last executing test programs: 1.410624535s ago: executing program 2 (id=3385): syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0b031120"], 0x7) socket(0x840000000002, 0x3, 0x100) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x2) 1.36028583s ago: executing program 2 (id=3388): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 790.569249ms ago: executing program 1 (id=3405): syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffff, 0x0, 0x0, 0x20, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1fff, 0xfffffffd, 0x9, 0x0, 0x0) 698.858197ms ago: executing program 1 (id=3406): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x4, @void}, 0x10) 629.464193ms ago: executing program 1 (id=3407): r0 = epoll_create1(0x80000) syz_clone3(&(0x7f0000000540)={0x901400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x200f}) epoll_pwait(r0, &(0x7f00000001c0)=[{}], 0x1, 0x65c, 0x0, 0x0) 460.756312ms ago: executing program 2 (id=3408): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 460.551726ms ago: executing program 1 (id=3409): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000d40)=ANY=[@ANYBLOB="030000000a004e230000000cff010000000000000000000000000001f8ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa42, @mcast1, 0xbf9}}, {{0xa, 0x4e24, 0xc7e2, @empty, 0xfffffe01}}}, 0x108) 390.02986ms ago: executing program 1 (id=3410): setns(0xc9, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000500)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000300)="450000280000400040063ccd7f0000027f00000130390015", 0x18, 0x0, &(0x7f0000000400)={0x2, 0x15, @loopback}, 0x10) 337.161266ms ago: executing program 1 (id=3411): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 280.449445ms ago: executing program 0 (id=3412): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000300)={0x1c, r0, 0x62c21a4ade68aba1, 0x70bd28, 0xf0, {{0x32}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20004040) 209.726087ms ago: executing program 0 (id=3414): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0xc0c4) 209.540583ms ago: executing program 3 (id=3415): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0xb56, 0x8, 0x8, 0x9316, 0x3, "040000000000e7ffffc73cfdf7ff000800", 0x36, 0xc4}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xff) 160.411545ms ago: executing program 3 (id=3416): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000002340)=ANY=[@ANYBLOB="7f454c4620010000008000000000000003003e00eaffffff7c000000000000004000000000000000020000000000000000000000060038000100feff03000300030000000f000000080000000000000011000000000000000000000000000000e500000000000000010000000000000003000000000000001aa94d35fbe0a1be0f9f645fc024d58ed9594000f2c64e6b20412751cfb1fd77d30deefa08cfb4131606dd31b72075adb9410423126d8c8644482516b86dc51f1deeea896d295183f821ccd52e436ff6b0b6f52db44c68bab9b94a58bff38f3ba6d1cfd02a175a4598529911d9767a4470bfe7f49f"], 0xed) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 160.230307ms ago: executing program 0 (id=3417): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000040)='THAWED\x00', 0x7) 128.267575ms ago: executing program 3 (id=3418): r0 = gettid() setns(0xc9, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/tcp\x00') pread64(r1, &(0x7f0000001340)=""/102385, 0x18ff1, 0x2a7) 128.00651ms ago: executing program 0 (id=3419): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)="3c5c7d3ecd45036a2762bb626c65640a", 0x10) 127.795742ms ago: executing program 2 (id=3420): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 59.719011ms ago: executing program 3 (id=3421): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0500530000000000080005000e"], 0x2c}}, 0x0) 59.423843ms ago: executing program 2 (id=3422): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='+192.168.1.1', 0xc) 59.271691ms ago: executing program 0 (id=3423): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x4e22, @broadcast}, @ib={0x1b, 0x4, 0x0, {"00000000000000000000000000000001"}, 0x2}}}, 0x118) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x1, {0xa, 0x4e23, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, r1}}, 0x38) 59.160602ms ago: executing program 3 (id=3424): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f0000000340)='./file0\x00', 0x1) 492.801µs ago: executing program 2 (id=3425): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100289b7000000000002500000008000300", @ANYRES32=r2, @ANYBLOB="08003500060000000a000600000000000b000000080026006c0900000a0034"], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) 206.528µs ago: executing program 0 (id=3426): setns(0xc9, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) sendmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000340)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="4f049a07b51274e5b6eeff14c078", 0xe}], 0x1}}], 0x1, 0x0) 0s ago: executing program 3 (id=3427): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}}, 0x0) kernel console output (not intermixed with test programs): 834][ T42] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 70.901335][ T42] symbolserial 7-1:1.0: device disconnected [ 70.911444][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.911561][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.206952][ T7333] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input10 [ 71.217677][ T5747] Bluetooth: hci2: command 0x0c1a tx timeout [ 71.217748][ T5749] Bluetooth: hci4: command 0x1003 tx timeout [ 71.218179][ T5746] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 72.497289][ T5746] Bluetooth: hci5: command 0x1003 tx timeout [ 72.498764][ T5740] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 72.538968][ T7379] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 72.539432][ T7379] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 72.567938][ T1128] ata1.00: exception Emask 0x0 SAct 0x200 SErr 0x0 action 0x6 [ 72.567988][ T1128] ata1.00: waking up from sleep [ 72.568065][ T1128] ata1: hard resetting link [ 72.707196][ T35] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 72.878086][ T35] usb 8-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 72.879255][ T35] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.879270][ T35] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.880945][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.880958][ T35] usb 8-1: Product: syz [ 72.880969][ T35] usb 8-1: Manufacturer: syz [ 72.880979][ T35] usb 8-1: SerialNumber: syz [ 72.890342][ T35] symbolserial 8-1:1.0: symbol converter detected [ 72.893269][ T35] usb 8-1: symbol converter now attached to ttyUSB0 [ 72.902155][ T1128] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 72.903562][ T1128] ata1.00: configured for UDMA/100 [ 72.904978][ T1128] ata1: EH complete [ 73.097420][ T7377] symbol ttyUSB0: symbol_open - failed resubmitting read urb, error -90 [ 73.102268][ T5845] usb 8-1: USB disconnect, device number 2 [ 73.107582][ T5845] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 73.111283][ T5845] symbolserial 8-1:1.0: device disconnected [ 73.222855][ T7392] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.224428][ T7392] bond0: (slave bond1): Enslaving as an active interface with an up link [ 73.600231][ T7408] macvlan2: entered promiscuous mode [ 73.600303][ T7408] bridge0: entered promiscuous mode [ 73.948707][ T43] audit: type=1400 audit(1788890622.413:42): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7426 comm="syz.3.715" name="p" offset=53 [ 74.578834][ T5740] Bluetooth: hci2: command 0x0c1a tx timeout [ 74.578879][ T5740] Bluetooth: hci1: command 0x0c1a tx timeout [ 74.579322][ T5740] Bluetooth: hci0: command 0x0c1a tx timeout [ 74.587819][ T7379] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 74.587900][ T7379] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 74.877321][ T58] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.891721][ T7468] : renamed from vlan0 (while UP) [ 75.051457][ T58] usb 5-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 75.054912][ T58] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.054936][ T58] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.056910][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.056929][ T58] usb 5-1: Product: syz [ 75.056941][ T58] usb 5-1: Manufacturer: syz [ 75.056953][ T58] usb 5-1: SerialNumber: syz [ 75.070644][ T58] symbolserial 5-1:1.0: symbol converter detected [ 75.087836][ T58] usb 5-1: symbol converter now attached to ttyUSB0 [ 75.171652][ T7495] scsi_dev_info_list_add_str: bad dev info string 'Mꇋ8KH,P}/(a&LCa8(Au6c1كXPwevJPK5'R X7R.]O\sYT<*|kekөopґ 0[9yo' '' '' [ 75.271476][ T7435] symbol ttyUSB0: symbol_open - failed resubmitting read urb, error -90 [ 75.273608][ T5813] usb 5-1: USB disconnect, device number 3 [ 75.276595][ T5813] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 75.279551][ T5813] symbolserial 5-1:1.0: device disconnected [ 75.466201][ T7518] netlink: 56 bytes leftover after parsing attributes in process `syz.2.758'. [ 75.479916][ T7523] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 75.529411][ T43] audit: type=1400 audit(1788890623.993:43): apparmor="STATUS" operation="profile_load" profile="unconfined" name=223A6F pid=7524 comm="syz.1.762" [ 75.549241][ T7527] ip6erspan0: entered allmulticast mode [ 75.562788][ T7533] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 75.562854][ T7533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.815621][ T7550] batman_adv: batadv0: Adding interface: gretap1 [ 75.815650][ T7550] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.815709][ T7550] batman_adv: batadv0: Interface activated: gretap1 [ 75.837409][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'. [ 75.862869][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.777'. [ 75.971005][ T43] audit: type=1400 audit(1788890624.433:44): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="//o" pid=7569 comm="syz.0.783" name="//o" offset=61 [ 76.050587][ T7579] netlink: 'syz.1.787': attribute type 8 has an invalid length. [ 76.077365][ T35] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 76.099353][ T7587] rnbd_client L202: map_device: Unknown parameter or missing value '' [ 76.223211][ T7598] syz.0.796 (7598) used greatest stack depth: 19160 bytes left [ 76.237279][ T35] usb 8-1: Using ep0 maxpacket: 16 [ 76.238044][ T35] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.239159][ T35] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.239198][ T35] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.239219][ T35] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 76.240199][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 76.240216][ T35] usb 8-1: SerialNumber: syz [ 76.245068][ T35] hub 8-1:1.0: bad descriptor, ignoring hub [ 76.245136][ T35] hub 8-1:1.0: probe with driver hub failed with error -5 [ 76.250035][ T35] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 76.557345][ T35] usb 8-1: USB disconnect, device number 3 [ 76.658520][ T5749] Bluetooth: hci3: command 0x0c1a tx timeout [ 76.658547][ T5740] Bluetooth: hci2: command 0x0c1a tx timeout [ 77.286674][ T7640] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 77.324757][ T7644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.816'. [ 77.340533][ T7646] sda1: Can't mount, would change RO state [ 77.639110][ T7674] bond0: (slave veth0): Error: Device can not be enslaved while up [ 77.723059][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'. [ 77.922442][ T7706] netlink: 'syz.2.847': attribute type 21 has an invalid length. [ 77.922513][ T7706] netlink: 128 bytes leftover after parsing attributes in process `syz.2.847'. [ 77.943485][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 78.170910][ T7736] netlink: 'syz.2.862': attribute type 6 has an invalid length. [ 78.227875][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.867'. [ 78.230734][ T7746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.867'. [ 78.497628][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 78.647975][ T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 78.651210][ T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 78.651230][ T9] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 78.651246][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 78.651281][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 78.651303][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 78.652842][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 78.652861][ T9] usb 7-1: Product: syz [ 78.652874][ T9] usb 7-1: Manufacturer: syz [ 78.670764][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 78.670781][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 78.678700][ T9] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 78.678722][ T9] cdc_wdm 7-1:1.0: Unknown control protocol [ 78.747813][ T58] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 78.928438][ T35] usb 7-1: USB disconnect, device number 5 [ 78.928482][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 78.928586][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 78.928603][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 78.930327][ T58] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 78.932431][ T7750] cdc_wdm 7-1:1.0: Tx URB error: -19 [ 78.933069][ T58] usb 5-1: config 65 has an invalid interface number: 3 but max is 0 [ 78.933089][ T58] usb 5-1: config 65 has no interface number 0 [ 78.935030][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.935050][ T58] usb 5-1: Product: syz [ 78.935064][ T58] usb 5-1: Manufacturer: syz [ 78.935075][ T58] usb 5-1: SerialNumber: syz [ 78.945658][ T58] usb 5-1: 3:0 : does not exist [ 78.945679][ T58] usb 5-1: 3:0 : does not exist [ 79.141865][ T7792] usb 5-1: USB disconnect, device number 4 [ 79.277489][ T58] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 79.427806][ T58] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 79.433739][ T58] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.436962][ T58] usb 6-1: config 0 has no interfaces? [ 79.438805][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.443509][ T58] usb 6-1: config 0 descriptor?? [ 79.648669][ T1478] usb 6-1: USB disconnect, device number 2 [ 79.872423][ T43] audit: type=1807 audit(1788890628.333:45): action=measure func=F res=0 [ 79.872471][ T43] audit: type=1802 audit(1788890628.333:46): pid=7844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.913" res=0 errno=0 [ 79.872609][ T7843] ima: policy update failed [ 79.872819][ T43] audit: type=1802 audit(1788890628.333:47): pid=7843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.913" res=0 errno=0 [ 80.147207][ T1478] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 80.298655][ T1478] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 80.298725][ T1478] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 80.299654][ T1478] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.299688][ T1478] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.299709][ T1478] usb 5-1: config 0 interface 0 has no altsetting 0 [ 80.300549][ T1478] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.300582][ T1478] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.300603][ T1478] usb 5-1: config 0 interface 0 has no altsetting 0 [ 80.301449][ T1478] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.301481][ T1478] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.301501][ T1478] usb 5-1: config 0 interface 0 has no altsetting 0 [ 80.302392][ T1478] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.302425][ T1478] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.302446][ T1478] usb 5-1: config 0 interface 0 has no altsetting 0 [ 80.303307][ T1478] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.303340][ T1478] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.303361][ T1478] usb 5-1: config 0 interface 0 has no altsetting 0 [ 80.304247][ T1478] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.304280][ T1478] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.304300][ T1478] usb 5-1: config 0 interface 0 has no altsetting 0 [ 80.305140][ T1478] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.305173][ T1478] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.305193][ T1478] usb 5-1: config 0 interface 0 has no altsetting 0 [ 80.306038][ T1478] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.306073][ T1478] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.306093][ T1478] usb 5-1: config 0 interface 0 has no altsetting 0 [ 80.309132][ T1478] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 80.309151][ T1478] usb 5-1: Product: syz [ 80.309162][ T1478] usb 5-1: Manufacturer: syz [ 80.309174][ T1478] usb 5-1: SerialNumber: syz [ 80.312362][ T1478] usb 5-1: config 0 descriptor?? [ 80.323754][ T1478] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 81.080237][ T7882] netlink: 'syz.3.932': attribute type 11 has an invalid length. [ 81.088252][ T7884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.088318][ T7884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.096518][ T7884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.096580][ T7884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.101584][ T7884] batman_adv: batadv0: Interface deactivated: gretap1 [ 81.101603][ T7884] batman_adv: batadv0: Removing interface: gretap1 [ 81.136688][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.320128][ T7902] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 81.321394][ T7902] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 81.431672][ T7909] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 81.431877][ T7909] block device autoloading is deprecated and will be removed. [ 82.265382][ T7937] netlink: 'syz.3.957': attribute type 12 has an invalid length. [ 82.265437][ T7937] netlink: 'syz.3.957': attribute type 29 has an invalid length. [ 82.265451][ T7937] netlink: 148 bytes leftover after parsing attributes in process `syz.3.957'. [ 82.265467][ T7937] netlink: 'syz.3.957': attribute type 1 has an invalid length. [ 82.265478][ T7937] netlink: 'syz.3.957': attribute type 2 has an invalid length. [ 82.265490][ T7937] netlink: 11 bytes leftover after parsing attributes in process `syz.3.957'. [ 82.309102][ T7939] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96 [ 82.361669][ T7944] openvswitch: netlink: EtherType 2 is less than min 600 [ 82.587921][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880239b4c00: rx timeout, send abort [ 82.590738][ C1] usb 5-1: yurex_control_callback - control failed: -2 [ 82.593345][ C1] usb 5-1: yurex_control_callback - control failed: -32 [ 82.593841][ T7950] syz.1.963 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 82.594690][ T7792] usb 5-1: USB disconnect, device number 5 [ 82.599353][ T7792] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 82.657885][ T7965] block nbd3: not configured, cannot reconfigure [ 82.853093][ T7988] dyndbg: bad flag-op , at start of [ 82.853146][ T7988] dyndbg: flags parse failed [ 82.855436][ T7988] dyndbg: bad flag-op , at start of $T [ 82.855445][ T7988] dyndbg: flags parse failed [ 82.855450][ T7988] dyndbg: bad flag-op , at start of gb* [ 82.855455][ T7988] dyndbg: flags parse failed [ 82.855459][ T7988] dyndbg: bad flag-op , at start of i*-i/Ei=SA5ij"3 [ 82.855465][ T7988] dyndbg: flags parse failed [ 82.855469][ T7988] dyndbg: bad flag-op , at start of ֎S.,IpG= [ 82.855474][ T7988] dyndbg: flags parse failed [ 82.855478][ T7988] dyndbg: bad flag-op , at start of xnz{ [ 82.855483][ T7988] dyndbg: flags parse failed [ 82.949269][ T7995] erspan0: entered promiscuous mode [ 83.088554][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880239b4c00: abort rx timeout. Force session deactivation [ 83.138525][ T8009] netlink: 'syz.2.990': attribute type 1 has an invalid length. [ 83.152552][ T8009] gretap0: entered promiscuous mode [ 83.160115][ T8009] netlink: 'syz.2.990': attribute type 1 has an invalid length. [ 83.205417][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.996'. [ 83.214687][ T8021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.997'. [ 83.219900][ T8021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.997'. [ 83.286091][ T8031] jffs2: notice: (8031) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 83.768021][ T7792] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 83.918359][ T7792] usb 6-1: Using ep0 maxpacket: 8 [ 83.919122][ T7792] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 83.920097][ T7792] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 83.920130][ T7792] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 83.920148][ T7792] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 83.920164][ T7792] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 83.920182][ T7792] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 83.920199][ T7792] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.920227][ T7792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.958509][ T8077] loop9: detected capacity change from 0 to 255852544 [ 84.134497][ T7792] usb 6-1: usb_control_msg returned -32 [ 84.134548][ T7792] usbtmc 6-1:16.0: can't read capabilities [ 84.146525][ T7792] usb 6-1: USB disconnect, device number 3 [ 84.373774][ T8094] scsi_strcpy_devinfo: vendor string 'Mꇋ8KH,P}/(a&WCa8(Au6c1كXPwe$XPK5'R X7R.]O\kekөopґ 0[{q6?Uq9mߣ7``0I3ŵ' is too long [ 84.507224][ T9] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 84.657851][ T9] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 84.659965][ T9] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 84.660006][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 84.660033][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 84.662250][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.662263][ T9] usb 8-1: Product: syz [ 84.662270][ T9] usb 8-1: Manufacturer: syz [ 84.662277][ T9] usb 8-1: SerialNumber: syz [ 84.679594][ T9] usb 8-1: config 0 descriptor?? [ 84.680274][ T8088] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 84.757750][ T9] rc_core: IR keymap rc-streamzap not found [ 84.757798][ T9] Registered IR keymap rc-empty [ 84.759549][ T9] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 84.763328][ T9] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input11 [ 84.794089][ T8127] usb 2-1: USB disconnect, device number 2 [ 84.890930][ T35] usb 8-1: USB disconnect, device number 4 [ 85.167216][ T5845] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 85.366887][ T5845] usb 6-1: unable to get BOS descriptor or descriptor too short [ 85.367717][ T5845] usb 6-1: New USB device found, idVendor=0021, idProduct=0000, bcdDevice= 0.00 [ 85.367742][ T5845] usb 6-1: no configurations [ 85.367750][ T5845] usb 6-1: can't read configurations, error -22 [ 85.492042][ T8145] i2c i2c-1: new_device: Instantiated device isp1301 at 0x02 [ 85.523152][ T8149] Bluetooth: MGMT ver 1.23 [ 85.616871][ T8155] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 85.617057][ T8155] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 85.778646][ T43] audit: type=1326 audit(1788890634.243:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8170 comm="syz.0.1064" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x0 [ 85.786492][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1065'. [ 86.225102][ T8212] bond0: entered promiscuous mode [ 86.225169][ T8212] bond_slave_0: entered promiscuous mode [ 86.225396][ T8212] bond_slave_1: entered promiscuous mode [ 86.230003][ T8212] batadv0: entered promiscuous mode [ 86.234964][ T8212] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 86.345581][ T8212] bond0: left promiscuous mode [ 86.345654][ T8212] bond_slave_0: left promiscuous mode [ 86.345895][ T8212] bond_slave_1: left promiscuous mode [ 86.349700][ T8212] batadv0: left promiscuous mode [ 86.792396][ T5845] wiimote 0005:057E:0306.0002: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 86.796129][ T5845] wiimote 0005:057E:0306.0002: New device registered [ 87.037790][ T42] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 87.177451][ T1478] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 87.207996][ T42] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 87.213961][ T42] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 87.217649][ T42] usb 6-1: config 1 has no interface number 0 [ 87.221714][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.221793][ T42] usb 6-1: Product: syz [ 87.221822][ T42] usb 6-1: Manufacturer: syz [ 87.221836][ T42] usb 6-1: SerialNumber: syz [ 87.229011][ T42] usb 6-1: cannot find UAC_HEADER [ 87.262719][ T42] snd-usb-audio 6-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 87.308308][ T8264] netlink: 'syz.2.1105': attribute type 39 has an invalid length. [ 87.337296][ T1478] usb 5-1: Using ep0 maxpacket: 8 [ 87.341250][ T1478] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 87.345902][ T1478] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 87.345966][ T1478] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 87.346028][ T1478] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.346046][ T1478] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.346076][ T1478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.427613][ T8244] wiimote 0005:057E:0306.0002: Unhandled report 0 size 6 [ 87.430237][ T8243] wiimote 0005:057E:0306.0002: Device removed [ 87.431973][ T5813] usb 6-1: USB disconnect, device number 6 [ 87.551576][ T1478] usb 5-1: GET_CAPABILITIES returned 0 [ 87.551670][ T1478] usbtmc 5-1:16.0: can't read capabilities [ 87.753712][ T58] usb 5-1: USB disconnect, device number 6 [ 87.859434][ T5845] wiimote 0005:057E:0306.0002: detected device: Nintendo Wii Remote (Gen 1) [ 87.892170][ T5845] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input13 [ 87.913118][ T5845] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input14 [ 87.924899][ T5845] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input12 [ 89.020550][ T8314] bond0: no command found in slaves file - use +ifname or -ifname [ 89.243723][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'. [ 89.259254][ T8343] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 89.386162][ T8358] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 89.387705][ T8359] batadv_slave_1: entered promiscuous mode [ 89.388023][ T8359] batadv_slave_1: left promiscuous mode [ 91.554980][ T8442] jffs2: notice: (8442) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 91.640785][ T8449] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 91.675381][ T8449] bond2 (unregistering): Released all slaves [ 91.823525][ T8455] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1194'. [ 91.882442][ T1026] i801_smbus 0000:00:00.0: SMBus base address uninitialized, upgrade BIOS [ 92.233265][ T43] audit: type=1807 audit(1788890640.693:49): func=FILE_CHECK res=0 [ 92.233322][ T43] audit: type=1802 audit(1788890640.693:50): pid=8479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.1212" res=0 errno=0 [ 92.233743][ T8478] ima: policy update failed [ 92.234123][ T43] audit: type=1802 audit(1788890640.693:51): pid=8478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1212" res=0 errno=0 [ 92.367320][ T8488] SQUASHFS error: Failed to read block 0x0: -5 [ 92.392101][ T8490] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 92.509388][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 92.509461][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 92.520685][ T9] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz0 [ 92.644941][ T8501] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1221'. [ 92.850845][ T8511] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1215'. [ 93.213238][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1224'. [ 93.220893][ T8527] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x50801 [ 93.225057][ T8527] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 93.225625][ T8527] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 93.225647][ T8527] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 93.225659][ T8527] page dumped because: unmovable page [ 93.225668][ T8527] page_owner tracks the page as allocated [ 93.225676][ T8527] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 5732, tgid 5732 (syz-executor), ts 46690789789 [ 93.225703][ T8527] post_alloc_hook+0xfd/0x120 [ 93.225734][ T8527] get_page_from_freelist+0x110d/0x35d0 [ 93.225752][ T8527] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 93.225771][ T8527] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 93.225789][ T8527] __kasan_populate_vmalloc+0xf0/0x210 [ 93.225809][ T8527] alloc_vmap_area+0x95d/0x2bb0 [ 93.225830][ T8527] __get_vm_area_node+0x1ed/0x350 [ 93.225860][ T8527] __vmalloc_node_range_noprof+0x268/0x1420 [ 93.225887][ T8527] vmalloc_user_noprof+0x9e/0xe0 [ 93.225912][ T8527] kcov_ioctl+0x4d/0x760 [ 93.225938][ T8527] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 93.231367][ T8527] __do_fast_syscall_32+0x13a/0x8b0 [ 93.231404][ T8527] do_fast_syscall_32+0x32/0x70 [ 93.231433][ T8527] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 93.231457][ T8527] page last free pid 5702 tgid 5702 ts 36328341830 stack trace: [ 93.231471][ T8527] __free_frozen_pages+0x79f/0x10f0 [ 93.231497][ T8527] tlb_finish_mmu+0x27d/0x810 [ 93.231522][ T8527] exit_mmap+0x454/0xa00 [ 93.231544][ T8527] __mmput+0x12a/0x410 [ 93.231570][ T8527] mmput+0x67/0x80 [ 93.231594][ T8527] setup_new_exec+0x1d9/0x2a0 [ 93.231622][ T8527] load_elf_binary+0x598/0x51a0 [ 93.231650][ T8527] bprm_execve+0x8cd/0x1940 [ 93.231665][ T8527] do_execveat_common.isra.0+0x4a5/0x580 [ 93.231682][ T8527] __x64_sys_execve+0x93/0xd0 [ 93.231700][ T8527] do_syscall_64+0x121/0x770 [ 93.231723][ T8527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.580185][ T8571] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.040759][ T8651] overlay: filesystem on ./file0 not supported as upperdir [ 96.487201][ T7792] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 96.599218][ T8665] netlink: 'syz.0.1288': attribute type 8 has an invalid length. [ 96.657382][ T7792] usb 7-1: Using ep0 maxpacket: 8 [ 96.657956][ T7792] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 96.658937][ T7792] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 96.658958][ T7792] usb 7-1: config 0 has no interface number 0 [ 96.658988][ T7792] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 96.659006][ T7792] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 96.659028][ T7792] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 96.659048][ T7792] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 96.659069][ T7792] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.662097][ T7792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.662115][ T7792] usb 7-1: Product: syz [ 96.662126][ T7792] usb 7-1: Manufacturer: syz [ 96.662136][ T7792] usb 7-1: SerialNumber: syz [ 96.665457][ T7792] usb 7-1: config 0 descriptor?? [ 96.876538][ T7792] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 97.083979][ T35] usb 7-1: USB disconnect, device number 6 [ 97.180121][ T8672] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 97.180275][ T8672] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 97.181448][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1292'. [ 97.536336][ T8695] bond0: option mode: unable to set because the bond device has slaves [ 97.879555][ T8725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1314'. [ 99.388638][ T8771] jffs2: notice: (8771) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 99.490687][ T50] kernel write not supported for file bpf-map (pid: 50 comm: kworker/3:1) [ 99.978317][ T8825] random: crng reseeded on system resumption [ 99.989958][ T8825] Restarting kernel threads ... [ 99.991994][ T8825] Done restarting kernel threads. [ 100.216328][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1372'. [ 100.405207][ T8869] input: syz1 as /devices/virtual/input/input15 [ 100.602878][ T8893] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 101.049532][ T8911] rnbd_client L127: Can't parse path ip:127v0.0.1@: -22 [ 101.081806][ T8913] openvswitch: netlink: IP tunnel TTL not specified. [ 101.081917][ T8913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.219571][ T5813] kernel read not supported for file /dsp1 (pid: 5813 comm: kworker/0:3) [ 101.278780][ T58] kernel read not supported for file /dsp1 (pid: 58 comm: kworker/2:1) [ 101.842002][ T8941] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 101.842253][ T8941] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 101.842312][ T8941] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 101.852085][ T8941] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 101.852270][ T8941] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 102.061953][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1422'. [ 102.063875][ T8960] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1422'. [ 102.063893][ T8960] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1422'. [ 102.377523][ T43] audit: type=1326 audit(1788890650.833:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.1.1435" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 102.377613][ T43] audit: type=1326 audit(1788890650.833:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.1.1435" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 102.377675][ T43] audit: type=1326 audit(1788890650.843:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.1.1435" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 102.377712][ T43] audit: type=1326 audit(1788890650.843:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.1.1435" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 102.377743][ T43] audit: type=1326 audit(1788890650.843:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.1.1435" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 102.378233][ T43] audit: type=1326 audit(1788890650.843:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.1.1435" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 102.378391][ T43] audit: type=1326 audit(1788890650.843:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.1.1435" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 102.380084][ T43] audit: type=1326 audit(1788890650.843:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.1.1435" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 102.380255][ T43] audit: type=1326 audit(1788890650.843:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.1.1435" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 102.381515][ T43] audit: type=1326 audit(1788890650.843:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.1.1435" exe="/syz-executor" sig=0 arch=40000003 syscall=320 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 102.577395][ T58] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 102.692728][ T9008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1444'. [ 102.727889][ T58] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 102.729083][ T58] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.729107][ T58] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.729138][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.802730][ T9016] netlink: 'syz.1.1448': attribute type 8 has an invalid length. [ 102.884025][ T9025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1452'. [ 102.885336][ T9025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1452'. [ 102.941948][ T58] usb 5-1: GET_CAPABILITIES returned 0 [ 102.942067][ T58] usbtmc 5-1:16.0: can't read capabilities [ 102.988013][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1455'. [ 102.989267][ T9033] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1455'. [ 103.154737][ T58] usb 5-1: USB disconnect, device number 7 [ 103.802555][ T9096] Bluetooth: hci4: Frame reassembly failed (-84) [ 103.857424][ T5740] Bluetooth: hci3: command 0x0c1a tx timeout [ 103.857495][ T5740] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.857531][ T5740] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.857560][ T5740] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.937599][ T9105] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 103.940319][ T9105] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 103.944542][ T9105] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 103.949251][ T9105] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 103.949469][ T9105] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 104.031550][ T9119] macvlan2: entered promiscuous mode [ 104.031625][ T9119] bridge0: entered promiscuous mode [ 104.612654][ T9144] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input16 [ 104.842805][ T9166] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1516'. [ 105.291146][ T9207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1536'. [ 105.431817][ T9222] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1543'. [ 105.431885][ T9222] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1543'. [ 105.858458][ T5740] Bluetooth: hci4: command 0x1003 tx timeout [ 105.860252][ T5749] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 106.017255][ T5740] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.017315][ T5740] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.027237][ T5749] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.027545][ T5740] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.214326][ T9253] netlink: 'syz.1.1559': attribute type 4 has an invalid length. [ 106.363116][ T9263] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1564'. [ 106.696242][ T5740] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 107.060193][ T9337] batadv_slave_1: entered promiscuous mode [ 107.062722][ T9335] batadv_slave_1: left promiscuous mode [ 107.516073][ T9379] misc userio: Can't change port type on an already running userio instance [ 107.823228][ T9406] kvm [9404]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x85 [ 107.984492][ T43] kauditd_printk_skb: 11 callbacks suppressed [ 107.984556][ T43] audit: type=1400 audit(1788890656.443:73): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/:o" pid=9427 comm="syz.2.1641" [ 108.097212][ T5740] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.139802][ T9441] __nla_validate_parse: 2 callbacks suppressed [ 108.139870][ T9441] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1654'. [ 108.257917][ T50] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 108.325666][ T5740] Bluetooth: hci0: Zero size dump init pkt [ 108.438770][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 108.442872][ T50] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 108.458740][ T50] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 108.458812][ T50] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 108.458873][ T50] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 108.458910][ T50] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 108.458948][ T50] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 108.458985][ T50] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.459036][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.674664][ T50] usb 6-1: GET_CAPABILITIES returned 0 [ 108.674741][ T50] usbtmc 6-1:16.0: can't read capabilities [ 108.875444][ T7792] usb 6-1: USB disconnect, device number 7 [ 108.995177][ T9450] dummy0: entered allmulticast mode [ 109.461654][ T9] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 109.529681][ T9499] netlink: 'syz.2.1674': attribute type 1 has an invalid length. [ 109.529745][ T9499] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1674'. [ 109.529787][ T9499] netlink: 'syz.2.1674': attribute type 1 has an invalid length. [ 109.627834][ T9] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 109.642980][ T9510] bonding: no command found in bonding_masters - use +ifname or -ifname [ 109.644622][ T9] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 109.644645][ T9] usb 2-1: Product: QEMU USB Tablet [ 109.644659][ T9] usb 2-1: Manufacturer: QEMU [ 109.644674][ T9] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 109.656342][ T9512] bond0: no command found in arp_ip_targets file - use + or - [ 109.687422][ T9] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0004/input/input19 [ 109.796821][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1687'. [ 109.806316][ T9] hid-generic 0003:0627:0001.0004: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 109.807870][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1687'. [ 110.025444][ T9547] openvswitch: netlink: VLAN attribute unexpected. [ 110.096222][ T9552] loop5: detected capacity change from 0 to 7 [ 110.187222][ T5740] Bluetooth: hci1: command 0x0c1a tx timeout [ 110.301409][ T9552] Dev loop5: unable to read RDB block 7 [ 110.301473][ T9552] loop5: unable to read partition table [ 110.301599][ T9552] loop5: partition table beyond EOD, truncated [ 110.301609][ T9552] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 110.329503][ C2] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 110.329598][ C2] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 110.711889][ T9610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1724'. [ 110.815559][ T9619] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 110.815720][ T9621] netlink: 'syz.3.1729': attribute type 8 has an invalid length. [ 111.101929][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1744'. [ 111.169372][ T43] audit: type=1400 audit(1788890659.633:74): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=9658 comm="syz.0.1748" name="p" offset=53 [ 111.281231][ T9675] netlink: 'syz.3.1756': attribute type 6 has an invalid length. [ 111.321297][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1759'. [ 111.321358][ T9678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1759'. [ 111.957241][ T7792] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 112.117582][ T7792] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 112.121376][ T7792] usb 8-1: config 65 has an invalid interface number: 3 but max is 0 [ 112.124983][ T7792] usb 8-1: config 65 has no interface number 0 [ 112.129260][ T7792] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.131905][ T7792] usb 8-1: Product: syz [ 112.133275][ T7792] usb 8-1: Manufacturer: syz [ 112.134840][ T7792] usb 8-1: SerialNumber: syz [ 112.145723][ T7792] usb 8-1: 3:0 : does not exist [ 112.149098][ T7792] usb 8-1: 3:0 : does not exist [ 112.349120][ T1478] usb 8-1: USB disconnect, device number 5 [ 112.504020][ T9732] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.504946][ T9732] bond0: (slave bond1): Enslaving as an active interface with an up link [ 112.822672][ T9754] gretap0: entered promiscuous mode [ 112.824373][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'. [ 112.824393][ T9754] gretap0: left promiscuous mode [ 112.927525][ T1478] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 112.937762][ T9760] loop9: detected capacity change from 0 to 255852544 [ 113.087970][ T1478] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 113.088043][ T1478] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 113.089076][ T1478] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.089126][ T1478] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.089170][ T1478] usb 7-1: config 0 interface 0 has no altsetting 0 [ 113.091983][ T1478] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.092006][ T1478] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.092019][ T1478] usb 7-1: config 0 interface 0 has no altsetting 0 [ 113.092783][ T1478] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.092803][ T1478] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.092815][ T1478] usb 7-1: config 0 interface 0 has no altsetting 0 [ 113.093619][ T1478] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.093639][ T1478] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.093651][ T1478] usb 7-1: config 0 interface 0 has no altsetting 0 [ 113.094518][ T1478] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.094549][ T1478] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.094572][ T1478] usb 7-1: config 0 interface 0 has no altsetting 0 [ 113.095444][ T1478] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.095474][ T1478] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.095493][ T1478] usb 7-1: config 0 interface 0 has no altsetting 0 [ 113.096363][ T1478] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.096393][ T1478] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.096411][ T1478] usb 7-1: config 0 interface 0 has no altsetting 0 [ 113.097572][ T1478] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.097602][ T1478] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.097620][ T1478] usb 7-1: config 0 interface 0 has no altsetting 0 [ 113.099278][ T1478] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 113.099290][ T1478] usb 7-1: Product: syz [ 113.099297][ T1478] usb 7-1: Manufacturer: syz [ 113.099304][ T1478] usb 7-1: SerialNumber: syz [ 113.104245][ T1478] usb 7-1: config 0 descriptor?? [ 113.114213][ T1478] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 113.566389][ T43] audit: type=1326 audit(1788890662.023:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9794 comm="syz.3.1813" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x0 [ 113.941345][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880610c1000: rx timeout, send abort [ 114.441435][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880610c1000: abort rx timeout. Force session deactivation [ 114.602045][ T9816] dyndbg: bad flag-op , at start of [ 114.602085][ T9816] dyndbg: flags parse failed [ 114.602269][ T9816] dyndbg: bad flag-op , at start of $T [ 114.602302][ T9816] dyndbg: flags parse failed [ 114.602308][ T9816] dyndbg: bad flag-op , at start of gb* [ 114.602315][ T9816] dyndbg: flags parse failed [ 114.602319][ T9816] dyndbg: bad flag-op , at start of i*-i/Ei=SA5ij"3 [ 114.602326][ T9816] dyndbg: flags parse failed [ 114.602331][ T9816] dyndbg: bad flag-op , at start of ֎S.,IpG= [ 114.602340][ T9816] dyndbg: flags parse failed [ 114.602347][ T9816] dyndbg: bad flag-op , at start of xnz{ [ 114.602354][ T9816] dyndbg: flags parse failed [ 114.647846][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1825'. [ 114.648160][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1825'. [ 114.744725][ T9824] input: syz0 as /devices/virtual/input/input20 [ 115.381141][ C1] usb 7-1: yurex_control_callback - control failed: -2 [ 115.383033][ T9858] openvswitch: netlink: Missing key (keys=40, expected=100) [ 115.390748][ C1] usb 7-1: yurex_control_callback - control failed: -32 [ 115.394185][ T1344] usb 7-1: USB disconnect, device number 7 [ 115.398855][ T1344] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 115.915486][ T9896] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 115.973744][ T9902] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 116.281862][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1874'. [ 116.283765][ T9924] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1874'. [ 116.283778][ T9924] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1874'. [ 116.337613][ T1344] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 116.508187][ T1344] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 116.508243][ T1344] usb 6-1: too many configurations: 160, using maximum allowed: 8 [ 116.510719][ T1344] usb 6-1: config index 0 descriptor too short (expected 64943, got 45) [ 116.511555][ T1344] usb 6-1: config index 1 descriptor too short (expected 64943, got 45) [ 116.512406][ T1344] usb 6-1: config index 2 descriptor too short (expected 64943, got 45) [ 116.513340][ T1344] usb 6-1: config index 3 descriptor too short (expected 64943, got 45) [ 116.514253][ T1344] usb 6-1: config index 4 descriptor too short (expected 64943, got 45) [ 116.516026][ T1344] usb 6-1: config index 5 descriptor too short (expected 64943, got 45) [ 116.516936][ T1344] usb 6-1: config index 6 descriptor too short (expected 64943, got 45) [ 116.518692][ T1344] usb 6-1: config index 7 descriptor too short (expected 64943, got 45) [ 116.524212][ T1344] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.524230][ T1344] usb 6-1: Product: syz [ 116.524241][ T1344] usb 6-1: Manufacturer: syz [ 116.524252][ T1344] usb 6-1: SerialNumber: syz [ 116.762689][ T1344] rtl8150 6-1:1.0: couldn't reset the device [ 116.763020][ T1344] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 116.772034][ T1344] usb 6-1: USB disconnect, device number 8 [ 117.636539][ T9968] i8042 kbd 00:00: in use; can't configure [ 117.667061][ T9971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1896'. [ 117.702897][ T9977] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 117.702956][ T9977] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 117.703043][ T9977] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 117.703071][ T9977] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 117.703092][ T9977] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 117.703114][ T9977] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 117.703135][ T9977] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 117.703156][ T9977] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 117.703175][ T9977] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 117.777254][ T1473] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 117.938376][ T1473] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.938999][ T9987] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 117.939234][ T1473] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.939246][ T1473] usb 8-1: config 0 has no interfaces? [ 117.939259][ T1473] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.945174][ T1473] usb 8-1: config 0 descriptor?? [ 118.001624][ T1478] wiimote 0005:057E:0306.0005: hidraw1: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 118.001793][ T1478] wiimote 0005:057E:0306.0005: New device registered [ 118.091638][ T9998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1907'. [ 118.148029][ T1473] usb 8-1: USB disconnect, device number 6 [ 118.603897][T10017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1916'. [ 118.707246][ T5885] kernel read not supported for file /dsp1 (pid: 5885 comm: kworker/3:5) [ 118.824718][ T9992] wiimote 0005:057E:0306.0005: Device removed [ 119.057329][ T1478] wiimote 0005:057E:0306.0005: detected device: Nintendo Wii Remote (Gen 1) [ 119.073545][ T1478] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0005/input/input22 [ 119.091853][ T1478] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0005/input/input23 [ 119.093991][ T1478] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0005/input/input21 [ 119.309665][T10051] kAFS: bad VL server IP address [ 119.464958][T10061] trusted_key: encrypted_key: keyword 'upeate' not recognized [ 119.554711][T10069] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1939'. [ 119.632144][T10078] clocksource: Switched to clocksource tsc [ 120.546538][T10153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1976'. [ 120.878398][T10185] block2mtd: Using custom MTD label '' for dev %+mσTHޗϔnDLd6784W [ 120.880599][T10185] block2mtd: error: cannot open device %+mσTHޗϔnDLd6784W [ 120.924048][T10191] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 120.940401][T10194] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1997'. [ 121.662390][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2025'. [ 122.667233][ T5813] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 122.725091][ T43] audit: type=1400 audit(1788890671.180:76): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=10303 comm="syz.0.2049" name="unknown" offset=82 [ 122.817216][ T5885] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 122.829646][ T5813] usb 8-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 122.833633][ T5813] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 122.833692][ T5813] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 122.841695][ T5813] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.841740][ T5813] usb 8-1: Product: syz [ 122.841784][ T5813] usb 8-1: Manufacturer: syz [ 122.841805][ T5813] usb 8-1: SerialNumber: syz [ 122.988139][ T5885] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.991185][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.991210][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.991228][ T5885] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 122.991259][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.993296][ T5885] usb 6-1: config 0 descriptor?? [ 123.065190][ T5813] usblp 8-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 123.154228][T10321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2057'. [ 123.154370][T10321] netlink: 'syz.0.2057': attribute type 8 has an invalid length. [ 123.154421][T10321] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2057'. [ 123.263418][ T5813] usb 8-1: USB disconnect, device number 7 [ 123.266897][ T5813] usblp0: removed [ 123.378096][ T168] wlan1: Trigger new scan to find an IBSS to join [ 123.404478][ T5885] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 123.404575][ T5885] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 123.404589][ T5885] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 123.404601][ T5885] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 123.404612][ T5885] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 123.404623][ T5885] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 123.404635][ T5885] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 123.404649][ T5885] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 123.404660][ T5885] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 123.404672][ T5885] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 123.421440][ T5885] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw2: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 123.679550][ T5885] usb 6-1: USB disconnect, device number 9 [ 124.206355][T10341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2066'. [ 124.208594][T10341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2066'. [ 124.352766][T10346] input: syz1 as /devices/virtual/input/input24 [ 124.722596][ T43] audit: type=1326 audit(1788890673.180:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.1.2075" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f06008 code=0x7ffc0000 [ 124.722682][ T43] audit: type=1326 audit(1788890673.180:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.1.2075" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 124.722895][ T43] audit: type=1326 audit(1788890673.180:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.1.2075" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f06008 code=0x7ffc0000 [ 124.722963][ T43] audit: type=1326 audit(1788890673.180:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.1.2075" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 124.723149][ T43] audit: type=1326 audit(1788890673.180:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.1.2075" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 124.723183][ T43] audit: type=1326 audit(1788890673.180:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.1.2075" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f06008 code=0x7ffc0000 [ 124.723387][ T43] audit: type=1326 audit(1788890673.180:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.1.2075" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f06008 code=0x7ffc0000 [ 124.723409][ T43] audit: type=1326 audit(1788890673.180:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.1.2075" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f06008 code=0x7ffc0000 [ 124.723429][ T43] audit: type=1326 audit(1788890673.180:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.1.2075" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f06008 code=0x7ffc0000 [ 125.094103][T10386] block2mtd: illegal erase size [ 126.214469][T10485] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 126.318783][T10493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2138'. [ 126.381785][T10503] ref_ctr_offset mismatch. inode: 0xc9a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 126.427509][ T1059] wlan1: Trigger new scan to find an IBSS to join [ 126.455458][T10514] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 126.488631][T10516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2149'. [ 126.488698][T10516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2149'. [ 126.488913][T10516] netlink: 'syz.3.2149': attribute type 18 has an invalid length. [ 126.488927][T10516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2149'. [ 126.515761][T10516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2149'. [ 126.515821][T10516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2149'. [ 126.516175][T10516] netlink: 'syz.3.2149': attribute type 18 has an invalid length. [ 126.516189][T10516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2149'. [ 126.525551][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2150'. [ 126.567305][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.567386][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.567414][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.567441][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.300905][T10549] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 127.301255][T10549] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 127.353706][ T5740] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 127.368623][T10553] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 127.686320][T10587] netlink: 'syz.0.2182': attribute type 12 has an invalid length. [ 127.828371][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2189'. [ 127.832483][T10602] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2189'. [ 127.847399][ T50] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 127.998056][ T50] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 127.999337][ T50] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.999356][ T50] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 128.000354][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249 [ 128.000373][ T50] usb 6-1: SerialNumber: syz [ 128.005465][ T50] usb 6-1: config 0 descriptor?? [ 128.010934][ T50] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 128.011203][ T50] dvb-usb: bulk message failed: -22 (3/0) [ 128.030220][ T50] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 128.031034][ T50] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 128.031074][ T50] usb 6-1: media controller created [ 128.033068][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.055721][ T50] dvb-usb: bulk message failed: -22 (6/0) [ 128.055863][ T50] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 128.059801][ T50] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input27 [ 128.069571][ T50] dvb-usb: schedule remote query interval to 150 msecs. [ 128.069632][ T50] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 128.214238][ T50] usb 6-1: USB disconnect, device number 10 [ 128.275019][ T50] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 128.406724][T10653] netlink: 'syz.3.2212': attribute type 10 has an invalid length. [ 128.697891][ T7792] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 128.857231][ T7792] usb 7-1: Using ep0 maxpacket: 16 [ 128.860854][ T7792] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 128.861816][ T7792] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.861840][ T7792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.863341][ T7792] usb 7-1: config 0 descriptor?? [ 129.070915][T10657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.071186][T10657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.073124][ T7792] usb 7-1: USB disconnect, device number 8 [ 129.074451][ T5740] Bluetooth: hci3: Malformed LE Event: 0x0d [ 129.307337][ T168] wlan1: Creating new IBSS network, BSSID 1e:98:9f:eb:d2:60 [ 129.992301][T10728] pimreg1: tun_chr_ioctl cmd 1074025676 [ 129.992361][T10728] pimreg1: owner set to 0 [ 130.765713][T10774] cgroup: fork rejected by pids controller in /syz0 [ 131.068471][ T5813] hid_parser_main: 28 callbacks suppressed [ 131.068554][ T5813] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 131.068577][ T5813] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 131.071848][ T5813] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 131.071872][ T5813] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 131.071890][ T5813] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 131.071959][ T5813] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 131.071978][ T5813] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 131.071997][ T5813] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 131.072016][ T5813] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 131.072034][ T5813] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 131.074600][ T5813] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [Zw[ba|\rn)A#6oү?aIs5hV3(; [ 131.074600][ T5813] ѝP$zɷX$w[SRezxuSrl[5l'ZCz2] on tDKY縣Ϫ򞿹,UOp{"ixA[ewÒ}ZXA [ 131.262876][ T5749] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.266366][ T5749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.268011][ T5749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.268432][ T5749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.268773][ T5749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 131.487559][T10816] Line length is too long: Should be less than 4094 [ 131.669020][T10834] __nla_validate_parse: 5 callbacks suppressed [ 131.671260][T10834] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2289'. [ 131.736596][T10840] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2292'. [ 131.779345][T10848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2295'. [ 131.788065][T10792] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.788174][T10792] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.788257][T10792] bridge_slave_0: entered allmulticast mode [ 131.788962][T10792] bridge_slave_0: entered promiscuous mode [ 131.791295][T10792] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.791363][T10792] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.791509][T10792] bridge_slave_1: entered allmulticast mode [ 131.792576][T10792] bridge_slave_1: entered promiscuous mode [ 131.818675][T10792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.824964][T10792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.838384][T10792] team0: Port device team_slave_0 added [ 131.840308][T10792] team0: Port device team_slave_1 added [ 131.859988][T10792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.860032][T10792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.860234][T10792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.861142][T10792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.861151][T10792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.861164][T10792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.894151][T10792] hsr_slave_0: entered promiscuous mode [ 131.894613][T10792] hsr_slave_1: entered promiscuous mode [ 131.894939][T10792] debugfs: 'hsr0' already exists in 'hsr' [ 131.894950][T10792] Cannot create hsr debugfs directory [ 132.068935][T10853] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48000 [ 132.068995][T10853] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 132.069022][T10853] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 132.069045][T10853] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 132.069055][T10853] page dumped because: unmovable page [ 132.069063][T10853] page_owner tracks the page as allocated [ 132.069069][T10853] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 1, tgid 1 (swapper/0), ts 8950304730 [ 132.069218][T10853] post_alloc_hook+0xfd/0x120 [ 132.069250][T10853] get_page_from_freelist+0x110d/0x35d0 [ 132.069266][T10853] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 132.069285][T10853] alloc_pages_mpol+0x201/0x550 [ 132.069310][T10853] alloc_pages_noprof+0x1a/0x160 [ 132.069335][T10853] __vmalloc_node_range_noprof+0x833/0x1420 [ 132.069357][T10853] __vmalloc_node_noprof+0xad/0xf0 [ 132.069377][T10853] tpg_alloc+0x166/0x9b0 [ 132.069401][T10853] vivid_probe.cold+0x2166/0x921e [ 132.069422][T10853] platform_probe+0x106/0x1d0 [ 132.069438][T10853] really_probe+0x241/0xa60 [ 132.069459][T10853] __driver_probe_device+0x210/0x460 [ 132.069480][T10853] driver_probe_device+0x4a/0x140 [ 132.069499][T10853] __driver_attach+0x21f/0x5b0 [ 132.069517][T10853] bus_for_each_dev+0x13e/0x1d0 [ 132.069531][T10853] bus_add_driver+0x305/0x5b0 [ 132.069546][T10853] page_owner free stack trace missing [ 132.123879][T10792] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.249631][T10792] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.339437][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.339520][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.358519][T10792] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.423751][T10792] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.511366][ T43] kauditd_printk_skb: 56 callbacks suppressed [ 132.511539][ T43] audit: type=1400 audit(1700006400.989:142): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=10891 comm="syz.1.2316" name="p" offset=48 [ 132.578380][T10792] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 132.583097][T10792] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 132.583814][T10792] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 132.588279][T10792] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 132.588884][T10792] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 132.592811][T10792] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 132.593357][T10792] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 132.598842][T10792] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 132.665943][T10792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.668362][ T5813] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 132.676154][T10792] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.680687][ T1059] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.680768][ T1059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.691936][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.692020][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.818199][ T5813] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 132.823603][ T5813] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.823647][ T5813] usb 8-1: Product: syz [ 132.823668][ T5813] usb 8-1: Manufacturer: syz [ 132.823690][ T5813] usb 8-1: SerialNumber: syz [ 132.950533][T10923] ubi: bad wear-leveling threshold 1 [ 132.974125][T10792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.989492][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2324'. [ 133.000857][T10792] veth0_vlan: entered promiscuous mode [ 133.010855][T10792] veth1_vlan: entered promiscuous mode [ 133.042372][T10792] veth0_macvtap: entered promiscuous mode [ 133.046750][T10792] veth1_macvtap: entered promiscuous mode [ 133.061789][T10792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.066571][T10792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.084825][ T5813] rtl8150 8-1:1.0: couldn't reset the device [ 133.087034][ T5813] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 133.106418][ T5813] usb 8-1: USB disconnect, device number 8 [ 133.128327][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.128416][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.128598][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.129687][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.186670][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.186733][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.218372][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.218417][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.297371][ T5749] Bluetooth: hci0: command tx timeout [ 133.462980][T10954] kvm: kvm [10951]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000051) [ 134.148168][T11002] SQUASHFS error: Failed to read block 0x0: -5 [ 134.221464][T11008] bond0: (slave macvlan5): Error -98 calling set_mac_address [ 135.001854][T11042] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x50801 [ 135.001978][T11042] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 135.002303][T11042] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 135.002323][T11042] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 135.002335][T11042] page dumped because: unmovable page [ 135.002345][T11042] page_owner tracks the page as allocated [ 135.002352][T11042] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 5732, tgid 5732 (syz-executor), ts 46690789789 [ 135.002379][T11042] post_alloc_hook+0xfd/0x120 [ 135.002411][T11042] get_page_from_freelist+0x110d/0x35d0 [ 135.002427][T11042] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 135.002445][T11042] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 135.002463][T11042] __kasan_populate_vmalloc+0xf0/0x210 [ 135.002481][T11042] alloc_vmap_area+0x95d/0x2bb0 [ 135.002501][T11042] __get_vm_area_node+0x1ed/0x350 [ 135.002523][T11042] __vmalloc_node_range_noprof+0x268/0x1420 [ 135.002547][T11042] vmalloc_user_noprof+0x9e/0xe0 [ 135.002571][T11042] kcov_ioctl+0x4d/0x760 [ 135.002594][T11042] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 135.002623][T11042] __do_fast_syscall_32+0x13a/0x8b0 [ 135.002650][T11042] do_fast_syscall_32+0x32/0x70 [ 135.002677][T11042] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 135.002699][T11042] page last free pid 5702 tgid 5702 ts 36328341830 stack trace: [ 135.002712][T11042] __free_frozen_pages+0x79f/0x10f0 [ 135.002736][T11042] tlb_finish_mmu+0x27d/0x810 [ 135.002760][T11042] exit_mmap+0x454/0xa00 [ 135.002783][T11042] __mmput+0x12a/0x410 [ 135.002807][T11042] mmput+0x67/0x80 [ 135.002830][T11042] setup_new_exec+0x1d9/0x2a0 [ 135.002855][T11042] load_elf_binary+0x598/0x51a0 [ 135.002882][T11042] bprm_execve+0x8cd/0x1940 [ 135.002898][T11042] do_execveat_common.isra.0+0x4a5/0x580 [ 135.002915][T11042] __x64_sys_execve+0x93/0xd0 [ 135.002942][T11042] do_syscall_64+0x121/0x770 [ 135.002968][T11042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.378272][ T5749] Bluetooth: hci0: command tx timeout [ 136.586745][T11087] netlink: 'syz.1.2403': attribute type 8 has an invalid length. [ 136.735643][T11103] overlay: filesystem on ./file0 not supported as upperdir [ 137.457311][ T5749] Bluetooth: hci0: command tx timeout [ 139.181396][ T9] kernel write not supported for file bpf-map (pid: 9 comm: kworker/0:0) [ 139.547275][ T5749] Bluetooth: hci0: command tx timeout [ 139.879130][T11228] random: crng reseeded on system resumption [ 139.885412][T11228] Restarting kernel threads ... [ 139.885696][T11228] Done restarting kernel threads. [ 140.131552][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2466'. [ 140.342160][ T5749] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 140.342235][ T5749] CPU: 3 UID: 0 PID: 5749 Comm: kworker/u34:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.342277][ T5749] Tainted: [L]=SOFTLOCKUP [ 140.342286][ T5749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.342299][ T5749] Workqueue: hci0 hci_rx_work [ 140.342326][ T5749] Call Trace: [ 140.342333][ T5749] [ 140.342342][ T5749] dump_stack_lvl+0x100/0x190 [ 140.342372][ T5749] sysfs_warn_dup.cold+0x1c/0x28 [ 140.342402][ T5749] sysfs_create_dir_ns+0x24b/0x2b0 [ 140.342431][ T5749] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 140.342452][ T5749] ? find_held_lock+0x2b/0x80 [ 140.342474][ T5749] ? kobject_add_internal+0x25f/0x930 [ 140.342496][ T5749] ? kobject_add_internal+0x25f/0x930 [ 140.342519][ T5749] ? do_raw_spin_unlock+0x145/0x1e0 [ 140.342540][ T5749] kobject_add_internal+0x2c8/0x930 [ 140.342565][ T5749] kobject_add+0x16a/0x1e0 [ 140.342585][ T5749] ? __pfx_kobject_add+0x10/0x10 [ 140.342604][ T5749] ? class_to_subsys+0x10f/0x150 [ 140.342652][ T5749] ? kobject_put+0xb9/0x640 [ 140.342669][ T5749] ? _raw_spin_unlock+0x28/0x50 [ 140.342699][ T5749] device_add+0x294/0x1970 [ 140.342726][ T5749] ? __pfx_dev_set_name+0x10/0x10 [ 140.342744][ T5749] ? __pfx_device_add+0x10/0x10 [ 140.342772][ T5749] ? mgmt_send_event_skb+0x2fb/0x460 [ 140.342804][ T5749] hci_conn_add_sysfs+0x1a3/0x260 [ 140.342833][ T5749] le_conn_complete_evt+0x122f/0x2130 [ 140.342863][ T5749] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 140.342885][ T5749] ? hci_event_packet+0x186/0xcd0 [ 140.342907][ T5749] ? hci_event_packet+0x186/0xcd0 [ 140.342935][ T5749] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 140.342962][ T5749] ? skb_pull_data+0x15f/0x1e0 [ 140.342995][ T5749] hci_le_meta_evt+0x34a/0x5f0 [ 140.343020][ T5749] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 140.343048][ T5749] hci_event_packet+0x51c/0xcd0 [ 140.343071][ T5749] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 140.343096][ T5749] ? __pfx_hci_event_packet+0x10/0x10 [ 140.343124][ T5749] ? lockdep_hardirqs_on+0x7d/0x110 [ 140.343156][ T5749] hci_rx_work+0x451/0xfc0 [ 140.343182][ T5749] process_one_work+0xac7/0x1b10 [ 140.343215][ T5749] ? __pfx_process_one_work+0x10/0x10 [ 140.343238][ T5749] ? lock_acquire+0x1d1/0x380 [ 140.343270][ T5749] ? __pfx_hci_rx_work+0x10/0x10 [ 140.343294][ T5749] worker_thread+0x5ef/0xe50 [ 140.343327][ T5749] ? kthread+0x13a/0x450 [ 140.343345][ T5749] ? __pfx_worker_thread+0x10/0x10 [ 140.343362][ T5749] kthread+0x373/0x450 [ 140.343378][ T5749] ? __pfx_kthread+0x10/0x10 [ 140.343396][ T5749] ret_from_fork+0x730/0xd60 [ 140.343427][ T5749] ? __pfx_ret_from_fork+0x10/0x10 [ 140.343451][ T5749] ? native_load_gs_index+0x1e/0xc0 [ 140.343471][ T5749] ? __switch_to+0x800/0x10f0 [ 140.343491][ T5749] ? __pfx_kthread+0x10/0x10 [ 140.343510][ T5749] ret_from_fork_asm+0x1a/0x30 [ 140.343537][ T5749] [ 140.346929][ T5749] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 140.346966][ T5749] Bluetooth: hci0: failed to register connection device [ 140.406263][T11279] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.406428][T11279] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 140.406560][T11279] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 140.406685][T11279] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 140.406754][T11279] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 140.421188][T11279] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 140.425950][T11279] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 140.426434][T11287] Bluetooth: MGMT ver 1.23 [ 140.511355][T11296] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 141.061000][ T8115] kernel read not supported for file /dsp1 (pid: 8115 comm: kworker/0:4) [ 141.405260][T11359] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2514'. [ 141.625306][T11373] i8042 kbd 00:00: in use; can't configure [ 141.733824][T11380] net_ratelimit: 3320 callbacks suppressed [ 141.734006][T11380] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 141.734042][T11380] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 141.734064][T11380] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 141.734087][T11380] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 141.734109][T11380] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 141.734130][T11380] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 141.734151][T11380] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 141.734209][T11380] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 141.734233][T11380] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 141.734256][T11380] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 141.818825][ T1344] kernel read not supported for file /dsp1 (pid: 1344 comm: kworker/2:2) [ 142.427304][ T5749] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.433494][ T5749] Bluetooth: hci3: command 0x0c1a tx timeout [ 142.433972][ T5740] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.434546][ T5740] Bluetooth: hci1: command 0x0c1a tx timeout [ 142.827211][ T5845] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 142.987964][ T5845] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 142.991933][ T5845] usb 7-1: too many configurations: 160, using maximum allowed: 8 [ 142.996413][ T5845] usb 7-1: config index 0 descriptor too short (expected 64943, got 45) [ 143.001319][ T5845] usb 7-1: config index 1 descriptor too short (expected 64943, got 45) [ 143.006115][ T5845] usb 7-1: config index 2 descriptor too short (expected 64943, got 45) [ 143.010819][ T5845] usb 7-1: config index 3 descriptor too short (expected 64943, got 45) [ 143.015900][ T5845] usb 7-1: config index 4 descriptor too short (expected 64943, got 45) [ 143.020539][ T5845] usb 7-1: config index 5 descriptor too short (expected 64943, got 45) [ 143.021499][ T5845] usb 7-1: config index 6 descriptor too short (expected 64943, got 45) [ 143.022403][ T5845] usb 7-1: config index 7 descriptor too short (expected 64943, got 45) [ 143.024248][ T5845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.024266][ T5845] usb 7-1: Product: syz [ 143.024278][ T5845] usb 7-1: Manufacturer: syz [ 143.024290][ T5845] usb 7-1: SerialNumber: syz [ 143.275701][ T5845] rtl8150 7-1:1.0: couldn't reset the device [ 143.275964][ T5845] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 143.283517][ T5845] usb 7-1: USB disconnect, device number 9 [ 143.427573][ T1128] ata1.00: exception Emask 0x0 SAct 0x8000000 SErr 0x0 action 0x6 [ 143.427644][ T1128] ata1.00: waking up from sleep [ 143.427743][ T1128] ata1: hard resetting link [ 143.760919][ T1128] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 143.765341][ T1128] ata1.00: configured for UDMA/100 [ 143.765706][ T1128] ata1: EH complete [ 144.099451][ T8115] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 144.258870][ T8115] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 144.258932][ T8115] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 144.263833][ T8115] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.263884][ T8115] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.263906][ T8115] usb 8-1: config 0 interface 0 has no altsetting 0 [ 144.266969][ T8115] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.267001][ T8115] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.267024][ T8115] usb 8-1: config 0 interface 0 has no altsetting 0 [ 144.269138][ T8115] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.269173][ T8115] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.269191][ T8115] usb 8-1: config 0 interface 0 has no altsetting 0 [ 144.270207][ T8115] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.270283][ T8115] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.270301][ T8115] usb 8-1: config 0 interface 0 has no altsetting 0 [ 144.271052][ T8115] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.271085][ T8115] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.271105][ T8115] usb 8-1: config 0 interface 0 has no altsetting 0 [ 144.272117][ T8115] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.272151][ T8115] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.272171][ T8115] usb 8-1: config 0 interface 0 has no altsetting 0 [ 144.273231][ T8115] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.273265][ T8115] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.273286][ T8115] usb 8-1: config 0 interface 0 has no altsetting 0 [ 144.275207][ T8115] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.275242][ T8115] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.275264][ T8115] usb 8-1: config 0 interface 0 has no altsetting 0 [ 144.276997][ T8115] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 144.277014][ T8115] usb 8-1: Product: syz [ 144.277027][ T8115] usb 8-1: Manufacturer: syz [ 144.277039][ T8115] usb 8-1: SerialNumber: syz [ 144.293236][ T8115] usb 8-1: config 0 descriptor?? [ 144.320781][ T8115] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 144.498198][ T5749] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.568376][T11506] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 144.941579][T11524] bond0: no command found in slaves file - use +ifname or -ifname [ 145.837361][ T8115] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 145.871291][ T43] audit: type=1326 audit(1700006414.349:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11566 comm="syz.2.2609" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0 [ 146.056428][ T8115] usb 5-1: unable to get BOS descriptor or descriptor too short [ 146.057349][ T8115] usb 5-1: New USB device found, idVendor=0021, idProduct=0000, bcdDevice= 0.00 [ 146.057369][ T8115] usb 5-1: no configurations [ 146.057375][ T8115] usb 5-1: can't read configurations, error -22 [ 146.577269][ T5749] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.580237][ C0] usb 8-1: yurex_control_callback - control failed: -2 [ 146.584718][ C0] usb 8-1: yurex_control_callback - control failed: -32 [ 146.587436][ T5845] usb 8-1: USB disconnect, device number 9 [ 146.593673][ T5845] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 146.909593][T11597] loop9: detected capacity change from 0 to 255852544 [ 147.146095][T11616] jffs2: notice: (11616) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 147.264452][T11633] gretap0: entered promiscuous mode [ 147.265321][T11633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2636'. [ 147.265341][T11633] gretap0: left promiscuous mode [ 147.324702][T11637] netlink: 'syz.1.2638': attribute type 1 has an invalid length. [ 147.327559][T11637] gretap0: entered promiscuous mode [ 147.334635][T11637] netlink: 'syz.1.2638': attribute type 1 has an invalid length. [ 147.401501][T11649] block nbd0: not configured, cannot reconfigure [ 147.441814][T11652] erspan0: entered promiscuous mode [ 147.728199][T11680] netlink: 'syz.2.2662': attribute type 12 has an invalid length. [ 147.728265][T11680] netlink: 'syz.2.2662': attribute type 29 has an invalid length. [ 147.728542][T11680] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2662'. [ 147.728554][T11680] netlink: 'syz.2.2662': attribute type 1 has an invalid length. [ 147.728561][T11680] netlink: 'syz.2.2662': attribute type 2 has an invalid length. [ 147.728568][T11680] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2662'. [ 147.830946][T11694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.830994][T11694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.836748][T11694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.836806][T11694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.105357][ T43] audit: type=1804 audit(1700006416.579:144): pid=11720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=measuring_policy cause=store_entry comm="syz.3.2682" name="ima_policy_written" res=0 errno=-17 [ 148.105448][ T43] audit: type=1807 audit(1700006416.579:145): action=measure func=F res=0 [ 148.105479][ T43] audit: type=1802 audit(1700006416.579:146): pid=11720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.2682" res=0 errno=0 [ 148.106964][T11718] ima: policy update failed [ 148.107383][ T43] audit: type=1802 audit(1700006416.579:147): pid=11718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2682" res=0 errno=0 [ 148.647433][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880610b5c00: rx timeout, send abort [ 148.657225][ T5749] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.956611][T11776] netlink: 'syz.0.2704': attribute type 6 has an invalid length. [ 149.148753][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880610b5c00: abort rx timeout. Force session deactivation [ 149.278025][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2721'. [ 149.373073][T11816] bond0: (slave veth0): Error: Device can not be enslaved while up [ 149.611941][T11831] sda1: Can't mount, would change RO state [ 149.812190][T11850] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 150.701417][T11868] net_ratelimit: 504 callbacks suppressed [ 150.701718][T11868] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 150.701743][T11868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.782023][T11878] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2755'. [ 150.825162][T11885] scsi_dev_info_list_add_str: bad dev info string 'Mꇋ8KH,P}/(a&LCa8(Au6c1كXPwevJPK5'R X7R.]O\sYT<*|kekөopґ 0[9yo' '' '' [ 150.832256][T11888] netlink: 'syz.1.2756': attribute type 10 has an invalid length. [ 150.834822][T11888] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2756'. [ 150.891314][T11893] Bluetooth: hci4: Frame reassembly failed (-84) [ 150.891503][ T168] Bluetooth: hci4: Frame reassembly failed (-84) [ 150.976175][T11897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2769'. [ 150.977188][T11897] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2769'. [ 150.977200][T11897] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2769'. [ 151.028324][T11895] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 151.028491][T11895] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 152.897469][ T5749] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 153.057325][ T5749] Bluetooth: hci3: command 0x0c1a tx timeout [ 153.057369][ T5740] Bluetooth: hci1: command 0x0c1a tx timeout [ 153.059382][ T5747] Bluetooth: hci2: command 0x0c1a tx timeout [ 153.065786][T11895] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.065930][T11895] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 153.107594][T11909] openvswitch: netlink: Missing key (keys=40, expected=100) [ 153.213643][T11923] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2773'. [ 153.263120][ T43] audit: type=1326 audit(1700006421.739:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11928 comm="syz.3.2783" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 153.270282][ T43] audit: type=1326 audit(1700006421.749:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11928 comm="syz.3.2783" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 153.278630][ T43] audit: type=1326 audit(1700006421.749:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11928 comm="syz.3.2783" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 153.278672][ T43] audit: type=1326 audit(1700006421.759:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11928 comm="syz.3.2783" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 153.278702][ T43] audit: type=1326 audit(1700006421.759:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11928 comm="syz.3.2783" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 153.279187][ T43] audit: type=1326 audit(1700006421.759:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11928 comm="syz.3.2783" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 153.279387][ T43] audit: type=1326 audit(1700006421.759:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11928 comm="syz.3.2783" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 153.279798][ T43] audit: type=1326 audit(1700006421.759:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11928 comm="syz.3.2783" exe="/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 153.279951][ T43] audit: type=1326 audit(1700006421.759:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11928 comm="syz.3.2783" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 153.280042][ T43] audit: type=1326 audit(1700006421.759:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11928 comm="syz.3.2783" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 153.445870][T11943] netlink: 'syz.0.2782': attribute type 1 has an invalid length. [ 153.448081][T11943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2782'. [ 153.501467][T11948] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2785'. [ 153.590341][T11954] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2789'. [ 153.807314][ T5746] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 154.141339][T11992] openvswitch: netlink: IP tunnel dst address not specified [ 154.143826][T11992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.549021][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2819'. [ 154.552859][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2819'. [ 155.137631][ T5740] Bluetooth: hci3: command 0x0c1a tx timeout [ 155.138373][ T5746] Bluetooth: hci0: command 0x0c1a tx timeout [ 155.297366][ T1159] wlan1: Trigger new scan to find an IBSS to join [ 155.299563][ T5747] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 155.327177][ T8115] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 155.395263][ T5747] Bluetooth: hci0: Zero size dump init pkt [ 155.477908][ T8115] usb 8-1: Using ep0 maxpacket: 8 [ 155.479841][ T8115] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 155.484347][ T8115] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 155.484414][ T8115] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 155.484441][ T8115] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 155.484468][ T8115] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 155.484495][ T8115] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 155.484520][ T8115] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.484554][ T8115] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.730251][ T8115] usb 8-1: GET_CAPABILITIES returned 0 [ 155.730295][ T8115] usbtmc 8-1:16.0: can't read capabilities [ 155.934258][ T1344] usb 8-1: USB disconnect, device number 10 [ 156.585038][T12094] loop5: detected capacity change from 0 to 7 [ 156.611248][T12097] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2855'. [ 156.755030][T12094] Dev loop5: unable to read RDB block 7 [ 156.755089][T12094] loop5: unable to read partition table [ 156.755181][T12094] loop5: partition table beyond EOD, truncated [ 156.755198][T12094] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 156.755378][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 156.755413][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 156.812779][T12113] openvswitch: netlink: VLAN attribute unexpected. [ 157.706431][T12189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2896'. [ 157.856208][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2907'. [ 158.417393][ T37] wlan1: Trigger new scan to find an IBSS to join [ 158.773592][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2927'. [ 158.983165][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2930'. [ 159.271233][T12267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2935'. [ 159.393987][T12275] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2938'. [ 159.469546][T12282] cgroup: fork rejected by pids controller in /syz1 [ 159.857332][ T5885] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 159.931982][ T5746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 159.933980][ T5746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 159.936136][ T5746] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 159.937675][ T5746] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 159.942191][ T5746] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 160.019564][ T5885] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.024553][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.024629][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.024648][ T5885] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 160.024680][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.028464][ T5885] usb 7-1: config 0 descriptor?? [ 160.191741][T12324] netlink: 'syz.3.2956': attribute type 22 has an invalid length. [ 160.193707][T12324] netlink: 'syz.3.2956': attribute type 22 has an invalid length. [ 160.193722][T12324] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2956'. [ 160.365964][T12340] sd 0:0:0:0: PR command failed: 1026 [ 160.366115][T12340] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 160.366150][T12340] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 160.439626][T12299] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.442873][T12299] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.446022][T12299] bridge_slave_0: entered allmulticast mode [ 160.448775][ T5885] hid_parser_main: 6 callbacks suppressed [ 160.448790][ T5885] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 160.448810][ T5885] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 160.448828][ T5885] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 160.448845][ T5885] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 160.448863][ T5885] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 160.448878][ T5885] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 160.448895][ T5885] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 160.448912][ T5885] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 160.448929][ T5885] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 160.448946][ T5885] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 160.454040][T12299] bridge_slave_0: entered promiscuous mode [ 160.455352][T12299] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.455394][T12299] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.455452][T12299] bridge_slave_1: entered allmulticast mode [ 160.456203][T12299] bridge_slave_1: entered promiscuous mode [ 160.483040][T12299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.484480][T12299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.485483][ T5885] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 160.522810][T12299] team0: Port device team_slave_0 added [ 160.524162][T12299] team0: Port device team_slave_1 added [ 160.528239][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2967'. [ 160.538710][T12299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.538754][T12299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.538789][T12299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.539633][T12299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.539641][T12299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.539654][T12299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.558759][T12299] hsr_slave_0: entered promiscuous mode [ 160.559178][T12299] hsr_slave_1: entered promiscuous mode [ 160.559504][T12299] debugfs: 'hsr0' already exists in 'hsr' [ 160.559515][T12299] Cannot create hsr debugfs directory [ 160.659372][T12299] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.698988][ T5885] usb 7-1: USB disconnect, device number 10 [ 160.736622][T12299] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.783434][T12299] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.862748][T12299] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.951624][ T12] bridge_slave_1: left allmulticast mode [ 160.951681][ T12] bridge_slave_1: left promiscuous mode [ 160.952978][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.966496][ T12] bridge_slave_0: left allmulticast mode [ 160.966566][ T12] bridge_slave_0: left promiscuous mode [ 160.967620][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.980849][ T12] dummy0: left allmulticast mode [ 161.187237][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.194899][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.200378][ T12] bond0 (unregistering): Released all slaves [ 161.208283][ T12] bond1 (unregistering): Released all slaves [ 161.283496][T12299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 161.296733][T12385] e1000e 0000:00:02.0: resetting [ 161.326800][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 161.326882][ T43] audit: type=1326 audit(1700006429.799:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12386 comm="syz.0.2983" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fec code=0x7ffc0000 [ 161.326942][ T43] audit: type=1326 audit(1700006429.799:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12386 comm="syz.0.2983" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fec code=0x7ffc0000 [ 161.328681][T12299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 161.329243][ T43] audit: type=1326 audit(1700006429.799:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12386 comm="syz.0.2983" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fec code=0x7ffc0000 [ 161.329336][ T43] audit: type=1326 audit(1700006429.809:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12386 comm="syz.0.2983" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f87fec code=0x7ffc0000 [ 161.329372][ T43] audit: type=1326 audit(1700006429.809:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12386 comm="syz.0.2983" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fec code=0x7ffc0000 [ 161.329405][ T43] audit: type=1326 audit(1700006429.809:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12386 comm="syz.0.2983" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fec code=0x7ffc0000 [ 161.329763][ T43] audit: type=1326 audit(1700006429.809:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12386 comm="syz.0.2983" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fec code=0x7ffc0000 [ 161.329822][ T43] audit: type=1326 audit(1700006429.809:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12386 comm="syz.0.2983" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fec code=0x7ffc0000 [ 161.329858][ T43] audit: type=1326 audit(1700006429.809:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12386 comm="syz.0.2983" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f87fec code=0x7ffc0000 [ 161.329955][ T43] audit: type=1326 audit(1700006429.809:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12386 comm="syz.0.2983" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fec code=0x7ffc0000 [ 161.330581][T12299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 161.347071][T12299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 161.349019][T12299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 161.375639][T12299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 161.376044][T12299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 161.380583][T12385] e1000e 0000:00:02.0: reset done [ 161.389921][ T38] wlan1: Creating new IBSS network, BSSID c2:74:a0:51:e0:e0 [ 161.410269][T12299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 161.455687][ T12] IPVS: stopping master sync thread 10514 ... [ 161.564588][T12391] ftl_cs: FTL header not found. [ 161.699651][T12391] block2mtd: mtd1: [/dev/loop0] erase_size = 4KiB [4096] [ 161.724643][T12299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.725589][T12416] usb usb7: usbfs: interface 0 claimed by hub while 'syz.0.2991' resets device [ 161.757156][T12299] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.765869][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.766008][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.773709][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.773833][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.789587][ T37] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 161.925756][ T12] hsr_slave_0: left promiscuous mode [ 161.928998][ T12] hsr_slave_1: left promiscuous mode [ 161.945200][ T12] veth1_macvtap: left promiscuous mode [ 161.945987][ T12] veth0_macvtap: left promiscuous mode [ 161.946070][ T12] veth1_vlan: left promiscuous mode [ 161.946298][ T12] veth0_vlan: left promiscuous mode [ 162.017838][ T5747] Bluetooth: hci2: command tx timeout [ 162.148309][ T12] team0 (unregistering): Port device team_slave_1 removed [ 162.155507][ T12] team0 (unregistering): Port device team_slave_0 removed [ 162.317380][ T5845] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 162.477963][ T5845] usb 7-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=cc.2b [ 162.489867][ T5845] usb 7-1: config 3 has an invalid interface number: 88 but max is 0 [ 162.489951][ T5845] usb 7-1: config 3 has no interface number 0 [ 162.489991][ T5845] usb 7-1: config 3 interface 88 has no altsetting 0 [ 162.492627][T12299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.495220][ T5845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.495239][ T5845] usb 7-1: Product: syz [ 162.495250][ T5845] usb 7-1: Manufacturer: syz [ 162.495262][ T5845] usb 7-1: SerialNumber: syz [ 162.523537][T12299] veth0_vlan: entered promiscuous mode [ 162.534406][T12299] veth1_vlan: entered promiscuous mode [ 162.555292][T12299] veth0_macvtap: entered promiscuous mode [ 162.559030][T12299] veth1_macvtap: entered promiscuous mode [ 162.571315][T12299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.581333][T12299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.632494][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.632542][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.668417][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.668636][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.677443][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.680993][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.681011][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.687579][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.719817][ T5845] usb 7-1: USB disconnect, device number 11 [ 162.904369][T12492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3020'. [ 162.955350][T12496] loop5: detected capacity change from 0 to 6 [ 162.961247][T12496] loop5: [POWERTEC] p1 p2 p3 [ 162.963849][T12496] loop5: p1 start 2738982409 is beyond EOD, truncated [ 162.967544][T12496] loop5: p2 start 3318134482 is beyond EOD, truncated [ 162.967565][T12496] loop5: p3 start 3832978868 is beyond EOD, truncated [ 163.062464][T12504] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 163.372058][ T58] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [syz1] on syz0 [ 163.446956][T12541] ALSA: mixer_oss: invalid OSS volume '{~/' [ 163.480007][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3045'. [ 163.653094][T12561] block2mtd: parameter too long [ 164.091398][T12575] ucma_write: process 1710 (syz.3.3057) changed security contexts after opening file descriptor, this is not allowed. [ 164.108410][ T5746] Bluetooth: hci2: command tx timeout [ 164.777196][ T5845] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 164.884401][T12602] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.950556][ T5845] usb 6-1: unable to get BOS descriptor or descriptor too short [ 164.950615][ T5845] usb 6-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 164.951497][ T5845] usb 6-1: config 8 has an invalid interface number: 109 but max is 0 [ 164.951510][ T5845] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 164.951519][ T5845] usb 6-1: config 8 has no interface number 0 [ 164.951536][ T5845] usb 6-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 164.951550][ T5845] usb 6-1: config 8 interface 109 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 164.951562][ T5845] usb 6-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 151, setting to 8 [ 164.955880][ T5845] usb 6-1: string descriptor 0 read error: -22 [ 164.955933][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.958620][T12586] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 164.959694][ T5845] metro_usb 6-1:8.109: Metrologic USB to Serial converter detected [ 164.961988][ T5845] usb 6-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 165.187219][ T1344] usb 6-1: USB disconnect, device number 11 [ 165.209676][ T1344] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 165.214335][ T1344] metro_usb 6-1:8.109: device disconnected [ 165.531824][T12602] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.610041][T12602] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.627270][ T5845] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 165.695319][T12602] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.790169][ T5845] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 165.791066][ T5845] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 165.791083][ T5845] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.791096][ T5845] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 165.791122][ T5845] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.792336][ T5845] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 165.792351][ T5845] usb 7-1: Product: syz [ 165.792361][ T5845] usb 7-1: Manufacturer: syz [ 165.799355][ T5845] cdc_wdm 7-1:1.0: skipping garbage [ 165.799364][ T5845] cdc_wdm 7-1:1.0: skipping garbage [ 165.800883][ T5845] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 165.800893][ T5845] cdc_wdm 7-1:1.0: Unknown control protocol [ 166.034601][ T9] usb 7-1: USB disconnect, device number 12 [ 166.179849][ T5740] Bluetooth: hci2: command 0x040f tx timeout [ 166.645711][T12706] bond0: no command found in slaves file - use +ifname or -ifname [ 166.800272][T12715] openvswitch: netlink: Unknown key attributes 1 [ 166.870019][T12719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3122'. [ 167.145691][T12739] overlayfs: missing 'workdir' [ 167.210491][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 167.210577][ T43] audit: type=1326 audit(1700006435.689:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12742 comm="syz.2.3132" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0 [ 167.697448][ T5747] Bluetooth: hci4: command 0x1003 tx timeout [ 167.700642][ T5746] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 167.859603][ T43] audit: type=1400 audit(1700006436.339:175): apparmor="STATUS" info="empty profile name" error=-71 profile="unconfined" name=":/o" pid=12760 comm="syz.0.3140" name=":/o" offset=35 [ 167.997993][T12771] db_root: cannot open: ./my_ [ 168.227623][T12797] netlink: 284 bytes leftover after parsing attributes in process `syz.2.3157'. [ 168.267311][ T5746] Bluetooth: hci2: command 0x040f tx timeout [ 168.367828][ T1344] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 168.528286][ T1344] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 168.531527][ T1344] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.531567][ T1344] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.536949][ T1344] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.536970][ T1344] usb 6-1: Product: syz [ 168.536982][ T1344] usb 6-1: Manufacturer: syz [ 168.536994][ T1344] usb 6-1: SerialNumber: syz [ 168.978768][T12856] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3185'. [ 169.391163][T12884] block2mtd: too many arguments [ 170.024148][ T58] usb 6-1: USB disconnect, device number 12 [ 170.337365][ T5746] Bluetooth: hci2: command 0x040f tx timeout [ 170.377221][ T5813] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 170.528406][ T5813] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 170.529480][ T5813] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 170.529506][ T5813] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 170.530392][ T5813] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 170.530415][ T5813] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 170.532439][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.532459][ T5813] usb 5-1: Product: syz [ 170.532471][ T5813] usb 5-1: Manufacturer: syz [ 170.532483][ T5813] usb 5-1: SerialNumber: syz [ 170.564250][ T5813] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 170.574659][ T5813] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 170.581643][ T5813] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 170.708461][T12924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3218'. [ 170.708531][T12924] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3218'. [ 170.769965][T12912] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90 [ 170.773588][ T9] usb 5-1: USB disconnect, device number 10 [ 170.782551][ T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 170.787529][ T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 170.787963][ T9] ti_usb_3410_5052 5-1:2.0: device disconnected [ 170.923455][T12940] aa_policy_admin_capable: cap_mac_admin? 1 [ 170.923618][T12940] aa_policy_admin_capable: policy locked? 0 [ 170.923761][T12940] unpack_pdb: unpacking tags [ 170.923821][T12940] unpack_pdb: done unpacking tags [ 170.923846][T12940] unpack_pdb: unpacking tags [ 170.923855][T12940] unpack_pdb: done unpacking tags [ 170.924053][ T43] audit: type=1400 audit(1700006439.399:176): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=12939 comm="syz.1.3226" name="p" offset=79 [ 170.924131][T12940] aa_free_profile: aa_free_profile(ffff88807189d400) [ 171.107438][ T58] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 171.119740][T12956] i2c-slave-eeprom 0-0001: i2c_slave_register: client slave flag not set. You might see address collisions [ 171.119810][T12956] i2c-slave-eeprom 0-0001: i2c_slave_register: invalid address [ 171.123602][T12956] i2c-slave-eeprom 0-0001: probe with driver i2c-slave-eeprom failed with error -22 [ 171.124055][T12956] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x01 [ 171.277976][ T58] usb 7-1: Using ep0 maxpacket: 16 [ 171.278503][ T58] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 171.285892][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 171.290631][T12970] profile_transition: unconfined exec no attachment [ 171.291941][ T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.291993][ T58] usb 7-1: Product: syz [ 171.292064][ T58] usb 7-1: Manufacturer: syz [ 171.292133][ T58] usb 7-1: SerialNumber: syz [ 171.307308][ T58] usb 7-1: config 0 descriptor?? [ 171.321954][ T58] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 171.322436][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3241'. [ 171.322457][T12972] netlink: 'syz.0.3241': attribute type 21 has an invalid length. [ 171.327401][ T58] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 171.580795][ T58] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 171.654018][ T58] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 171.654090][ T58] em28xx 7-1:0.0: board has no eeprom [ 171.730272][ T58] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 171.730323][ T58] em28xx 7-1:0.0: dvb set to bulk mode. [ 171.731802][ T1344] em28xx 7-1:0.0: Binding DVB extension [ 171.735113][ T58] usb 7-1: USB disconnect, device number 13 [ 171.740063][ T58] em28xx 7-1:0.0: Disconnecting em28xx [ 171.746578][T12996] profile_transition: unconfined exec no attachment [ 171.747484][T12936] em28xx 7-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 171.784659][ T1344] em28xx 7-1:0.0: Registering input extension [ 171.784897][ T58] em28xx 7-1:0.0: Closing input extension [ 171.808610][ T58] em28xx: Freeing device [ 171.883492][T13008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3257'. [ 172.302906][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3265'. [ 172.428282][T13039] input: syz0 as /devices/virtual/input/input29 [ 173.061890][T13103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3303'. [ 173.066273][T13103] bond0: entered promiscuous mode [ 173.066573][T13103] bond_slave_0: entered promiscuous mode [ 173.066751][T13103] bond_slave_1: entered promiscuous mode [ 173.068150][T13103] gretap0: entered promiscuous mode [ 173.068879][T13103] hsr1: entered promiscuous mode [ 173.179723][T13116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3309'. [ 173.180473][T13116] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3309'. [ 173.363727][T13135] i2c i2c-0: delete_device: Can't find device in list [ 173.870684][T13169] sctp: [Deprecated]: syz.2.3334 (pid 13169) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.870684][T13169] Use struct sctp_sack_info instead [ 174.041588][ T67] block nbd0: Receive control failed (result -32) [ 174.174015][T13192] netlink: 'syz.3.3345': attribute type 10 has an invalid length. [ 174.189209][T13192] team0: Device wg2 is of different type [ 174.233328][T13196] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3348'. [ 174.485163][T13213] aa_policy_admin_capable: cap_mac_admin? 1 [ 174.486846][T13213] aa_policy_admin_capable: policy locked? 0 [ 174.486946][T13213] unpack_pdb: unpacking tags [ 174.486957][T13213] unpack_pdb: done unpacking tags [ 174.487056][T13213] aa_free_profile: aa_free_profile(ffff888013d69800) [ 174.488343][ T43] audit: type=1400 audit(1700006442.959:177): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=13212 comm="syz.1.3355" name="p" offset=43 [ 174.647359][T13229] netlink: 'syz.1.3363': attribute type 1 has an invalid length. [ 174.651283][T13229] block nbd1: shutting down sockets [ 174.793986][T13244] profile_transition: unconfined exec no attachment [ 174.835026][T13248] profile_transition: unconfined exec no attachment [ 174.850438][T13251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3372'. [ 174.858763][T13251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3372'. [ 174.942308][T13264] netlink: 'syz.0.3378': attribute type 11 has an invalid length. [ 175.071118][T13277] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3384'. [ 175.092825][ T5746] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 175.319039][ T43] audit: type=1326 audit(1700006443.799:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13301 comm="syz.0.3396" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f87fec code=0x0 [ 175.342714][T13304] usbcore.quirks: string doesn't fit in 127 chars. [ 176.324094][T13347] profile_transition: unconfined exec no attachment [ 176.542873][T13370] ------------[ cut here ]------------ [ 176.542924][T13370] err == -EMSGSIZE [ 176.542956][T13370] WARNING: net/core/rtnetlink.c:4594 at rtmsg_ifinfo_build_skb+0x1c1/0x260, CPU#2: syz.3.3427/13370 [ 176.555541][T13370] Modules linked in: [ 176.557857][T13370] CPU: 2 UID: 0 PID: 13370 Comm: syz.3.3427 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.561402][T13370] Tainted: [L]=SOFTLOCKUP [ 176.562956][T13370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.567338][T13370] RIP: 0010:rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 176.569461][T13370] Code: ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 80 00 00 00 45 8b 76 08 e9 3c ff ff ff e8 40 8d 66 f8 90 <0f> 0b 90 ba 02 00 00 00 48 89 ee 31 ff bb a6 ff ff ff e8 c8 7a f0 [ 176.576220][T13370] RSP: 0018:ffffc900245ded88 EFLAGS: 00010283 [ 176.579164][T13370] RAX: 000000000000ba8f RBX: 00000000ffffffa6 RCX: ffffc900247b1000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 176.582599][T13370] RDX: 0000000000080000 RSI: ffffffff89a4cff0 RDI: ffff888028e0a580 [ 176.586007][T13370] RBP: ffff88802ace5cc0 R08: 0000000000000005 R09: 0000000000000000 [ 176.589636][T13370] R10: 00000000ffffffa6 R11: 0000000000000001 R12: 0000000000000002 [ 176.592532][T13370] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888014668108 [ 176.595252][T13370] FS: 0000000000000000(0000) GS:ffff888096b61000(0063) knlGS:00000000f53bdb40 [ 176.598617][T13370] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 176.601413][T13370] CR2: 00000000f7f7a190 CR3: 00000000761b5000 CR4: 0000000000352ef0 [ 176.604273][T13370] Call Trace: [ 176.605376][T13370] [ 176.606549][T13370] rtnetlink_event+0x137/0x1f0 [ 176.608589][T13370] notifier_call_chain+0x99/0x3f0 [ 176.610454][T13370] call_netdevice_notifiers_info+0xbe/0x110 [ 176.612599][T13370] netif_disable_lro+0x3e9/0x660 [ 176.614269][T13370] ? __pfx_netif_disable_lro+0x10/0x10 [ 176.616138][T13370] ? lockdep_hardirqs_on+0x7d/0x110 [ 176.617857][T13370] ? __local_bh_enable_ip+0xa5/0x120 [ 176.619586][T13370] ? neigh_parms_alloc+0x45f/0x5e0 [ 176.621675][T13370] ipv6_add_dev+0xde0/0x1520 [ 176.623521][T13370] addrconf_notify+0x5db/0x1ba0 [ 176.625138][T13370] ? __pfx_tls_dev_event+0x10/0x10 [ 176.626839][T13370] ? __pfx_addrconf_notify+0x10/0x10 [ 176.628606][T13370] ? ip6mr_device_event+0x1c4/0x230 [ 176.630299][T13370] notifier_call_chain+0x99/0x3f0 [ 176.631947][T13370] call_netdevice_notifiers_info+0xbe/0x110 [ 176.633881][T13370] register_netdevice+0x1998/0x25a0 [ 176.635567][T13370] ? __pfx_register_netdevice+0x10/0x10 [ 176.637444][T13370] ? __pfx_macsec_newlink+0x10/0x10 [ 176.640180][T13370] macsec_newlink+0x4fb/0x1c50 [ 176.642224][T13370] ? __pfx_macsec_newlink+0x10/0x10 [ 176.644218][T13370] ? __kasan_kmalloc+0xaa/0xb0 [ 176.646047][T13370] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 176.647830][T13370] ? alloc_netdev_mqs+0xf5f/0x15c0 [ 176.649470][T13370] ? validate_linkmsg+0x57c/0xba0 [ 176.651093][T13370] ? __pfx_validate_linkmsg+0x10/0x10 [ 176.652806][T13370] ? alloc_netdev_mqs+0x120a/0x15c0 [ 176.654485][T13370] ? rtnl_create_link+0xa4b/0xf80 [ 176.656153][T13370] ? __pfx_macsec_newlink+0x10/0x10 [ 176.658217][T13370] rtnl_newlink+0x1697/0x2620 [ 176.659822][T13370] ? __pfx_rtnl_newlink+0x10/0x10 [ 176.661467][T13370] ? rcu_is_watching+0x13/0xc0 [ 176.663046][T13370] ? find_held_lock+0x2b/0x80 [ 176.664564][T13370] ? lock_acquire+0x1d1/0x380 [ 176.666139][T13370] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 176.668094][T13370] ? find_held_lock+0x2b/0x80 [ 176.669696][T13370] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 176.671368][T13370] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 176.673318][T13370] ? __pfx_rtnl_newlink+0x10/0x10 [ 176.675564][T13370] rtnetlink_rcv_msg+0x95e/0xe90 [ 176.677766][T13370] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 176.680641][T13370] ? ref_tracker_free+0x37e/0x6c0 [ 176.682360][T13370] netlink_rcv_skb+0x159/0x420 [ 176.683914][T13370] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 176.685661][T13370] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 176.687479][T13370] ? netlink_deliver_tap+0x1ae/0xcc0 [ 176.689171][T13370] netlink_unicast+0x585/0x850 [ 176.690764][T13370] ? __pfx_netlink_unicast+0x10/0x10 [ 176.692459][T13370] netlink_sendmsg+0x8b0/0xda0 [ 176.694049][T13370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.695740][T13370] ? apparmor_socket_sendmsg+0x165/0x280 [ 176.697535][T13370] ____sys_sendmsg+0xa4d/0xbe0 [ 176.699091][T13370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.700804][T13370] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.702751][T13370] ___sys_sendmsg+0x190/0x1e0 [ 176.704379][T13370] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.706076][T13370] ? futex_wait+0x11e/0x370 [ 176.707666][T13370] ? find_held_lock+0x2b/0x80 [ 176.709283][T13370] __sys_sendmsg+0x160/0x210 [ 176.711091][T13370] ? __pfx___sys_sendmsg+0x10/0x10 [ 176.712754][T13370] __do_fast_syscall_32+0x13a/0x8b0 [ 176.714474][T13370] do_fast_syscall_32+0x32/0x70 [ 176.716057][T13370] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.718142][T13370] RIP: 0023:0xf6fcefec [ 176.719480][T13370] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 176.721639][T13370] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 176.724415][T13370] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 176.727033][T13370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.729893][T13370] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 176.732762][T13370] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 176.735710][T13370] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.738713][T13370] [ 176.739784][T13370] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 176.742087][T13370] CPU: 2 UID: 0 PID: 13370 Comm: syz.3.3427 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.745452][T13370] Tainted: [L]=SOFTLOCKUP [ 176.746822][T13370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.749925][T13370] Call Trace: [ 176.751012][T13370] [ 176.751954][T13370] dump_stack_lvl+0x100/0x190 [ 176.753472][T13370] vpanic+0x553/0x970 [ 176.754741][T13370] ? __pfx_vpanic+0x10/0x10 [ 176.756170][T13370] panic+0xd1/0xe0 [ 176.757361][T13370] ? __pfx_panic+0x10/0x10 [ 176.758784][T13370] check_panic_on_warn.cold+0x19/0x34 [ 176.760469][T13370] ? rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 176.762233][T13370] __warn.cold+0x191/0x318 [ 176.763664][T13370] __report_bug+0x30f/0x440 [ 176.765107][T13370] ? rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 176.766997][T13370] ? __pfx___report_bug+0x10/0x10 [ 176.768994][T13370] ? __pfx_rtnl_fill_ifinfo.isra.0+0x10/0x10 [ 176.772725][T13370] ? rcu_is_watching+0x13/0xc0 [ 176.774316][T13370] ? offline_pages+0x1550/0x1b00 [ 176.775867][T13370] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 176.777828][T13370] ? rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 176.779555][T13370] report_bug+0xb3/0x220 [ 176.780928][T13370] ? rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 176.782666][T13370] handle_bug+0x16a/0x2a0 [ 176.784043][T13370] exc_invalid_op+0x17/0x50 [ 176.785468][T13370] asm_exc_invalid_op+0x1a/0x20 [ 176.787001][T13370] RIP: 0010:rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 176.788919][T13370] Code: ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 80 00 00 00 45 8b 76 08 e9 3c ff ff ff e8 40 8d 66 f8 90 <0f> 0b 90 ba 02 00 00 00 48 89 ee 31 ff bb a6 ff ff ff e8 c8 7a f0 [ 176.794767][T13370] RSP: 0018:ffffc900245ded88 EFLAGS: 00010283 [ 176.796665][T13370] RAX: 000000000000ba8f RBX: 00000000ffffffa6 RCX: ffffc900247b1000 [ 176.799564][T13370] RDX: 0000000000080000 RSI: ffffffff89a4cff0 RDI: ffff888028e0a580 [ 176.802704][T13370] RBP: ffff88802ace5cc0 R08: 0000000000000005 R09: 0000000000000000 [ 176.805824][T13370] R10: 00000000ffffffa6 R11: 0000000000000001 R12: 0000000000000002 [ 176.808922][T13370] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888014668108 [ 176.811777][T13370] ? rtmsg_ifinfo_build_skb+0x1c0/0x260 [ 176.813577][T13370] ? rtmsg_ifinfo_build_skb+0x1c0/0x260 [ 176.815322][T13370] rtnetlink_event+0x137/0x1f0 [ 176.816833][T13370] notifier_call_chain+0x99/0x3f0 [ 176.818449][T13370] call_netdevice_notifiers_info+0xbe/0x110 [ 176.820303][T13370] netif_disable_lro+0x3e9/0x660 [ 176.821883][T13370] ? __pfx_netif_disable_lro+0x10/0x10 [ 176.823636][T13370] ? lockdep_hardirqs_on+0x7d/0x110 [ 176.825277][T13370] ? __local_bh_enable_ip+0xa5/0x120 [ 176.826935][T13370] ? neigh_parms_alloc+0x45f/0x5e0 [ 176.828550][T13370] ipv6_add_dev+0xde0/0x1520 [ 176.830034][T13370] addrconf_notify+0x5db/0x1ba0 [ 176.831607][T13370] ? __pfx_tls_dev_event+0x10/0x10 [ 176.833251][T13370] ? __pfx_addrconf_notify+0x10/0x10 [ 176.834926][T13370] ? ip6mr_device_event+0x1c4/0x230 [ 176.836567][T13370] notifier_call_chain+0x99/0x3f0 [ 176.838158][T13370] call_netdevice_notifiers_info+0xbe/0x110 [ 176.840133][T13370] register_netdevice+0x1998/0x25a0 [ 176.842176][T13370] ? __pfx_register_netdevice+0x10/0x10 [ 176.844311][T13370] ? __pfx_macsec_newlink+0x10/0x10 [ 176.846327][T13370] macsec_newlink+0x4fb/0x1c50 [ 176.847800][T13370] ? __pfx_macsec_newlink+0x10/0x10 [ 176.849875][T13370] ? __kasan_kmalloc+0xaa/0xb0 [ 176.851780][T13370] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 176.854007][T13370] ? alloc_netdev_mqs+0xf5f/0x15c0 [ 176.856060][T13370] ? validate_linkmsg+0x57c/0xba0 [ 176.858101][T13370] ? __pfx_validate_linkmsg+0x10/0x10 [ 176.860255][T13370] ? alloc_netdev_mqs+0x120a/0x15c0 [ 176.862395][T13370] ? rtnl_create_link+0xa4b/0xf80 [ 176.864252][T13370] ? __pfx_macsec_newlink+0x10/0x10 [ 176.866138][T13370] rtnl_newlink+0x1697/0x2620 [ 176.868178][T13370] ? __pfx_rtnl_newlink+0x10/0x10 [ 176.870236][T13370] ? rcu_is_watching+0x13/0xc0 [ 176.872200][T13370] ? find_held_lock+0x2b/0x80 [ 176.874114][T13370] ? lock_acquire+0x1d1/0x380 [ 176.875890][T13370] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 176.877542][T13370] ? find_held_lock+0x2b/0x80 [ 176.879432][T13370] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 176.881227][T13370] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 176.882949][T13370] ? __pfx_rtnl_newlink+0x10/0x10 [ 176.884988][T13370] rtnetlink_rcv_msg+0x95e/0xe90 [ 176.887043][T13370] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 176.889245][T13370] ? ref_tracker_free+0x37e/0x6c0 [ 176.891303][T13370] netlink_rcv_skb+0x159/0x420 [ 176.892968][T13370] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 176.894746][T13370] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 176.896903][T13370] ? netlink_deliver_tap+0x1ae/0xcc0 [ 176.898625][T13370] netlink_unicast+0x585/0x850 [ 176.900214][T13370] ? __pfx_netlink_unicast+0x10/0x10 [ 176.902381][T13370] netlink_sendmsg+0x8b0/0xda0 [ 176.904060][T13370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.905765][T13370] ? apparmor_socket_sendmsg+0x165/0x280 [ 176.907966][T13370] ____sys_sendmsg+0xa4d/0xbe0 [ 176.909981][T13370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.912004][T13370] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.914081][T13370] ___sys_sendmsg+0x190/0x1e0 [ 176.915940][T13370] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.917554][T13370] ? futex_wait+0x11e/0x370 [ 176.919191][T13370] ? find_held_lock+0x2b/0x80 [ 176.920681][T13370] __sys_sendmsg+0x160/0x210 [ 176.922194][T13370] ? __pfx___sys_sendmsg+0x10/0x10 [ 176.923806][T13370] __do_fast_syscall_32+0x13a/0x8b0 [ 176.925443][T13370] do_fast_syscall_32+0x32/0x70 [ 176.926992][T13370] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.928979][T13370] RIP: 0023:0xf6fcefec [ 176.930278][T13370] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 176.932354][T13370] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 176.934964][T13370] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 176.937422][T13370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.939926][T13370] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 176.942988][T13370] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 176.945972][T13370] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.948500][T13370] [ 176.950097][T13370] Dumping ftrace buffer: [ 176.951534][T13370] (ftrace buffer empty) [ 176.952939][T13370] Kernel Offset: disabled [ 176.954321][T13370] Rebooting in 86400 seconds..