last executing test programs: 11.363708679s ago: executing program 3 (id=5604): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x10, 0x0, 0x0) 11.123821598s ago: executing program 3 (id=5610): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) 10.970903886s ago: executing program 3 (id=5616): r0 = syz_open_dev$rtc(&(0x7f0000000240), 0x0, 0x80000) ioctl$RTC_PIE_OFF(r0, 0x7006) 10.77972827s ago: executing program 3 (id=5621): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='-0'], 0x6) 10.593772106s ago: executing program 3 (id=5626): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x1, 0x0, 0x3002, 0x0, 0xc, 0x2, 0x2}}) 10.191010156s ago: executing program 3 (id=5634): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000055c0), 0xe0200, 0x0) fcntl$setstatus(r0, 0x4, 0x42400) 1.774948781s ago: executing program 4 (id=5753): r0 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000000), 0x20a01, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='trylock '], 0xd) 1.693214171s ago: executing program 4 (id=5755): r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000540)="ce932178", 0x4, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r0}, 0x0, 0x0, 0x0) 1.587797035s ago: executing program 4 (id=5757): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.308318172s ago: executing program 1 (id=5760): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x238, 0x20a, 0x278, 0x238, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'veth1\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x0, 0x0, 0x22}, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}, {0x5, 0x1, 0x1, [0x3, 0xfffb, 0xd27f, 0xb, 0x8000, 0x7, 0x8, 0x200, 0x8000, 0xffff, 0xfff9, 0x6, 0x2, 0x5, 0xa37, 0x9], 0xd}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 1.30103129s ago: executing program 4 (id=5761): setitimer(0x2, &(0x7f0000000040)={{0x77359400}, {0x0, 0x2710}}, 0x0) unshare(0x42040200) 1.047845747s ago: executing program 2 (id=5764): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0xfffffffffffffffc, &(0x7f00000005c0)=0x77) 1.03889953s ago: executing program 0 (id=5765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) 963.076742ms ago: executing program 1 (id=5766): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x13, 0x10, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 922.526334ms ago: executing program 2 (id=5767): r0 = socket(0x10, 0x2, 0x0) sendto$inet6(r0, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d07000b000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0x0) 863.255493ms ago: executing program 0 (id=5768): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) inotify_init() 758.252992ms ago: executing program 1 (id=5769): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_x_sa2={0x2, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @private=0xa010102}}, @sadb_x_nat_t_type={0x1}]}, 0x68}}, 0x0) 733.885974ms ago: executing program 0 (id=5770): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/timers\x00', 0x41, 0x0) 632.437626ms ago: executing program 2 (id=5771): r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000000000000007000000890f04"], 0x20, 0x5}, 0x80) 574.662897ms ago: executing program 4 (id=5772): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000080)={0x60, 0x8000000000000001, 0x0, {{0x6, 0x7, 0x3, 0x0, 0x171e, 0x10000, 0x7, 0x7ff}}}, 0x60) 528.2886ms ago: executing program 1 (id=5773): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x18, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c) 489.546249ms ago: executing program 2 (id=5774): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x201, 0x0, 0x0, 0x0, 0xc5d, 0x0, 0x3, 0x108}) 488.7092ms ago: executing program 0 (id=5775): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r0, 0x0, r0, &(0x7f0000000080)='./mnt\x00', 0x214) 393.450594ms ago: executing program 1 (id=5776): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001500), 0x200, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000001540)={0x8a9, 0x21, 0x6, 0x4d5e, 0x80000000}) 387.575799ms ago: executing program 4 (id=5777): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r0], 0x0) 297.562572ms ago: executing program 0 (id=5778): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fdf00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000080019008d0d"], 0x4c}}, 0x0) 241.822565ms ago: executing program 2 (id=5779): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001a00010028bd7000fedbdf258100e4"], 0x1c}}, 0x884) 195.036213ms ago: executing program 1 (id=5780): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'dummy0\x00', @multicast}) 15.708532ms ago: executing program 2 (id=5781): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}}) 0s ago: executing program 0 (id=5782): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x45, 0x0, 0x1}]}, 0x10) kernel console output (not intermixed with test programs): t 0x3 has invalid wMaxPacketSize 0 [ 356.591864][ T48] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 356.614696][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.626838][ T48] usb 1-1: Product: syz [ 356.640096][ T48] usb 1-1: Manufacturer: syz [ 356.649079][ T48] usb 1-1: SerialNumber: syz [ 356.666857][ T48] usb 1-1: config 0 descriptor?? [ 356.692145][ T30] audit: type=1326 audit(1745485719.388:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12532 comm="syz.3.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5792f8e969 code=0x7ffc0000 [ 356.777372][ T30] audit: type=1326 audit(1745485719.388:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12532 comm="syz.3.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5792f8e969 code=0x7ffc0000 [ 356.810310][ T30] audit: type=1326 audit(1745485719.428:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12532 comm="syz.3.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f5792f8e969 code=0x7ffc0000 [ 356.832999][ T30] audit: type=1326 audit(1745485719.428:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12532 comm="syz.3.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5792f8e969 code=0x7ffc0000 [ 356.859954][ T30] audit: type=1326 audit(1745485719.428:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12532 comm="syz.3.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5792f8e969 code=0x7ffc0000 [ 356.918411][ T48] usb 1-1: ucan: probing device on interface #0 [ 356.926477][ T48] usb 1-1: ucan: invalid endpoint configuration [ 356.932777][ T48] usb 1-1: ucan: probe failed; try to update the device firmware [ 356.968318][ T48] usb 1-1: USB disconnect, device number 7 [ 357.074761][ T5880] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 357.177943][T12549] program syz.2.3188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 357.234651][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 357.249347][ T5880] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 357.272125][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.293332][ T5880] usb 2-1: Product: syz [ 357.305811][ T5880] usb 2-1: Manufacturer: syz [ 357.310484][ T5880] usb 2-1: SerialNumber: syz [ 357.324710][ T30] audit: type=1326 audit(1745485720.028:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12554 comm="syz.2.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ef18e969 code=0x7ffc0000 [ 357.355747][ T5880] usb 2-1: config 0 descriptor?? [ 357.375742][ T5880] as10x_usb: device has been detected [ 357.386217][ T5880] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 357.404746][ T30] audit: type=1326 audit(1745485720.028:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12554 comm="syz.2.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ef18e969 code=0x7ffc0000 [ 357.458525][ T5880] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 357.468648][ T30] audit: type=1326 audit(1745485720.028:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12554 comm="syz.2.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f89ef18e969 code=0x7ffc0000 [ 357.503749][ T5880] as10x_usb: error during firmware upload part1 [ 357.524796][ T5880] Registered device Sky IT Digital Key (green led) [ 357.547217][ T30] audit: type=1326 audit(1745485720.028:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12554 comm="syz.2.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ef18e969 code=0x7ffc0000 [ 357.632875][T12537] random: crng reseeded on system resumption [ 357.664624][ T30] audit: type=1326 audit(1745485720.028:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12554 comm="syz.2.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ef18e969 code=0x7ffc0000 [ 358.042820][ T5880] usb 2-1: USB disconnect, device number 5 [ 358.068527][ T5880] Unregistered device Sky IT Digital Key (green led) [ 358.070249][ T5880] as10x_usb: device has been disconnected [ 358.194772][T12589] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3208'. [ 358.408598][T12601] sctp: [Deprecated]: syz.0.3214 (pid 12601) Use of int in maxseg socket option. [ 358.408598][T12601] Use struct sctp_assoc_value instead [ 358.444727][T12599] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3213'. [ 358.461588][T12599] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3213'. [ 358.487146][T12599] netlink: 'syz.3.3213': attribute type 3 has an invalid length. [ 358.509309][T12599] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3213'. [ 358.593194][T12610] netlink: 448 bytes leftover after parsing attributes in process `syz.2.3219'. [ 359.101309][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3231'. [ 359.128185][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3231'. [ 359.167983][T12637] dlm: no locking on control device [ 359.285503][ T5940] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 359.313819][T12648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3238'. [ 359.444824][ T5940] usb 5-1: Using ep0 maxpacket: 16 [ 359.454040][ T5940] usb 5-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30 [ 359.478484][ T5940] usb 5-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 359.519495][ T5940] usb 5-1: config 0 interface 0 has no altsetting 0 [ 359.531330][ T5940] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 359.552315][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.567021][ T5940] usb 5-1: Product: syz [ 359.588598][ T5940] usb 5-1: Manufacturer: syz [ 359.604037][T12661] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 359.614134][ T5940] usb 5-1: SerialNumber: syz [ 359.635821][ T5940] usb 5-1: config 0 descriptor?? [ 359.650352][ T5940] usb 5-1: cannot find UAC_HEADER [ 359.723459][ T5940] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 359.796303][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 359.819027][T12672] netlink: 'syz.0.3250': attribute type 21 has an invalid length. [ 359.838594][T12673] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 359.889223][ T48] usb 5-1: USB disconnect, device number 3 [ 360.300866][T12696] program syz.3.3261 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 360.619792][T12715] netlink: 'syz.2.3270': attribute type 3 has an invalid length. [ 360.643391][T12715] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3270'. [ 361.014132][T12735] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 361.168719][T12745] netlink: 'syz.4.3284': attribute type 11 has an invalid length. [ 361.344945][ T48] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 361.413260][T12756] netlink: 'syz.3.3289': attribute type 6 has an invalid length. [ 361.442298][T12756] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3289'. [ 361.468500][T12758] netlink: 'syz.4.3290': attribute type 6 has an invalid length. [ 361.515697][T12758] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3290'. [ 361.534336][ T48] usb 3-1: config 0 has an invalid interface number: 207 but max is 0 [ 361.553366][ T48] usb 3-1: config 0 has no interface number 0 [ 361.572360][ T48] usb 3-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 361.592064][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.613665][ T48] usb 3-1: Product: syz [ 361.634709][ T48] usb 3-1: Manufacturer: syz [ 361.639464][ T48] usb 3-1: SerialNumber: syz [ 361.680728][ T48] usb 3-1: config 0 descriptor?? [ 361.692094][ T48] qmi_wwan 3-1:0.207: bogus CDC Union: master=0, slave=1 [ 361.705036][T12766] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3295'. [ 361.908251][ T48] qmi_wwan 3-1:0.207: probe with driver qmi_wwan failed with error -22 [ 362.073874][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 362.073896][ T30] audit: type=1326 audit(1745485724.778:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12780 comm="syz.4.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6dc58e969 code=0x7ffc0000 [ 362.129813][ T24] usb 3-1: USB disconnect, device number 10 [ 362.159033][ T30] audit: type=1326 audit(1745485724.808:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12780 comm="syz.4.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6dc58e969 code=0x7ffc0000 [ 362.249064][ T30] audit: type=1326 audit(1745485724.818:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12780 comm="syz.4.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fb6dc58e969 code=0x7ffc0000 [ 362.313991][ T30] audit: type=1326 audit(1745485724.828:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12780 comm="syz.4.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6dc58e969 code=0x7ffc0000 [ 362.389963][ T30] audit: type=1326 audit(1745485724.828:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12780 comm="syz.4.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6dc58e969 code=0x7ffc0000 [ 362.710105][T12804] program syz.0.3312 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 362.970515][T12817] xt_l2tp: v2 sid > 0xffff: 262144 [ 363.186244][T12830] netlink: 'syz.2.3325': attribute type 25 has an invalid length. [ 363.194249][T12830] netlink: 'syz.2.3325': attribute type 28 has an invalid length. [ 363.859683][T12866] netlink: 'syz.3.3341': attribute type 21 has an invalid length. [ 363.890396][T12866] netlink: 'syz.3.3341': attribute type 20 has an invalid length. [ 363.910271][T12866] IPv6: NLM_F_CREATE should be specified when creating new route [ 363.924635][ T30] audit: type=1400 audit(1745485726.628:62): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=12867 comm="syz.1.3344" [ 364.033347][T12874] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3347'. [ 364.112464][T12878] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 364.467736][T12899] delete_channel: no stack [ 364.574723][ T5891] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 364.598582][T12904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3362'. [ 364.739254][ T5891] usb 3-1: Using ep0 maxpacket: 8 [ 364.746404][ T5891] usb 3-1: config 0 has an invalid interface number: 201 but max is 0 [ 364.774988][ T5891] usb 3-1: config 0 has no interface number 0 [ 364.785558][ T5891] usb 3-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=f8.a5 [ 364.795635][ T5843] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 364.810813][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.831221][ T5891] usb 3-1: Product: syz [ 364.853233][ T5891] usb 3-1: Manufacturer: syz [ 364.875154][ T5891] usb 3-1: SerialNumber: syz [ 364.913126][ T5891] usb 3-1: config 0 descriptor?? [ 364.947300][ T5891] gspca_main: spca501-2.14.0 probing 040a:0002 [ 365.350209][ T5891] gspca_spca501: reg write: error -71 [ 365.374645][ T5891] spca501 3-1:0.201: Reg write failed for 0x00,0x02,0x01 [ 365.390426][ T5891] spca501 3-1:0.201: probe with driver spca501 failed with error -22 [ 365.412163][ T5891] usb 3-1: USB disconnect, device number 11 [ 365.869692][T12946] capability: warning: `syz.3.3383' uses deprecated v2 capabilities in a way that may be insecure [ 367.678073][T13005] ip6erspan0: entered promiscuous mode [ 368.440128][T13036] xt_cluster: you have exceeded the maximum number of cluster nodes (2147483648 > 32) [ 368.517112][T13040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3427'. [ 369.024671][T13068] program syz.3.3441 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 370.275031][T13135] ip6tnl2: entered promiscuous mode [ 370.672251][T13155] ipvlan0: entered promiscuous mode [ 370.688480][T13155] ipvlan0: entered allmulticast mode [ 370.697325][T13155] veth0_vlan: entered allmulticast mode [ 370.986064][T13166] usb usb8: usbfs: process 13166 (syz.0.3489) did not claim interface 0 before use [ 371.081203][T13169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.754707][ T48] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 371.824845][ T5880] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 371.925672][ T48] usb 5-1: Using ep0 maxpacket: 32 [ 371.974927][ T48] usb 5-1: config 0 interface 0 has no altsetting 0 [ 371.990659][ T48] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 372.043136][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.051898][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 372.061620][T13216] xt_CT: You must specify a L4 protocol and not use inversions on it [ 372.079918][ T48] usb 5-1: Product: syz [ 372.096135][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9986, setting to 1024 [ 372.107522][ T48] usb 5-1: Manufacturer: syz [ 372.112150][ T48] usb 5-1: SerialNumber: syz [ 372.123647][ T5880] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 372.144666][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.155736][ T48] usb 5-1: config 0 descriptor?? [ 372.167101][ T5880] usb 2-1: Product: syz [ 372.173403][ T5880] usb 2-1: Manufacturer: syz [ 372.178765][ T5880] usb 2-1: SerialNumber: syz [ 372.194366][ T5880] usb 2-1: config 0 descriptor?? [ 372.203106][T13199] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 372.223440][ T5880] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 372.242566][ T5880] usb 2-1: No valid video chain found. [ 372.343611][T13228] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3517'. [ 372.373765][T13228] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3517'. [ 372.451136][ T5880] usb 2-1: USB disconnect, device number 6 [ 372.574241][ T48] gs_usb 5-1:0.0: Couldn't get device config: (err=-71) [ 372.584467][ T48] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 372.612613][ T48] usb 5-1: USB disconnect, device number 4 [ 373.024633][ T5880] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 373.040215][ T30] audit: type=1326 audit(1745485735.748:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13261 comm="syz.1.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9a18e969 code=0x7ffc0000 [ 373.062553][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.077934][ T30] audit: type=1326 audit(1745485735.768:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13261 comm="syz.1.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f4c9a18e969 code=0x7ffc0000 [ 373.100217][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.109284][T13264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.121207][ T30] audit: type=1326 audit(1745485735.768:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13261 comm="syz.1.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9a18e969 code=0x7ffc0000 [ 373.151811][ T979] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 373.181069][ T30] audit: type=1326 audit(1745485735.768:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13261 comm="syz.1.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9a18e969 code=0x7ffc0000 [ 373.245655][ T5880] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 373.264853][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.281199][ T5880] usb 1-1: config 0 descriptor?? [ 373.302741][ T5880] cp210x 1-1:0.0: cp210x converter detected [ 373.314974][ T979] usb 4-1: Using ep0 maxpacket: 32 [ 373.330416][ T979] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 373.341258][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.365969][ T979] usb 4-1: Product: syz [ 373.374410][ T979] usb 4-1: Manufacturer: syz [ 373.384047][ T979] usb 4-1: SerialNumber: syz [ 373.402626][ T979] usb 4-1: config 0 descriptor?? [ 373.422192][ T979] hub 4-1:0.0: bad descriptor, ignoring hub [ 373.436578][ T979] hub 4-1:0.0: probe with driver hub failed with error -5 [ 373.469182][ T979] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 373.519330][ T5880] usb 1-1: cp210x converter now attached to ttyUSB0 [ 373.575750][T13276] netlink: 'syz.2.3541': attribute type 2 has an invalid length. [ 373.725402][ T5880] usb 1-1: USB disconnect, device number 8 [ 373.759326][ T5880] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 373.786851][ T5880] cp210x 1-1:0.0: device disconnected [ 373.830265][ T979] gspca_vc032x: reg_w err -71 [ 373.848077][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.863698][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.877152][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.882554][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.908892][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.914281][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.926325][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.934740][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.942304][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.948303][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.954933][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.960786][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.966839][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.972438][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.978357][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.983722][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.989548][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.996039][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 374.001463][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 374.007153][ T979] gspca_vc032x: Unknown sensor... [ 374.012394][ T979] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 374.055645][ T979] usb 4-1: USB disconnect, device number 10 [ 374.854839][T13329] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3567'. [ 374.890334][T13329] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3567'. [ 374.914601][T13329] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3567'. [ 375.334729][ T979] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 375.489034][ T979] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 375.504763][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.523275][ T979] usb 3-1: Product: syz [ 375.527875][ T5891] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 375.548849][ T979] usb 3-1: Manufacturer: syz [ 375.564619][ T979] usb 3-1: SerialNumber: syz [ 375.588276][ T979] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 375.608207][ T5890] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 375.706810][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 375.726158][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 375.738748][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 375.750607][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 375.775222][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 375.809931][ T5891] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 375.821886][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.834817][ T5891] usb 1-1: Product: syz [ 375.839576][ T5891] usb 1-1: Manufacturer: syz [ 375.870280][ T5891] usb 1-1: SerialNumber: syz [ 375.896480][ T5891] usb 1-1: config 0 descriptor?? [ 376.014572][ T5891] rc_core: IR keymap rc-imon-rsc not found [ 376.020655][ T5891] Registered IR keymap rc-empty [ 376.046966][ T5891] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 376.064918][ T5910] usb 3-1: USB disconnect, device number 12 [ 376.092257][ T5891] input: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input67 [ 376.121591][T13350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.145286][T13350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.182967][T13384] program syz.3.3594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 376.269504][ T5891] imon_raw 1-1:0.0: probe with driver imon_raw failed with error -90 [ 376.339473][ T5891] usb 1-1: USB disconnect, device number 9 [ 376.513037][T13397] netlink: 'syz.1.3599': attribute type 5 has an invalid length. [ 376.648227][ T5890] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 376.677353][ T5890] ath9k_htc: Failed to initialize the device [ 376.698021][ T5910] usb 3-1: ath9k_htc: USB layer deinitialized [ 377.275091][T13439] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 377.530008][T13454] netlink: 'syz.0.3626': attribute type 8 has an invalid length. [ 377.674366][ T30] audit: type=1326 audit(1745485740.378:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13464 comm="syz.1.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9a18e969 code=0x7ffc0000 [ 377.752055][ T30] audit: type=1326 audit(1745485740.418:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13464 comm="syz.1.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f4c9a18e969 code=0x7ffc0000 [ 377.822070][ T30] audit: type=1326 audit(1745485740.418:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13464 comm="syz.1.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9a18e969 code=0x7ffc0000 [ 377.922578][ T30] audit: type=1326 audit(1745485740.418:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13464 comm="syz.1.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9a18e969 code=0x7ffc0000 [ 378.008384][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3639'. [ 378.026845][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3639'. [ 378.334953][T13503] program syz.4.3651 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 378.578591][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.585210][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.512128][T13577] netlink: 23 bytes leftover after parsing attributes in process `syz.3.3686'. [ 379.539793][ T5910] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 379.552493][T13577] caif0: entered allmulticast mode [ 379.634595][ T979] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 379.682178][T13586] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 379.734823][ T5910] usb 2-1: Using ep0 maxpacket: 8 [ 379.761200][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.789248][ T5910] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 379.804581][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.809119][ T979] usb 1-1: Using ep0 maxpacket: 16 [ 379.812615][ T5910] usb 2-1: Product: syz [ 379.825482][T13590] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3694'. [ 379.833127][ T979] usb 1-1: unable to get BOS descriptor or descriptor too short [ 379.838657][ T5910] usb 2-1: Manufacturer: syz [ 379.850348][ T5910] usb 2-1: SerialNumber: syz [ 379.855053][ T979] usb 1-1: config 1 has an invalid interface number: 160 but max is 0 [ 379.855084][ T979] usb 1-1: config 1 has no interface number 0 [ 379.855117][ T979] usb 1-1: config 1 interface 160 has no altsetting 0 [ 379.858971][ T979] usb 1-1: New USB device found, idVendor=0c88, idProduct=0021, bcdDevice=19.47 [ 379.895807][ T5910] usb 2-1: config 0 descriptor?? [ 379.910305][ T5910] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 379.918708][ T5910] usb 2-1: selecting invalid altsetting 1 [ 379.952426][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.973395][ T979] usb 1-1: Product: syz [ 379.982211][ T979] usb 1-1: Manufacturer: syz [ 379.992611][ T979] usb 1-1: SerialNumber: syz [ 380.003424][T13598] netlink: 'syz.3.3697': attribute type 1 has an invalid length. [ 380.248682][ T979] usb 1-1: palm_os_4_probe - error -71 getting connection info [ 380.264805][T13611] usb usb8: usbfs: process 13611 (syz.3.3703) did not claim interface 0 before use [ 380.265995][ T979] visor 1-1:1.160: Handspring Visor / Palm OS converter detected [ 380.280946][T13610] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 380.318746][ T979] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 380.331857][ T24] usb 2-1: USB disconnect, device number 7 [ 380.361847][ T979] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 380.402391][ T979] usb 1-1: USB disconnect, device number 10 [ 380.412670][ T979] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 380.447809][ T979] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 380.490160][ T979] visor 1-1:1.160: device disconnected [ 380.511124][T13233] udevd[13233]: setting mode of /dev/bus/usb/001/010 to 020664 failed: No such file or directory [ 380.532064][T13617] netlink: 'syz.3.3705': attribute type 2 has an invalid length. [ 380.544906][T13233] udevd[13233]: setting owner of /dev/bus/usb/001/010 to uid=0, gid=0 failed: No such file or directory [ 380.574091][T13619] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3707'. [ 380.968371][T13639] IPv6: NLM_F_CREATE should be specified when creating new route [ 381.074732][ T979] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 381.129733][T13648] xt_cgroup: path and classid specified [ 381.161598][T13651] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 381.162886][T13650] xfrm0: entered promiscuous mode [ 381.202791][T13650] xfrm0: entered allmulticast mode [ 381.234793][ T979] usb 3-1: Using ep0 maxpacket: 8 [ 381.247750][ T979] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 381.256554][ T979] usb 3-1: config 6 has no interface number 0 [ 381.262738][ T979] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 381.287665][ T979] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 381.288174][T13655] netlink: 'syz.1.3725': attribute type 39 has an invalid length. [ 381.319744][ T979] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 381.350928][T13659] netlink: 'syz.0.3727': attribute type 1 has an invalid length. [ 381.369392][ T979] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 381.398336][ T979] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 381.408107][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.425103][ T979] usb 3-1: Product: syz [ 381.444636][ T979] usb 3-1: Manufacturer: syz [ 381.450364][ T979] usb 3-1: SerialNumber: syz [ 381.491301][ T979] hso 3-1:6.2: Failed to find BULK IN ep [ 381.724053][ T979] usb 3-1: USB disconnect, device number 13 [ 381.930882][T13686] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3741'. [ 381.983790][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3741'. [ 382.326672][T13707] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3751'. [ 382.964634][T13750] kAFS: unable to lookup cell '' [ 383.010139][T13753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3774'. [ 383.299747][T13771] netlink: 'syz.3.3782': attribute type 4 has an invalid length. [ 383.307815][T13771] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3782'. [ 383.333350][T13771] : renamed from bond0 (while UP) [ 383.396349][T13773] No such timeout policy "syz0" [ 383.526094][T13781] QAT: Stopping all acceleration devices. [ 384.304762][ T979] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 384.477689][ T979] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.499079][ T979] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 384.524579][ T979] usb 4-1: config 1 has no interface number 1 [ 384.544758][ T979] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 384.597904][ T979] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 384.615912][ T979] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 384.628445][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.645962][ T979] usb 4-1: Product: syz [ 384.650233][ T979] usb 4-1: Manufacturer: syz [ 384.667417][ T979] usb 4-1: SerialNumber: syz [ 384.692354][T13810] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 384.700362][T13839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3814'. [ 384.945457][ T979] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 384.953565][ T979] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 385.083684][ T979] usb 4-1: USB disconnect, device number 11 [ 385.113316][ T30] audit: type=1326 audit(1745485747.818:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13858 comm="syz.1.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9a18e969 code=0x7ffc0000 [ 385.216009][ T30] audit: type=1326 audit(1745485747.848:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13858 comm="syz.1.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9a18e969 code=0x7ffc0000 [ 385.240019][ T30] audit: type=1326 audit(1745485747.868:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13858 comm="syz.1.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f4c9a18e969 code=0x7ffc0000 [ 385.263625][ T30] audit: type=1326 audit(1745485747.868:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13858 comm="syz.1.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9a18e969 code=0x7ffc0000 [ 385.291242][ T30] audit: type=1326 audit(1745485747.868:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13858 comm="syz.1.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9a18e969 code=0x7ffc0000 [ 385.313556][ C0] vkms_vblank_simulate: vblank timer overrun [ 385.377334][T13609] udevd[13609]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 386.105855][T13912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3851'. [ 386.138215][T13909] veth0_macvtap: left promiscuous mode [ 386.526766][T13933] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3861'. [ 386.945011][ T5880] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 386.982317][T13962] delete_channel: no stack [ 387.112622][ T5880] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 387.131321][ T5880] usb 4-1: config 0 has no interface number 0 [ 387.165180][ T5880] usb 4-1: config 0 interface 29 has no altsetting 0 [ 387.183911][ T5880] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 387.203766][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.223849][ T5880] usb 4-1: Product: syz [ 387.229577][ T5880] usb 4-1: Manufacturer: syz [ 387.234226][ T5880] usb 4-1: SerialNumber: syz [ 387.262617][ T5880] usb 4-1: config 0 descriptor?? [ 387.434748][T13984] delete_channel: no stack [ 387.512274][ T5880] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v17 fw v81.0.0 (2 channels) [ 387.715997][ T5880] peak_usb 4-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 387.745404][ T5880] peak_usb 4-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 387.846713][ T5880] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -71 [ 387.862384][T14007] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3899'. [ 387.893374][ T5880] usb 4-1: USB disconnect, device number 12 [ 388.615440][T14048] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 388.637843][T14050] delete_channel: no stack [ 388.770027][T14059] netlink: 'syz.3.3922': attribute type 2 has an invalid length. [ 388.874886][ T979] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 389.032485][T14072] netlink: set zone limit has 8 unknown bytes [ 389.048580][ T979] usb 5-1: Using ep0 maxpacket: 8 [ 389.068873][ T979] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 389.084656][ T979] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.104568][ T979] usb 5-1: config 0 has no interface number 0 [ 389.111895][ T979] usb 5-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 389.124853][ T979] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 389.157883][ T979] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 389.193146][ T979] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 389.219884][ T979] usb 5-1: config 0 interface 52 has no altsetting 0 [ 389.227216][ T979] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 389.237628][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.249266][ T979] usb 5-1: config 0 descriptor?? [ 389.257691][T14081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3933'. [ 389.498765][ T979] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input70 [ 389.770036][ T5880] usb 5-1: USB disconnect, device number 5 [ 389.776391][ T5197] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 390.093376][T14112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3949'. [ 390.289954][T14122] xt_TCPMSS: Only works on TCP SYN packets [ 390.610416][T14141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3961'. [ 390.644373][T14141] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3961'. [ 390.731731][T14147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3965'. [ 391.024950][T14167] ip6t_rpfilter: unknown options [ 391.175959][T14174] misc userio: No port type given on /dev/userio [ 391.414941][T14189] netlink: 'syz.1.3986': attribute type 10 has an invalid length. [ 391.477281][T14189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.502493][T14189] team0: Port device batadv0 added [ 391.736808][T14209] openvswitch: netlink: Message has 3 unknown bytes. [ 391.747468][T14209] openvswitch: netlink: Actions may not be safe on all matching packets [ 392.349720][T14236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4008'. [ 392.394889][T14236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4008'. [ 392.751555][T14256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4018'. [ 392.760661][T14257] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4016'. [ 392.916849][T14264] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4022'. [ 393.475673][T14287] veth1_macvtap: left promiscuous mode [ 394.037232][T14314] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4045'. [ 394.051186][T14315] netlink: 'syz.4.4044': attribute type 4 has an invalid length. [ 394.079745][T14315] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4044'. [ 394.138745][T14315] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 394.736250][T14339] xt_TCPMSS: Only works on TCP SYN packets [ 395.632335][T14371] netlink: 'syz.4.4076': attribute type 3 has an invalid length. [ 395.673408][T14371] netlink: 'syz.4.4076': attribute type 3 has an invalid length. [ 395.703437][T14371] netlink: 'syz.4.4076': attribute type 3 has an invalid length. [ 395.711791][T14371] netlink: 'syz.4.4076': attribute type 3 has an invalid length. [ 395.724705][T14371] netlink: 'syz.4.4076': attribute type 3 has an invalid length. [ 395.732756][T14371] netlink: 'syz.4.4076': attribute type 3 has an invalid length. [ 395.766175][T14371] netlink: 'syz.4.4076': attribute type 3 has an invalid length. [ 395.774649][T14371] netlink: 'syz.4.4076': attribute type 3 has an invalid length. [ 395.814639][T14371] netlink: 'syz.4.4076': attribute type 3 has an invalid length. [ 395.889285][T14385] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 396.344297][T14405] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4091'. [ 396.384723][T14409] program syz.3.4092 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 396.424716][ T5880] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 396.588110][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 396.606272][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 396.622211][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 396.654673][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 396.694877][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 396.717078][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 396.796521][ T5880] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 396.818164][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.818259][T14425] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 396.830814][ T5880] usb 2-1: Product: syz [ 396.854137][ T5880] usb 2-1: Manufacturer: syz [ 396.870267][ T5880] usb 2-1: SerialNumber: syz [ 396.898932][ T5880] usb 2-1: config 0 descriptor?? [ 397.069974][T14435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4106'. [ 397.153454][ T5880] appledisplay: Apple Cinema Display connected [ 397.403192][ T5880] usb 2-1: USB disconnect, device number 8 [ 397.409404][ C1] usb 2-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 397.451727][ T5880] appledisplay: Apple Cinema Display disconnected [ 398.144881][ T979] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 398.310203][T14502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4140'. [ 398.315063][T14505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4141'. [ 398.336619][T14505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4141'. [ 398.355578][ T979] usb 1-1: Using ep0 maxpacket: 16 [ 398.362890][ T979] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 398.371466][ T979] usb 1-1: config 0 has no interface number 0 [ 398.381198][T14505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4141'. [ 398.394887][ T979] usb 1-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 398.413172][ T979] usb 1-1: config 0 interface 49 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 398.425594][ T979] usb 1-1: config 0 interface 49 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 398.447688][ T979] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 398.464595][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.472661][ T979] usb 1-1: Product: syz [ 398.494708][ T979] usb 1-1: Manufacturer: syz [ 398.515299][ T979] usb 1-1: SerialNumber: syz [ 398.537305][ T979] usb 1-1: config 0 descriptor?? [ 398.545956][T14511] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4144'. [ 398.560237][T14478] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 398.788527][ T979] usb 1-1: USB disconnect, device number 11 [ 399.559678][T14565] bridge0: port 3(veth0_to_bridge) entered blocking state [ 399.569244][ T30] audit: type=1326 audit(1745485762.278:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14568 comm="syz.4.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6dc58e969 code=0x7ffc0000 [ 399.594728][T14565] bridge0: port 3(veth0_to_bridge) entered disabled state [ 399.617999][T14565] veth0_to_bridge: entered allmulticast mode [ 399.640722][ T30] audit: type=1326 audit(1745485762.318:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14568 comm="syz.4.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fb6dc58e969 code=0x7ffc0000 [ 399.663182][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.675438][T14565] veth0_to_bridge: entered promiscuous mode [ 399.681625][T14565] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 399.712989][ T30] audit: type=1326 audit(1745485762.318:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14568 comm="syz.4.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6dc58e969 code=0x7ffc0000 [ 399.767176][T14565] bridge0: port 3(veth0_to_bridge) entered blocking state [ 399.774804][T14565] bridge0: port 3(veth0_to_bridge) entered listening state [ 399.794066][ T30] audit: type=1326 audit(1745485762.318:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14568 comm="syz.4.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6dc58e969 code=0x7ffc0000 [ 399.816395][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.845607][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 399.859356][ C1] bridge0: port 3(veth0_to_bridge) entered blocking state [ 400.007968][T14587] 8021q: VLANs not supported on lo [ 400.115859][T14593] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4184'. [ 400.444816][ T979] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 400.562862][T14619] xt_TCPMSS: Only works on TCP SYN packets [ 400.604988][ T979] usb 4-1: Using ep0 maxpacket: 16 [ 400.622246][ T979] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.633130][ T979] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 400.661059][ T979] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 400.683721][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.701514][ T979] usb 4-1: Product: syz [ 400.708511][ T979] usb 4-1: Manufacturer: syz [ 400.713184][ T979] usb 4-1: SerialNumber: syz [ 400.848452][T14635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4205'. [ 400.865077][T14635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4205'. [ 401.154852][ T979] usb 4-1: cannot find UAC_HEADER [ 401.218349][ T979] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 401.239597][ T979] usb 4-1: USB disconnect, device number 13 [ 401.296129][T14658] program syz.2.4216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 401.370978][T14662] dlm: Unknown command passed to DLM device : 16 [ 401.370978][T14662] [ 401.430079][T14666] validate_nla: 44 callbacks suppressed [ 401.430105][T14666] netlink: 'syz.2.4220': attribute type 10 has an invalid length. [ 401.447641][T14394] udevd[14394]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 401.497402][T14666] veth0_vlan: left promiscuous mode [ 401.514133][T14666] veth0_vlan: entered promiscuous mode [ 401.527946][T14666] team0: Device veth0_vlan failed to register rx_handler [ 401.635423][ T5880] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 401.822041][ T5880] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 401.852547][ T5880] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 401.890322][ T5880] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 401.912488][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.942088][T14664] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 401.969397][ T5880] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 401.980555][T14690] IPv6: sit1: Disabled Multicast RS [ 402.242728][ T24] usb 1-1: USB disconnect, device number 12 [ 402.445040][T14710] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4240'. [ 402.631562][T14719] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4247'. [ 402.808549][T14728] ipt_REJECT: ECHOREPLY no longer supported. [ 403.363764][T14761] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 403.404781][ T5880] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 403.594319][ T5880] usb 1-1: unable to get BOS descriptor or descriptor too short [ 403.616789][ T5880] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 403.642356][ T5880] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 403.673133][ T5880] usb 1-1: config 1 interface 0 has no altsetting 1 [ 403.704348][ T5880] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 403.723624][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.731875][ T5880] usb 1-1: Product: syz [ 403.737829][ T5880] usb 1-1: Manufacturer: syz [ 403.742481][ T5880] usb 1-1: SerialNumber: syz [ 403.762656][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 403.792410][ T5880] smsusb:smsusb_probe: board id=8, interface number 0 [ 403.932222][ T24] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 403.952477][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.974568][ T24] usb 2-1: Product: syz [ 403.984749][ T24] usb 2-1: Manufacturer: syz [ 403.994596][ T24] usb 2-1: SerialNumber: syz [ 404.004917][ T5880] smsusb:smsusb_probe: Device initialized with return code -19 [ 404.021221][ T24] usb 2-1: config 0 descriptor?? [ 404.238969][ T5891] usb 1-1: USB disconnect, device number 13 [ 404.261179][ T24] hso 2-1:0.0: Failed to find INT IN ep [ 404.280415][T14804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4288'. [ 404.288175][ T24] usb-storage 2-1:0.0: USB Mass Storage device detected [ 404.360017][T14810] netlink: 'syz.2.4289': attribute type 8 has an invalid length. [ 404.372848][ T30] audit: type=1326 audit(1745485767.078:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.3.4290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5792f8e969 code=0x7ffc0000 [ 404.395318][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.423181][ T30] audit: type=1326 audit(1745485767.098:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.3.4290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5792f8e969 code=0x7ffc0000 [ 404.445500][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.461972][ T30] audit: type=1326 audit(1745485767.108:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.3.4290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f5792f8e969 code=0x7ffc0000 [ 404.489450][ T30] audit: type=1326 audit(1745485767.108:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.3.4290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5792f8e969 code=0x7ffc0000 [ 404.505126][ T24] usb 2-1: USB disconnect, device number 9 [ 404.511738][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.546897][ T30] audit: type=1326 audit(1745485767.108:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.3.4290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5792f8e969 code=0x7ffc0000 [ 404.945037][T14838] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 405.312266][T14858] netlink: 'syz.0.4313': attribute type 1 has an invalid length. [ 406.139005][T14912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4340'. [ 406.389902][T14927] xt_hashlimit: max too large, truncated to 1048576 [ 406.556308][ T5891] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 406.614553][T14939] netlink: 45 bytes leftover after parsing attributes in process `syz.0.4353'. [ 406.735271][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 406.746599][ T5891] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.768388][ T5891] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.796532][ T5891] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 406.815550][ T5891] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 406.847698][ T5891] usb 4-1: Product: syz [ 406.858954][ T5891] usb 4-1: Manufacturer: syz [ 406.886823][ T5891] hub 4-1:4.0: USB hub found [ 406.897744][T14953] QAT: Invalid ioctl 21531 [ 407.115943][ T5891] hub 4-1:4.0: 6 ports detected [ 407.129813][ T5891] hub 4-1:4.0: insufficient power available to use all downstream ports [ 407.312376][ T5891] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 407.332721][ T5891] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 407.385383][ T5891] usb 4-1: USB disconnect, device number 14 [ 408.100580][T15019] xt_connbytes: Forcing CT accounting to be enabled [ 408.207817][T15026] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 408.215703][T15026] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 408.243879][T15026] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 408.643700][T15052] SET target dimension over the limit! [ 409.232861][T15087] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4426'. [ 409.265775][T15087] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4426'. [ 409.347315][T15093] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4429'. [ 409.436378][T15098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4431'. [ 409.492364][T15103] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4433'. [ 409.616494][T15109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4437'. [ 410.093478][T15138] xt_TPROXY: Can be used only with -p tcp or -p udp [ 410.100171][T15135] ALSA: mixer_oss: invalid OSS volume '' [ 410.100201][T15135] ALSA: mixer_oss: invalid OSS volume '+]OؓOGec9bx'ĮC' [ 410.100218][T15135] ALSA: mixer_oss: invalid OSS volume '_*[bYcq~lr=V' [ 410.257438][T15135] ALSA: mixer_oss: invalid OSS volume '+ͿnU<$^EKʘr+' [ 410.265892][T15135] ALSA: mixer_oss: invalid OSS volume '+8iYJz' [ 410.292882][T15141] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4454'. [ 410.374827][T15148] PKCS8: Unsupported PKCS#8 version [ 410.712557][T15166] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4467'. [ 410.838173][T15174] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 411.135589][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 411.306422][ T24] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 411.324627][ T24] usb 5-1: config 0 has no interface number 0 [ 411.330966][ T24] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 411.354635][ T24] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 411.397532][ T24] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 411.412545][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.427207][ T24] usb 5-1: Product: syz [ 411.431456][ T24] usb 5-1: Manufacturer: syz [ 411.436688][ T24] usb 5-1: SerialNumber: syz [ 411.444237][ T24] usb 5-1: config 0 descriptor?? [ 411.486049][T15179] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 411.498724][ T24] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 411.535154][ T24] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 411.999384][ T979] usb 5-1: USB disconnect, device number 6 [ 412.028301][ T979] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 412.079505][ T979] cyberjack 5-1:0.69: device disconnected [ 412.287521][T15250] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 412.401864][T15257] netlink: 'syz.0.4511': attribute type 46 has an invalid length. [ 412.434611][T15257] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4511'. [ 412.804848][ T5890] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 412.977498][ T5890] usb 4-1: config 0 interface 0 altsetting 3 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 413.010292][ T5890] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 413.050875][ T5890] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x8F has invalid wMaxPacketSize 0 [ 413.083911][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0 [ 413.107745][ T5890] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.08 [ 413.117145][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.133822][ T5890] usb 4-1: Product: syz [ 413.138288][ T5890] usb 4-1: Manufacturer: syz [ 413.148416][ T5890] usb 4-1: SerialNumber: syz [ 413.173843][ T5890] usb 4-1: config 0 descriptor?? [ 413.284589][ T5910] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 413.309976][T15308] program syz.1.4537 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 413.383470][T15312] nvme_fabrics: unknown parameter or missing value '4+ g' in ctrl creation request [ 413.405172][ T5890] usbtest 4-1:0.0: Linux user mode ISO test driver [ 413.416847][ T5890] usbtest 4-1:0.0: high-speed {control iso-in} tests (+alt) [ 413.464917][T15315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4541'. [ 413.479856][T15315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4541'. [ 413.484601][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 413.511853][ T5910] usb 5-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 413.531765][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.545580][ T5910] usb 5-1: Product: syz [ 413.552019][ T5910] usb 5-1: Manufacturer: syz [ 413.561700][ T5910] usb 5-1: SerialNumber: syz [ 413.636601][ T5890] usb 4-1: USB disconnect, device number 15 [ 413.692699][T15324] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 15324 comm: syz.1.4545) [ 413.710344][ T30] audit: type=1800 audit(1745485776.418:85): pid=15324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4545" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=37107 res=0 errno=0 [ 413.784192][ T5910] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 413.799739][ T5910] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 413.820536][ T5910] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 414.016170][ T5890] usb 5-1: USB disconnect, device number 7 [ 414.039585][ T5890] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 414.067356][ T5890] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 414.084706][ T5910] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 414.091044][ T5890] visor 5-1:1.0: device disconnected [ 414.122712][T15340] netlink: 'syz.0.4553': attribute type 1 has an invalid length. [ 414.261753][ T5910] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 414.274295][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.287039][ T5910] usb 2-1: Product: syz [ 414.291254][ T5910] usb 2-1: Manufacturer: syz [ 414.296710][ T5910] usb 2-1: SerialNumber: syz [ 414.310583][ T5910] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 414.335046][ T5880] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 414.356356][ T5891] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 414.453891][T15350] __nla_validate_parse: 1 callbacks suppressed [ 414.453910][T15350] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4558'. [ 414.457933][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 414.463608][T15350] unsupported nla_type 65024 [ 414.524864][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 414.538388][ T5891] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 414.548028][ T5891] usb 3-1: config 0 has no interface number 0 [ 414.569801][T15352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4559'. [ 414.591761][ T5891] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 414.605612][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.626913][ T5891] usb 3-1: Product: syz [ 414.631152][ T5891] usb 3-1: Manufacturer: syz [ 414.644777][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 414.644934][ T5891] usb 3-1: SerialNumber: syz [ 414.662654][ T24] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 414.673112][ T5891] usb 3-1: config 0 descriptor?? [ 414.678750][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.688817][ T24] usb 4-1: Product: syz [ 414.696363][ T5891] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 414.703631][ T24] usb 4-1: Manufacturer: syz [ 414.713333][ T24] usb 4-1: SerialNumber: syz [ 414.727499][ T5891] usb 3-1: selecting invalid altsetting 1 [ 414.737594][ T5891] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 414.743559][ T24] usb 4-1: config 0 descriptor?? [ 414.757530][ T24] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 414.777690][ T5891] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 414.799421][ T5891] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 414.817664][ T1208] usb 2-1: USB disconnect, device number 10 [ 414.826907][ T5891] usb 3-1: media controller created [ 414.890661][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 414.965868][ T5891] usb 3-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 414.988345][ T5891] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 415.081091][ T5891] DVB: Unable to find symbol mxl5005s_attach() [ 415.182587][ T24] gspca_m5602: Failed to find a sensor [ 415.197144][ T5891] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 415.220798][ T24] ALi m5602 4-1:0.0: ALi m5602 webcam failed [ 415.244997][ T24] usb 4-1: USB disconnect, device number 16 [ 415.346576][ T5891] usb 3-1: USB disconnect, device number 14 [ 415.380375][ T5880] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 415.402727][ T5880] ath9k_htc: Failed to initialize the device [ 415.452530][ T1208] usb 2-1: ath9k_htc: USB layer deinitialized [ 415.502466][ T30] audit: type=1326 audit(1745485778.208:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15377 comm="syz.4.4571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6dc58e969 code=0x7ffc0000 [ 415.524868][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.574858][ T30] audit: type=1326 audit(1745485778.208:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15377 comm="syz.4.4571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6dc58e969 code=0x7ffc0000 [ 415.631781][ T30] audit: type=1326 audit(1745485778.248:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15377 comm="syz.4.4571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fb6dc58e969 code=0x7ffc0000 [ 415.671769][ T30] audit: type=1326 audit(1745485778.248:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15377 comm="syz.4.4571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6dc58e969 code=0x7ffc0000 [ 415.723184][ T30] audit: type=1326 audit(1745485778.248:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15377 comm="syz.4.4571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6dc58e969 code=0x7ffc0000 [ 415.758940][T15388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4576'. [ 415.822378][T15392] program syz.3.4578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 415.894582][ T5891] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 415.973833][T15398] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 416.064375][ T5891] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 416.098643][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.138262][ T5891] usb 5-1: config 0 descriptor?? [ 416.167525][ T5891] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 416.384592][ T1208] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 416.554718][ T1208] usb 4-1: Using ep0 maxpacket: 32 [ 416.566202][ T1208] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 416.583864][ T5891] gspca_stv06xx: I2C: Read error writing address: -71 [ 416.599877][ T1208] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 416.607559][ T5891] usb 5-1: USB disconnect, device number 8 [ 416.622432][ T1208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.630815][ T1208] usb 4-1: Product: syz [ 416.639922][ T1208] usb 4-1: Manufacturer: syz [ 416.655425][ T1208] usb 4-1: SerialNumber: syz [ 416.671333][ T1208] usb 4-1: config 0 descriptor?? [ 416.681166][T15410] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 416.685427][ T5890] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 416.715734][ T1208] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input72 [ 416.865348][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 416.886386][ T5890] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 416.914865][ T5890] usb 2-1: config 179 has no interface number 0 [ 416.940081][ T5890] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 416.960477][ T5890] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 416.979513][ T5890] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 416.991387][ T5890] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 417.008729][ T5890] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 417.023464][ T5890] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 417.038306][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.075867][T15425] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 417.130511][ T1208] usb 4-1: USB disconnect, device number 17 [ 417.136602][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 417.355983][T15425] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 417.362576][T15425] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 417.383611][T15425] vhci_hcd vhci_hcd.0: Device attached [ 417.399295][T15453] vhci_hcd: connection closed [ 417.402245][ T5890] usb 2-1: USB disconnect, device number 11 [ 417.402319][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 417.421258][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 417.447835][ T36] vhci_hcd: stop threads [ 417.456259][ T36] vhci_hcd: release socket [ 417.462156][ T36] vhci_hcd: disconnect device [ 417.785171][T15474] PKCS7: Unknown OID: [4] 0.0 [ 417.789920][T15474] PKCS7: Only support pkcs7_signedData type [ 418.094804][ T1208] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 418.266693][ T1208] usb 1-1: Using ep0 maxpacket: 32 [ 418.289108][ T1208] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.309482][ T1208] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.339376][ T1208] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 418.361200][ T1208] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 418.373492][ T1208] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 418.393444][ T1208] usb 1-1: Product: syz [ 418.398644][ T1208] usb 1-1: Manufacturer: syz [ 418.403776][ T1208] usb 1-1: SerialNumber: syz [ 418.424224][ T1208] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input73 [ 418.668512][ T1208] usb 1-1: USB disconnect, device number 14 [ 418.712454][ T1208] appletouch 1-1:1.0: input: appletouch disconnected [ 419.235920][T15553] autofs4:pid:15553:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 419.765437][T15581] netlink: 'syz.2.4669': attribute type 21 has an invalid length. [ 419.773360][T15581] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4669'. [ 419.834851][T15581] netlink: 'syz.2.4669': attribute type 4 has an invalid length. [ 419.861175][T15581] netlink: 'syz.2.4669': attribute type 3 has an invalid length. [ 419.894622][T15581] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4669'. [ 419.956969][T15593] libceph: resolve ' [ 419.956969][T15593] -&fYǝa2i [ 419.956969][T15593] .?&*&' (ret=-3): failed [ 420.403337][ T30] audit: type=1326 audit(1745485783.108:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15620 comm="syz.2.4687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ef18e969 code=0x7ffc0000 [ 420.493955][ T30] audit: type=1326 audit(1745485783.108:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15620 comm="syz.2.4687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ef18e969 code=0x7ffc0000 [ 420.531457][T15626] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4690'. [ 420.557501][ T30] audit: type=1326 audit(1745485783.168:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15620 comm="syz.2.4687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f89ef18e969 code=0x7ffc0000 [ 420.668465][ T30] audit: type=1326 audit(1745485783.168:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15620 comm="syz.2.4687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ef18e969 code=0x7ffc0000 [ 420.744658][ T30] audit: type=1326 audit(1745485783.168:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15620 comm="syz.2.4687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ef18e969 code=0x7ffc0000 [ 420.791711][ T30] audit: type=1326 audit(1745485783.408:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15629 comm="syz.0.4692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf3d8e969 code=0x7ffc0000 [ 420.847783][T15635] mmap: syz.2.4694 (15635): VmData 37457920 exceed data ulimit 1070. Update limits or use boot option ignore_rlimit_data. [ 420.862022][T15636] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4695'. [ 420.887568][ T30] audit: type=1326 audit(1745485783.408:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15629 comm="syz.0.4692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf3d8e969 code=0x7ffc0000 [ 421.004634][ T30] audit: type=1326 audit(1745485783.408:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15629 comm="syz.0.4692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fabf3d8e969 code=0x7ffc0000 [ 421.079668][ T30] audit: type=1326 audit(1745485783.408:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15629 comm="syz.0.4692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf3d8e969 code=0x7ffc0000 [ 421.102652][ T30] audit: type=1326 audit(1745485783.408:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15629 comm="syz.0.4692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf3d8e969 code=0x7ffc0000 [ 421.172057][T15646] program syz.2.4699 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 421.225861][T15646] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 421.354888][T15654] netlink: 'syz.1.4704': attribute type 1 has an invalid length. [ 421.824671][T15682] netlink: 'syz.3.4718': attribute type 30 has an invalid length. [ 421.885834][T15688] netlink: 'syz.2.4720': attribute type 11 has an invalid length. [ 423.087233][ T1208] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 423.249176][ T1208] usb 2-1: too many configurations: 239, using maximum allowed: 8 [ 423.275296][ T5880] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 423.288799][ T1208] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 423.310974][ T1208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.334637][ T1208] usb 2-1: Product: syz [ 423.338872][ T1208] usb 2-1: Manufacturer: syz [ 423.355254][ T1208] usb 2-1: SerialNumber: syz [ 423.380862][ T1208] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 423.405873][ T24] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 423.457187][ T5880] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 423.468339][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.505737][ T5880] usb 3-1: config 0 descriptor?? [ 423.752076][T15780] netlink: 'syz.4.4765': attribute type 5 has an invalid length. [ 423.864144][ T9] usb 2-1: USB disconnect, device number 12 [ 423.944893][ T5880] ath6kl: Failed to submit usb control message: -71 [ 423.954580][ T5880] ath6kl: unable to send the bmi data to the device: -71 [ 423.970823][ T5880] ath6kl: Unable to send get target info: -71 [ 423.985459][ T5880] ath6kl: Failed to init ath6kl core: -71 [ 424.001425][ T5880] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 424.041136][ T5880] usb 3-1: USB disconnect, device number 15 [ 424.109953][T15794] usb usb9: usbfs: process 15794 (syz.3.4771) did not claim interface 0 before use [ 424.242125][T15801] delete_channel: no stack [ 424.494635][ T24] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 424.501802][T15815] netlink: zone id is out of range [ 424.517348][ T24] ath9k_htc: Failed to initialize the device [ 424.524942][T15815] netlink: zone id is out of range [ 424.545452][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 425.097999][T15849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4798'. [ 426.013733][T15895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 426.494973][ T5891] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 426.555693][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 426.555713][ T30] audit: type=1326 audit(1745485789.258:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15929 comm="syz.3.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5792f8e969 code=0x7ffc0000 [ 426.623646][ T30] audit: type=1326 audit(1745485789.258:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15929 comm="syz.3.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5792f8e969 code=0x7ffc0000 [ 426.651316][ T30] audit: type=1326 audit(1745485789.268:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15929 comm="syz.3.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f5792f8e969 code=0x7ffc0000 [ 426.693072][ T30] audit: type=1326 audit(1745485789.268:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15929 comm="syz.3.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5792f8e969 code=0x7ffc0000 [ 426.744647][ T5891] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 426.754149][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.782724][ T5891] usb 1-1: Product: syz [ 426.792945][ T5891] usb 1-1: Manufacturer: syz [ 426.798568][ T5891] usb 1-1: SerialNumber: syz [ 426.818143][T15940] fuse: Invalid uid '00000000000000000003' [ 426.843784][ T5891] usb 1-1: config 0 descriptor?? [ 426.855368][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 426.866418][ T5891] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 427.027933][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 427.050265][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.090080][ T9] usb 3-1: config 0 descriptor?? [ 427.107393][ T9] gspca_main: spca508-2.14.0 probing 8086:0110 [ 427.199267][T15957] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4851'. [ 427.268211][ T5880] usb 1-1: USB disconnect, device number 15 [ 427.509741][ T9] gspca_spca508: reg_read err -71 [ 427.522996][ T9] gspca_spca508: reg_read err -71 [ 427.535026][ T9] gspca_spca508: reg_read err -71 [ 427.543750][ T9] gspca_spca508: reg_read err -71 [ 427.560910][ T9] gspca_spca508: reg write: error -71 [ 427.571494][ T9] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 427.597251][ T9] usb 3-1: USB disconnect, device number 16 [ 427.674321][T15979] fuse: Unknown parameter 'no' [ 427.874586][ T5890] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 428.051339][ T5890] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 428.076041][ T5890] usb 2-1: config 0 has no interface number 0 [ 428.103411][ T5890] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 428.140597][ T5890] usb 2-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 428.170041][ T5890] usb 2-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 428.185544][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.207251][ T5890] usb 2-1: Product: syz [ 428.224797][ T5890] usb 2-1: Manufacturer: syz [ 428.238684][ T5890] usb 2-1: SerialNumber: syz [ 428.257285][ T5890] usb 2-1: config 0 descriptor?? [ 428.280513][ T5890] vmk80xx 2-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 428.319269][ T5890] vmk80xx 2-1:0.255: probe with driver vmk80xx failed with error -22 [ 428.507946][ T5843] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 428.522711][ T9] usb 2-1: USB disconnect, device number 13 [ 428.865026][ T5890] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 429.034591][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 429.041636][ T5890] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 429.057772][ T5890] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 429.084582][ T5890] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 429.092779][ T5890] usb 5-1: Product: syz [ 429.110613][ T5890] usb 5-1: Manufacturer: syz [ 429.116403][ T5890] usb 5-1: SerialNumber: syz [ 429.156408][ T5880] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 429.339111][ T5890] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 429.347197][ T5880] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 429.362387][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.362441][ T5890] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 429.394788][ T5880] usb 1-1: Product: syz [ 429.398039][ T5890] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 429.398989][ T5880] usb 1-1: Manufacturer: syz [ 429.421315][ T5890] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 429.431592][ T5880] usb 1-1: SerialNumber: syz [ 429.466260][ T5880] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 429.509995][ T1208] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 429.546500][ T5890] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 429.577735][ T5890] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 429.619828][T16074] ip6tnl1: entered promiscuous mode [ 429.627293][ T5890] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 429.675246][ T5890] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 429.711822][ T5890] usb 5-1: USB disconnect, device number 9 [ 429.735282][ T5890] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 429.818850][ T5890] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 429.855233][ T5890] visor 5-1:1.0: device disconnected [ 430.110282][ T5880] usb 1-1: USB disconnect, device number 16 [ 430.222438][T16093] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4917'. [ 430.306105][T16098] netlink: 'syz.1.4920': attribute type 21 has an invalid length. [ 430.333307][T16098] IPv6: NLM_F_CREATE should be specified when creating new route [ 430.351564][T16098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 430.359284][T16098] IPv6: NLM_F_CREATE should be set when creating new route [ 430.366681][T16098] IPv6: NLM_F_CREATE should be set when creating new route [ 430.373940][T16098] IPv6: NLM_F_CREATE should be set when creating new route [ 430.566590][ T1208] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 430.573705][ T1208] ath9k_htc: Failed to initialize the device [ 430.610609][ T5880] usb 1-1: ath9k_htc: USB layer deinitialized [ 431.027164][T16137] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4939'. [ 431.984727][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 432.209325][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 432.226430][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 432.253604][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.276353][ T9] usb 5-1: Product: syz [ 432.280599][ T9] usb 5-1: Manufacturer: syz [ 432.310282][ T9] usb 5-1: SerialNumber: syz [ 432.330990][ T9] r8152-cfgselector 5-1: Unknown version 0x0000 [ 432.349557][ T9] r8152-cfgselector 5-1: config 0 descriptor?? [ 432.564685][ T5843] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 432.564803][ T5843] Bluetooth: hci3: Injecting HCI hardware error event [ 432.566122][ T5843] Bluetooth: hci3: hardware error 0x00 [ 432.807321][T16233] : renamed from dummy0 (while UP) [ 432.816528][ T1208] r8152-cfgselector 5-1: USB disconnect, device number 10 [ 433.378225][T16264] netlink: 'syz.3.5000': attribute type 2 has an invalid length. [ 433.764909][ T1208] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 433.816797][T16291] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5012'. [ 433.944750][ T1208] usb 2-1: Using ep0 maxpacket: 32 [ 433.952048][ T1208] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 433.961087][ T1208] usb 2-1: config 4 has no interface number 0 [ 433.975162][ T1208] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.024600][ T1208] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.050121][ T1208] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 434.073116][ T1208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.092644][ T1208] hub 2-1:4.128: USB hub found [ 434.271020][T16316] program syz.4.5026 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 434.310681][ T1208] hub 2-1:4.128: 2 ports detected [ 434.329222][ T1208] hub 2-1:4.128: Using single TT (err -22) [ 434.405093][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 434.514660][ T1208] hub 2-1:4.128: hub_hub_status failed (err = -71) [ 434.521256][ T1208] hub 2-1:4.128: config failed, can't get hub status (err -71) [ 434.567394][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 434.575942][ T1208] usb 2-1: USB disconnect, device number 14 [ 434.590098][ T9] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 434.608765][ T9] usb 3-1: config 0 has no interface number 0 [ 434.627379][ T9] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=92.f7 [ 434.646472][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.664643][ T9] usb 3-1: Product: syz [ 434.673571][ T9] usb 3-1: Manufacturer: syz [ 434.685854][ T9] usb 3-1: SerialNumber: syz [ 434.701981][ T9] usb 3-1: config 0 descriptor?? [ 434.725698][ T5843] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 434.754955][ T5891] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 434.929847][ T5891] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 434.949436][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.964614][ T5891] usb 1-1: Product: syz [ 434.975024][ T5891] usb 1-1: Manufacturer: syz [ 434.979713][ T5891] usb 1-1: SerialNumber: syz [ 435.001934][ T5891] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 435.023017][ T5890] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 435.139767][ T9] peak_usb 3-1:0.83 can0: unable to request usb[type=0 value=0] err=-71 [ 435.161673][ T9] peak_usb 3-1:0.83: unable to read PCAN-USB Pro bootloader info (err -71) [ 435.268312][ T9] peak_usb 3-1:0.83: probe with driver peak_usb failed with error -71 [ 435.304380][ T9] usb 3-1: USB disconnect, device number 17 [ 435.615718][ T5891] usb 1-1: USB disconnect, device number 17 [ 435.899517][T16367] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 435.951728][T16371] netlink: 'syz.2.5052': attribute type 10 has an invalid length. [ 435.959907][T16371] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5052'. [ 435.987054][T16371] batadv0: entered promiscuous mode [ 436.006775][T16371] batadv0: entered allmulticast mode [ 436.026449][T16371] bridge0: port 3(batadv0) entered blocking state [ 436.046368][T16371] bridge0: port 3(batadv0) entered disabled state [ 436.070393][T16371] bridge0: port 3(batadv0) entered blocking state [ 436.077128][T16371] bridge0: port 3(batadv0) entered forwarding state [ 436.272249][T16383] netlink: 'syz.1.5058': attribute type 10 has an invalid length. [ 436.282651][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 436.292400][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 436.326048][ T5890] usb 1-1: Service connection timeout for: 256 [ 436.332663][T16385] xt_ecn: cannot match TCP bits for non-tcp packets [ 436.361714][ T5890] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 436.389901][ T5890] ath9k_htc: Failed to initialize the device [ 436.423948][ T5891] usb 1-1: ath9k_htc: USB layer deinitialized [ 436.475119][ T30] audit: type=1326 audit(1745485799.188:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16390 comm="syz.0.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf3d8e969 code=0x7ffc0000 [ 436.550528][ T30] audit: type=1326 audit(1745485799.188:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16390 comm="syz.0.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fabf3d8e969 code=0x7ffc0000 [ 436.572908][ C0] vkms_vblank_simulate: vblank timer overrun [ 436.600310][ T30] audit: type=1326 audit(1745485799.188:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16390 comm="syz.0.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf3d8e969 code=0x7ffc0000 [ 436.622771][ C0] vkms_vblank_simulate: vblank timer overrun [ 436.641549][ T30] audit: type=1326 audit(1745485799.188:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16390 comm="syz.0.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf3d8e969 code=0x7ffc0000 [ 436.901565][T16414] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 436.934662][T16414] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 438.312208][T16480] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 438.824083][T16510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5118'. [ 438.854579][T16510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5118'. [ 438.884279][T16510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5118'. [ 439.634573][ T48] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 439.806586][ T48] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.834722][ T48] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 439.852260][ T48] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 439.868196][ T48] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 439.877544][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.887145][ T48] usb 2-1: Product: syz [ 439.891481][ T48] usb 2-1: Manufacturer: syz [ 439.899162][ T48] usb 2-1: SerialNumber: syz [ 439.907015][ T48] usb 2-1: config 0 descriptor?? [ 439.918849][ T48] usb 2-1: Found UVC 34.00 device syz (8086:0b5b) [ 439.925666][ T48] usb 2-1: No valid video chain found. [ 440.015399][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.021879][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.169894][ T48] usb 2-1: USB disconnect, device number 15 [ 440.506508][T16599] netlink: zone id is out of range [ 440.520458][T16599] netlink: set zone limit has 4 unknown bytes [ 440.833928][T16618] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5171'. [ 441.993398][T16685] x_tables: duplicate entry at hook 2 [ 442.103257][T16689] usb usb8: usbfs: process 16689 (syz.0.5205) did not claim interface 0 before use [ 442.534656][ T5890] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 442.699367][T16717] gretap2: entered promiscuous mode [ 442.735326][ T5890] usb 1-1: Using ep0 maxpacket: 8 [ 442.749103][ T5890] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 442.769225][ T5890] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 442.794567][ T5890] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 442.813905][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.072817][ T48] usb 1-1: USB disconnect, device number 18 [ 443.383914][T16754] ipt_rpfilter: unknown options [ 443.434967][ T5880] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 443.498078][T16759] delete_channel: no stack [ 443.605203][ T5880] usb 4-1: Using ep0 maxpacket: 16 [ 443.626148][ T5880] usb 4-1: config 0 has an invalid interface number: 223 but max is 0 [ 443.653477][ T5880] usb 4-1: config 0 has no interface number 0 [ 443.664308][ T5880] usb 4-1: config 0 interface 223 altsetting 1 endpoint 0x9 has invalid wMaxPacketSize 0 [ 443.681367][ T5880] usb 4-1: config 0 interface 223 has no altsetting 0 [ 443.691058][ T5880] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 443.714627][ T5891] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 443.717814][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.736922][T16769] openvswitch: netlink: Flow actions attr not present in new flow. [ 443.747736][ T5880] usb 4-1: Product: syz [ 443.751967][ T5880] usb 4-1: Manufacturer: syz [ 443.776505][ T5880] usb 4-1: SerialNumber: syz [ 443.789230][ T5880] usb 4-1: config 0 descriptor?? [ 443.840975][T16774] netlink: 'syz.1.5247': attribute type 2 has an invalid length. [ 443.881045][ T5891] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 443.890940][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.921780][ T5891] usb 3-1: Product: syz [ 443.931751][ T5891] usb 3-1: Manufacturer: syz [ 443.945338][ T5891] usb 3-1: SerialNumber: syz [ 443.971443][ T5891] usb 3-1: config 0 descriptor?? [ 444.023474][T16783] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 444.037950][T16782] netlink: 'syz.1.5250': attribute type 1 has an invalid length. [ 444.198154][ T5891] hso 3-1:0.0: Can't find BULK IN endpoint [ 444.222239][ T5880] usb 4-1: USB disconnect, device number 18 [ 444.226690][ T5891] usb-storage 3-1:0.0: USB Mass Storage device detected [ 444.424328][ T5891] usb 3-1: USB disconnect, device number 18 [ 444.533238][T16807] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 50934 - 0 [ 444.546860][T16807] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 50934 - 0 [ 444.555906][T16807] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 50934 - 0 [ 444.565779][T16807] geneve2: entered promiscuous mode [ 444.765595][T16819] No such timeout policy "syz0" [ 445.038586][T16835] fuse: Bad value for 'user_id' [ 445.050564][T16835] fuse: Bad value for 'user_id' [ 445.606464][ T5891] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 445.627571][T16874] program syz.2.5297 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 445.752360][T16882] usb usb8: usbfs: process 16882 (syz.3.5299) did not claim interface 0 before use [ 445.787718][ T5891] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 445.788991][T16885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5300'. [ 445.809084][ T5891] usb 1-1: config 0 interface 0 has no altsetting 0 [ 445.832236][ T5891] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 445.857093][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 445.884508][ T5891] usb 1-1: Product: syz [ 445.896605][ T5891] usb 1-1: Manufacturer: syz [ 445.912336][ T5891] usb 1-1: SerialNumber: syz [ 445.929342][ T5891] usb 1-1: config 0 descriptor?? [ 445.959955][ T5891] usb 1-1: selecting invalid altsetting 0 [ 446.206673][ T979] usb 1-1: USB disconnect, device number 19 [ 446.321583][T16906] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 446.571203][T16918] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 447.004952][ T5890] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 447.086866][ T1208] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 447.174908][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 447.188691][ T5890] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 447.204524][ T5890] usb 3-1: config 0 has no interface number 0 [ 447.210876][ T5890] usb 3-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.225670][ T5890] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 447.237351][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.245884][ T5890] usb 3-1: Product: syz [ 447.250228][ T5890] usb 3-1: Manufacturer: syz [ 447.256709][ T5890] usb 3-1: SerialNumber: syz [ 447.265629][ T5890] usb 3-1: config 0 descriptor?? [ 447.297398][ T1208] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 447.333373][ T5890] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 447.414815][ T5891] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 447.434542][ T1208] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 447.455713][ T1208] usb 1-1: config 220 has no interface number 2 [ 447.498781][ T13] usb 3-1: Failed to submit usb control message: -71 [ 447.517108][ T13] usb 3-1: unable to send the bmi data to the device: -71 [ 447.526449][ T13] usb 3-1: unable to get target info from device [ 447.532911][ T13] usb 3-1: could not get target info (-71) [ 447.540976][ T13] usb 3-1: could not probe fw (-71) [ 447.549597][ T5890] usb 3-1: USB disconnect, device number 19 [ 447.564704][ T979] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 447.623508][ T5891] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 447.652622][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.681191][ T5891] usb 2-1: Product: syz [ 447.688931][ T5891] usb 2-1: Manufacturer: syz [ 447.693820][ T5891] usb 2-1: SerialNumber: syz [ 447.715515][ T5891] usb 2-1: config 0 descriptor?? [ 447.753456][ T979] usb 4-1: unable to get BOS descriptor or descriptor too short [ 447.761228][ T1208] usb 1-1: config 220 interface 1 altsetting 5 has an endpoint descriptor with address 0x58, changing to 0x8 [ 447.761269][ T1208] usb 1-1: config 220 interface 1 altsetting 5 endpoint 0x8 has invalid wMaxPacketSize 0 [ 447.761294][ T1208] usb 1-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 447.761324][ T1208] usb 1-1: config 220 interface 0 has no altsetting 0 [ 447.761346][ T1208] usb 1-1: config 220 interface 76 has no altsetting 0 [ 447.761367][ T1208] usb 1-1: config 220 interface 1 has no altsetting 0 [ 447.768923][ T1208] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 447.807605][ T979] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 447.861148][ T979] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 447.884557][ T979] usb 4-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 447.894757][ T1208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.907839][ T1208] usb 1-1: Product: syz [ 447.912039][ T1208] usb 1-1: Manufacturer: syz [ 447.912645][ T979] usb 4-1: config 1 interface 0 has no altsetting 0 [ 447.924950][ T1208] usb 1-1: SerialNumber: syz [ 447.937177][ T979] usb 4-1: config 1 interface 0 has no altsetting 1 [ 447.945006][ T5891] hso 2-1:0.0: Failed to find BULK IN ep [ 447.959875][ T5891] usb-storage 2-1:0.0: USB Mass Storage device detected [ 447.982034][ T979] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 448.001382][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.010703][ T979] usb 4-1: Product: syz [ 448.017973][ T979] usb 4-1: Manufacturer: syz [ 448.022831][ T979] usb 4-1: SerialNumber: syz [ 448.149955][ T5891] usb 2-1: USB disconnect, device number 16 [ 448.151476][ T1208] usb 1-1: selecting invalid altsetting 0 [ 448.170647][ T1208] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 448.191163][ T1208] usb 1-1: No valid video chain found. [ 448.222975][ T1208] usb 1-1: selecting invalid altsetting 0 [ 448.239719][ T1208] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 448.253458][ T979] smsusb:smsusb_probe: board id=8, interface number 0 [ 448.272112][ T1208] usb 1-1: USB disconnect, device number 20 [ 448.282070][ T979] usb 4-1: selecting invalid altsetting 0 [ 448.297398][ T979] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 448.312918][ T979] smsusb 4-1:1.0: probe with driver smsusb failed with error -22 [ 448.344418][ T979] usb 4-1: USB disconnect, device number 19 [ 448.579056][T16981] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5342'. [ 448.590111][T16981] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 448.744716][ T5890] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 448.925316][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.944921][ T5890] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 448.972256][ T5890] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 448.989827][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.021196][ T5890] usb 3-1: config 0 descriptor?? [ 449.216195][ T979] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 449.399477][ T979] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 449.425042][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.439779][ T5890] Bluetooth: Can't get version to change to load ram patch err [ 449.459018][ T979] usb 4-1: Product: syz [ 449.463258][ T979] usb 4-1: Manufacturer: syz [ 449.475138][ T5890] Bluetooth: Loading patch file failed [ 449.490887][ T979] usb 4-1: SerialNumber: syz [ 449.495644][ T5890] ath3k 3-1:0.0: probe with driver ath3k failed with error -71 [ 449.524846][ T979] usb 4-1: config 0 descriptor?? [ 449.551164][ T5890] usb 3-1: USB disconnect, device number 20 [ 449.653399][ T30] audit: type=1326 audit(1745485812.358:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17032 comm="syz.4.5368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6dc58e969 code=0x7ffc0000 [ 449.703618][ T30] audit: type=1326 audit(1745485812.358:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17032 comm="syz.4.5368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6dc58e969 code=0x7ffc0000 [ 449.729109][ T30] audit: type=1326 audit(1745485812.388:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17032 comm="syz.4.5368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb6dc58e969 code=0x7ffc0000 [ 449.752393][ T30] audit: type=1326 audit(1745485812.388:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17032 comm="syz.4.5368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6dc58e969 code=0x7ffc0000 [ 449.791106][ T979] hso 4-1:0.0: Failed to find BULK IN ep [ 449.808838][ T979] usb-storage 4-1:0.0: USB Mass Storage device detected [ 449.814868][ T48] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 449.819232][ T30] audit: type=1326 audit(1745485812.388:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17032 comm="syz.4.5368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6dc58e969 code=0x7ffc0000 [ 449.984865][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 449.998757][ T979] usb 4-1: USB disconnect, device number 20 [ 450.010283][ T48] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 450.037557][ T48] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.055438][ T48] usb 2-1: config 0 has no interface number 0 [ 450.061632][ T48] usb 2-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 450.112998][ T48] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 450.116816][T17051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5375'. [ 450.129832][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.150147][ T48] usb 2-1: Product: syz [ 450.158880][ T48] usb 2-1: Manufacturer: syz [ 450.170273][ T48] usb 2-1: SerialNumber: syz [ 450.200086][ T48] usb 2-1: config 0 descriptor?? [ 450.481626][ T48] usb 2-1: USB disconnect, device number 17 [ 450.675681][T14696] udevd[14696]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 450.708408][T17076] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 451.054585][ T48] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 451.228819][ T48] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 451.252274][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.274547][ T48] usb 1-1: Product: syz [ 451.290218][ T48] usb 1-1: Manufacturer: syz [ 451.305524][ T48] usb 1-1: SerialNumber: syz [ 451.329719][ T48] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 451.352769][ T1208] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 451.834564][ T979] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 451.836081][ T48] usb 1-1: USB disconnect, device number 21 [ 451.897939][ T5891] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 451.985477][ T979] usb 3-1: Using ep0 maxpacket: 16 [ 452.003599][ T979] usb 3-1: config 3 has an invalid interface number: 155 but max is 0 [ 452.022195][ T979] usb 3-1: config 3 has an invalid interface association descriptor of length 3, skipping [ 452.042638][ T979] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 452.053680][ T979] usb 3-1: config 3 has no interface number 0 [ 452.064439][ T979] usb 3-1: config 3 interface 155 has no altsetting 0 [ 452.064588][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 452.083094][ T979] usb 3-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e5.4c [ 452.092931][ T5891] usb 5-1: config 1 interface 0 has no altsetting 0 [ 452.100666][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.110883][ T979] usb 3-1: Product: syz [ 452.116615][ T979] usb 3-1: Manufacturer: syz [ 452.122250][ T5891] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 452.132822][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.140131][T17148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5423'. [ 452.141592][ T979] usb 3-1: SerialNumber: syz [ 452.154965][ T5891] usb 5-1: Product: syz [ 452.159166][ T5891] usb 5-1: Manufacturer: syz [ 452.163781][ T5891] usb 5-1: SerialNumber: syz [ 452.176769][T17148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5423'. [ 452.263531][T17153] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5425'. [ 452.280184][T17153] openvswitch: netlink: Missing key (keys=40, expected=80) [ 452.422222][ T5891] usbhid 5-1:1.0: can't add hid device: -71 [ 452.431009][ T979] usb 3-1: Found UVC 0.00 device syz (05a9:264a) [ 452.440794][ T5891] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 452.449709][ T979] usb 3-1: No valid video chain found. [ 452.472890][ T979] usb 3-1: USB disconnect, device number 21 [ 452.485213][ T1208] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 452.492321][ T1208] ath9k_htc: Failed to initialize the device [ 452.523079][ T5891] usb 5-1: USB disconnect, device number 11 [ 452.557610][ T48] usb 1-1: ath9k_htc: USB layer deinitialized [ 452.981601][T17184] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5441'. [ 453.614520][ T30] audit: type=1326 audit(1745485816.308:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17223 comm="syz.3.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5792f8e969 code=0x7ffc0000 [ 453.671963][ T30] audit: type=1326 audit(1745485816.318:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17223 comm="syz.3.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f5792f8e969 code=0x7ffc0000 [ 453.717309][ T30] audit: type=1326 audit(1745485816.318:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17223 comm="syz.3.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5792f8e969 code=0x7ffc0000 [ 453.782262][T17233] netlink: 'syz.3.5465': attribute type 9 has an invalid length. [ 453.795778][T17233] netlink: 'syz.3.5465': attribute type 7 has an invalid length. [ 453.803602][T17233] netlink: 'syz.3.5465': attribute type 8 has an invalid length. [ 453.835683][ T30] audit: type=1326 audit(1745485816.318:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17223 comm="syz.3.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5792f8e969 code=0x7ffc0000 [ 454.190882][T17256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5477'. [ 454.211139][T17256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5477'. [ 454.234638][T17256] tc_dump_action: action bad kind [ 454.839320][ T48] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 454.976724][T17304] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 454.994725][ T48] usb 5-1: Using ep0 maxpacket: 32 [ 455.007697][ T48] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 455.033131][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 245, changing to 11 [ 455.079436][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 58613, setting to 1024 [ 455.108523][T17309] autofs4:pid:17309:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.31), cmd(0xc018937e) [ 455.121967][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 455.139427][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 455.152618][T17309] autofs4:pid:17309:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 455.170938][ T48] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 455.190417][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.204561][ T48] usb 5-1: Product: syz [ 455.208775][ T48] usb 5-1: Manufacturer: syz [ 455.218851][ T48] usb 5-1: SerialNumber: syz [ 455.240195][ T48] usb 5-1: config 0 descriptor?? [ 455.691304][ T48] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 455.701405][ T48] input input76: Device does not respond to id packet M [ 455.722125][ T48] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 455.748612][ T48] input input76: Device does not respond to id packet P [ 455.794638][ T48] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 455.804745][ T48] input input76: Device does not respond to id packet B [ 455.823637][ T48] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 455.848117][ T48] input input76: Device does not respond to id packet N [ 455.877042][ T48] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 455.897288][ T48] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 455.926945][ T48] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 455.942544][ T48] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 455.969051][ T48] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input76 [ 456.005759][T17348] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5523'. [ 456.047597][ T48] usb 5-1: USB disconnect, device number 12 [ 456.047747][ C0] iforce 5-1:0.0: iforce_usb_irq - usb_submit_urb failed with result -19 [ 456.254556][ T30] audit: type=1326 audit(1745485818.958:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17356 comm="syz.0.5527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf3d8e969 code=0x7ffc0000 [ 456.333549][ T30] audit: type=1326 audit(1745485818.958:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17356 comm="syz.0.5527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fabf3d8e969 code=0x7ffc0000 [ 456.419591][ T30] audit: type=1326 audit(1745485818.958:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17356 comm="syz.0.5527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf3d8e969 code=0x7ffc0000 [ 456.463098][ T30] audit: type=1326 audit(1745485818.958:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17356 comm="syz.0.5527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf3d8e969 code=0x7ffc0000 [ 456.580239][T17375] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5532'. [ 457.003904][T17392] ip6tnl1: left promiscuous mode [ 457.020261][T17399] IPv6: sit2: Disabled Multicast RS [ 457.394306][T17420] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5556'. [ 458.276886][T17470] program syz.4.5582 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 458.286735][T17473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5584'. [ 458.469710][T17485] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 458.613040][T17491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5591'. [ 458.857697][T17506] x_tables: unsorted entry at hook 2 [ 459.130353][T17520] netlink: 'syz.4.5605': attribute type 8 has an invalid length. [ 459.476264][T17536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5613'. [ 459.752585][T17556] vlan0: entered promiscuous mode [ 459.862371][ T5849] cgroup: fork rejected by pids controller in /syz3 [ 459.889914][T17560] xt_socket: unknown flags 0x4 [ 459.934574][T17563] xt_TCPMSS: Only works on TCP SYN packets [ 460.215725][ T5849] syz-executor (5849) used greatest stack depth: 18072 bytes left [ 460.393508][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.531113][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.721130][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.809762][T17599] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5639'. [ 461.026838][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.357945][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 461.369465][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 461.377663][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 461.385862][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 461.397302][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 461.461486][ T63] veth0_to_bridge: left allmulticast mode [ 461.477898][ T63] veth0_to_bridge: left promiscuous mode [ 461.485260][ T63] bridge0: port 3(veth0_to_bridge) entered disabled state [ 461.529464][ T63] bridge_slave_1: left allmulticast mode [ 461.544522][ T63] bridge_slave_1: left promiscuous mode [ 461.561587][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.601449][ T63] bridge_slave_0: left allmulticast mode [ 461.607787][ T63] bridge_slave_0: left promiscuous mode [ 461.625053][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.689065][T17636] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 461.698814][ T48] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 461.854861][ T48] usb 5-1: Using ep0 maxpacket: 8 [ 461.870054][ T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.914558][ T48] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 461.933386][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 461.972814][T17645] trusted_key: encrypted_key: keylen parameter is missing [ 461.980186][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 462.009071][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 462.049184][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 462.079740][ T48] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 462.091547][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.112090][ T48] usb 5-1: Product: syz [ 462.118727][ T48] usb 5-1: Manufacturer: syz [ 462.123369][ T48] usb 5-1: SerialNumber: syz [ 462.139307][ T48] usb 5-1: config 0 descriptor?? [ 462.164038][T17625] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 462.703590][ T63]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.728465][ T63]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.757946][ T63]  (unregistering): (slave ): Releasing backup interface [ 462.780061][ T63]  (unregistering): Released all slaves [ 462.818592][T17634] bond0: (slave veth1_vlan): Error: Device is in use and cannot be enslaved [ 463.454530][ T5843] Bluetooth: hci1: command tx timeout [ 463.614612][ T48] rc_core: IR keymap rc-snapstream-firefly not found [ 463.621368][ T48] Registered IR keymap rc-empty [ 463.666330][ T48] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 463.739837][ T48] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input77 [ 463.900056][ T48] input: syz syz mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input78 [ 463.990312][ T48] usb 5-1: USB disconnect, device number 13 [ 463.996434][ C1] ati_remote 5-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 464.114742][ T5910] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 464.284705][ T63] hsr_slave_0: left promiscuous mode [ 464.304306][ T5910] usb 1-1: config 0 has an invalid interface number: 40 but max is 0 [ 464.327401][ T5910] usb 1-1: config 0 has no interface number 0 [ 464.333563][ T5910] usb 1-1: too many endpoints for config 0 interface 40 altsetting 48: 120, using maximum allowed: 30 [ 464.349262][ T63] hsr_slave_1: left promiscuous mode [ 464.366877][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.373393][ T5910] usb 1-1: config 0 interface 40 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 464.394909][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.395905][ T5910] usb 1-1: config 0 interface 40 has no altsetting 0 [ 464.415848][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.429428][ T5910] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 464.430934][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.447240][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.455946][ T5910] usb 1-1: Product: syz [ 464.461720][ T5910] usb 1-1: Manufacturer: syz [ 464.466885][ T5910] usb 1-1: SerialNumber: syz [ 464.490262][ T5910] usb 1-1: config 0 descriptor?? [ 464.514350][ T63] veth1_macvtap: left promiscuous mode [ 464.526299][ T63] veth1_vlan: left promiscuous mode [ 464.535118][ T63] veth0_vlan: left promiscuous mode [ 464.735672][ T5910] usb 1-1: USB disconnect, device number 22 [ 464.871960][T17751] netlink: 'syz.1.5697': attribute type 10 has an invalid length. [ 465.340262][ T63] team0 (unregistering): Port device team_slave_1 removed [ 465.406729][ T63] team0 (unregistering): Port device team_slave_0 removed [ 465.539499][ T5843] Bluetooth: hci1: command tx timeout [ 466.070503][T17751] team0: Port device dummy0 added [ 466.120085][T17628] chnl_net:caif_netlink_parms(): no params data found [ 466.642705][T17628] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.670114][T17628] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.721086][T17628] bridge_slave_0: entered allmulticast mode [ 466.739998][T17628] bridge_slave_0: entered promiscuous mode [ 466.762947][T17628] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.766574][T17814] netlink: 'syz.1.5727': attribute type 32 has an invalid length. [ 466.783797][T17628] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.796190][T17628] bridge_slave_1: entered allmulticast mode [ 466.813004][T17628] bridge_slave_1: entered promiscuous mode [ 466.983110][T17628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.022844][T17628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.306810][ T63] IPVS: stop unused estimator thread 0... [ 467.310696][T17628] team0: Port device team_slave_0 added [ 467.369709][T17628] team0: Port device team_slave_1 added [ 467.387779][T17843] xt_CT: You must specify a L4 protocol and not use inversions on it [ 467.444900][ T24] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 467.567035][T17628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.587472][T17628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.618253][ T5843] Bluetooth: hci1: command tx timeout [ 467.637800][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.662232][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 467.697672][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 467.708978][T17628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.738660][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 467.759305][T17628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.779230][T17628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.808170][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 467.808514][T17862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5743'. [ 467.821559][T17628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.825741][ T24] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 467.845471][ T5940] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 467.868398][T17862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5743'. [ 467.914701][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 467.962914][ T24] usb 3-1: Product: syz [ 467.967745][ T24] usb 3-1: Manufacturer: syz [ 467.972400][ T24] usb 3-1: SerialNumber: syz [ 468.010869][ T24] usb 3-1: config 0 descriptor?? [ 468.032636][ T5940] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 468.052808][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.103185][ T5940] usb 1-1: config 0 descriptor?? [ 468.122393][ T5940] ums-realtek 1-1:0.0: USB Mass Storage device detected [ 468.143010][T17628] hsr_slave_0: entered promiscuous mode [ 468.151877][T17628] hsr_slave_1: entered promiscuous mode [ 468.245245][ T24] radio-si470x 3-1:0.0: DeviceID=0xd318 ChipID=0x30a9 [ 468.328854][ T5940] usb 1-1: USB disconnect, device number 23 [ 468.447545][ T24] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 468.467407][ T24] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 468.487767][ T24] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 468.524782][ T24] usb 3-1: USB disconnect, device number 22 [ 468.944553][ T30] audit: type=1326 audit(1745485831.648:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17898 comm="syz.4.5757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6dc58e969 code=0x7ffc0000 [ 469.021781][ T30] audit: type=1326 audit(1745485831.648:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17898 comm="syz.4.5757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6dc58e969 code=0x7ffc0000 [ 469.129500][ T30] audit: type=1326 audit(1745485831.688:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17898 comm="syz.4.5757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fb6dc58e969 code=0x7ffc0000 [ 469.222968][ T30] audit: type=1326 audit(1745485831.688:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17898 comm="syz.4.5757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6dc58e969 code=0x7ffc0000 [ 469.233923][T17911] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 469.318866][ T30] audit: type=1326 audit(1745485831.688:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17898 comm="syz.4.5757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6dc58e969 code=0x7ffc0000 [ 469.686728][ T5843] Bluetooth: hci1: command tx timeout [ 470.191991][T17951] netlink: 'syz.0.5778': attribute type 25 has an invalid length. [ 470.223037][T17951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5778'. [ 470.258858][T17628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 470.300671][T17951] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (3469) [ 470.314224][T17951] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 470.321273][ T5910] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 470.347811][T17628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 470.383570][T17958] dummy0: entered promiscuous mode [ 470.393228][T17958] dummy0: entered allmulticast mode [ 470.414986][T17958] [ 470.417388][T17958] ====================================================== [ 470.424440][T17958] WARNING: possible circular locking dependency detected [ 470.431497][T17958] 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 Not tainted [ 470.438626][T17958] ------------------------------------------------------ [ 470.445652][T17958] syz.1.5780/17958 is trying to acquire lock: [ 470.451725][T17958] ffff88805f708e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_port_change_check+0x51/0x1e0 [ 470.462301][T17958] [ 470.462301][T17958] but task is already holding lock: [ 470.469685][T17958] ffff88807ff42d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_change_flags+0x120/0x270 [ 470.479830][T17958] [ 470.479830][T17958] which lock already depends on the new lock. [ 470.479830][T17958] [ 470.490241][T17958] [ 470.490241][T17958] the existing dependency chain (in reverse order) is: [ 470.499268][T17958] [ 470.499268][T17958] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 470.507727][T17958] lock_acquire+0x116/0x2f0 [ 470.512849][T17958] __mutex_lock+0x1a5/0x10c0 [ 470.517976][T17958] dev_set_mtu+0x11c/0x270 [ 470.522929][T17958] team_add_slave+0x83b/0x28b0 [ 470.528322][T17958] do_set_master+0x579/0x730 [ 470.533451][T17958] do_setlink+0xf76/0x4390 [ 470.538410][T17958] rtnl_newlink+0x17e2/0x1fe0 [ 470.543641][T17958] rtnetlink_rcv_msg+0x80f/0xd70 [ 470.549127][T17958] netlink_rcv_skb+0x208/0x480 [ 470.554436][T17958] netlink_unicast+0x7f8/0x9a0 [ 470.559745][T17958] netlink_sendmsg+0x8c3/0xcd0 [ 470.565059][T17958] __sock_sendmsg+0x221/0x270 [ 470.570309][T17958] ____sys_sendmsg+0x523/0x860 [ 470.575619][T17958] __sys_sendmsg+0x271/0x360 [ 470.580747][T17958] do_syscall_64+0xf3/0x210 [ 470.585785][T17958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.592210][T17958] [ 470.592210][T17958] -> #0 (team->team_lock_key#3){+.+.}-{4:4}: [ 470.600406][T17958] validate_chain+0xa69/0x24e0 [ 470.605714][T17958] __lock_acquire+0xad5/0xd80 [ 470.610943][T17958] lock_acquire+0x116/0x2f0 [ 470.615985][T17958] __mutex_lock+0x1a5/0x10c0 [ 470.621107][T17958] team_port_change_check+0x51/0x1e0 [ 470.626926][T17958] team_device_event+0x437/0x5b0 [ 470.632398][T17958] notifier_call_chain+0x1a5/0x3f0 [ 470.638041][T17958] __dev_notify_flags+0x311/0x410 [ 470.643607][T17958] netif_change_flags+0xf0/0x1a0 [ 470.649167][T17958] dev_change_flags+0x146/0x270 [ 470.654560][T17958] devinet_ioctl+0xea4/0x1d80 [ 470.659773][T17958] inet_ioctl+0x3d9/0x4f0 [ 470.664638][T17958] sock_do_ioctl+0x152/0x400 [ 470.669765][T17958] sock_ioctl+0x644/0x900 [ 470.674651][T17958] __se_sys_ioctl+0xf1/0x160 [ 470.679779][T17958] do_syscall_64+0xf3/0x210 [ 470.684902][T17958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.691324][T17958] [ 470.691324][T17958] other info that might help us debug this: [ 470.691324][T17958] [ 470.701681][T17958] Possible unsafe locking scenario: [ 470.701681][T17958] [ 470.709489][T17958] CPU0 CPU1 [ 470.714874][T17958] ---- ---- [ 470.720288][T17958] lock(&dev_instance_lock_key#3); [ 470.725529][T17958] lock(team->team_lock_key#3); [ 470.733012][T17958] lock(&dev_instance_lock_key#3); [ 470.740753][T17958] lock(team->team_lock_key#3); [ 470.745717][T17958] [ 470.745717][T17958] *** DEADLOCK *** [ 470.745717][T17958] [ 470.753863][T17958] 2 locks held by syz.1.5780/17958: [ 470.759065][T17958] #0: ffffffff900fd848 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x34e/0x1d80 [ 470.768328][T17958] #1: ffff88807ff42d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_change_flags+0x120/0x270 [ 470.778892][T17958] [ 470.778892][T17958] stack backtrace: [ 470.784808][T17958] CPU: 1 UID: 0 PID: 17958 Comm: syz.1.5780 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 470.784840][T17958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 470.784862][T17958] Call Trace: [ 470.784871][T17958] [ 470.784879][T17958] dump_stack_lvl+0x241/0x360 [ 470.784910][T17958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.784935][T17958] ? __pfx__printk+0x10/0x10 [ 470.784960][T17958] ? print_lock+0x171/0x1a0 [ 470.784989][T17958] print_circular_bug+0x2e1/0x300 [ 470.785009][T17958] check_noncircular+0x142/0x160 [ 470.785029][T17958] validate_chain+0xa69/0x24e0 [ 470.785047][T17958] ? __pfx_stack_trace_save+0x10/0x10 [ 470.785069][T17958] ? stack_depot_save_flags+0x44/0x940 [ 470.785104][T17958] __lock_acquire+0xad5/0xd80 [ 470.785132][T17958] lock_acquire+0x116/0x2f0 [ 470.785155][T17958] ? team_port_change_check+0x51/0x1e0 [ 470.785180][T17958] __mutex_lock+0x1a5/0x10c0 [ 470.785199][T17958] ? team_port_change_check+0x51/0x1e0 [ 470.785218][T17958] ? do_raw_spin_lock+0x151/0x370 [ 470.785241][T17958] ? __lock_acquire+0xad5/0xd80 [ 470.785263][T17958] ? team_port_change_check+0x51/0x1e0 [ 470.785282][T17958] ? bond_netdev_event+0xe0/0xfb0 [ 470.785299][T17958] ? __pfx___mutex_lock+0x10/0x10 [ 470.785320][T17958] ? __asan_memset+0x23/0x50 [ 470.785345][T17958] team_port_change_check+0x51/0x1e0 [ 470.785367][T17958] team_device_event+0x437/0x5b0 [ 470.785385][T17958] ? notifier_call_chain+0x15a/0x3f0 [ 470.785402][T17958] notifier_call_chain+0x1a5/0x3f0 [ 470.785421][T17958] __dev_notify_flags+0x311/0x410 [ 470.785449][T17958] ? __pfx___dev_notify_flags+0x10/0x10 [ 470.785474][T17958] ? __dev_change_flags+0x57b/0x700 [ 470.785503][T17958] ? __pfx___mutex_lock+0x10/0x10 [ 470.785527][T17958] netif_change_flags+0xf0/0x1a0 [ 470.785554][T17958] dev_change_flags+0x146/0x270 [ 470.785580][T17958] devinet_ioctl+0xea4/0x1d80 [ 470.785608][T17958] ? __pfx_devinet_ioctl+0x10/0x10 [ 470.785630][T17958] ? _copy_from_user+0x95/0xb0 [ 470.785655][T17958] inet_ioctl+0x3d9/0x4f0 [ 470.785672][T17958] ? __pfx_inet_ioctl+0x10/0x10 [ 470.785695][T17958] ? tomoyo_path_number_perm+0x215/0x790 [ 470.785717][T17958] ? packet_ioctl+0x26b/0x350 [ 470.785739][T17958] sock_do_ioctl+0x152/0x400 [ 470.785761][T17958] ? __pfx_sock_do_ioctl+0x10/0x10 [ 470.785784][T17958] ? __lock_acquire+0xad5/0xd80 [ 470.785812][T17958] sock_ioctl+0x644/0x900 [ 470.785831][T17958] ? __pfx_sock_ioctl+0x10/0x10 [ 470.785848][T17958] ? __fget_files+0x2a/0x420 [ 470.785864][T17958] ? __fget_files+0x2a/0x420 [ 470.785881][T17958] ? __fget_files+0x2a/0x420 [ 470.785898][T17958] ? __pfx_sock_ioctl+0x10/0x10 [ 470.785916][T17958] __se_sys_ioctl+0xf1/0x160 [ 470.785940][T17958] do_syscall_64+0xf3/0x210 [ 470.785959][T17958] ? clear_bhb_loop+0x45/0xa0 [ 470.785978][T17958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.785996][T17958] RIP: 0033:0x7f4c9a18e969 [ 470.786018][T17958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 470.786033][T17958] RSP: 002b:00007f4c9af86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 470.786053][T17958] RAX: ffffffffffffffda RBX: 00007f4c9a3b5fa0 RCX: 00007f4c9a18e969 [ 470.786066][T17958] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000003 [ 470.786078][T17958] RBP: 00007f4c9a210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 470.786089][T17958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.786100][T17958] R13: 0000000000000000 R14: 00007f4c9a3b5fa0 R15: 00007f4c9a4dfa28 [ 470.786119][T17958] [ 471.254614][T17628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 471.779346][ T3543] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.920869][ T3543] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.978592][ T3543] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.100477][ T3543] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.122793][ T5910] usb 5-1: device descriptor read/all, error -71 [ 472.262580][ T3543] bridge_slave_1: left allmulticast mode [ 472.274548][ T3543] bridge_slave_1: left promiscuous mode [ 472.280405][ T3543] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.297439][ T3543] bridge_slave_0: left allmulticast mode [ 472.303147][ T3543] bridge_slave_0: left promiscuous mode [ 472.324802][ T3543] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.681892][ T3543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.691419][ T3543] bond_slave_0: left promiscuous mode [ 472.701255][ T3543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.711532][ T3543] bond_slave_1: left promiscuous mode [ 472.719587][ T3543] bond0 (unregistering): Released all slaves [ 472.730914][ T3543] bond1 (unregistering): Released all slaves [ 472.743949][ T3543] bond2 (unregistering): Released all slaves [ 472.978268][ T3543] hsr_slave_0: left promiscuous mode [ 472.984388][ T3543] hsr_slave_1: left promiscuous mode [ 472.990651][ T3543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.001251][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.009367][ T3543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.021391][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.033681][ T3543] veth0_macvtap: left promiscuous mode [ 473.041936][ T3543] veth1_vlan: left promiscuous mode [ 473.047864][ T3543] veth0_vlan: left promiscuous mode [ 473.278337][ T3543] team0 (unregistering): Port device team_slave_1 removed [ 473.309953][ T3543] team0 (unregistering): Port device team_slave_0 removed [ 473.727972][ T3543] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.739425][ T3543] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 50934 - 0 [ 473.780413][ T3543] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.793357][ T3543] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 50934 - 0 [ 473.861951][ T3543] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.872490][ T3543] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 50934 - 0 [ 474.007931][ T3543] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.049720][ T3543] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.100059][ T3543] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.140578][ T3543] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.296235][ T3543] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.372663][ T3543] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.426110][ T3543] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.480903][ T3543] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.857812][ T3543] bridge_slave_1: left allmulticast mode [ 474.864288][ T3543] bridge_slave_1: left promiscuous mode [ 474.872514][ T3543] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.882278][ T3543] bridge_slave_0: left allmulticast mode [ 474.893661][ T3543] bridge_slave_0: left promiscuous mode [ 474.899483][ T3543] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.915463][ T3543] bridge_slave_1: left allmulticast mode [ 474.921236][ T3543] bridge_slave_1: left promiscuous mode [ 474.928416][ T3543] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.937932][ T3543] bridge_slave_0: left allmulticast mode [ 474.943620][ T3543] bridge_slave_0: left promiscuous mode [ 474.950735][ T3543] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.960082][ T3543] batadv0: left promiscuous mode [ 474.969695][ T3543] bridge0: port 3(batadv0) entered disabled state [ 474.978221][ T3543] bridge_slave_1: left allmulticast mode [ 474.983905][ T3543] bridge_slave_1: left promiscuous mode [ 474.991862][ T3543] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.000956][ T3543] bridge_slave_0: left allmulticast mode [ 475.009265][ T3543] bridge_slave_0: left promiscuous mode [ 475.015072][ T3543] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.026438][ T3543] bridge_slave_1: left allmulticast mode [ 475.032153][ T3543] bridge_slave_1: left promiscuous mode [ 475.038103][ T3543] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.049508][ T3543] bridge_slave_0: left allmulticast mode [ 475.055256][ T3543] bridge_slave_0: left promiscuous mode [ 475.060978][ T3543] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.710416][ T3543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.720424][ T3543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.730840][ T3543] bond0 (unregistering): Released all slaves [ 475.743177][ T3543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.754840][ T3543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.764368][ T3543] bond0 (unregistering): Released all slaves [ 475.773965][ T3543] bond1 (unregistering): Released all slaves [ 475.789740][ T3543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.799776][ T3543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.809322][ T3543] bond0 (unregistering): Released all slaves [ 475.884616][ T3543] bond1 (unregistering): Released all slaves [ 475.894705][ T3543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.905007][ T3543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.914884][ T3543] bond0 (unregistering): Released all slaves [ 476.487961][ T3543] hsr_slave_0: left promiscuous mode [ 476.493715][ T3543] hsr_slave_1: left promiscuous mode [ 476.499808][ T3543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.507279][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.516706][ T3543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.524112][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.533999][ T3543] hsr_slave_0: left promiscuous mode [ 476.539923][ T3543] hsr_slave_1: left promiscuous mode [ 476.546839][ T3543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.554239][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.562056][ T3543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.569650][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.579852][ T3543] hsr_slave_0: left promiscuous mode [ 476.585884][ T3543] hsr_slave_1: left promiscuous mode [ 476.591510][ T3543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.598970][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.606596][ T3543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.614021][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.624011][ T3543] hsr_slave_0: left promiscuous mode [ 476.630612][ T3543] hsr_slave_1: left promiscuous mode [ 476.636378][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.643885][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.659584][ T3543] veth1_macvtap: left promiscuous mode [ 476.665132][ T3543] veth0_macvtap: left promiscuous mode [ 476.670701][ T3543] veth1_vlan: left promiscuous mode [ 476.676490][ T3543] veth0_vlan: left promiscuous mode [ 476.682579][ T3543] veth1_macvtap: left promiscuous mode [ 476.688426][ T3543] veth0_macvtap: left promiscuous mode [ 476.694065][ T3543] veth1_vlan: left promiscuous mode [ 476.700303][ T3543] veth1_macvtap: left promiscuous mode [ 476.705846][ T3543] veth0_macvtap: left promiscuous mode [ 476.711385][ T3543] veth1_vlan: left promiscuous mode [ 476.933147][ T3543] team0 (unregistering): Port device team_slave_1 removed [ 476.959035][ T3543] team0 (unregistering): Port device team_slave_0 removed [ 477.019251][ T3543] team0 (unregistering): Port device batadv0 removed [ 477.039327][ T3543] team0 (unregistering): Port device dummy0 removed [ 477.149768][ T3543] team0 (unregistering): Port device team_slave_1 removed [ 477.173870][ T3543] team0 (unregistering): Port device team_slave_0 removed [ 477.393395][ T3543] team0 (unregistering): Port device team_slave_1 removed [ 477.414299][ T3543] team0 (unregistering): Port device team_slave_0 removed [ 477.572283][ T3543] team0 (unregistering): Port device team_slave_1 removed [ 477.592949][ T3543] team0 (unregistering): Port device team_slave_0 removed