressed [ 450.168125][T25432] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8023'. [ 450.300410][T25432] geneve2: entered promiscuous mode [ 451.588400][ T31] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 451.633052][ T36] audit: type=1326 audit(451.457:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25532 comm="syz.6.8065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f9e0c799 code=0x7ffc0000 [ 451.647379][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 451.650773][ T36] audit: type=1326 audit(451.457:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25532 comm="syz.6.8065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f9e0c799 code=0x7ffc0000 [ 451.651147][ T36] audit: type=1326 audit(451.477:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25532 comm="syz.6.8065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f31f9e0c799 code=0x7ffc0000 [ 451.651928][ T36] audit: type=1326 audit(451.477:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25532 comm="syz.6.8065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f9e0c799 code=0x7ffc0000 [ 451.653350][ T36] audit: type=1326 audit(451.477:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25532 comm="syz.6.8065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f9e0c799 code=0x7ffc0000 [ 451.823806][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 451.823836][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 451.823860][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 451.826705][ T10] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 451.826731][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.826749][ T10] usb 5-1: Product: syz [ 451.826762][ T10] usb 5-1: Manufacturer: syz [ 451.826775][ T10] usb 5-1: SerialNumber: syz [ 451.845338][ T10] usb 5-1: config 0 descriptor?? [ 451.854695][T25516] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 451.854879][T25516] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 451.861265][ T10] usb 5-1: ucan: probing device on interface #0 [ 451.915906][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 451.923594][ T31] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 451.923620][ T31] usb 6-1: config 0 has no interface number 0 [ 451.923663][ T31] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 451.923683][ T31] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 451.923706][ T31] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 451.923726][ T31] usb 6-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 451.923748][ T31] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 451.926328][ T31] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 451.926354][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.926372][ T31] usb 6-1: Product: syz [ 451.926384][ T31] usb 6-1: Manufacturer: syz [ 451.926397][ T31] usb 6-1: SerialNumber: syz [ 452.035495][ T31] usb 6-1: config 0 descriptor?? [ 452.060555][ T31] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.119/input/input37 [ 452.119296][ T10] usb 5-1: ucan: device protocol version 0 is not supported [ 452.119320][ T10] usb 5-1: ucan: probe failed; try to update the device firmware [ 452.337706][T25562] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.8072'. [ 452.337735][T25562] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 452.356276][ T1237] usb 5-1: USB disconnect, device number 33 [ 452.440581][ T31] usb 6-1: USB disconnect, device number 24 [ 454.026472][T25684] openvswitch: netlink: Invalid VLAN frame [ 454.199791][T25695] ieee802154 phy1 wpan1: encryption failed: -22 [ 454.644659][T25724] tmpfs: Bad value for 'mpol' [ 454.826177][T25739] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8143'. [ 454.969088][T19371] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 455.037777][T25752] lo speed is unknown, defaulting to 1000 [ 455.038790][T25752] lo speed is unknown, defaulting to 1000 [ 455.039453][T25752] lo speed is unknown, defaulting to 1000 [ 455.551758][T25769] : entered promiscuous mode [ 455.828992][T25752] infiniband syz0: set active [ 455.829061][ T31] lo speed is unknown, defaulting to 1000 [ 455.829117][T25752] infiniband syz0: added lo [ 455.911632][T25799] netlink: 14601 bytes leftover after parsing attributes in process `syz.6.8168'. [ 456.060714][T25752] RDS/IB: syz0: added [ 456.060843][T25752] smc: adding ib device syz0 with port count 1 [ 456.060871][T25752] smc: ib device syz0 port 1 has no pnetid [ 456.060947][ T10] lo speed is unknown, defaulting to 1000 [ 456.065470][T25752] lo speed is unknown, defaulting to 1000 [ 456.356075][T25826] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8181'. [ 456.800248][T25847] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 456.832859][T25752] lo speed is unknown, defaulting to 1000 [ 457.294003][T25752] lo speed is unknown, defaulting to 1000 [ 457.469339][T25879] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:19998 [ 457.874043][T25752] lo speed is unknown, defaulting to 1000 [ 458.207488][ T10] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 458.369516][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 458.370087][ T10] usb 7-1: not running at top speed; connect to a high speed hub [ 458.371214][ T10] usb 7-1: config 17 has an invalid interface number: 8 but max is 1 [ 458.371236][ T10] usb 7-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 458.371255][ T10] usb 7-1: config 17 has no interface number 0 [ 458.371297][ T10] usb 7-1: config 17 interface 8 altsetting 6 has an endpoint descriptor with address 0x6E, changing to 0xE [ 458.371320][ T10] usb 7-1: config 17 interface 8 altsetting 6 endpoint 0xE has an invalid bInterval 101, changing to 4 [ 458.371343][ T10] usb 7-1: config 17 interface 8 altsetting 6 endpoint 0xE has invalid maxpacket 25716, setting to 1023 [ 458.371367][ T10] usb 7-1: config 17 interface 8 has no altsetting 0 [ 458.373638][ T10] usb 7-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 458.373663][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.373681][ T10] usb 7-1: Product: syz [ 458.373693][ T10] usb 7-1: Manufacturer: syz [ 458.373704][ T10] usb 7-1: SerialNumber: syz [ 458.583054][T25752] lo speed is unknown, defaulting to 1000 [ 458.674616][ T10] usb 7-1: selecting invalid altsetting 0 [ 458.674729][ T10] usb 7-1: 8:6 : no UAC_FORMAT_TYPE desc [ 458.674747][ T10] usb 7-1: selecting invalid altsetting 0 [ 458.881312][ T10] usb 7-1: USB disconnect, device number 8 [ 458.998489][T16407] udevd[16407]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 459.551240][T25752] lo speed is unknown, defaulting to 1000 [ 460.187884][T25752] lo speed is unknown, defaulting to 1000 [ 460.452912][T26037] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 460.527633][ T31] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 460.679378][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.679404][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 460.683915][ T31] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 460.683943][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.683959][ T31] usb 6-1: Product: syz [ 460.683971][ T31] usb 6-1: Manufacturer: syz [ 460.683984][ T31] usb 6-1: SerialNumber: syz [ 460.728939][T24712] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 460.994150][ T31] usb 6-1: unit 132 not found! [ 461.069791][ T31] usb 6-1: USB disconnect, device number 25 [ 461.146967][T16407] udevd[16407]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 462.008020][ T10] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 462.159869][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 462.162014][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 462.163263][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.163284][ T10] usb 6-1: config 0 has no interfaces? [ 462.165999][ T10] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 462.166023][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.166041][ T10] usb 6-1: Product: syz [ 462.166053][ T10] usb 6-1: Manufacturer: syz [ 462.166064][ T10] usb 6-1: SerialNumber: syz [ 462.180128][ T10] usb 6-1: config 0 descriptor?? [ 462.421963][ T31] usb 6-1: USB disconnect, device number 26 [ 462.780603][T26176] netlink: 'syz.6.8325': attribute type 4 has an invalid length. [ 462.780618][T26176] netlink: 'syz.6.8325': attribute type 2 has an invalid length. [ 463.221378][T26202] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 463.477477][ T10] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 463.601385][T19371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.601404][T19371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.631058][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.631084][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 463.632184][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 463.632210][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 463.632224][ T10] usb 6-1: SerialNumber: syz [ 463.642277][T26232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.696910][ T10] usb 6-1: 0:2 : does not exist [ 463.910450][ T10] usb 6-1: USB disconnect, device number 27 [ 464.752947][T26309] netlink: 596 bytes leftover after parsing attributes in process `syz.0.8375'. [ 465.031915][T26328] RDS: rds_bind could not find a transport for fe80::3e, load rds_tcp or rds_rdma? [ 465.095059][T26332] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8385'. [ 465.167476][ T10] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 465.351622][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 465.351655][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.351692][ T10] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 465.351712][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.368829][ T10] usb 5-1: config 0 descriptor?? [ 465.686113][T26365] sctp: [Deprecated]: syz.5.8401 (pid 26365) Use of int in max_burst socket option. [ 465.686113][T26365] Use struct sctp_assoc_value instead [ 465.724436][T26367] tipc: Started in network mode [ 465.724519][T26367] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 465.724571][T26367] tipc: Enabling of bearer rejected, failed to enable media [ 465.813587][ T10] elan 0003:04F3:0755.0001: unbalanced collection at end of report description [ 465.814477][ T10] elan 0003:04F3:0755.0001: Hid Parse failed [ 465.814574][ T10] elan 0003:04F3:0755.0001: probe with driver elan failed with error -22 [ 465.987948][ T31] usb 5-1: USB disconnect, device number 34 [ 466.488182][T24712] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 466.499168][ T68] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 467.217343][ T31] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 467.377397][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 467.379715][ T31] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 467.379741][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.383180][ T36] audit: type=1326 audit(467.207:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26481 comm="syz.4.8451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea81ec799 code=0x7ffc0000 [ 467.397035][ T36] audit: type=1326 audit(467.207:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26481 comm="syz.4.8451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea81ec799 code=0x7ffc0000 [ 467.397079][ T36] audit: type=1326 audit(467.217:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26481 comm="syz.4.8451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7feea81ec799 code=0x7ffc0000 [ 467.397112][ T36] audit: type=1326 audit(467.217:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26481 comm="syz.4.8451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea81ec799 code=0x7ffc0000 [ 467.397157][ T36] audit: type=1326 audit(467.217:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26481 comm="syz.4.8451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea81ec799 code=0x7ffc0000 [ 467.398395][ T36] audit: type=1326 audit(467.227:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26481 comm="syz.4.8451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7feea81ec799 code=0x7ffc0000 [ 467.407587][ T36] audit: type=1326 audit(467.227:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26481 comm="syz.4.8451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea81ec799 code=0x7ffc0000 [ 467.407637][ T36] audit: type=1326 audit(467.227:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26481 comm="syz.4.8451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea81ec799 code=0x7ffc0000 [ 467.473209][T26485] lo: left promiscuous mode [ 467.476385][T26485] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 467.649853][ T31] usb 6-1: selecting invalid altsetting 3 [ 467.649877][ T31] comedi comedi5: could not set alternate setting 3 in high speed [ 467.649891][ T31] usbduxsigma 6-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 467.684965][ T31] usbduxsigma 6-1:128.0: probe with driver usbduxsigma failed with error -22 [ 467.863365][ T31] usb 6-1: USB disconnect, device number 28 [ 468.550141][T26557] netlink: 'syz.0.8482': attribute type 7 has an invalid length. [ 468.550161][T26557] netlink: 'syz.0.8482': attribute type 8 has an invalid length. [ 468.550172][T26557] netlink: 'syz.0.8482': attribute type 4 has an invalid length. [ 468.550184][T26557] netlink: 209728 bytes leftover after parsing attributes in process `syz.0.8482'. [ 468.695014][T26564] netlink: 88 bytes leftover after parsing attributes in process `syz.0.8487'. [ 468.915164][T26578] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8492'. [ 469.123718][T26594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.260939][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 469.410492][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 469.410517][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 469.411804][ T9] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 469.411827][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 469.411845][ T9] usb 7-1: SerialNumber: syz [ 469.641286][ T9] usb 7-1: 0:2 : does not exist [ 469.759968][ T9] usb 7-1: USB disconnect, device number 9 [ 469.863873][T16407] udevd[16407]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.240172][T26674] netlink: 'syz.5.8528': attribute type 4 has an invalid length. [ 470.240194][T26674] netlink: 17 bytes leftover after parsing attributes in process `syz.5.8528'. [ 470.575487][T26691] cgroup: fork rejected by pids controller in /syz6 [ 471.139616][T26731] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 471.339177][T19108] team0: Port device syz_tun removed [ 471.429350][T26733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8556'. [ 471.611924][T19371] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 471.794513][T26762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8568'. [ 471.951872][ T5815] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 471.977585][ T5815] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 471.980343][ T5815] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 471.999087][ T5815] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 472.010962][ T5815] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 472.195659][T26783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8576'. [ 472.224872][ T68] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.253181][T24712] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 472.375911][T26766] wg1 speed is unknown, defaulting to 1000 [ 472.481658][T26796] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 472.735835][ T68] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.853103][T26766] lo speed is unknown, defaulting to 1000 [ 472.998910][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 473.144299][ T68] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.159966][ T10] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 473.159991][ T10] usb 5-1: config 1 has no interface number 0 [ 473.160033][ T10] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 473.160057][ T10] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 473.160079][ T10] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.164881][ T10] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 473.164907][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.164918][ T10] usb 5-1: Product: syz [ 473.164925][ T10] usb 5-1: Manufacturer: syz [ 473.164932][ T10] usb 5-1: SerialNumber: syz [ 473.277497][T26811] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 473.320757][T26828] bridge0: entered promiscuous mode [ 473.325880][T26828] macvlan2: entered allmulticast mode [ 473.325901][T26828] bridge0: entered allmulticast mode [ 473.333742][T26828] bridge0: port 5(macvlan2) entered blocking state [ 473.334033][T26828] bridge0: port 5(macvlan2) entered disabled state [ 473.389365][T26828] bridge0: left allmulticast mode [ 473.389768][T26828] bridge0: left promiscuous mode [ 473.484225][T26811] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 473.714782][ T10] usb 5-1: Incompatible driver and firmware versions [ 473.734216][ T10] usb 5-1: USB disconnect, device number 35 [ 473.863284][ T68] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.087562][ T5815] Bluetooth: hci6: command tx timeout [ 474.428030][T26766] chnl_net:caif_netlink_parms(): no params data found [ 474.452206][ T68] bridge_slave_1: left allmulticast mode [ 474.452234][ T68] bridge_slave_1: left promiscuous mode [ 474.452468][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.578909][ T68] bridge_slave_0: left allmulticast mode [ 474.578937][ T68] bridge_slave_0: left promiscuous mode [ 474.579249][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.767358][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 474.835499][ T9] IPVS: starting estimator thread 0... [ 474.926580][ T10] usb 5-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 474.926611][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.926628][ T10] usb 5-1: Product: syz [ 474.926640][ T10] usb 5-1: Manufacturer: syz [ 474.926652][ T10] usb 5-1: SerialNumber: syz [ 474.930088][T26976] IPVS: using max 15 ests per chain, 36000 per kthread [ 474.937115][ T10] usb 5-1: config 0 descriptor?? [ 476.167660][ T5815] Bluetooth: hci6: command tx timeout [ 476.457525][T27062] netlink: 'syz.0.8665': attribute type 1 has an invalid length. [ 476.457549][T27062] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8665'. [ 476.457561][T27062] netlink: 658 bytes leftover after parsing attributes in process `syz.0.8665'. [ 476.512945][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.588271][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.628390][T27072] netlink: 120 bytes leftover after parsing attributes in process `syz.0.8670'. [ 476.628412][T27072] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8670'. [ 476.633968][ T68] bond0 (unregistering): Released all slaves [ 476.752588][ T10] peak_usb 5-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 476.753374][ T10] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 476.753376][T27030] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8649'. [ 476.753394][ T10] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 476.753425][ T10] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 477.121891][ T10] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 477.142880][ T10] usb 5-1: USB disconnect, device number 36 [ 477.203408][T27092] bond3 (unregistering): Released all slaves [ 477.368692][T24706] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 477.648998][T27214] trusted_key: encrypted_key: key user:syz not found [ 478.009817][ T164] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 478.096743][ T36] audit: type=1400 audit(477.917:426): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="TIPCv2" requested=w pid=27257 comm="syz.4.8700" daddr=::ffff:172.30.0.5 [ 478.213280][T27268] xt_l2tp: wrong L2TP version: 8 [ 478.247388][ T5815] Bluetooth: hci6: command tx timeout [ 478.369853][ T36] audit: type=1326 audit(478.197:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27282 comm="syz.4.8708" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feea81ec799 code=0x0 [ 478.464176][T26766] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.464294][T26766] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.464556][T26766] bridge_slave_0: entered allmulticast mode [ 478.472106][T26766] bridge_slave_0: entered promiscuous mode [ 478.502911][T26766] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.503030][T26766] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.503282][T26766] bridge_slave_1: entered allmulticast mode [ 478.555778][T26766] bridge_slave_1: entered promiscuous mode [ 479.223925][T26766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.227809][T27314] can0: slcan on ttyS3. [ 479.263849][T26766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.557312][ T5886] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 479.611601][T27332] can0 (unregistered): slcan off ttyS3. [ 479.707283][ T5886] usb 6-1: Using ep0 maxpacket: 16 [ 479.709590][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.709621][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.709692][ T5886] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 479.709732][ T5886] usb 6-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 479.709752][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.808958][ T5886] usb 6-1: config 0 descriptor?? [ 479.816635][T27373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8726'. [ 480.070781][T26766] team0: Port device team_slave_0 added [ 480.114328][T26766] team0: Port device team_slave_1 added [ 480.327455][ T5815] Bluetooth: hci6: command tx timeout [ 480.386102][ T5886] lenovo 0003:17EF:6067.0002: unknown main item tag 0x0 [ 480.386144][ T5886] lenovo 0003:17EF:6067.0002: unknown main item tag 0x0 [ 480.386168][ T5886] lenovo 0003:17EF:6067.0002: unknown main item tag 0x0 [ 480.386193][ T5886] lenovo 0003:17EF:6067.0002: unknown main item tag 0x0 [ 480.386217][ T5886] lenovo 0003:17EF:6067.0002: unknown main item tag 0x0 [ 480.386250][ T5886] lenovo 0003:17EF:6067.0002: unknown main item tag 0x0 [ 480.386274][ T5886] lenovo 0003:17EF:6067.0002: unknown main item tag 0x0 [ 480.386298][ T5886] lenovo 0003:17EF:6067.0002: unknown main item tag 0x0 [ 480.386322][ T5886] lenovo 0003:17EF:6067.0002: unknown main item tag 0x0 [ 480.386346][ T5886] lenovo 0003:17EF:6067.0002: unknown main item tag 0x0 [ 480.518688][T26766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.518707][T26766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.518732][T26766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.547671][T26766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.547689][T26766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.547714][T26766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.643749][ T5886] lenovo 0003:17EF:6067.0002: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.5-1/input0 [ 480.671879][ T5886] usb 6-1: USB disconnect, device number 29 [ 480.871520][ T68] hsr_slave_0: left promiscuous mode [ 480.911907][ T68] hsr_slave_1: left promiscuous mode [ 480.913040][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.913063][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.926038][T27449] fido_id[27449]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 480.997761][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.997789][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.083666][ T68] veth1_macvtap: left promiscuous mode [ 481.083885][ T68] veth0_macvtap: left promiscuous mode [ 481.084104][ T68] veth1_vlan: left promiscuous mode [ 481.084264][ T68] veth0_vlan: left promiscuous mode [ 481.377344][ T1238] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 481.527411][ T1238] usb 5-1: Using ep0 maxpacket: 16 [ 481.531248][ T1238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.531279][ T1238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.531310][ T1238] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 481.531346][ T1238] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 481.531366][ T1238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.535760][ T1238] usb 5-1: config 0 descriptor?? [ 481.565491][T27493] sctp: [Deprecated]: syz.0.8752 (pid 27493) Use of struct sctp_assoc_value in delayed_ack socket option. [ 481.565491][T27493] Use struct sctp_sack_info instead [ 482.004632][T27506] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8756'. [ 482.046168][ T1238] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 482.106069][ T1238] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 482.106101][ T1238] microsoft 0003:045E:07DA.0003: no inputs found [ 482.106113][ T1238] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 482.270983][ T5886] usb 5-1: USB disconnect, device number 37 [ 482.630808][ T68] team0 (unregistering): Port device team_slave_1 removed [ 482.710144][ T68] team0 (unregistering): Port device team_slave_0 removed [ 483.133077][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 483.281269][T26766] hsr_slave_0: entered promiscuous mode [ 483.286873][T26766] hsr_slave_1: entered promiscuous mode [ 483.289215][T26766] debugfs: 'hsr0' already exists in 'hsr' [ 483.289240][T26766] Cannot create hsr debugfs directory [ 483.752630][T27647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8788'. [ 483.752654][T27647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8788'. [ 483.752678][T27647] netlink: 'syz.0.8788': attribute type 15 has an invalid length. [ 483.775880][T24704] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 484.887465][ T9] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 485.045184][ T9] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 485.045211][ T9] usb 6-1: config 0 has no interface number 0 [ 485.045253][ T9] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 485.063960][ T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 485.063988][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.064006][ T9] usb 6-1: Product: syz [ 485.064019][ T9] usb 6-1: Manufacturer: syz [ 485.064030][ T9] usb 6-1: SerialNumber: syz [ 485.084171][ T9] usb 6-1: config 0 descriptor?? [ 485.152995][T27750] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8814'. [ 485.329532][ C0] yurex 6-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 485.337603][ T9] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 485.459988][ T5886] hid_parser_main: 28 callbacks suppressed [ 485.460082][ T5886] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 485.460112][ T5886] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 485.460135][ T5886] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 485.460158][ T5886] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 485.460181][ T5886] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 485.460202][ T5886] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 485.460233][ T5886] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 485.460256][ T5886] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 485.460278][ T5886] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 485.460300][ T5886] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 485.567320][ T5870] usb 6-1: USB disconnect, device number 30 [ 485.590794][ T5886] hid-generic 0003:0003:0000.0004: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 485.596333][ T5870] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 485.856466][T27790] fido_id[27790]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 486.407108][T27831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8837'. [ 486.854890][T26766] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 486.863872][ T36] audit: type=1400 audit(486.687:428): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="TIPCv2" requested=w pid=27859 comm="syz.0.8845" daddr=::ffff:172.20.20.0 [ 486.933961][T26766] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 487.046247][T26766] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 487.063707][T27875] xt_l2tp: missing protocol rule (udp|l2tpip) [ 487.099736][T26766] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 487.380050][T26766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.445292][T26766] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.483399][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.504680][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.547788][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.548019][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.231384][T27938] netlink: 'syz.5.8870': attribute type 4 has an invalid length. [ 488.231407][T27938] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8870'. [ 488.395937][T26766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.892007][ T1446] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 489.530178][T24706] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 489.738720][T27965] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.378460][T27965] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.474322][T26766] veth0_vlan: entered promiscuous mode [ 490.494991][T26766] veth1_vlan: entered promiscuous mode [ 490.572921][T26766] veth0_macvtap: entered promiscuous mode [ 490.810938][T27965] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.888341][T26766] veth1_macvtap: entered promiscuous mode [ 491.059048][ T1237] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 491.160826][T27965] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.229565][ T1237] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.229592][ T1237] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 491.229645][ T1237] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 491.229666][ T1237] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.240254][ T1237] usb 5-1: config 0 descriptor?? [ 491.270903][ T1237] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 491.270950][ T1237] dvb-usb: bulk message failed: -22 (3/0) [ 491.306153][T26766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.332036][ T1237] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 491.360610][T26766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.361989][ T1237] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 491.362040][ T1237] usb 5-1: media controller created [ 491.364308][ T1237] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 491.437519][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.439430][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.441379][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.446709][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.472528][ T1237] dvb-usb: bulk message failed: -22 (6/0) [ 491.472608][ T1237] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 491.490390][T28036] dvb-usb: bulk message failed: -22 (3/0) [ 491.510739][ T1237] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input39 [ 491.580221][ T1237] dvb-usb: schedule remote query interval to 150 msecs. [ 491.580244][ T1237] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 491.604455][ T1237] usb 5-1: USB disconnect, device number 38 [ 491.853126][ T1237] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 492.031511][ T13] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.255129][T24712] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.314539][ T68] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.317882][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.317901][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.383435][ T13] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.441115][T24706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.441136][T24706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.880601][ T36] audit: type=1400 audit(492.707:429): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="TIPCv2" requested=w pid=28169 comm="syz.0.8934" daddr=2001::2 dest=20000 [ 493.216279][T28197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8946'. [ 493.931942][ T68] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 494.107740][T28252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8970'. [ 494.107806][T28252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8970'. [ 494.127405][ T1237] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 494.281022][ T1237] usb 5-1: Using ep0 maxpacket: 8 [ 494.283200][ T1237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.283230][ T1237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.283266][ T1237] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 494.283286][ T1237] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.295270][ T1237] usb 5-1: config 0 descriptor?? [ 494.648165][ T1446] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 494.778186][ T1237] hid_parser_main: 8 callbacks suppressed [ 494.778208][ T1237] cherry 0003:046A:0027.0005: unknown main item tag 0x3 [ 494.778235][ T1237] cherry 0003:046A:0027.0005: unknown main item tag 0x1 [ 494.778281][ T1237] cherry 0003:046A:0027.0005: bogus close delimiter [ 494.778293][ T1237] cherry 0003:046A:0027.0005: item 0 0 2 10 parsing failed [ 494.778968][ T1237] cherry 0003:046A:0027.0005: probe with driver cherry failed with error -22 [ 494.984298][ T31] usb 5-1: USB disconnect, device number 39 [ 495.798045][ T36] audit: type=1400 audit(495.627:430): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="TIPCv2" requested=w pid=28315 comm="syz.0.8996" [ 495.814884][T28247] syz.5.8968 (28247): drop_caches: 2 [ 495.998100][T28329] bridge_slave_1: invalid flags given to default FDB implementation [ 496.308915][ T5870] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 496.459977][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 496.461911][ T5870] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 496.461936][ T5870] usb 5-1: config 0 has no interface number 0 [ 496.461978][ T5870] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 496.462000][ T5870] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 496.462018][ T5870] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 496.462038][ T5870] usb 5-1: config 0 interface 196 has no altsetting 0 [ 496.464493][ T5870] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 496.464520][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.464537][ T5870] usb 5-1: Product: syz [ 496.464549][ T5870] usb 5-1: Manufacturer: syz [ 496.464560][ T5870] usb 5-1: SerialNumber: syz [ 496.568899][ T5870] usb 5-1: config 0 descriptor?? [ 496.574941][T28336] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 496.967352][ T1238] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 497.008593][ T5870] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 497.008883][ T5870] ipheth 5-1:0.196: probe with driver ipheth failed with error -22 [ 497.143335][ T1238] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 497.143360][ T1238] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.143376][ T1238] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 497.143419][ T1238] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 497.146608][ T1238] usb 6-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 497.146636][ T1238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.146654][ T1238] usb 6-1: Product: syz [ 497.146666][ T1238] usb 6-1: Manufacturer: syz [ 497.146679][ T1238] usb 6-1: SerialNumber: syz [ 497.169593][ T1238] usb 6-1: config 0 descriptor?? [ 497.254325][ T10] usb 5-1: USB disconnect, device number 40 [ 497.388780][ T1238] uvcvideo 6-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 497.388850][ T1238] uvcvideo 6-1:0.0: No valid video chain found. [ 497.583407][ T31] usb 6-1: USB disconnect, device number 31 [ 498.105167][ T1446] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.105216][ T1446] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.105247][ T1446] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.105274][ T1446] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.825840][T28490] netlink: 'syz.6.9067': attribute type 4 has an invalid length. [ 498.930722][T28499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9072'. [ 498.930743][T28499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9072'. [ 498.967748][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 499.188418][T28514] Bluetooth: MGMT ver 1.23 [ 499.790099][T28553] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 500.101725][ T36] audit: type=1400 audit(499.927:431): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="TIPCv2" requested=w pid=28570 comm="syz.6.9104" daddr=::ffff:172.20.20.0 [ 500.161790][T28576] netlink: 'syz.0.9107': attribute type 2 has an invalid length. [ 500.409941][T24712] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 500.971835][T28622] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9127'. [ 501.014496][T28626] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9130'. [ 501.062342][T28622] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9127'. [ 501.253216][ T36] audit: type=1326 audit(501.077:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28638 comm="syz.6.9136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8090ac799 code=0x7ffc0000 [ 501.255851][ T36] audit: type=1326 audit(501.077:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28638 comm="syz.6.9136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8090ac799 code=0x7ffc0000 [ 501.256099][ T36] audit: type=1326 audit(501.077:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28638 comm="syz.6.9136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fb8090ac799 code=0x7ffc0000 [ 501.256741][ T36] audit: type=1326 audit(501.077:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28638 comm="syz.6.9136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8090ac799 code=0x7ffc0000 [ 501.256985][ T36] audit: type=1326 audit(501.077:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28638 comm="syz.6.9136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8090ac799 code=0x7ffc0000 [ 501.259558][ T36] audit: type=1326 audit(501.087:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28638 comm="syz.6.9136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fb8090ac799 code=0x7ffc0000 [ 501.263945][ T36] audit: type=1326 audit(501.087:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28638 comm="syz.6.9136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8090ac799 code=0x7ffc0000 [ 501.431882][T28650] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9141'. [ 501.696269][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.004609][T28685] x_tables: ip_tables: udp match: only valid for protocol 17 [ 502.328060][ T37] INFO: task syz.2.5518:18112 blocked for more than 143 seconds. [ 502.328087][ T37] Tainted: G L syzkaller #0 [ 502.328097][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 502.328106][ T37] task:syz.2.5518 state:D stack:25816 pid:18112 tgid:18111 ppid:5796 task_flags:0x400040 flags:0x00080002 [ 502.328171][ T37] Call Trace: [ 502.328182][ T37] [ 502.328195][ T37] __schedule+0x1553/0x5240 [ 502.328322][ T37] ? rcu_is_watching+0x15/0xb0 [ 502.328363][ T37] ? __pfx___schedule+0x10/0x10 [ 502.328398][ T37] rt_mutex_schedule+0x76/0xf0 [ 502.328421][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 502.328525][ T37] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 502.328557][ T37] rt_mutex_slowlock+0x2dc/0x7b0 [ 502.328579][ T37] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 502.328598][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 502.328631][ T37] ? nfsd_nl_rpc_status_get_dumpit+0xdb/0x1420 [ 502.328739][ T37] ? nfsd_nl_rpc_status_get_dumpit+0xdb/0x1420 [ 502.328757][ T37] mutex_lock_nested+0x168/0x1d0 [ 502.328775][ T37] ? __pfx_stack_trace_save+0x10/0x10 [ 502.328801][ T37] nfsd_nl_rpc_status_get_dumpit+0xdb/0x1420 [ 502.328818][ T37] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 502.328843][ T37] ? kasan_save_track+0x4f/0x80 [ 502.328866][ T37] ? kasan_save_track+0x3e/0x80 [ 502.328890][ T37] ? __kasan_kmalloc+0x93/0xb0 [ 502.328909][ T37] ? __kmalloc_node_track_caller_noprof+0x372/0x7e0 [ 502.329003][ T37] ? netlink_dump+0x1ef/0xe80 [ 502.329076][ T37] ? __netlink_dump_start+0x5cb/0x7e0 [ 502.329094][ T37] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 502.329143][ T37] ? genl_rcv_msg+0x5e8/0x7a0 [ 502.329164][ T37] ? netlink_rcv_skb+0x232/0x4b0 [ 502.329182][ T37] ? genl_rcv+0x28/0x40 [ 502.329203][ T37] ? netlink_unicast+0x831/0x9f0 [ 502.329227][ T37] ? netlink_sendmsg+0x813/0xb40 [ 502.329246][ T37] ? ____sys_sendmsg+0x94c/0x9c0 [ 502.329269][ T37] ? ___sys_sendmsg+0x2a5/0x360 [ 502.329287][ T37] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 502.329306][ T37] ? do_syscall_64+0x14d/0xf80 [ 502.329327][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.329349][ T37] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 502.329398][ T37] ? rcu_is_watching+0x15/0xb0 [ 502.329417][ T37] ? trace_kmalloc+0x2a/0x110 [ 502.329441][ T37] ? __kmalloc_node_track_caller_noprof+0x390/0x7e0 [ 502.329474][ T37] genl_dumpit+0x10b/0x1b0 [ 502.329500][ T37] netlink_dump+0x722/0xe80 [ 502.329527][ T37] ? __pfx_netlink_dump+0x10/0x10 [ 502.329893][ T37] ? genl_start+0x499/0x6c0 [ 502.329940][ T37] __netlink_dump_start+0x5cb/0x7e0 [ 502.329963][ T37] genl_family_rcv_msg_dumpit+0x213/0x310 [ 502.329989][ T37] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 502.330011][ T37] ? genl_get_cmd+0x4a8/0x930 [ 502.330189][ T37] ? __pfx_genl_start+0x10/0x10 [ 502.330213][ T37] ? __pfx_genl_dumpit+0x10/0x10 [ 502.330234][ T37] ? __pfx_genl_done+0x10/0x10 [ 502.330267][ T37] genl_rcv_msg+0x5e8/0x7a0 [ 502.330294][ T37] ? __pfx_genl_rcv_msg+0x10/0x10 [ 502.330315][ T37] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 502.330338][ T37] ? __pfx_ref_tracker_free+0x10/0x10 [ 502.330473][ T37] ? __skb_clone+0x63/0x7a0 [ 502.330535][ T37] netlink_rcv_skb+0x232/0x4b0 [ 502.330560][ T37] ? __pfx_genl_rcv_msg+0x10/0x10 [ 502.330585][ T37] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 502.330625][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 502.330645][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 502.330667][ T37] genl_rcv+0x28/0x40 [ 502.330688][ T37] netlink_unicast+0x831/0x9f0 [ 502.330714][ T37] ? __pfx_netlink_unicast+0x10/0x10 [ 502.330734][ T37] ? netlink_sendmsg+0x650/0xb40 [ 502.330752][ T37] ? skb_put+0x11b/0x210 [ 502.330775][ T37] netlink_sendmsg+0x813/0xb40 [ 502.331003][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.331032][ T37] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 502.331060][ T37] ____sys_sendmsg+0x94c/0x9c0 [ 502.331088][ T37] ? __pfx_____sys_sendmsg+0x10/0x10 [ 502.331118][ T37] ? import_iovec+0x73/0xa0 [ 502.331220][ T37] ___sys_sendmsg+0x2a5/0x360 [ 502.331249][ T37] ? __pfx____sys_sendmsg+0x10/0x10 [ 502.331421][ T37] ? futex_wait+0x29a/0x380 [ 502.331470][ T37] ? __fget_files+0x2a/0x420 [ 502.331493][ T37] ? __fget_files+0x3a6/0x420 [ 502.331524][ T37] __x64_sys_sendmsg+0x1c3/0x2a0 [ 502.331552][ T37] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 502.331585][ T37] ? rcu_is_watching+0x15/0xb0 [ 502.331624][ T37] do_syscall_64+0x14d/0xf80 [ 502.331648][ T37] ? trace_irq_disable+0x3b/0x150 [ 502.331667][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.331686][ T37] ? clear_bhb_loop+0x40/0x90 [ 502.331708][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.331727][ T37] RIP: 0033:0x7f9ae561c799 [ 502.331744][ T37] RSP: 002b:00007f9ae3876028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.331765][ T37] RAX: ffffffffffffffda RBX: 00007f9ae5895fa0 RCX: 00007f9ae561c799 [ 502.331779][ T37] RDX: 0000000004004000 RSI: 0000200000000100 RDI: 0000000000000003 [ 502.331791][ T37] RBP: 00007f9ae56b2c99 R08: 0000000000000000 R09: 0000000000000000 [ 502.331803][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.331814][ T37] R13: 00007f9ae5896038 R14: 00007f9ae5895fa0 R15: 00007ffe4b52a518 [ 502.331845][ T37] [ 502.331885][ T37] [ 502.331885][ T37] Showing all locks held in the system: [ 502.331897][ T37] 3 locks held by rcuc/0/20: [ 502.331953][ T37] 1 lock held by khungtaskd/37: [ 502.331963][ T37] #0: ffffffff8ddcb880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 502.332053][ T37] 2 locks held by getty/5553: [ 502.332063][ T37] #0: ffff88803750f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 502.332156][ T37] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 502.332234][ T37] 9 locks held by syz-executor/5797: [ 502.332251][ T37] 2 locks held by syz.3.2987/12307: [ 502.332261][ T37] #0: ffffffff8f1c85a0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 502.332307][ T37] #1: ffffffff8e0e57f8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x13e/0x1630 [ 502.332353][ T37] 2 locks held by syz-executor/13166: [ 502.332366][ T37] 3 locks held by syz.2.5518/18112: [ 502.332376][ T37] #0: ffffffff8f1c85a0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 502.332420][ T37] #1: ffff8880393e6928 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 502.332459][ T37] #2: ffffffff8e0e57f8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdb/0x1420 [ 502.332504][ T37] 6 locks held by syz-executor/28710: [ 502.332515][ T37] [ 502.333233][ T37] ============================================= [ 502.333233][ T37] [ 502.333254][ T37] NMI backtrace for cpu 1 [ 502.333275][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 502.333298][ T37] Tainted: [L]=SOFTLOCKUP [ 502.333304][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 502.333314][ T37] Call Trace: [ 502.333321][ T37] [ 502.333329][ T37] dump_stack_lvl+0xe8/0x150 [ 502.333357][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 502.333422][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 502.333462][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 502.333483][ T37] sys_info+0x135/0x170 [ 502.333538][ T37] watchdog+0xfd9/0x1030 [ 502.333563][ T37] ? watchdog+0x21a/0x1030 [ 502.333591][ T37] kthread+0x388/0x470 [ 502.333610][ T37] ? __pfx_watchdog+0x10/0x10 [ 502.333636][ T37] ? __pfx_kthread+0x10/0x10 [ 502.333654][ T37] ret_from_fork+0x51e/0xb90 [ 502.333689][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 502.333709][ T37] ? __switch_to+0xc7d/0x1450 [ 502.333746][ T37] ? __pfx_kthread+0x10/0x10 [ 502.333765][ T37] ret_from_fork_asm+0x1a/0x30 [ 502.333796][ T37] [ 502.333803][ T37] Sending NMI from CPU 1 to CPUs 0: [ 502.333833][ C0] NMI backtrace for cpu 0 [ 502.333849][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 502.333875][ C0] Tainted: [L]=SOFTLOCKUP [ 502.333881][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 502.333891][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 502.333925][ C0] RIP: 0010:__lock_acquire+0x890/0x2cf0 [ 502.333942][ C0] Code: f3 29 ee 01 eb c1 c5 04 31 f5 48 c1 e5 20 83 3d c9 24 ca 0d 00 4d 89 e5 0f 85 1f 02 00 00 48 83 7c 24 28 00 0f 84 b3 01 00 00 <41> 8b 45 f8 25 ff 1f 00 00 48 0f a3 05 3f b5 b5 11 0f 83 5f 01 00 [ 502.333956][ C0] RSP: 0018:ffffc90000126878 EFLAGS: 00000006 [ 502.333969][ C0] RAX: 000000006ab7a853 RBX: 0000000059093611 RCX: 0000000088081d16 [ 502.333980][ C0] RDX: 0000000012d60f60 RSI: 000000008bcaf00e RDI: ffff88801ca9db80 [ 502.333991][ C0] RBP: 2a16875400000000 R08: ffffffff81765db5 R09: ffffffff8ddcb880 [ 502.334002][ C0] R10: ffffc90000126b58 R11: ffffffff81af65f0 R12: ffff88801ca9e7b0 [ 502.334014][ C0] R13: ffff88801ca9e7b0 R14: ffff88801ca9db80 R15: 0000000000000003 [ 502.334025][ C0] FS: 0000000000000000(0000) GS:ffff88812633f000(0000) knlGS:0000000000000000 [ 502.334038][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 502.334048][ C0] CR2: 00007feea8f9da08 CR3: 00000000574ae000 CR4: 00000000003526f0 [ 502.334063][ C0] Call Trace: [ 502.334069][ C0] [ 502.334076][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 502.334094][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 502.334107][ C0] ? unwind_next_frame+0x1aaf/0x23c0 [ 502.334129][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 502.334145][ C0] lock_acquire+0xf0/0x2e0 [ 502.334158][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 502.334174][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 502.334187][ C0] ? ret_from_fork+0x51e/0xb90 [ 502.334206][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 502.334218][ C0] unwind_next_frame+0xc2/0x23c0 [ 502.334232][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 502.334247][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 502.334262][ C0] ? kthread+0x388/0x470 [ 502.334275][ C0] ? ret_from_fork+0x51e/0xb90 [ 502.334294][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 502.334312][ C0] arch_stack_walk+0x11b/0x150 [ 502.334329][ C0] ? ret_from_fork+0x51e/0xb90 [ 502.334349][ C0] stack_trace_save+0xa9/0x100 [ 502.334366][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 502.334384][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 502.334401][ C0] kasan_save_track+0x3e/0x80 [ 502.334419][ C0] ? kasan_save_track+0x3e/0x80 [ 502.334437][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 502.334455][ C0] ? __kmalloc_noprof+0x3e7/0x7b0 [ 502.334475][ C0] ? cfg80211_inform_single_bss_data+0x952/0x1bd0 [ 502.334558][ C0] ? cfg80211_inform_bss_data+0x266/0x3c40 [ 502.334577][ C0] ? cfg80211_inform_bss_frame_data+0x3c7/0x760 [ 502.334596][ C0] ? ieee80211_bss_info_update+0x794/0xa40 [ 502.334683][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1901/0x2cd0 [ 502.334727][ C0] ? ieee80211_iface_work+0x84e/0x1340 [ 502.334741][ C0] ? cfg80211_wiphy_work+0x2ab/0x4a0 [ 502.334755][ C0] ? process_scheduled_works+0xb02/0x1830 [ 502.334774][ C0] ? worker_thread+0xa50/0xfc0 [ 502.334793][ C0] ? kthread+0x388/0x470 [ 502.334807][ C0] ? ret_from_fork+0x51e/0xb90 [ 502.334840][ C0] __kasan_kmalloc+0x93/0xb0 [ 502.334860][ C0] __kmalloc_noprof+0x3e7/0x7b0 [ 502.334880][ C0] ? cfg80211_inform_single_bss_data+0x952/0x1bd0 [ 502.334902][ C0] cfg80211_inform_single_bss_data+0x952/0x1bd0 [ 502.334923][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 502.334937][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 502.334967][ C0] ? cfg80211_inform_bss_data+0x253/0x3c40 [ 502.334987][ C0] cfg80211_inform_bss_data+0x266/0x3c40 [ 502.335017][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 502.335050][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 502.335074][ C0] cfg80211_inform_bss_frame_data+0x3c7/0x760 [ 502.335095][ C0] ? ieee80211_bss_info_update+0x316/0xa40 [ 502.335121][ C0] ieee80211_bss_info_update+0x794/0xa40 [ 502.335143][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 502.335162][ C0] ? sta_info_get+0x4f/0x300 [ 502.335180][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf0f/0x2cd0 [ 502.335201][ C0] ieee80211_ibss_rx_queued_mgmt+0x1901/0x2cd0 [ 502.335221][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 502.335240][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 502.335254][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf0f/0x2cd0 [ 502.335274][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 502.335293][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 502.335317][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 502.335337][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 502.335355][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 502.335373][ C0] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 502.335389][ C0] ? rt_spin_lock+0x1e0/0x400 [ 502.335408][ C0] ? rt_spin_unlock+0x160/0x200 [ 502.335426][ C0] ieee80211_iface_work+0x84e/0x1340 [ 502.335445][ C0] cfg80211_wiphy_work+0x2ab/0x4a0 [ 502.335459][ C0] ? process_scheduled_works+0xa25/0x1830 [ 502.335478][ C0] process_scheduled_works+0xb02/0x1830 [ 502.335506][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 502.335527][ C0] ? assign_work+0x3d5/0x5e0 [ 502.335546][ C0] worker_thread+0xa50/0xfc0 [ 502.335575][ C0] kthread+0x388/0x470 [ 502.335590][ C0] ? __pfx_worker_thread+0x10/0x10 [ 502.335608][ C0] ? __pfx_kthread+0x10/0x10 [ 502.335727][ C0] ret_from_fork+0x51e/0xb90 [ 502.335753][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 502.335772][ C0] ? __switch_to+0xc7d/0x1450 [ 502.335788][ C0] ? __pfx_kthread+0x10/0x10 [ 502.335805][ C0] ret_from_fork_asm+0x1a/0x30 [ 502.335826][ C0] [ 502.336850][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 502.336870][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 502.336893][ T37] Tainted: [L]=SOFTLOCKUP [ 502.336898][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 502.336908][ T37] Call Trace: [ 502.336916][ T37] [ 502.336923][ T37] vpanic+0x56c/0xa60 [ 502.336951][ T37] ? __pfx_vpanic+0x10/0x10 [ 502.336983][ T37] panic+0xc5/0xd0 [ 502.337006][ T37] ? __pfx_panic+0x10/0x10 [ 502.337027][ T37] ? printk_trigger_flush+0x117/0x180 [ 502.337052][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 502.337077][ T37] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 502.337098][ T37] watchdog+0x1023/0x1030 [ 502.337139][ T37] ? watchdog+0x21a/0x1030 [ 502.337167][ T37] kthread+0x388/0x470 [ 502.337184][ T37] ? __pfx_watchdog+0x10/0x10 [ 502.337200][ T37] ? __pfx_kthread+0x10/0x10 [ 502.337217][ T37] ret_from_fork+0x51e/0xb90 [ 502.337242][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 502.337263][ T37] ? __switch_to+0xc7d/0x1450 [ 502.337286][ T37] ? __pfx_kthread+0x10/0x10 [ 502.337304][ T37] ret_from_fork_asm+0x1a/0x30 [ 502.337336][ T37] [ 502.337666][ T37] Kernel Offset: disabled