last executing test programs: 9m5.091132547s ago: executing program 4 (id=224): open_tree(0xffffffffffffffff, &(0x7f0000000000), 0x0) 9m5.09043758s ago: executing program 4 (id=228): fchmod(0xffffffffffffffff, 0x0) 9m5.06576557s ago: executing program 4 (id=231): syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$loop(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$loop(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$loop(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$loop(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$loop(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$loop(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$loop(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$loop(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$loop(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$loop(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$loop(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$loop(&(0x7f0000000500), 0x4, 0x800) 9m4.99466645s ago: executing program 4 (id=234): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/direct', 0x2, 0x0) 9m4.971968129s ago: executing program 4 (id=239): setfsgid(0x0) 9m4.112536279s ago: executing program 4 (id=242): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2m40.926200737s ago: executing program 2 (id=3480): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) 2m40.652949782s ago: executing program 2 (id=3483): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000000100)) 2m40.447587674s ago: executing program 2 (id=3486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x44, 0x0, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x5219680c}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) 2m40.282285412s ago: executing program 2 (id=3491): prctl$PR_MCE_KILL(0x29, 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x68346000) 2m38.938467273s ago: executing program 2 (id=3510): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b787c3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) 2m38.446894484s ago: executing program 2 (id=3518): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000003c0)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x1, 0x14, 0xfffa, 0x4360}, 0x8, 0x6, 0xffff, 0x0, 0x1, 0x101, 0x0}) 2m23.356123671s ago: executing program 32 (id=3518): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000003c0)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x1, 0x14, 0xfffa, 0x4360}, 0x8, 0x6, 0xffff, 0x0, 0x1, 0x101, 0x0}) 42.302596017s ago: executing program 3 (id=5261): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001fc0), 0x40a80) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000002000)={{0x3, 0x2, 0x1, 0x3, 0x5}, 0x6, 0x100000000, 0x60e}) 42.06977062s ago: executing program 3 (id=5265): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, 0x0, 0x0) 41.848535732s ago: executing program 3 (id=5270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000ac0)={0x18, 0x0, 0x3, 0x301, 0x70bd25, 0x25dfdbfb, {0x1, 0x0, 0x8}, [@generic="e791ccd8"]}, 0x18}, 0x1, 0x0, 0x0, 0x20008002}, 0x0) 41.479787048s ago: executing program 3 (id=5276): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0xfffffff7, 0x0, 0x47524247, 0x2, 0x8, [{0x3, 0x4}, {0x5, 0x4}, {0x7f, 0x3}, {0x9, 0x6}, {0x4, 0x30000000}, {0x7, 0x38}, {0xe, 0x2}, {0x9, 0x15}], 0x3b, 0x6, 0x1, 0x0, 0x1}}) 41.189681633s ago: executing program 3 (id=5282): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0x0, @empty, 0xfffffff8}}, 0xff, 0x107}, 0x90) 40.891403756s ago: executing program 3 (id=5285): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000480)={0x1, 0x14, 0x5, 0x825e, 0x0, 0x8000, 0x0}) 25.839363621s ago: executing program 33 (id=5285): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000480)={0x1, 0x14, 0x5, 0x825e, 0x0, 0x8000, 0x0}) 5.411566105s ago: executing program 7 (id=5789): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x28002) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"0400", 0x100, 0x5, 0x4, 0x800, 0x1, "00017355d0000000000082001000", '\x00', "009e0500", '\x00', ["8ba8e2bca7cbd6e4af000700", "ca8cacfffffffff4550400", "000000ff0000000000000020", "0000000000000000001000"]}) 5.151019426s ago: executing program 7 (id=5794): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000002e00090007bd7000000000000400000004001d00080011"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 4.70304677s ago: executing program 7 (id=5802): ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000440)={0xe9, 0x1a, &(0x7f0000000040)}) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101b8298a20030478fa0203135f19010902120001000010000904846600"], 0x0) 2.053554032s ago: executing program 1 (id=5832): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3c}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 1.8512868s ago: executing program 1 (id=5835): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40004, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x9) 1.729785449s ago: executing program 6 (id=5836): r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000003100)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd595/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff\x00'/909, 0x0) 1.708804867s ago: executing program 0 (id=5837): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000440c0500000000f00000000500eaffe510000000000000000000000001"], 0x38}}], 0x1, 0x4800) 1.496387327s ago: executing program 7 (id=5839): r0 = fsopen(&(0x7f0000000100)='overlay\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000003700)='default_permissions', &(0x7f0000003740)="8c", 0x1) 1.494655675s ago: executing program 1 (id=5840): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ppoll(&(0x7f0000000080)=[{r0, 0x3461}, {r0}], 0x2, 0x0, 0x0, 0x0) 1.484343601s ago: executing program 0 (id=5841): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000600030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000ffe000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.454462794s ago: executing program 6 (id=5842): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="140000007200911fdabcf8b30771a54a07"], 0xfe33) 1.440505202s ago: executing program 5 (id=5843): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000080)={'bridge_slave_0\x00', @random="0131be7839ff"}) 1.24900787s ago: executing program 0 (id=5844): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e26, 0x200000ff, @loopback, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000100)="a6", 0x1}], 0x1, &(0x7f0000000080)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @local}}], 0x20, 0x4854}, 0x24000052) 1.238237715s ago: executing program 7 (id=5845): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b953800000000030006000000000002000000000000000009000000000000020001000000000000000afdff000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x4040) 1.208687439s ago: executing program 1 (id=5846): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) unshare(0x6a040000) 1.207886287s ago: executing program 6 (id=5847): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5332, &(0x7f0000000400)={{0x40, 0x3}, 0x0, 0x4, 0x88, {}, 0x0, 0xffff}) 1.035795048s ago: executing program 5 (id=5848): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) 1.034398029s ago: executing program 0 (id=5849): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103902, 0x0) sendfile(r0, r0, 0x0, 0x20004) 958.179641ms ago: executing program 6 (id=5850): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x188, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x298, 0xffffffff, 0xffffffff, 0x298, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [], [0xffffffff], 'syzkaller0\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0x0, 0x3, 0x1}, 0x0, 0x148, 0x188, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth1_to_bond\x00', {}, 'macvlan1\x00', {}, 0x16, 0x6}}, @common=@unspec=@statistic={{0x38}, {0x8001, 0x0, 0x6, 0xb, 0x9, {0x2}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "acb1f84fe0cc4798499dd011ced9bb1f00000000000000008c00"}}, {{@ipv6={@remote, @mcast2, [0xff, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff], 'gretap0\x00', 'macvlan0\x00', {0xff}, {}, 0xc, 0x7, 0x1, 0x4}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x11, 0xfff8, 0x1, 0x5, 'snmp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3c8) 784.300409ms ago: executing program 5 (id=5851): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2402, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000500)={0x4, 0x0, [{0x80000001, 0x3, 0x1, 0x7fffffff, 0x9, 0x3, 0x6}, {0x0, 0xb, 0x6, 0x7f, 0xd11, 0x4, 0xfffffffe}, {0xd, 0x9, 0x1, 0x4, 0x80, 0x81, 0xfffffff8}, {0x2, 0x4a, 0x0, 0x5, 0x2, 0x3, 0x1}]}) 640.776228ms ago: executing program 0 (id=5852): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) mount_setattr(0xffffffffffffffff, 0x0, 0x900, &(0x7f00000001c0)={0x100007, 0x79, 0x140000}, 0x20) 591.686233ms ago: executing program 6 (id=5853): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x15}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x80}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x16}, {0xfffc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @mcast1, [0x0, 0xff000000, 0xffff00, 0xffffff00], [0xff, 0xffffffff, 0xffffff00, 0xffffffff], 'bridge_slave_1\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x3a, 0xb, 0x1, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 504.823974ms ago: executing program 5 (id=5854): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000004480), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000045c0)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e24, 0xf, @mcast2, 0x1}}}, 0xa0) 461.460628ms ago: executing program 0 (id=5855): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x5001e, 0x1076}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_FLAGS={0x8, 0xd, 0x2}, @IFLA_GRE_REMOTE={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x2b}}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4090}, 0x2000000) 399.442811ms ago: executing program 1 (id=5856): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 296.372883ms ago: executing program 1 (id=5857): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x19, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) 243.410412ms ago: executing program 6 (id=5858): symlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 188.413749ms ago: executing program 5 (id=5859): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x2) 122.093963ms ago: executing program 7 (id=5860): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') lseek(r0, 0x2000, 0x0) 0s ago: executing program 5 (id=5861): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) kernel console output (not intermixed with test programs): ports [ 457.074938][ T6022] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 457.094179][ T6022] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 457.187544][ T6022] usb 2-1: USB disconnect, device number 85 [ 457.508195][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 457.508216][ T30] audit: type=1326 audit(1777406126.756:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.2.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac599cdd9 code=0x7ffc0000 [ 457.607611][ T30] audit: type=1326 audit(1777406126.796:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.2.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac599cdd9 code=0x7ffc0000 [ 457.708633][ T30] audit: type=1326 audit(1777406126.796:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.2.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac599cdd9 code=0x7ffc0000 [ 457.774056][ T30] audit: type=1326 audit(1777406126.796:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.2.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fcac599cdd9 code=0x7ffc0000 [ 457.888403][ T30] audit: type=1326 audit(1777406126.796:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.2.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac599cdd9 code=0x7ffc0000 [ 457.972065][ T30] audit: type=1326 audit(1777406126.796:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.2.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac599cdd9 code=0x7ffc0000 [ 458.078689][ T30] audit: type=1326 audit(1777406126.796:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.2.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac599cdd9 code=0x7ffc0000 [ 458.173037][ T30] audit: type=1326 audit(1777406126.796:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.2.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcac599cdd9 code=0x7ffc0000 [ 458.273204][ T30] audit: type=1326 audit(1777406126.796:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.2.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcac599cdd9 code=0x7ffc0000 [ 458.357541][T12450] netlink: 'syz.2.3342': attribute type 2 has an invalid length. [ 458.387683][T12450] netlink: 'syz.2.3342': attribute type 5 has an invalid length. [ 458.430526][T12450] netlink: 'syz.2.3342': attribute type 2 has an invalid length. [ 458.471440][T12450] netlink: 'syz.2.3342': attribute type 5 has an invalid length. [ 458.679217][T12458] hmaÓË224): entered promiscuous mode [ 458.770053][T12466] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 459.150176][T12481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3357'. [ 459.680929][T12498] netlink: 'syz.3.3365': attribute type 11 has an invalid length. [ 459.892411][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 460.556501][T12519] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.564381][T12519] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.899880][T12519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.958473][T12519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.486653][T12538] gtp0: entered promiscuous mode [ 461.504705][T12538] gtp0: entered allmulticast mode [ 461.536344][T12542] netlink: 'syz.0.3387': attribute type 1 has an invalid length. [ 461.559874][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.599328][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.650865][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.690625][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.102682][T12567] wg1: entered promiscuous mode [ 462.124399][T12567] wg1: entered allmulticast mode [ 462.498060][T12583] netlink: 'syz.0.3405': attribute type 11 has an invalid length. [ 462.533510][T12583] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3405'. [ 462.978643][T12594] netlink: 'syz.1.3409': attribute type 20 has an invalid length. [ 463.000803][T12594] IPv6: NLM_F_CREATE should be specified when creating new route [ 463.644951][T12617] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3419'. [ 463.957918][T12626] Cannot find del_set index 2 as target [ 464.158991][T12635] netlink: 'syz.2.3428': attribute type 2 has an invalid length. [ 464.657541][T12649] binder: 12648:12649 ioctl c018620c 0 returned -14 [ 465.168377][T12668] xt_TCPMSS: Only works on TCP SYN packets [ 465.489612][T12680] : entered promiscuous mode [ 466.198197][T12705] netlink: 'syz.2.3462': attribute type 10 has an invalid length. [ 466.244840][T12705] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 466.668463][T12719] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3469'. [ 466.709553][T12721] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 466.746985][T12721] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 466.786261][T12721] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 468.292614][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 469.258903][ T30] audit: type=1326 audit(1777406138.506:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12794 comm="syz.1.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ed9cdd9 code=0x7ffc0000 [ 469.342148][ T30] audit: type=1326 audit(1777406138.506:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12794 comm="syz.1.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ed9cdd9 code=0x7ffc0000 [ 469.429999][ T30] audit: type=1326 audit(1777406138.556:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12794 comm="syz.1.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7ff24ed9cdd9 code=0x7ffc0000 [ 469.545649][T12803] batadv1: entered promiscuous mode [ 469.560449][ T30] audit: type=1326 audit(1777406138.556:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12794 comm="syz.1.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ed9cdd9 code=0x7ffc0000 [ 469.582461][T12803] batadv1: entered allmulticast mode [ 469.623038][T12806] netlink: 'syz.3.3512': attribute type 1 has an invalid length. [ 469.667583][ T30] audit: type=1326 audit(1777406138.556:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12794 comm="syz.1.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ed9cdd9 code=0x7ffc0000 [ 470.008003][T12821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 471.205756][T11757] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 471.382390][T11757] usb 2-1: Using ep0 maxpacket: 16 [ 471.408591][T11757] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 471.438990][T11757] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.477218][T11757] usb 2-1: config 0 descriptor?? [ 471.502032][T11757] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 471.717010][T11757] usb 2-1: Detected FT232B [ 471.928019][T11757] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 471.961968][T11757] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 471.998917][T11757] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 472.013995][T12868] netlink: 'syz.3.3542': attribute type 2 has an invalid length. [ 472.027719][T11757] usb 2-1: USB disconnect, device number 86 [ 472.084131][T11757] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 472.089364][T12868] : entered promiscuous mode [ 472.126877][T11757] ftdi_sio 2-1:0.0: device disconnected [ 472.211338][T12871] dlm: plock device version mismatch: kernel (1.2.0), user (619199281.1581691892.1258375512) [ 473.352429][T12905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3559'. [ 473.618089][T12915] xt_connbytes: Forcing CT accounting to be enabled [ 473.693656][T12918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3566'. [ 473.777499][T12918] ip6tnl1: entered allmulticast mode [ 474.382732][T12934] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 475.014577][ T6022] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 475.184421][ T6022] usb 2-1: Using ep0 maxpacket: 8 [ 475.203223][ T6022] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.225954][T12968] netlink: 'syz.5.3589': attribute type 3 has an invalid length. [ 475.239665][ T6022] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 475.266495][T12968] netlink: 46 bytes leftover after parsing attributes in process `syz.5.3589'. [ 475.292127][ T6022] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 475.316802][ T6022] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 475.338594][ T6022] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 475.364843][ T6022] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 475.395217][ T6022] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 475.419576][ T6022] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.437640][ T6022] usb 2-1: Product: syz [ 475.447483][ T6022] usb 2-1: Manufacturer: syz [ 475.459884][ T6022] usb 2-1: SerialNumber: syz [ 475.479329][ T6022] usb 2-1: config 0 descriptor?? [ 475.499132][T12952] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 476.933936][ T6022] rc_core: IR keymap rc-snapstream-firefly not found [ 476.955460][ T6022] Registered IR keymap rc-empty [ 476.980225][ T6022] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 477.021278][ T6022] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input38 [ 477.097225][ T6022] input: syz syz mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input39 [ 477.211037][ T6022] usb 2-1: USB disconnect, device number 87 [ 477.217152][ C0] ati_remote 2-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 477.814908][ T30] audit: type=1326 audit(1777406147.066:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.1.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ed9cdd9 code=0x7ffc0000 [ 477.889484][ T30] audit: type=1326 audit(1777406147.076:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.1.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7ff24ed9cdd9 code=0x7ffc0000 [ 477.990469][ T30] audit: type=1326 audit(1777406147.076:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.1.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ed9cdd9 code=0x7ffc0000 [ 478.027575][ T30] audit: type=1326 audit(1777406147.076:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.1.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ed9cdd9 code=0x7ffc0000 [ 478.824515][T11757] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 478.879953][T13082] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3646'. [ 479.035006][T11757] usb 1-1: Using ep0 maxpacket: 8 [ 479.048844][T11757] usb 1-1: config 0 has an invalid interface number: 88 but max is 3 [ 479.062845][T11757] usb 1-1: config 0 has an invalid interface number: 250 but max is 3 [ 479.071180][T11757] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.082082][T11757] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 479.084555][T13082] 8021q: adding VLAN 0 to HW filter on device bond1 [ 479.091706][T11757] usb 1-1: config 0 has no interface number 0 [ 479.113884][T13091] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3650'. [ 479.124885][T11757] usb 1-1: config 0 has no interface number 1 [ 479.131618][T11757] usb 1-1: config 0 interface 88 has no altsetting 0 [ 479.143495][T11757] usb 1-1: config 0 interface 250 has no altsetting 0 [ 479.161166][T11757] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=12.b3 [ 479.184133][T11757] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.214276][T11757] usb 1-1: config 0 descriptor?? [ 479.441665][T11757] usb 1-1: string descriptor 0 read error: -71 [ 479.526191][T11757] usb 1-1: USB disconnect, device number 18 [ 480.330102][T13123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3666'. [ 480.346153][T13126] netlink: 'syz.1.3668': attribute type 61 has an invalid length. [ 480.360045][T13126] netlink: 'syz.1.3668': attribute type 62 has an invalid length. [ 480.972705][T11759] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 481.043018][T13147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3678'. [ 481.158103][T11759] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 481.202335][T11759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.223884][T11759] usb 4-1: Product: syz [ 481.235727][T11759] usb 4-1: Manufacturer: syz [ 481.247211][T11759] usb 4-1: SerialNumber: syz [ 481.265937][T11759] usb 4-1: config 0 descriptor?? [ 481.283037][T11759] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 481.300825][T11759] dvb-usb: bulk message failed: -22 (4/0) [ 481.313331][T11759] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 481.354317][T11759] dvb-usb: bulk message failed: -22 (5/0) [ 481.370088][T11759] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 481.429809][T11759] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 481.450214][T11759] dvb-usb: Pinnacle 450e DVB-S USB2.0 error while loading driver (-19) [ 481.538941][T11759] usb 4-1: USB disconnect, device number 7 [ 481.927470][T13167] @ÿ: renamed from veth0_vlan (while UP) [ 482.006879][T13169] SET target dimension over the limit! [ 482.682941][T13187] xt_hashlimit: max too large, truncated to 1048576 [ 483.917772][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3717'. [ 484.292425][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 484.420835][T13239] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 484.441113][T13239] bond2 (unregistering): Released all slaves [ 484.733179][T13248] vlan0: entered promiscuous mode [ 485.028630][T13257] netlink: 'syz.0.3732': attribute type 1 has an invalid length. [ 485.358502][ T5938] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 485.373775][ T5938] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 485.382965][ T5938] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 485.394871][ T5938] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 485.405674][ T5938] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 485.836976][T13279] netlink: 'syz.1.3743': attribute type 21 has an invalid length. [ 485.873837][T13279] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3743'. [ 486.192680][T13289] SET target dimension over the limit! [ 486.735576][T13302] IPv6: sit1: Disabled Multicast RS [ 487.277676][T13272] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.321145][T13272] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.360033][T13272] bridge_slave_0: entered allmulticast mode [ 487.404068][T13272] bridge_slave_0: entered promiscuous mode [ 487.445483][T13272] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.469840][T13272] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.492875][T13272] bridge_slave_1: entered allmulticast mode [ 487.505099][ T5938] Bluetooth: hci5: command tx timeout [ 487.519765][T13272] bridge_slave_1: entered promiscuous mode [ 487.524203][ T30] audit: type=1326 audit(1777406156.766:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13323 comm="syz.1.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ed9cdd9 code=0x7ffc0000 [ 487.553623][ T30] audit: type=1326 audit(1777406156.786:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13323 comm="syz.1.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ed9cdd9 code=0x7ffc0000 [ 487.592100][ T30] audit: type=1326 audit(1777406156.796:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13323 comm="syz.1.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7ff24ed9cdd9 code=0x7ffc0000 [ 487.632325][ T30] audit: type=1326 audit(1777406156.796:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13323 comm="syz.1.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ed9cdd9 code=0x7ffc0000 [ 487.711468][ T30] audit: type=1326 audit(1777406156.796:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13323 comm="syz.1.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ed9cdd9 code=0x7ffc0000 [ 487.792053][T13272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.839475][T13272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.058861][T13272] team0: Port device team_slave_0 added [ 488.123870][T13336] bond2: Removing last ns target with arp_interval on [ 488.351695][T13272] team0: Port device team_slave_1 added [ 488.673647][T13272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.702425][T13272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.802538][T13272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.855211][T13272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.886325][T13272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.996724][T13272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.197120][T13362] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3780'. [ 489.218064][T13362] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3780'. [ 489.277966][T13356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 489.572562][ T5938] Bluetooth: hci5: command tx timeout [ 489.580608][T13272] hsr_slave_0: entered promiscuous mode [ 489.597991][T13272] hsr_slave_1: entered promiscuous mode [ 489.641450][T13272] debugfs: 'hsr0' already exists in 'hsr' [ 489.673733][T13272] Cannot create hsr debugfs directory [ 491.114792][T13272] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 491.159882][T13272] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 491.189881][T13272] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 491.265732][T13272] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 491.298573][T13415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3803'. [ 491.335159][T13272] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 491.385899][T13272] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 491.423783][T13272] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 491.461926][T13272] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 491.653063][ T5938] Bluetooth: hci5: command tx timeout [ 492.048494][T13272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.166997][T13272] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.216278][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.223584][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.295941][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.303209][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.859361][T13467] netlink: 'syz.3.3828': attribute type 1 has an invalid length. [ 492.890407][T13467] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3828'. [ 492.911655][T13272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.175879][T13272] veth0_vlan: entered promiscuous mode [ 493.230677][T13272] veth1_vlan: entered promiscuous mode [ 493.434279][T13272] veth0_macvtap: entered promiscuous mode [ 493.471421][T13272] veth1_macvtap: entered promiscuous mode [ 493.548593][T13272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.623727][T13272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.673746][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.706890][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.732819][ T5938] Bluetooth: hci5: command tx timeout [ 493.745174][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.790777][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.982315][T13493] netlink: 'syz.5.3841': attribute type 2 has an invalid length. [ 494.221561][ T30] audit: type=1326 audit(1777406163.466:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13498 comm="syz.0.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c2f9cdd9 code=0x7ffc0000 [ 494.262322][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.303654][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.315386][ T30] audit: type=1326 audit(1777406163.466:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13498 comm="syz.0.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c2f9cdd9 code=0x7ffc0000 [ 494.360901][ T30] audit: type=1326 audit(1777406163.486:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13498 comm="syz.0.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f97c2f9cdd9 code=0x7ffc0000 [ 494.438027][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.477753][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.489690][ T30] audit: type=1326 audit(1777406163.486:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13498 comm="syz.0.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c2f9cdd9 code=0x7ffc0000 [ 494.822809][ T6022] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 495.016077][ T6022] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 495.053083][ T6022] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.087918][ T6022] usb 2-1: Product: syz [ 495.099539][ T6022] usb 2-1: Manufacturer: syz [ 495.124287][ T6022] usb 2-1: SerialNumber: syz [ 495.158171][ T6022] usb 2-1: config 0 descriptor?? [ 495.207616][ T6022] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 088 [ 495.472535][T11759] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 495.649565][T11759] usb 7-1: Using ep0 maxpacket: 32 [ 495.656042][ T6022] (null): failure reading functionality [ 495.680939][T11759] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 495.712728][ T6022] i2c i2c-1: failure reading functionality [ 495.723342][T11759] usb 7-1: config 0 has no interface number 0 [ 495.747697][T11759] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 495.777605][ T6022] i2c i2c-1: connected i2c-tiny-usb device [ 495.790150][T11759] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 495.810992][ T6022] usb 2-1: USB disconnect, device number 88 [ 495.844280][T11759] usb 7-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 495.890671][T11759] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 495.952074][T11759] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 495.978697][T11759] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.997413][T13553] bridge2: entered promiscuous mode [ 496.010668][T11759] usb 7-1: Product: syz [ 496.023101][T11759] usb 7-1: Manufacturer: syz [ 496.036999][T11759] usb 7-1: SerialNumber: syz [ 496.064673][T11759] usb 7-1: config 0 descriptor?? [ 496.099670][T11759] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.119/input/input41 [ 496.456159][T11773] usb 7-1: USB disconnect, device number 2 [ 496.866400][T13580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3882'. [ 496.972055][T13582] IPv6: sit1: Disabled Multicast RS [ 497.539799][ T30] audit: type=1400 audit(1777406166.786:93): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=13603 comm="syz.3.3894" [ 497.980866][T13621] netlink: 'syz.5.3902': attribute type 39 has an invalid length. [ 498.340270][T13635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3908'. [ 498.391414][T13635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3908'. [ 498.596600][T13643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3911'. [ 498.678671][T13646] netlink: 'syz.0.3914': attribute type 63 has an invalid length. [ 500.063107][T13695] netlink: 'syz.1.3937': attribute type 6 has an invalid length. [ 500.841010][T13718] netlink: 'syz.6.3948': attribute type 1 has an invalid length. [ 500.841064][T13718] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3948'. [ 501.059896][T13726] warning: `syz.6.3952' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 501.136974][T13731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3955'. [ 501.172952][T13731] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 501.357063][T13736] netlink: 'syz.6.3956': attribute type 1 has an invalid length. [ 501.385445][T13736] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3956'. [ 501.397262][ T6022] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 501.403555][T13741] netlink: 'syz.3.3959': attribute type 10 has an invalid length. [ 501.579800][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.586419][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.593275][ T6022] usb 1-1: Using ep0 maxpacket: 16 [ 501.601804][ T6022] usb 1-1: config index 0 descriptor too short (expected 4495, got 71) [ 501.611963][ T6022] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 501.620899][ T6022] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.635049][ T6022] usb 1-1: config 0 has no interface number 0 [ 501.649093][ T6022] usb 1-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 501.666879][ T6022] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.695396][ T6022] usb 1-1: Product: syz [ 501.710898][ T6022] usb 1-1: Manufacturer: syz [ 501.734643][ T6022] usb 1-1: SerialNumber: syz [ 501.764666][ T6022] usb 1-1: config 0 descriptor?? [ 501.801312][ T6022] uvcvideo 1-1:0.105: probe with driver uvcvideo failed with error -22 [ 501.900977][T13754] ipt_REJECT: TCP_RESET invalid for non-tcp [ 502.004726][ T6022] usb 1-1: USB disconnect, device number 19 [ 502.163955][T13764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3969'. [ 502.374004][T13768] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3971'. [ 503.138249][T13795] kAFS: unable to lookup cell 'Þ({^ú@' [ 503.171680][T13801] netlink: 5128 bytes leftover after parsing attributes in process `syz.5.3986'. [ 503.202590][T13801] netlink: 5128 bytes leftover after parsing attributes in process `syz.5.3986'. [ 503.229951][T13801] netlink: 332 bytes leftover after parsing attributes in process `syz.5.3986'. [ 503.745373][T13813] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 504.012593][T13825] hmó3)ó: entered promiscuous mode [ 504.100706][ T6022] IPVS: starting estimator thread 0... [ 504.222874][T13831] IPVS: using max 29 ests per chain, 69600 per kthread [ 504.588633][T13850] netlink: 'syz.1.4008': attribute type 30 has an invalid length. [ 504.864280][T13861] random: crng reseeded on system resumption [ 506.528163][ T30] audit: type=1326 audit(1777406175.776:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13921 comm="syz.6.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904f19cdd9 code=0x7ffc0000 [ 506.620666][ T30] audit: type=1326 audit(1777406175.806:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13921 comm="syz.6.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904f19cdd9 code=0x7ffc0000 [ 506.727587][ T30] audit: type=1326 audit(1777406175.806:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13921 comm="syz.6.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904f19cdd9 code=0x7ffc0000 [ 506.828806][ T30] audit: type=1326 audit(1777406175.806:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13921 comm="syz.6.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904f19cdd9 code=0x7ffc0000 [ 506.943993][ T30] audit: type=1326 audit(1777406175.816:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13921 comm="syz.6.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f904f19cdd9 code=0x7ffc0000 [ 507.031529][ T30] audit: type=1326 audit(1777406175.816:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13921 comm="syz.6.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904f19cdd9 code=0x7ffc0000 [ 507.148380][ T30] audit: type=1326 audit(1777406175.816:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13921 comm="syz.6.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904f19cdd9 code=0x7ffc0000 [ 507.223967][ T30] audit: type=1326 audit(1777406175.816:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13921 comm="syz.6.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f904f19cdd9 code=0x7ffc0000 [ 507.290275][T13947] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4056'. [ 507.341381][ T30] audit: type=1326 audit(1777406175.816:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13921 comm="syz.6.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f904f19cdd9 code=0x7ffc0000 [ 507.455791][ T30] audit: type=1326 audit(1777406176.406:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13939 comm="syz.5.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62479cdd9 code=0x7ffc0000 [ 507.574722][T13955] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4060'. [ 508.013988][T13973] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4069'. [ 508.869921][T14004] ALSA: mixer_oss: invalid OSS volume '' [ 508.895568][T14004] ALSA: mixer_oss: invalid OSS volume ' aü=!ÿšê˹=·+LKWà„MšñŒëÓ:§~' [ 508.930539][T14004] ALSA: mixer_oss: invalid OSS volume 'ƒ%wÀ¹¼Ñº§ˆMò#i¥6[…ìNVLéúÃKK-' [ 508.963038][T14004] ALSA: mixer_oss: invalid OSS volume 'Ú¶ÿÌêZù•ç:Ñ 3.âôF?ºYùð¹Š^x1b' [ 508.994823][T14004] ALSA: mixer_oss: invalid OSS volume ' ”—$i.A<­”g—Õmo鱌‚éÜ)ã&:/“¢Œ' [ 509.045604][T14004] ALSA: mixer_oss: invalid OSS volume 'Ü~)~×ó·Š´¤‹ì}Úìk/FJ°¶éƒ—†]j' [ 509.081196][T14004] ALSA: mixer_oss: invalid OSS volume '§‹' [ 509.102555][T14004] ALSA: mixer_oss: invalid OSS volume 'FµµÈq(ã2÷Äž¾?åsÒï È[œ'|¾' [ 509.136877][T14004] ALSA: mixer_oss: invalid OSS volume '³§Û}`K’ƈãZ>_|¯#X³d#>zž^a¨' [ 509.182372][T14004] ALSA: mixer_oss: invalid OSS volume '*‹Ümo‹É×G%BuZkÂÄ@¤ª–m¸Iv¯Ó [ 546.041461][T15220] dump_stack_lvl+0xe8/0x150 [ 546.041495][T15220] warn_alloc+0x249/0x340 [ 546.041534][T15220] ? __pfx_warn_alloc+0x10/0x10 [ 546.041594][T15220] __vmalloc_node_range_noprof+0x132/0x1750 [ 546.041626][T15220] ? __mutex_trylock_common+0x158/0x260 [ 546.041659][T15220] ? __pfx___mutex_trylock_common+0x10/0x10 [ 546.041696][T15220] ? trace_contention_end+0x3d/0x140 [ 546.041727][T15220] ? __mutex_lock+0x319/0x1550 [ 546.041764][T15220] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 546.041791][T15220] ? tomoyo_path_number_perm+0x219/0x630 [ 546.041819][T15220] ? dvb_demux_do_ioctl+0x320/0x540 [ 546.041850][T15220] ? __pfx___mutex_lock+0x10/0x10 [ 546.041878][T15220] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 546.041907][T15220] vmalloc_noprof+0xb2/0xe0 [ 546.041935][T15220] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 546.041966][T15220] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 546.042001][T15220] dvb_demux_do_ioctl+0x45d/0x540 [ 546.042033][T15220] dvb_usercopy+0x199/0x2e0 [ 546.042059][T15220] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 546.042087][T15220] ? __pfx_dvb_usercopy+0x10/0x10 [ 546.042125][T15220] ? __fget_files+0x3a0/0x420 [ 546.042149][T15220] ? __fget_files+0x2a/0x420 [ 546.042176][T15220] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 546.042202][T15220] dvb_demux_ioctl+0x29/0x40 [ 546.042228][T15220] __se_sys_ioctl+0xfc/0x170 [ 546.042257][T15220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.042280][T15220] do_syscall_64+0x15f/0xf80 [ 546.042303][T15220] ? trace_irq_disable+0x3b/0x140 [ 546.042343][T15220] ? clear_bhb_loop+0x40/0x90 [ 546.042370][T15220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.042391][T15220] RIP: 0033:0x7ff24ed9cdd9 [ 546.042412][T15220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.042430][T15220] RSP: 002b:00007ff24fc69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 546.042454][T15220] RAX: ffffffffffffffda RBX: 00007ff24f015fa0 RCX: 00007ff24ed9cdd9 [ 546.042469][T15220] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 546.042484][T15220] RBP: 00007ff24ee32d69 R08: 0000000000000000 R09: 0000000000000000 [ 546.042495][T15220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.042508][T15220] R13: 00007ff24f016038 R14: 00007ff24f015fa0 R15: 00007ff24f13fa48 [ 546.042544][T15220] [ 546.435004][T15220] Mem-Info: [ 546.482097][T15220] active_anon:6510 inactive_anon:0 isolated_anon:0 [ 546.482097][T15220] active_file:19590 inactive_file:40188 isolated_file:0 [ 546.482097][T15220] unevictable:768 dirty:335 writeback:0 [ 546.482097][T15220] slab_reclaimable:10383 slab_unreclaimable:101627 [ 546.482097][T15220] mapped:35434 shmem:1290 pagetables:1371 [ 546.482097][T15220] sec_pagetables:0 bounce:0 [ 546.482097][T15220] kernel_misc_reclaimable:0 [ 546.482097][T15220] free:1279961 free_pcp:19700 free_cma:0 [ 546.531486][T15220] Node 0 active_anon:26040kB inactive_anon:0kB active_file:78200kB inactive_file:160552kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141684kB dirty:1340kB writeback:0kB shmem:3624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12900kB pagetables:5548kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 546.570178][T15220] Node 1 active_anon:0kB inactive_anon:0kB active_file:160kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 546.603518][T15220] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 546.660662][T15220] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 546.690822][T15220] Node 0 DMA32 free:1167844kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25940kB inactive_anon:0kB active_file:78200kB inactive_file:160552kB unevictable:1536kB writepending:1340kB zspages:0kB present:3129332kB managed:2552708kB mlocked:0kB bounce:0kB free_pcp:79168kB local_pcp:22356kB free_cma:0kB [ 546.914920][T15220] lowmem_reserve[]: 0 0 0 0 0 [ 546.939040][T15220] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 547.074589][T15220] lowmem_reserve[]: 0 0 0 0 0 [ 547.098065][T15220] Node 1 Normal free:3937444kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:160kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 547.207010][T15220] lowmem_reserve[]: 0 0 0 0 0 [ 547.225724][T15220] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 547.285107][T15220] Node 0 DMA32: 708*4kB (UME) 2289*8kB (UME) 1989*16kB (UME) 488*32kB (UM) 404*64kB (UM) 430*128kB (UME) 227*256kB (UME) 57*512kB (UM) 19*1024kB (UME) 5*2048kB (M) 220*4096kB (M) = 1167592kB [ 547.351646][T15220] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 547.388852][T15220] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 10*16kB (UM) 11*32kB (U) 6*64kB (UM) 2*128kB (U) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 959*4096kB (M) = 3937444kB [ 547.408986][T15255] futex_wake_op: syz.5.4688 tries to shift op by 32; fix this program [ 547.432197][T15220] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 547.455837][T15220] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 547.484525][T15220] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 547.532688][T15220] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 547.555011][T15220] 61064 total pagecache pages [ 547.563596][T15220] 0 pages in swap cache [ 547.574052][T15220] Free swap = 124996kB [ 547.599514][T15261] xt_ecn: cannot match TCP bits for non-tcp packets [ 547.607461][T15220] Total swap = 124996kB [ 547.619180][T15220] 2097051 pages RAM [ 547.632495][T15220] 0 pages HighMem/MovableOnly [ 547.658800][T15220] 427091 pages reserved [ 547.677632][T15220] 0 pages cma reserved [ 547.806167][T15269] netlink: 'syz.5.4695': attribute type 1 has an invalid length. [ 548.097895][T15273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 548.339337][T15284] dlm: no locking on control device [ 548.642726][ T6022] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 548.837380][ T6022] usb 4-1: Using ep0 maxpacket: 16 [ 548.870245][ T6022] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 548.910134][ T6022] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.949484][ T6022] usb 4-1: config 0 has no interface number 0 [ 548.967684][ T6022] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 548.987375][ T6022] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.999045][ T6022] usb 4-1: Product: syz [ 549.007594][ T6022] usb 4-1: Manufacturer: syz [ 549.019263][ T6022] usb 4-1: SerialNumber: syz [ 549.028859][ T6022] usb 4-1: config 0 descriptor?? [ 549.071745][ T6022] uvcvideo 4-1:0.105: Found Unit with invalid ID 0 [ 549.284736][ T6022] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 549.322185][ T6022] uvcvideo 4-1:0.105: No valid video chain found. [ 549.367342][ T6022] usb 4-1: USB disconnect, device number 8 [ 549.591667][T15319] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4720'. [ 549.664181][T15321] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4721'. [ 549.825140][T15327] netlink: 'syz.0.4724': attribute type 29 has an invalid length. [ 549.877094][T15327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4724'. [ 550.061875][T15334] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4727'. [ 550.108309][T15334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4727'. [ 550.130340][T15334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4727'. [ 551.228944][T15379] usb usb8: usbfs: process 15379 (syz.3.4749) did not claim interface 0 before use [ 551.768614][T15399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4755'. [ 551.805099][T15401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4756'. [ 551.820690][T15399] xfrm0: entered promiscuous mode [ 551.826439][T15399] xfrm0: entered allmulticast mode [ 551.856974][T15399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4755'. [ 552.162581][T15411] x_tables: unsorted underflow at hook 2 [ 552.243766][T15413] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4763'. [ 552.260931][T11757] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 552.462775][T11757] usb 4-1: Using ep0 maxpacket: 32 [ 552.495753][T11757] usb 4-1: unable to get BOS descriptor or descriptor too short [ 552.527250][T11757] usb 4-1: config 128 has an invalid interface number: 6 but max is 3 [ 552.557282][T11757] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 552.578218][T11757] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 552.588909][T11757] usb 4-1: config 128 has no interface number 0 [ 552.595794][T11757] usb 4-1: config 128 interface 6 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 552.608053][T11757] usb 4-1: config 128 interface 6 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 552.619813][T11757] usb 4-1: config 128 interface 6 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 552.633912][T11757] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 552.650052][T11757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.658759][T11757] usb 4-1: Product: syz [ 552.663627][T11757] usb 4-1: Manufacturer: syz [ 552.669737][T11757] usb 4-1: SerialNumber: syz [ 553.194298][T11757] usb 4-1: USB disconnect, device number 9 [ 553.335614][T15442] geneve2: entered promiscuous mode [ 553.351574][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.6/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 554.413889][T15483] xt_CT: You must specify a L4 protocol and not use inversions on it [ 554.512748][T15486] ip6tnl1: entered promiscuous mode [ 554.923329][T15502] __nla_validate_parse: 3 callbacks suppressed [ 554.923352][T15502] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4806'. [ 555.045738][T15499] geneve2: entered promiscuous mode [ 555.378010][T15517] sg_write: data in/out 401408/1 bytes for SCSI command 0x0-- guessing data in; [ 555.378010][T15517] program syz.5.4814 not setting count and/or reply_len properly [ 555.973171][T11757] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 556.162268][T11759] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 556.170536][T11757] usb 4-1: Using ep0 maxpacket: 32 [ 556.203911][T11757] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 556.226380][T11757] usb 4-1: config 0 has no interface number 0 [ 556.244600][T11757] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 556.275977][T11757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.307075][T11757] usb 4-1: Product: syz [ 556.328437][T11757] usb 4-1: Manufacturer: syz [ 556.333324][T11757] usb 4-1: SerialNumber: syz [ 556.377914][T11757] usb 4-1: config 0 descriptor?? [ 556.383712][T11759] usb 7-1: Using ep0 maxpacket: 16 [ 556.411218][T11759] usb 7-1: unable to get BOS descriptor or descriptor too short [ 556.445124][T11757] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 556.464735][T11759] usb 7-1: config 8 has an invalid interface number: 101 but max is 0 [ 556.478176][T11759] usb 7-1: config 8 has no interface number 0 [ 556.484484][T11757] usb 4-1: selecting invalid altsetting 1 [ 556.496777][T11759] usb 7-1: too many endpoints for config 8 interface 101 altsetting 114: 112, using maximum allowed: 30 [ 556.510965][T11757] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 556.531045][T11759] usb 7-1: config 8 interface 101 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 112 [ 556.545788][T11757] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 556.581862][T11757] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 556.593878][T11759] usb 7-1: config 8 interface 101 has no altsetting 0 [ 556.615240][T11757] usb 4-1: media controller created [ 556.625870][T11759] usb 7-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=ab.34 [ 556.646146][T11759] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.675312][T11759] usb 7-1: Product: syz [ 556.691453][T11759] usb 7-1: Manufacturer: syz [ 556.701355][T11757] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 556.709924][T11759] usb 7-1: SerialNumber: syz [ 556.986373][T11759] usb 7-1: USB disconnect, device number 4 [ 557.023128][T11760] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 557.073523][T11757] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 557.164771][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 557.164791][ T30] audit: type=1326 audit(1777406226.416:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15565 comm="syz.1.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ed9cdd9 code=0x7ffc0000 [ 557.237292][T11760] usb 1-1: Using ep0 maxpacket: 8 [ 557.260021][T11757] usb 4-1: USB disconnect, device number 10 [ 557.274577][T11760] usb 1-1: unable to get BOS descriptor or descriptor too short [ 557.292565][T11760] usb 1-1: config 4 has an invalid interface number: 112 but max is 0 [ 557.313164][ T30] audit: type=1326 audit(1777406226.456:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15565 comm="syz.1.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ed9cdd9 code=0x7ffc0000 [ 557.355435][T11760] usb 1-1: config 4 has no interface number 0 [ 557.383628][T11760] usb 1-1: config 4 interface 112 has no altsetting 0 [ 557.415595][T11760] usb 1-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 8.40 [ 557.425919][ T30] audit: type=1326 audit(1777406226.466:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15565 comm="syz.1.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7ff24ed9cdd9 code=0x7ffc0000 [ 557.460996][T11760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.480314][T11760] usb 1-1: Product: syz [ 557.492235][T11760] usb 1-1: Manufacturer: syz [ 557.497145][ T30] audit: type=1326 audit(1777406226.466:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15565 comm="syz.1.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ed9cdd9 code=0x7ffc0000 [ 557.520432][T11760] usb 1-1: SerialNumber: syz [ 557.581122][ T30] audit: type=1326 audit(1777406226.466:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15565 comm="syz.1.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ed9cdd9 code=0x7ffc0000 [ 557.749989][T11760] pcwd_usb: The device isn't a Human Interface Device [ 557.801168][T11760] usb 1-1: USB disconnect, device number 22 [ 558.161501][T15582] netlink: 'syz.1.4846': attribute type 89 has an invalid length. [ 558.450649][T15590] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 558.732442][T11771] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 558.907723][T11771] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 558.940676][T11771] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.973505][T11771] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 558.992300][T11771] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 559.020986][T11771] usb 4-1: Manufacturer: syz [ 559.045756][T11771] usb 4-1: config 0 descriptor?? [ 559.073007][T11771] igorplugusb 4-1:0.0: incorrect number of endpoints [ 559.320498][T11771] usb 4-1: USB disconnect, device number 11 [ 559.827164][T15628] netlink: 'syz.6.4869': attribute type 1 has an invalid length. [ 559.861827][T15628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.273380][T15643] netlink: 'syz.1.4876': attribute type 8 has an invalid length. [ 560.847490][T15664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4887'. [ 561.862251][T11757] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 562.049589][T11757] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 562.106845][T11757] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 562.147421][T11757] usb 7-1: Product: syz [ 562.167343][T11757] usb 7-1: SerialNumber: syz [ 562.194916][T11757] usb 7-1: config 0 descriptor?? [ 562.443934][T11757] hso 7-1:0.0: Failed to find BULK eps [ 562.682821][T11773] usb 7-1: USB disconnect, device number 5 [ 563.013838][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.020238][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.058469][T15735] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4921'. [ 564.122266][T11757] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 564.254750][T15775] xt_policy: output policy not valid in PREROUTING and INPUT [ 564.307138][T11757] usb 4-1: Using ep0 maxpacket: 8 [ 564.328407][T11757] usb 4-1: config 0 has an invalid interface number: 33 but max is 1 [ 564.356962][T11757] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.397508][T11757] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 564.430162][T11757] usb 4-1: config 0 has no interface number 0 [ 564.450619][T11757] usb 4-1: config 0 interface 33 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 564.479545][T11757] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 564.497358][T11757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.515950][T11757] usb 4-1: Product: syz [ 564.525521][T11757] usb 4-1: Manufacturer: syz [ 564.551248][T11757] usb 4-1: SerialNumber: syz [ 564.588223][T11757] usb 4-1: config 0 descriptor?? [ 564.628624][T11757] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 564.839321][ T2366] pvrusb2: Invalid write control endpoint [ 564.869735][ T2366] usb 4-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 564.922476][ T2366] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 565.092641][T11773] usb 4-1: USB disconnect, device number 12 [ 565.150463][T15795] xt_TCPMSS: Only works on TCP SYN packets [ 565.382238][T11760] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 565.403225][T15803] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4954'. [ 565.616807][T11760] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 565.642929][T11760] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 565.661347][T11760] usb 7-1: Product: syz [ 565.677359][T11760] usb 7-1: SerialNumber: syz [ 565.719378][T11760] usb 7-1: config 0 descriptor?? [ 565.936491][T15817] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4961'. [ 566.220408][ T6084] usb 7-1: USB disconnect, device number 6 [ 566.574247][T15836] netlink: 424 bytes leftover after parsing attributes in process `syz.0.4968'. [ 567.158917][T15854] ªªªªª»: renamed from virt_wifi0 [ 567.663091][T15872] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4985'. [ 568.576416][T15903] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 569.142511][ T6084] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 569.324730][ T6084] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.372200][ T6084] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.402392][ T6084] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 569.452332][ T6084] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 569.502603][ T6084] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.543528][ T6084] usb 1-1: config 0 descriptor?? [ 569.567312][ T6084] hub 1-1:0.0: USB hub found [ 569.678156][T15925] xt_nat: multiple ranges no longer supported [ 569.783500][ T6084] hub 1-1:0.0: 9 ports detected [ 569.802960][ T6084] hub 1-1:0.0: insufficient power available to use all downstream ports [ 569.985519][ T6084] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 570.012237][ T6084] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 570.077008][ T6084] usb 1-1: USB disconnect, device number 23 [ 571.001113][ T30] audit: type=1326 audit(1777406240.246:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.0.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c2f9cdd9 code=0x7ffc0000 [ 571.095132][ T30] audit: type=1326 audit(1777406240.276:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.0.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c2f9cdd9 code=0x7ffc0000 [ 571.143550][T15951] veth2: entered allmulticast mode [ 571.196698][ T30] audit: type=1326 audit(1777406240.286:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.0.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f97c2f9cdd9 code=0x7ffc0000 [ 571.264557][ T30] audit: type=1326 audit(1777406240.286:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.0.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c2f9cdd9 code=0x7ffc0000 [ 571.306134][T15955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 571.552663][T15962] netlink: 'syz.6.5029': attribute type 49 has an invalid length. [ 572.642469][T11757] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 572.754046][T11760] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 572.825852][T11757] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 572.856255][T11757] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 572.889932][T11757] usb 1-1: Product: syz [ 572.906906][T11757] usb 1-1: SerialNumber: syz [ 572.943384][T11760] usb 2-1: Using ep0 maxpacket: 32 [ 572.949911][T11757] usb 1-1: config 0 descriptor?? [ 572.970020][T11760] usb 2-1: config 0 interface 0 has no altsetting 0 [ 572.997601][T11760] usb 2-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 573.009568][T11760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.025771][T11760] usb 2-1: config 0 descriptor?? [ 573.057439][T11760] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 573.097905][T11760] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 573.130398][T11760] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 573.154610][T11760] usb 2-1: media controller created [ 573.215013][T11757] hso 1-1:0.0: Failed to find INT IN ep [ 573.309546][T11760] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 573.437665][T11760] set interface failed [ 573.447872][T11760] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 573.481061][T11757] usb 1-1: USB disconnect, device number 24 [ 573.509114][T16007] 8021q: adding VLAN 0 to HW filter on device bond3 [ 573.543879][T11760] error writing reg: 0xff, val: 0x00 [ 573.811393][T11760] dvb_usb_mxl111sf 2-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 573.908675][T11760] usb 2-1: USB disconnect, device number 92 [ 574.094857][T16024] SET target dimension over the limit! [ 575.957109][T16088] Cannot find del_set index 286 as target [ 576.411168][T16104] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 577.041858][T16126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.200501][T16130] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 577.253288][T11760] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 577.545369][T16147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5119'. [ 577.646777][T16143] bond2: entered promiscuous mode [ 577.688112][T16143] bond2: entered allmulticast mode [ 577.712972][T16143] 8021q: adding VLAN 0 to HW filter on device bond2 [ 577.741247][ T48] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 577.790705][ T30] audit: type=1326 audit(1777406247.036:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16155 comm="syz.0.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c2f9cdd9 code=0x7ffc0000 [ 577.893548][T11757] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 577.904877][ T30] audit: type=1326 audit(1777406247.066:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16155 comm="syz.0.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c2f9cdd9 code=0x7ffc0000 [ 577.968315][ T30] audit: type=1326 audit(1777406247.076:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16155 comm="syz.0.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c2f9cdd9 code=0x7ffc0000 [ 578.083062][ T30] audit: type=1326 audit(1777406247.076:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16155 comm="syz.0.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c2f9cdd9 code=0x7ffc0000 [ 578.109591][T16163] netlink: 'syz.0.5129': attribute type 3 has an invalid length. [ 578.154371][ T30] audit: type=1326 audit(1777406247.076:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16155 comm="syz.0.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f97c2f9cdd9 code=0x7ffc0000 [ 578.249774][ T30] audit: type=1326 audit(1777406247.086:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16155 comm="syz.0.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c2f9cdd9 code=0x7ffc0000 [ 578.332356][T11757] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 578.355600][ T30] audit: type=1326 audit(1777406247.096:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16155 comm="syz.0.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f97c2f9cdd9 code=0x7ffc0000 [ 578.468013][ T30] audit: type=1326 audit(1777406247.096:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16155 comm="syz.0.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f97c2f9cdd9 code=0x7ffc0000 [ 578.532775][T11757] usb 7-1: Using ep0 maxpacket: 32 [ 578.556160][T11757] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 578.565645][T11757] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.629863][T11757] usb 7-1: config 0 descriptor?? [ 578.671296][T11757] gspca_main: sunplus-2.14.0 probing 041e:400b [ 578.773850][ T1104] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 578.822584][ T1104] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 578.986612][T11760] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 579.078698][T11757] gspca_sunplus: reg_w_riv err -71 [ 579.103994][T11757] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 579.161202][T11757] usb 7-1: USB disconnect, device number 7 [ 579.481263][T16207] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 580.130335][T16225] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5157'. [ 580.190891][T16225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5157'. [ 580.207810][T16229] netlink: 'syz.6.5160': attribute type 9 has an invalid length. [ 580.231803][T16225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5157'. [ 581.443412][T11759] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 581.451162][T11757] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 581.642589][T11759] usb 7-1: Using ep0 maxpacket: 32 [ 581.652087][T11757] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 581.672585][T11757] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.681653][T11759] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 581.683045][T16278] bond2: option all_slaves_active: invalid value (9) [ 581.692102][T11759] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 581.708540][T11757] usb 1-1: config 0 descriptor?? [ 581.715354][T11759] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 581.733815][T11757] cp210x 1-1:0.0: cp210x converter detected [ 581.743552][T11759] usb 7-1: config 1 has no interface number 0 [ 581.753556][T11759] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 581.765443][T11759] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 581.775735][T16278] bond2 (unregistering): Released all slaves [ 581.776471][T11759] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 581.795849][T11759] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 581.820559][T11759] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.870397][T11759] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 581.953092][T11757] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 581.989220][T11757] cp210x 1-1:0.0: querying part number failed [ 582.068462][T11757] usb 1-1: cp210x converter now attached to ttyUSB0 [ 582.110302][T11759] snd_usb_pod 7-1:1.1: cannot start listening: -90 [ 582.145850][T11759] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 582.187024][T11775] usb 1-1: USB disconnect, device number 25 [ 582.187824][T11759] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 582.235481][T11775] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 582.273171][T11775] cp210x 1-1:0.0: device disconnected [ 582.442239][T11759] usb 7-1: USB disconnect, device number 8 [ 582.932557][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 583.306758][T16329] fuse: Bad value for 'group_id' [ 583.330562][T16329] fuse: Bad value for 'group_id' [ 583.492445][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 583.495971][T16335] netlink: 'syz.5.5212': attribute type 46 has an invalid length. [ 583.576288][T16335] netlink: 55 bytes leftover after parsing attributes in process `syz.5.5212'. [ 584.695804][T16384] netlink: 'syz.6.5236': attribute type 22 has an invalid length. [ 584.695833][T16384] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5236'. [ 585.113281][T16395] binder: 16393:16395 ioctl 40046210 0 returned -14 [ 585.617074][T16417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5253'. [ 585.649501][T16417] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5253'. [ 586.092848][T16432] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5260'. [ 586.132547][T16432] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 586.600686][T16452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5270'. [ 586.702712][ T30] audit: type=1326 audit(1777406255.946:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16457 comm="syz.6.5273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904f19cdd9 code=0x7ffc0000 [ 586.806863][ T30] audit: type=1326 audit(1777406255.966:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16457 comm="syz.6.5273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904f19cdd9 code=0x7ffc0000 [ 586.903440][ T30] audit: type=1326 audit(1777406255.966:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16457 comm="syz.6.5273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904f19cdd9 code=0x7ffc0000 [ 587.007686][ T30] audit: type=1326 audit(1777406255.966:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16457 comm="syz.6.5273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f904f19cdd9 code=0x7ffc0000 [ 587.097826][ T30] audit: type=1326 audit(1777406255.966:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16457 comm="syz.6.5273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904f19cdd9 code=0x7ffc0000 [ 587.200356][ T30] audit: type=1326 audit(1777406255.966:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16457 comm="syz.6.5273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904f19cdd9 code=0x7ffc0000 [ 587.321876][ T30] audit: type=1326 audit(1777406255.966:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16457 comm="syz.6.5273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f904f19cdd9 code=0x7ffc0000 [ 587.366680][T16481] xt_ecn: cannot match TCP bits for non-tcp packets [ 587.437266][ T30] audit: type=1326 audit(1777406255.966:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16457 comm="syz.6.5273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f904f19cdd9 code=0x7ffc0000 [ 587.549857][ T30] audit: type=1326 audit(1777406255.966:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16457 comm="syz.6.5273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904f19cdd9 code=0x7ffc0000 [ 588.195077][ T6084] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 588.378643][ T6084] usb 1-1: config index 0 descriptor too short (expected 1572, got 36) [ 588.404510][ T6084] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.452861][ T6084] usb 1-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 588.482473][ T6084] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.508606][ T6084] usb 1-1: Product: syz [ 588.522384][ T6084] usb 1-1: Manufacturer: syz [ 588.535012][ T6084] usb 1-1: SerialNumber: syz [ 588.595582][ T6084] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input44 [ 588.773488][T11759] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 588.777704][ T4979] bcm5974 1-1:1.0: could not read from device [ 588.809127][ T4979] bcm5974 1-1:1.0: could not read from device [ 588.825546][T16525] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5304'. [ 588.843280][ T6084] usb 1-1: USB disconnect, device number 26 [ 588.861235][ T4979] bcm5974 1-1:1.0: could not read from device [ 588.944225][T16527] netlink: del zone limit has 4 unknown bytes [ 588.974538][T11759] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 589.010941][T11759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.026071][ T5886] udevd[5886]: Error opening device "/dev/input/event4": No such file or directory [ 589.056996][T11759] usb 2-1: Product: syz [ 589.066200][ T5886] udevd[5886]: Unable to EVIOCGABS device "/dev/input/event4" [ 589.074332][T11759] usb 2-1: Manufacturer: syz [ 589.080799][T11759] usb 2-1: SerialNumber: syz [ 589.088433][ T5886] udevd[5886]: Unable to EVIOCGABS device "/dev/input/event4" [ 589.107337][T11759] usb 2-1: config 0 descriptor?? [ 589.127012][ T5886] udevd[5886]: Unable to EVIOCGABS device "/dev/input/event4" [ 589.144559][T11759] ch341 2-1:0.0: ch341-uart converter detected [ 589.164037][ T5886] udevd[5886]: Unable to EVIOCGABS device "/dev/input/event4" [ 589.570586][T11759] usb 2-1: failed to send control message: -71 [ 589.586251][T11759] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 589.590939][T16541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5312'. [ 589.616805][T11759] usb 2-1: USB disconnect, device number 93 [ 589.664486][T11759] ch341 2-1:0.0: device disconnected [ 589.847177][T16544] netlink: 'syz.6.5313': attribute type 8 has an invalid length. [ 589.856985][T16544] netlink: 'syz.6.5313': attribute type 4 has an invalid length. [ 590.667060][T16573] netlink: 'syz.1.5328': attribute type 8 has an invalid length. [ 591.362220][T11759] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 591.430708][T16597] xt_hl: Unknown Hop Limit match mode: 206 [ 591.565323][T11759] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 591.586556][T11759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.621662][T11759] usb 2-1: config 0 descriptor?? [ 591.660771][T11759] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 591.812454][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 592.077363][T11759] gspca_stv06xx: I2C: Read error writing address: -71 [ 592.116384][T11759] usb 2-1: USB disconnect, device number 94 [ 592.175330][ T30] audit: type=1326 audit(1777406261.426:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16614 comm="syz.0.5349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c2f9cdd9 code=0x7ffc0000 [ 592.243242][ T30] audit: type=1326 audit(1777406261.446:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16614 comm="syz.0.5349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c2f9cdd9 code=0x7ffc0000 [ 592.303647][ T30] audit: type=1326 audit(1777406261.456:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16614 comm="syz.0.5349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c2f9cdd9 code=0x7ffc0000 [ 592.352818][ T30] audit: type=1326 audit(1777406261.456:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16614 comm="syz.0.5349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c2f9cdd9 code=0x7ffc0000 [ 592.421474][ T30] audit: type=1326 audit(1777406261.456:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16614 comm="syz.0.5349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f97c2f9cdd9 code=0x7ffc0000 [ 592.480299][ T30] audit: type=1326 audit(1777406261.456:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16614 comm="syz.0.5349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c2f9cdd9 code=0x7ffc0000 [ 592.525633][ T30] audit: type=1326 audit(1777406261.456:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16614 comm="syz.0.5349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f97c2f9cdd9 code=0x7ffc0000 [ 592.572349][ T30] audit: type=1326 audit(1777406261.456:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16614 comm="syz.0.5349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f97c2f9cdd9 code=0x7ffc0000 [ 593.254936][T16641] bond4: option mode: invalid value (255) [ 593.288569][T16641] bond4 (unregistering): Released all slaves [ 593.625843][T16650] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 593.659037][T16650] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 594.059150][T16666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5374'. [ 594.786747][T16690] geneve3: entered promiscuous mode [ 594.803563][T16690] geneve3: entered allmulticast mode [ 594.872257][T11757] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 595.041695][T16699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.057375][T11757] usb 2-1: Using ep0 maxpacket: 16 [ 595.080648][T11757] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 595.098094][T11757] usb 2-1: config 8 has an invalid descriptor of length 64, skipping remainder of the config [ 595.121548][T11757] usb 2-1: config 8 has no interface number 0 [ 595.141508][T11757] usb 2-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 595.181556][T11757] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 595.220741][T11757] usb 2-1: config 8 interface 206 altsetting 1 bulk endpoint 0xC has invalid maxpacket 1024 [ 595.257123][T11757] usb 2-1: config 8 interface 206 has no altsetting 0 [ 595.284164][T11757] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 595.303720][T11757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.331004][T16707] netlink: 'syz.0.5394': attribute type 5 has an invalid length. [ 595.341616][T11757] usb 2-1: Product: syz [ 595.354806][T11757] usb 2-1: Manufacturer: syz [ 595.370081][T11757] usb 2-1: SerialNumber: syz [ 595.384608][T16687] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 595.420901][T16710] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 595.494457][T16712] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5396'. [ 595.616920][T11757] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 595.678440][T11757] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 595.730175][T11757] usb 2-1: USB disconnect, device number 95 [ 595.776352][T16718] openvswitch: netlink: Duplicate or invalid key (type 0). [ 595.809211][T11757] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 595.824498][T16718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.836725][T11757] garmin_gps 2-1:8.206: device disconnected [ 596.021537][T16726] macvtap0: entered allmulticast mode [ 596.053829][T16726] veth0_macvtap: entered allmulticast mode [ 596.270352][T16733] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5406'. [ 596.290771][ T30] audit: type=1326 audit(1777406265.526:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16732 comm="syz.0.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c2f9cdd9 code=0x7ffc0000 [ 596.389218][ T30] audit: type=1326 audit(1777406265.526:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16732 comm="syz.0.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c2f9cdd9 code=0x7ffc0000 [ 596.686843][T16746] program syz.5.5412 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 596.964123][T16756] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5418'. [ 598.257369][T16802] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5440'. [ 598.293457][T16802] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5440'. [ 598.344516][T16806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 598.773341][T16822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5449'. [ 599.079964][T16830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5454'. [ 599.431810][T16842] netlink: 'syz.1.5460': attribute type 21 has an invalid length. [ 599.442409][T16842] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5460'. [ 599.465048][T16842] netlink: 'syz.1.5460': attribute type 5 has an invalid length. [ 599.485497][T16842] netlink: 'syz.1.5460': attribute type 6 has an invalid length. [ 599.520534][T16842] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5460'. [ 599.605984][T16848] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5463'. [ 600.851420][T16890] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5484'. [ 601.022487][T16896] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 601.552538][T16918] geneve2: entered promiscuous mode [ 601.570934][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.609548][ T1104] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.646889][ T1104] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.676492][ T1104] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.530268][T16949] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 602.558585][T16949] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 602.869656][T16959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5518'. [ 602.967062][ T5947] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 602.979018][ T5947] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 602.988118][ T5947] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 602.999411][ T5947] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 603.010727][ T5947] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 604.344340][T17010] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 604.674708][T16967] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.710286][T16967] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.746824][T16967] bridge_slave_0: entered allmulticast mode [ 604.785369][T16967] bridge_slave_0: entered promiscuous mode [ 604.846495][T16967] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.891074][T16967] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.916706][T16967] bridge_slave_1: entered allmulticast mode [ 604.952723][T16967] bridge_slave_1: entered promiscuous mode [ 605.092674][T16967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.092717][ T5938] Bluetooth: hci6: command tx timeout [ 605.137724][T16967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.404501][T16967] team0: Port device team_slave_0 added [ 605.445852][T16967] team0: Port device team_slave_1 added [ 605.624062][T16967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.642836][T16967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.702346][T16967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.759129][T16967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.781111][T16967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.832496][ T6084] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 605.832730][T16967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.992371][T16967] hsr_slave_0: entered promiscuous mode [ 606.004710][ T6084] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.007908][T16967] hsr_slave_1: entered promiscuous mode [ 606.024069][T16967] debugfs: 'hsr0' already exists in 'hsr' [ 606.030060][T16967] Cannot create hsr debugfs directory [ 606.035572][ T6084] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 606.035606][ T6084] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 606.035636][ T6084] usb 2-1: config 0 interface 0 has no altsetting 0 [ 606.039401][ T6084] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 606.149553][ T6084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.179769][ T6084] usb 2-1: Product: syz [ 606.189989][ T6084] usb 2-1: Manufacturer: syz [ 606.207536][ T6084] usb 2-1: SerialNumber: syz [ 606.238853][ T6084] usb 2-1: config 0 descriptor?? [ 606.266911][ T6084] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 606.469056][ T6084] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 606.502534][ T6084] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 606.533312][ T6084] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 606.677212][ T6084] usb 2-1: USB disconnect, device number 96 [ 606.917836][T16967] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 606.956767][T11759] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 606.979637][T16967] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 606.998806][T16967] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 607.023524][T16967] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 607.031866][T16967] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 607.063484][T16967] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 607.091647][T16967] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 607.114355][T16967] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 607.122785][T11759] usb 7-1: Using ep0 maxpacket: 16 [ 607.130680][T11759] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 607.148565][T11759] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 607.172403][ T5938] Bluetooth: hci6: command tx timeout [ 607.175630][T11759] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 607.219595][T11759] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 607.279165][T11759] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 607.342531][T11759] usb 7-1: config 0 has no interface number 0 [ 607.388352][T11759] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 607.458287][T11759] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 607.508430][T11759] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 607.548848][T11759] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 607.583144][T11759] usb 7-1: config 0 interface 125 has no altsetting 0 [ 607.603494][T17079] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.607197][T11759] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 607.628250][T17083] netlink: 'syz.5.5571': attribute type 23 has an invalid length. [ 607.632458][T11759] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.664020][T17079] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.669778][T11759] usb 7-1: Product: syz [ 607.687759][T11759] usb 7-1: Manufacturer: syz [ 607.701144][T11759] usb 7-1: SerialNumber: syz [ 607.723172][T17079] xfrm0: left promiscuous mode [ 607.727614][T11759] usb 7-1: config 0 descriptor?? [ 607.826215][T17079] geneve2: left promiscuous mode [ 607.833600][T17079] gtp0: left promiscuous mode [ 607.852082][T17079] geneve4: left promiscuous mode [ 607.868002][T17079] bond2: left promiscuous mode [ 607.981916][T17087] vxcan1: entered promiscuous mode [ 607.987911][ C0] usb 7-1: async_complete: urb error -71 [ 608.004693][T17087] vxcan1: entered allmulticast mode [ 608.010299][ C0] usb 7-1: async_complete: urb error -71 [ 608.020636][ C0] usb 7-1: async_complete: urb error -71 [ 608.029165][ C0] usb 7-1: async_complete: urb error -71 [ 608.044662][T11759] get_1284_register: usb error -71 [ 608.087451][T11759] usb 7-1: USB disconnect, device number 9 [ 608.266880][T16967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.374374][T16967] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.427752][T12105] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.434989][T12105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.462411][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 608.486761][T17093] netlink: 'syz.5.5576': attribute type 21 has an invalid length. [ 608.508684][T17093] netlink: 100 bytes leftover after parsing attributes in process `syz.5.5576'. [ 608.541214][T12105] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.548623][T12105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.953442][T16967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.174131][T16967] veth0_vlan: entered promiscuous mode [ 609.245749][T17116] xt_hashlimit: size too large, truncated to 1048576 [ 609.253142][ T5947] Bluetooth: hci6: command tx timeout [ 609.264970][T16967] veth1_vlan: entered promiscuous mode [ 609.400750][T17122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.403926][T16967] veth0_macvtap: entered promiscuous mode [ 609.471430][T16967] veth1_macvtap: entered promiscuous mode [ 609.581712][T16967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.668463][T16967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.741978][ T48] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.785182][ T48] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.836121][ T48] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.867341][ T48] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.204939][T17144] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 610.345654][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.381010][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.518655][T17154] netlink: 5268 bytes leftover after parsing attributes in process `syz.1.5606'. [ 610.534640][T11759] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 610.563487][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.582779][T17156] netlink: 192 bytes leftover after parsing attributes in process `syz.5.5607'. [ 610.592781][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.715225][T11759] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 610.762332][T11759] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 610.805785][T11759] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 610.842825][T11759] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.879138][T11759] usb 7-1: Product: syz [ 610.899176][T11759] usb 7-1: Manufacturer: syz [ 610.919105][T11759] usb 7-1: SerialNumber: syz [ 610.951551][T11759] usb 7-1: config 0 descriptor?? [ 610.986363][T17148] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 611.011873][T17164] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5611'. [ 611.039203][T17148] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 611.172404][ T5947] Bluetooth: hci5: command 0x0406 tx timeout [ 611.293967][T17148] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 611.333792][T17148] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 611.342675][ T5938] Bluetooth: hci6: command tx timeout [ 611.594882][T11759] Error reading MAC address [ 611.638818][T11759] usb 7-1: USB disconnect, device number 10 [ 612.742363][T11775] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 612.926884][T11775] usb 2-1: unable to get BOS descriptor or descriptor too short [ 612.953020][T11775] usb 2-1: not running at top speed; connect to a high speed hub [ 612.975442][T11775] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 613.004569][T11775] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 613.046340][T11775] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 613.083624][T11775] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8193, setting to 64 [ 613.083700][T11759] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 613.115777][T11775] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 613.143276][T11775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.182193][T11775] usb 2-1: Product: syz [ 613.202442][T11775] usb 2-1: Manufacturer: syz [ 613.221520][T11775] usb 2-1: SerialNumber: syz [ 613.326674][T11759] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 613.360021][T11759] usb 7-1: config 0 has no interface number 0 [ 613.403796][T11759] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 613.447330][T11759] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.476471][T11759] usb 7-1: Product: syz [ 613.506934][T11759] usb 7-1: Manufacturer: syz [ 613.515015][T11775] usb 2-1: 0:2 : does not exist [ 613.521048][T11759] usb 7-1: SerialNumber: syz [ 613.563766][T11759] usb 7-1: config 0 descriptor?? [ 613.749877][T11775] usb 2-1: USB disconnect, device number 97 [ 613.816998][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 613.827196][T11759] uvcvideo 7-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 613.881559][T11759] uvcvideo 7-1:0.64: Failed to create links for entity 32768 [ 613.915870][T11759] uvcvideo 7-1:0.64: Failed to register entities (-22). [ 613.981541][T11759] usb 7-1: USB disconnect, device number 11 [ 614.162027][T17247] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 614.400334][T17255] netlink: 'syz.5.5655': attribute type 15 has an invalid length. [ 615.034326][T17273] kAFS: unable to lookup cell '(,' [ 615.132662][T17275] netlink: 'syz.5.5665': attribute type 21 has an invalid length. [ 615.168461][T17275] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5665'. [ 615.524638][T17292] xt_TPROXY: Can be used only with -p tcp or -p udp [ 615.719086][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 615.719107][ T30] audit: type=1326 audit(1777406284.966:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17296 comm="syz.5.5676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62479cdd9 code=0x7ffc0000 [ 615.803563][T17300] autofs4:pid:17300:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 615.866820][ T30] audit: type=1326 audit(1777406284.966:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17296 comm="syz.5.5676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62479cdd9 code=0x7ffc0000 [ 615.986253][ T30] audit: type=1326 audit(1777406285.016:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17296 comm="syz.5.5676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7ff62479cdd9 code=0x7ffc0000 [ 616.101748][ T30] audit: type=1326 audit(1777406285.026:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17296 comm="syz.5.5676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62479cdd9 code=0x7ffc0000 [ 617.086219][T17346] IPVS: length: 255 != 24 [ 617.218077][T17350] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5702'. [ 617.394858][T17358] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5705'. [ 617.730213][T17356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.766037][T17356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.988684][T17375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5715'. [ 618.037814][T17375] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5715'. [ 618.445555][T17366] netlink: 'syz.5.5710': attribute type 5 has an invalid length. [ 618.478442][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.514656][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.566377][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.600190][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.128432][T17411] openvswitch: netlink: Unknown key attributes 1 [ 619.586245][T17426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 620.241522][T17451] netlink: 'syz.5.5752': attribute type 5 has an invalid length. [ 620.286187][T17451] netlink: 'syz.5.5752': attribute type 5 has an invalid length. [ 620.312837][ T6084] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 620.502694][ T6084] usb 7-1: Using ep0 maxpacket: 8 [ 620.526158][ T6084] usb 7-1: config 6 has an invalid interface number: 2 but max is 0 [ 620.548575][ T6084] usb 7-1: config 6 has no interface number 0 [ 620.573404][ T6084] usb 7-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 620.604646][ T6084] usb 7-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 620.632437][T11757] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 620.642600][ T6084] usb 7-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 620.679358][ T6084] usb 7-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 620.721877][ T6084] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 620.752260][ T6084] usb 7-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 620.787728][ T6084] usb 7-1: Product: syz [ 620.801796][ T6084] usb 7-1: Manufacturer: syz [ 620.816976][ T6084] usb 7-1: SerialNumber: syz [ 620.842075][T11757] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 620.847657][ T6084] hso 7-1:6.2: Failed to find BULK eps [ 620.883746][T11757] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 620.932794][T11757] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.994232][T11757] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 621.049334][T11757] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 621.080969][T11757] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 621.118439][T11757] usb 1-1: config 1 interface 1 has no altsetting 0 [ 621.129057][ T6084] usb 7-1: USB disconnect, device number 12 [ 621.150933][T11757] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 621.184870][T11757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.219801][T11757] usb 1-1: Product: syz [ 621.237395][T11757] usb 1-1: Manufacturer: syz [ 621.254418][T11757] usb 1-1: SerialNumber: syz [ 621.299252][T11757] cdc_ncm 1-1:1.0: skipping garbage [ 621.317616][T11757] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 621.342529][T11757] cdc_ncm 1-1:1.0: bind() failure [ 621.715026][T11757] usb 1-1: USB disconnect, device number 27 [ 624.010782][T17561] bridge_slave_0: left allmulticast mode [ 624.026835][T17561] bridge_slave_0: left promiscuous mode [ 624.047935][T17561] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.091796][T17561] bridge_slave_1: left allmulticast mode [ 624.108784][T17561] bridge_slave_1: left promiscuous mode [ 624.125751][T17561] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.176963][T17561] bond0: (slave bond_slave_0): Releasing backup interface [ 624.206696][T17561] bond0: (slave bond_slave_1): Releasing backup interface [ 624.269785][T17561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.289948][T17561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.320559][T17561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.332420][T17561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.374571][T17561] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 624.455428][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.471795][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.552315][T11757] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 624.735039][T11757] usb 7-1: unable to get BOS descriptor or descriptor too short [ 624.773232][T11757] usb 7-1: not running at top speed; connect to a high speed hub [ 624.794907][T11757] usb 7-1: config 5 has an invalid interface number: 246 but max is 0 [ 624.812170][T11757] usb 7-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 624.824390][T17581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 624.826442][T11757] usb 7-1: config 5 has no interface number 0 [ 624.840297][T11757] usb 7-1: config 5 interface 246 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 624.860908][T11757] usb 7-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 624.896680][T11757] usb 7-1: config 5 interface 246 has no altsetting 0 [ 624.915039][T11757] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 624.932390][T11757] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.961519][T11757] usb 7-1: Product: syz [ 624.967210][T11757] usb 7-1: Manufacturer: syz [ 624.978464][T11757] usb 7-1: SerialNumber: syz [ 625.254814][T11757] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 625.282797][ T48] usb 7-1: Failed to submit usb control message: -71 [ 625.320459][ T48] usb 7-1: unable to send the bmi data to the device: -71 [ 625.356101][T11757] usb 7-1: USB disconnect, device number 13 [ 625.373508][ T48] usb 7-1: unable to get target info from device [ 625.406046][ T48] usb 7-1: could not get target info (-71) [ 625.450240][ T48] usb 7-1: could not probe fw (-71) [ 625.533506][ T30] audit: type=1326 audit(1777406294.776:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17595 comm="syz.1.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ed9cdd9 code=0x7ffc0000 [ 625.640659][ T30] audit: type=1326 audit(1777406294.776:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17595 comm="syz.1.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ed9cdd9 code=0x7ffc0000 [ 625.722353][ T30] audit: type=1326 audit(1777406294.786:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17595 comm="syz.1.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ed9cdd9 code=0x7ffc0000 [ 625.754061][ T30] audit: type=1326 audit(1777406294.786:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17595 comm="syz.1.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ed9cdd9 code=0x7ffc0000 [ 625.777710][ T30] audit: type=1326 audit(1777406294.786:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17595 comm="syz.1.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7ff24ed9cdd9 code=0x7ffc0000 [ 625.804229][ T30] audit: type=1326 audit(1777406294.786:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17595 comm="syz.1.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ed9cdd9 code=0x7ffc0000 [ 625.830937][ T30] audit: type=1326 audit(1777406294.806:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17595 comm="syz.1.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff24ed9cdd9 code=0x7ffc0000 [ 625.901353][ T30] audit: type=1326 audit(1777406294.806:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17595 comm="syz.1.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff24ed9cdd9 code=0x7ffc0000 [ 626.202896][T17610] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5829'. [ 626.253734][T17610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.288296][T17610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.360583][T17610] bond0 (unregistering): Released all slaves [ 627.034709][T17638] ¾x9ÿ: renamed from bridge_slave_0 [ 627.489126][T17654] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 628.292761][ T31] INFO: task syz.2.3518:12819 blocked for more than 143 seconds. [ 628.319372][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 628.354454][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 628.388155][ T31] task:syz.2.3518 state:D stack:28120 pid:12819 tgid:12818 ppid:5951 task_flags:0x400040 flags:0x00080002 [ 628.436216][ T31] Call Trace: [ 628.453375][ T31] [ 628.483253][ T31] __schedule+0x17b4/0x5680 [ 628.520922][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 628.566186][ T31] ? __pfx_clockevents_program_event+0x10/0x10 [ 628.613209][ T31] ? __pfx___schedule+0x10/0x10 [ 628.641495][ T31] ? schedule+0x90/0x360 [ 628.662560][ T31] schedule+0x164/0x360 [ 628.693101][ T31] schedule_preempt_disabled+0x13/0x30 [ 628.718458][ T31] __mutex_lock+0x7f7/0x1550 [ 628.744316][ T31] ? __mutex_lock+0x608/0x1550 [ 628.783619][ T31] ? usbdev_open+0x182/0x770 [ 628.802275][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 628.811745][ T31] ? bus_find_device+0x27d/0x2d0 [ 628.832480][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 628.846111][ T31] ? usbdev_open+0xa7/0x770 [ 628.857141][ T31] ? __kmalloc_cache_noprof+0x15b/0x660 [ 628.878116][ T31] usbdev_open+0x182/0x770 [ 628.892186][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 628.907428][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 628.925022][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 628.942340][ T31] chrdev_open+0x4cd/0x5e0 [ 628.964173][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 628.982200][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 629.003283][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 629.012429][ T31] do_dentry_open+0x785/0x14e0 [ 629.029270][ T31] vfs_open+0x3b/0x340 [ 629.043122][ T31] ? path_openat+0x2df0/0x3860 [ 629.063676][ T31] path_openat+0x2e08/0x3860 [ 629.075197][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 629.098604][ T31] ? stack_depot_save_flags+0x33/0x810 [ 629.116590][ T31] ? __pfx_path_openat+0x10/0x10 [ 629.130582][ T31] ? __x64_sys_openat+0x138/0x170 [ 629.147519][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 629.166433][ T31] do_file_open+0x23e/0x4a0 [ 629.184471][ T31] ? __pfx_do_file_open+0x10/0x10 [ 629.204741][ T31] ? _raw_spin_unlock+0x28/0x50 [ 629.231058][ T31] ? alloc_fd+0x64b/0x6c0 [ 629.244686][ T31] do_sys_openat2+0x113/0x200 [ 629.271268][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 629.285499][ T31] ? exc_page_fault+0x6a/0xc0 [ 629.303405][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 629.322335][ T31] __x64_sys_openat+0x138/0x170 [ 629.332336][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.354611][ T31] do_syscall_64+0x15f/0xf80 [ 629.372510][ T31] ? trace_irq_disable+0x3b/0x140 [ 629.377862][ T31] ? clear_bhb_loop+0x40/0x90 [ 629.382912][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.388877][ T31] RIP: 0033:0x7fcac595d60e [ 629.394475][ T31] RSP: 002b:00007fcac3bf5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 629.408908][ T31] RAX: ffffffffffffffda RBX: 00007fcac3bf66c0 RCX: 00007fcac595d60e [ 629.418088][ T31] RDX: 0000000000000002 RSI: 00007fcac3bf5c00 RDI: ffffffffffffff9c [ 629.426812][ T31] RBP: 00007fcac3bf5c00 R08: 0000000000000000 R09: 0000000000000000 [ 629.436187][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 629.447104][ T31] R13: 00007fcac5c16038 R14: 00007fcac5c15fa0 R15: 00007fcac5d3fa48 [ 629.455623][ T31] [ 629.458801][ T31] [ 629.458801][ T31] Showing all locks held in the system: [ 629.470408][ T31] 1 lock held by pool_workqueue_/3: [ 629.486948][ T31] #0: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 629.518631][ T31] 1 lock held by khungtaskd/31: [ 629.524853][ T31] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 629.535046][ T31] 3 locks held by kworker/u8:2/36: [ 629.540221][ T31] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 629.559412][ T31] #1: ffffc90000ac7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 629.573659][ T31] #2: ffffffff8fdbfe08 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 629.587116][ T31] 4 locks held by pvrusb2-context/2366: [ 629.593020][ T31] 2 locks held by getty/5383: [ 629.597726][ T2366] pvrusb2: request_firmware fatal error with code=-110 [ 629.599918][ T31] #0: ffff8880367d90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 629.618439][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 629.622402][ T2366] pvrusb2: Failure uploading firmware1 [ 629.631625][ T31] 6 locks held by kworker/1:6/6058: [ 629.640533][ T31] 6 locks held by kworker/1:9/11773: [ 629.646622][ T31] #0: ffff88801eaed940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 629.658878][ T31] #1: ffffc90005b27c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 629.662295][ T2366] pvrusb2: Device initialization was not successful. [ 629.673723][ T31] #2: ffff88802a4401d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 629.690188][ T31] #3: ffff888020e9e1d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x990 [ 629.700647][ T31] #4: ffff88802f10c1a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 629.711943][ T31] #5: ffff88802b8f8180 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_disconnect+0x6d/0x500 [ 629.712298][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 629.728277][ T31] 1 lock held by syz.2.3518/12819: [ 629.741184][ T31] #0: ffff88802a4d91d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 629.755330][ T31] 3 locks held by syz-executor/13255: [ 629.760777][ T31] #0: ffff8880439e4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 629.773380][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 629.775043][ T31] #1: ffff8880439e40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 629.794926][T11773] pvrusb2: Device being rendered inoperable [ 629.796072][ T31] #2: ffffffff8ff51900 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 629.811636][ T31] 1 lock held by syz.3.5285/16483: [ 629.829630][ T31] #0: ffff88802a4d91d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 629.842914][ T31] 4 locks held by syz-executor/16947: [ 629.848433][ T31] #0: ffff88801d700ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 629.861423][ T31] #1: ffff88801d7000b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 629.873725][ T31] #2: ffffffff8ff51900 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 629.887465][ T31] #3: ffff88807e1b62f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 629.898663][ T31] 1 lock held by dhcpcd/17682: [ 629.905023][ T31] #0: ffff88802ba5c260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 629.915159][ T31] 1 lock held by dhcpcd/17683: [ 629.920000][ T31] #0: ffff888033dc0260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 629.930896][ T31] 2 locks held by dhcpcd/17684: [ 629.936082][ T31] #0: ffff8880264c8260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 629.947115][ T31] #1: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 629.958600][ T31] [ 630.010364][ T31] ============================================= [ 630.010364][ T31] [ 630.042324][ T31] NMI backtrace for cpu 0 [ 630.042356][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 630.042377][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 630.042389][ T31] Call Trace: [ 630.042398][ T31] [ 630.042407][ T31] dump_stack_lvl+0xe8/0x150 [ 630.042435][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 630.042465][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 630.042489][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 630.042521][ T31] sys_info+0x135/0x170 [ 630.042543][ T31] watchdog+0xfd3/0x1030 [ 630.042576][ T31] ? watchdog+0x1c9/0x1030 [ 630.042609][ T31] kthread+0x388/0x470 [ 630.042634][ T31] ? __pfx_watchdog+0x10/0x10 [ 630.042659][ T31] ? __pfx_kthread+0x10/0x10 [ 630.042685][ T31] ret_from_fork+0x514/0xb70 [ 630.042709][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 630.042731][ T31] ? __switch_to+0xc79/0x1410 [ 630.042771][ T31] ? __pfx_kthread+0x10/0x10 [ 630.042799][ T31] ret_from_fork_asm+0x1a/0x30 [ 630.042841][ T31] [ 630.042850][ T31] Sending NMI from CPU 0 to CPUs 1: [ 630.159791][ C1] NMI backtrace for cpu 1 [ 630.159813][ C1] CPU: 1 UID: 0 PID: 6058 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 630.159833][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 630.159845][ C1] Workqueue: usb_hub_wq hub_event [ 630.159870][ C1] RIP: 0010:unwind_next_frame+0x1bba/0x2550 [ 630.159894][ C1] Code: a3 0e 01 48 c7 c7 40 a3 c9 8b be 64 03 00 00 48 c7 c2 e0 a3 c9 8b e8 35 eb 2a 00 48 c7 c7 60 cd 95 8e 4c 89 fe e8 b6 d1 2a 00 c1 7e 34 00 89 d8 48 81 c4 98 00 00 00 5b 41 5c 41 5d 41 5e 41 [ 630.159908][ C1] RSP: 0018:ffffc90000a085f8 EFLAGS: 00000086 [ 630.159922][ C1] RAX: 11233be7b1597e00 RBX: ffffffff90c4d101 RCX: 0000000080000101 [ 630.159934][ C1] RDX: 0000000000000007 RSI: ffffffff8e2171d5 RDI: ffffffff8c28ab60 [ 630.159946][ C1] RBP: dffffc0000000000 R08: ffffc90000a08718 R09: 0000000000000000 [ 630.159958][ C1] R10: ffffc90000a08778 R11: fffff520001410f1 R12: ffffc90000a08728 [ 630.159969][ C1] R13: ffffc90000a01000 R14: ffffc90000a08728 R15: ffffffff8176e256 [ 630.159982][ C1] FS: 0000000000000000(0000) GS:ffff888125393000(0000) knlGS:0000000000000000 [ 630.159996][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 630.160007][ C1] CR2: 000055df6a3cb660 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 630.160024][ C1] Call Trace: [ 630.160032][ C1] [ 630.160042][ C1] ? unwind_next_frame+0xa6/0x2550 [ 630.160062][ C1] ? __unwind_start+0xf7/0x760 [ 630.160083][ C1] __unwind_start+0x5b8/0x760 [ 630.160104][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 630.160127][ C1] arch_stack_walk+0xe3/0x150 [ 630.160149][ C1] ? arch_stack_walk+0xe3/0x150 [ 630.160169][ C1] stack_trace_save+0xa9/0x100 [ 630.160191][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 630.160212][ C1] ? kasan_save_free_info+0x46/0x50 [ 630.160232][ C1] ? stack_depot_save_flags+0x33/0x810 [ 630.160254][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 630.160271][ C1] kasan_save_track+0x3e/0x80 [ 630.160313][ C1] kasan_save_free_info+0x46/0x50 [ 630.160337][ C1] __kasan_slab_free+0x5c/0x80 [ 630.160359][ C1] kfree+0x1c5/0x640 [ 630.160377][ C1] ? dummy_timer+0xb5c/0x4650 [ 630.160400][ C1] dummy_timer+0xb5c/0x4650 [ 630.160427][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 630.160445][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 630.160467][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 630.160493][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 630.160513][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 630.160532][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 630.160550][ C1] __hrtimer_run_queues+0x3c0/0xa20 [ 630.160577][ C1] hrtimer_run_softirq+0x17a/0x240 [ 630.160600][ C1] handle_softirqs+0x22a/0x840 [ 630.160618][ C1] ? __irq_exit_rcu+0xca/0x220 [ 630.160638][ C1] __irq_exit_rcu+0xca/0x220 [ 630.160654][ C1] irq_exit_rcu+0x9/0x30 [ 630.160669][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 630.160687][ C1] [ 630.160692][ C1] [ 630.160699][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 630.160716][ C1] RIP: 0010:unwind_next_frame+0xeed/0x2550 [ 630.160736][ C1] Code: 96 c0 20 c8 3c 01 0f 85 54 0c 00 00 48 89 df e8 c9 22 00 00 48 89 c3 48 bd 00 00 00 00 00 fc ff df 48 8b 44 24 30 80 3c 28 00 <4c> 8b 7c 24 10 74 08 4c 89 ff e8 64 f7 b9 00 49 89 1f 48 8b 44 24 [ 630.160750][ C1] RSP: 0018:ffffc900043d6538 EFLAGS: 00000246 [ 630.160763][ C1] RAX: 1ffff9200087acca RBX: ffffffff86038038 RCX: 1ffff9200087ac01 [ 630.160775][ C1] RDX: ffffffff911148b6 RSI: 0000000000000002 RDI: ffffc900043d7498 [ 630.160787][ C1] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffffff8e95cd60 [ 630.160799][ C1] R10: ffffc900043d6658 R11: ffffffff81b0d880 R12: ffffc900043d8000 [ 630.160810][ C1] R13: 1ffff9200087acc3 R14: ffffc900043d6608 R15: ffffc900043d0000 [ 630.160824][ C1] ? bus_for_each_drv+0x258/0x2f0 [ 630.160847][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 630.160880][ C1] ? unwind_next_frame+0xed7/0x2550 [ 630.160901][ C1] ? unwind_next_frame+0xa6/0x2550 [ 630.160919][ C1] ? __device_attach_driver+0x279/0x430 [ 630.160940][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 630.160963][ C1] arch_stack_walk+0x11b/0x150 [ 630.160984][ C1] ? __device_attach_driver+0x279/0x430 [ 630.161006][ C1] stack_trace_save+0xa9/0x100 [ 630.161028][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 630.161051][ C1] ? arch_stack_walk+0x11b/0x150 [ 630.161072][ C1] kasan_save_track+0x3e/0x80 [ 630.161091][ C1] ? kasan_save_track+0x3e/0x80 [ 630.161110][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 630.161130][ C1] ? __kmalloc_cache_noprof+0x31c/0x660 [ 630.161150][ C1] ? dummy_urb_enqueue+0x7c/0x780 [ 630.161168][ C1] ? usb_hcd_submit_urb+0x328/0x1b70 [ 630.161187][ C1] ? ath6kl_usb_post_recv_transfers+0x3cd/0x6f0 [ 630.161205][ C1] ? ath6kl_usb_power_on+0x6a/0x280 [ 630.161220][ C1] ? ath6kl_core_init+0x1e1/0x10b0 [ 630.161242][ C1] ? ath6kl_usb_probe+0x14a6/0x15a0 [ 630.161257][ C1] ? usb_probe_interface+0x659/0xc70 [ 630.161275][ C1] ? really_probe+0x267/0xaf0 [ 630.161292][ C1] ? __driver_probe_device+0x1ef/0x380 [ 630.161310][ C1] ? driver_probe_device+0x4f/0x240 [ 630.161328][ C1] ? __device_attach_driver+0x279/0x430 [ 630.161352][ C1] ? bus_for_each_drv+0x258/0x2f0 [ 630.161373][ C1] ? __device_attach+0x2c5/0x450 [ 630.161389][ C1] ? device_initial_probe+0xa1/0xd0 [ 630.161406][ C1] ? bus_probe_device+0x12a/0x220 [ 630.161427][ C1] ? device_add+0x7e9/0xbb0 [ 630.161441][ C1] ? usb_set_configuration+0x1a87/0x2110 [ 630.161458][ C1] ? usb_generic_driver_probe+0x8d/0x150 [ 630.161474][ C1] ? usb_probe_device+0x1c4/0x3b0 [ 630.161491][ C1] ? really_probe+0x267/0xaf0 [ 630.161509][ C1] ? __driver_probe_device+0x1ef/0x380 [ 630.161525][ C1] ? driver_probe_device+0x4f/0x240 [ 630.161543][ C1] ? __device_attach_driver+0x279/0x430 [ 630.161572][ C1] ? rcu_is_watching+0x15/0xb0 [ 630.161592][ C1] __kasan_kmalloc+0x93/0xb0 [ 630.161614][ C1] __kmalloc_cache_noprof+0x31c/0x660 [ 630.161635][ C1] ? dummy_urb_enqueue+0x7c/0x780 [ 630.161653][ C1] ? __kmalloc_cache_noprof+0x15b/0x660 [ 630.161676][ C1] dummy_urb_enqueue+0x7c/0x780 [ 630.161695][ C1] ? usb_hcd_map_urb_for_dma+0x44f/0xd40 [ 630.161717][ C1] usb_hcd_submit_urb+0x328/0x1b70 [ 630.161740][ C1] ath6kl_usb_post_recv_transfers+0x3cd/0x6f0 [ 630.161765][ C1] ath6kl_usb_power_on+0x6a/0x280 [ 630.161781][ C1] ath6kl_core_init+0x1e1/0x10b0 [ 630.161805][ C1] ? rcu_is_watching+0x15/0xb0 [ 630.161824][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 630.161846][ C1] ? __pfx_ath6kl_core_init+0x10/0x10 [ 630.161869][ C1] ? __asan_memcpy+0x40/0x70 [ 630.161888][ C1] ? ath6kl_core_create+0x7de/0x980 [ 630.161913][ C1] ath6kl_usb_probe+0x14a6/0x15a0 [ 630.161935][ C1] usb_probe_interface+0x659/0xc70 [ 630.161958][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 630.161976][ C1] really_probe+0x267/0xaf0 [ 630.161997][ C1] __driver_probe_device+0x1ef/0x380 [ 630.162017][ C1] driver_probe_device+0x4f/0x240 [ 630.162037][ C1] __device_attach_driver+0x279/0x430 [ 630.162057][ C1] bus_for_each_drv+0x258/0x2f0 [ 630.162079][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 630.162099][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 630.162124][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 630.162142][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 630.162160][ C1] __device_attach+0x2c5/0x450 [ 630.162178][ C1] ? __pfx___device_attach+0x10/0x10 [ 630.162198][ C1] ? _raw_spin_unlock+0x28/0x50 [ 630.162215][ C1] device_initial_probe+0xa1/0xd0 [ 630.162235][ C1] bus_probe_device+0x12a/0x220 [ 630.162258][ C1] device_add+0x7e9/0xbb0 [ 630.162276][ C1] usb_set_configuration+0x1a87/0x2110 [ 630.162304][ C1] usb_generic_driver_probe+0x8d/0x150 [ 630.162322][ C1] usb_probe_device+0x1c4/0x3b0 [ 630.162349][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 630.162367][ C1] really_probe+0x267/0xaf0 [ 630.162388][ C1] __driver_probe_device+0x1ef/0x380 [ 630.162407][ C1] driver_probe_device+0x4f/0x240 [ 630.162427][ C1] __device_attach_driver+0x279/0x430 [ 630.162448][ C1] bus_for_each_drv+0x258/0x2f0 [ 630.162470][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 630.162489][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 630.162511][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 630.162528][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 630.162545][ C1] __device_attach+0x2c5/0x450 [ 630.162564][ C1] ? __pfx___device_attach+0x10/0x10 [ 630.162584][ C1] ? _raw_spin_unlock+0x28/0x50 [ 630.162600][ C1] device_initial_probe+0xa1/0xd0 [ 630.162619][ C1] bus_probe_device+0x12a/0x220 [ 630.162642][ C1] device_add+0x7e9/0xbb0 [ 630.162660][ C1] usb_new_device+0xa08/0x16f0 [ 630.162687][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 630.162711][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 630.162728][ C1] hub_event+0x2a1c/0x4f30 [ 630.162744][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 630.162791][ C1] ? __pfx_hub_event+0x10/0x10 [ 630.162808][ C1] ? process_scheduled_works+0xa70/0x1860 [ 630.162828][ C1] ? process_scheduled_works+0xa70/0x1860 [ 630.162844][ C1] ? process_scheduled_works+0xa70/0x1860 [ 630.162861][ C1] process_scheduled_works+0xb5d/0x1860 [ 630.162889][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 630.162908][ C1] ? assign_work+0x3d5/0x5e0 [ 630.162926][ C1] worker_thread+0xa53/0xfc0 [ 630.162954][ C1] kthread+0x388/0x470 [ 630.162974][ C1] ? __pfx_worker_thread+0x10/0x10 [ 630.162989][ C1] ? __pfx_kthread+0x10/0x10 [ 630.163009][ C1] ret_from_fork+0x514/0xb70 [ 630.163027][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 630.163044][ C1] ? __switch_to+0xc79/0x1410 [ 630.163067][ C1] ? __pfx_kthread+0x10/0x10 [ 630.163086][ C1] ret_from_fork_asm+0x1a/0x30 [ 630.163113][ C1] [ 631.129239][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 631.136384][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 631.145554][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 631.155655][ T31] Call Trace: [ 631.159069][ T31] [ 631.162029][ T31] vpanic+0x56c/0xa60 [ 631.166050][ T31] ? __pfx___schedule+0x10/0x10 [ 631.171109][ T31] ? __pfx_vpanic+0x10/0x10 [ 631.175772][ T31] panic+0xc5/0xd0 [ 631.179626][ T31] ? __pfx_panic+0x10/0x10 [ 631.184090][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 631.189501][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 631.195881][ T31] watchdog+0x102c/0x1030 [ 631.200504][ T31] ? watchdog+0x1c9/0x1030 [ 631.204972][ T31] kthread+0x388/0x470 [ 631.209090][ T31] ? __pfx_watchdog+0x10/0x10 [ 631.213838][ T31] ? __pfx_kthread+0x10/0x10 [ 631.218606][ T31] ret_from_fork+0x514/0xb70 [ 631.223266][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 631.228416][ T31] ? __switch_to+0xc79/0x1410 [ 631.233410][ T31] ? __pfx_kthread+0x10/0x10 [ 631.238045][ T31] ret_from_fork_asm+0x1a/0x30 [ 631.242844][ T31] [ 631.246614][ T31] Kernel Offset: disabled [ 631.251025][ T31] Rebooting in 86400 seconds..