last executing test programs: 2.42785568s ago: executing program 0 (id=5373): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000074001800000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec5c2ee5a7cef4000000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2.238613277s ago: executing program 0 (id=5377): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, 0x0) 2.003573275s ago: executing program 0 (id=5381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1b8}}, 0x0) 1.666654749s ago: executing program 3 (id=5384): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7fffd, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000000200)=""/76}, 0x20) 1.666043307s ago: executing program 0 (id=5385): pipe(&(0x7f0000002480)={0xffffffffffffffff}) fsmount(r0, 0x1, 0x0) 1.582965648s ago: executing program 2 (id=5386): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x15, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4}, @nested={0x4, 0x2}]}, 0x1c}}, 0x0) 1.456778084s ago: executing program 1 (id=5387): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x21) 1.454941059s ago: executing program 4 (id=5388): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.372875236s ago: executing program 0 (id=5389): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0x0) 1.353506107s ago: executing program 3 (id=5390): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89b1, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 1.305798007s ago: executing program 1 (id=5391): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x1, 0x81, 0xd, 0x0, 0x2}) 1.271020144s ago: executing program 2 (id=5392): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="485100001900010002000000000000001d0109005000128049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd000000e4500680e05075"], 0x5148}, 0x1, 0x0, 0x0, 0x5}, 0x804) 1.242757357s ago: executing program 0 (id=5393): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001800010027bd7000fcdbdf251d01020015"], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 1.241842708s ago: executing program 4 (id=5394): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000001c0)={0xffffffff, 0x80, 0x0, 'queue1\x00'}) 1.078701091s ago: executing program 3 (id=5395): add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x65) 1.072631384s ago: executing program 4 (id=5396): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1c}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]}) getrlimit(0xf, &(0x7f0000000040)) 1.066388082s ago: executing program 1 (id=5397): r0 = syz_open_dev$video4linux(&(0x7f0000000200), 0x800000000000007, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc0305602, &(0x7f0000000040)={0x0, 0x5}) 1.044718802s ago: executing program 2 (id=5398): r0 = syz_open_dev$usbmon(&(0x7f0000003840), 0x6, 0x1) poll(&(0x7f0000003880)=[{r0}], 0x1, 0x81) 896.945438ms ago: executing program 4 (id=5399): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={[{@subsystem='cpuacct'}, {@none}]}) 869.294841ms ago: executing program 1 (id=5400): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x20, 0x0, 0x0}) 828.912443ms ago: executing program 3 (id=5401): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x58}}, 0x0) 749.386289ms ago: executing program 4 (id=5402): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x5e}, {@in6=@loopback, 0x4d4, 0x32}, @in=@dev, {0xfffffffffffffffd}, {0x0, 0x200000000, 0x0, 0x100000}, {0x0, 0x0, 0x2}, 0x70bd2a, 0x0, 0x2, 0x4}}, 0xf0}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 636.687178ms ago: executing program 2 (id=5403): r0 = io_uring_setup(0x6ddd, &(0x7f00000002c0)={0x0, 0x200000, 0x0, 0x800000, 0xf3}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0xffffffff, 0x0, &(0x7f0000000040)=[{0x0}], 0x0, 0x1}, 0x20) 512.886923ms ago: executing program 3 (id=5404): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x8}, @IFLA_GRE_OFLAGS={0x6}]}}}]}, 0x48}}, 0x0) 502.430033ms ago: executing program 1 (id=5405): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="54020000150001000000000000001000ff020000000000000000000000000001e0000001000000000000000000000000000000000000006b396de217a9ff4d00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000008001f00000000000a0010000000000000000000dc0008"], 0x254}}, 0x0) 433.674084ms ago: executing program 4 (id=5406): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)={0x2, 0x400000000000003, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0xfffffffffffffffd}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x400}}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x3}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0xe8}}, 0x0) 297.868632ms ago: executing program 2 (id=5407): r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$smackfs_netlabel(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='-0000000000000062410.00000000000000000003.00000000000800028916.000/0)'], 0x6f) 224.765766ms ago: executing program 3 (id=5408): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x1, 0x8, 0x1, 0x0, 0x0, 0x1fffd) 217.127008ms ago: executing program 1 (id=5409): r0 = gettid() waitid(0x1, r0, 0x0, 0x8, 0x0) 0s ago: executing program 2 (id=5410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x24, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x93}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}]}, @CTA_TUPLE_REPLY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) kernel console output (not intermixed with test programs): C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.165681][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.165929][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.166174][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.166404][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.166708][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.166952][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.167260][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.167505][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.167750][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.168049][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.168388][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.168638][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.168884][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.169176][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.169483][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.169744][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.170048][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.170312][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.170576][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.170830][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.171086][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.171397][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.171650][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.171903][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.172154][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.172402][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.172710][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.172961][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.173253][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.173503][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.173751][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.176631][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.176888][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.177138][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.177386][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.177639][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.177894][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.178185][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.178436][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.178693][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.178950][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.179205][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.179465][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.179712][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.180002][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.180266][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.180584][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.180837][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.181089][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.181341][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.181593][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.181857][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.182110][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.182369][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.182622][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.182875][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.183141][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.183392][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.183646][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.183897][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.184345][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.184600][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.184839][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.185075][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.185318][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.185559][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.185796][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.186039][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.186603][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.186860][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.187129][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.187391][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.187638][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.187889][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.188139][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.188389][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.188691][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.188942][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.189191][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.189443][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.189694][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.189946][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.190198][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.190458][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.190707][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.190953][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.191200][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.191584][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.191850][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.192109][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.192362][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.192616][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.192891][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.193204][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.193710][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.193969][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.194225][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.194487][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.194736][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.194993][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.195244][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.195513][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.195765][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.196020][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.196286][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.196557][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.196814][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.197064][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.197361][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.197612][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.197862][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.198116][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.198366][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.198624][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 470.198751][ T5192] usb 4-1: control msg error: -71 [ 470.201313][ C1] usb 4-1: pegasus_irq - urb shutting down with status: -2 [ 470.378139][ T7130] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 470.511071][ T6041] usb 4-1: USB disconnect, device number 110 [ 470.712447][T13373] openvswitch: netlink: Duplicate key (type 32). [ 471.446969][T13380] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 472.120133][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.601690][ C1] vkms_vblank_simulate: vblank timer overrun [ 473.019054][ T7130] usb 1-1: USB disconnect, device number 120 [ 473.113484][T13400] netlink: 'syz.0.3544': attribute type 10 has an invalid length. [ 473.113513][T13400] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3544'. [ 473.412400][T13404] geneve2: entered promiscuous mode [ 473.412438][T13404] geneve2: entered allmulticast mode [ 474.771000][T13421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3554'. [ 474.771034][T13421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3554'. [ 474.947298][ T10] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 475.157789][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.157824][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 475.157887][ T10] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 475.157915][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.168654][ T10] usb 2-1: config 0 descriptor?? [ 475.743173][ T10] Bluetooth: Can't get state to change to load configuration err [ 475.743201][ T10] Bluetooth: Loading sysconfig file failed [ 475.743267][ T10] ath3k 2-1:0.0: probe with driver ath3k failed with error -16 [ 475.851960][ T10] usb 2-1: USB disconnect, device number 113 [ 476.164083][T13433] netlink: 'syz.3.3559': attribute type 10 has an invalid length. [ 476.164114][T13433] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3559'. [ 476.885981][ T6041] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 477.049007][ T6041] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 477.049041][ T6041] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 477.049068][ T6041] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 477.049092][ T6041] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 477.049135][ T6041] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 477.049160][ T6041] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.067615][ T6041] usb 2-1: config 0 descriptor?? [ 477.291613][ T6041] hdpvr 2-1:0.0: firmware version 0x1e dated q|RC@22[7BD^jvi0 [ 477.291613][ T6041] pY [ 477.479288][ T6041] hdpvr 2-1:0.0: device init failed [ 477.479382][ T6041] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 477.496354][ T6041] usb 2-1: USB disconnect, device number 114 [ 477.535165][T13468] netlink: 'syz.4.3574': attribute type 10 has an invalid length. [ 477.535195][T13468] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3574'. [ 478.088256][ T6041] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 478.236749][ T6041] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 478.236779][ T6041] usb 4-1: config 0 has no interface number 0 [ 478.241706][ T6041] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 478.241743][ T6041] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.241769][ T6041] usb 4-1: Product: syz [ 478.241787][ T6041] usb 4-1: Manufacturer: syz [ 478.241812][ T6041] usb 4-1: SerialNumber: syz [ 478.264197][ T6041] usb 4-1: config 0 descriptor?? [ 478.281810][T13490] geneve2: entered promiscuous mode [ 478.283108][T13490] geneve2: entered allmulticast mode [ 478.397265][T13494] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 478.534562][ T6041] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 478.601239][ T6041] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 478.601948][ T6041] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 478.604468][ T6041] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 478.709869][ T6041] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 478.768493][ T6041] usb 4-1: USB disconnect, device number 111 [ 478.882314][ T6041] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 478.883290][ T6041] keyspan 4-1:0.133: device disconnected [ 479.060495][T13504] sit0: entered promiscuous mode [ 479.104423][T13504] netlink: 'syz.0.3592': attribute type 1 has an invalid length. [ 479.104449][T13504] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3592'. [ 479.126333][T13509] IPv6: NLM_F_CREATE should be specified when creating new route [ 479.419972][T13514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3600'. [ 479.743724][T13529] geneve2: entered promiscuous mode [ 479.743756][T13529] geneve2: entered allmulticast mode [ 480.710718][ T6010] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 480.810073][ T38] audit: type=1326 audit(1756430819.900:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13571 comm="syz.3.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5e55ebe9 code=0x7ffc0000 [ 480.810135][ T38] audit: type=1326 audit(1756430819.900:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13571 comm="syz.3.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5e55ebe9 code=0x7ffc0000 [ 480.820110][ T38] audit: type=1326 audit(1756430819.910:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13571 comm="syz.3.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f1f5e55ebe9 code=0x7ffc0000 [ 480.820175][ T38] audit: type=1326 audit(1756430819.921:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13571 comm="syz.3.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5e55ebe9 code=0x7ffc0000 [ 480.820810][ T38] audit: type=1326 audit(1756430819.921:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13571 comm="syz.3.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5e55ebe9 code=0x7ffc0000 [ 480.875651][ T6010] usb 1-1: Using ep0 maxpacket: 16 [ 480.903409][T13577] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3630'. [ 480.926684][ T6010] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 480.926716][ T6010] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.926737][ T6010] usb 1-1: config 0 has no interface number 0 [ 480.926787][ T6010] usb 1-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 480.926816][ T6010] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 480.926847][ T6010] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 480.926876][ T6010] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 2053, setting to 1024 [ 480.926905][ T6010] usb 1-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 480.926931][ T6010] usb 1-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 480.926977][ T6010] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 480.927001][ T6010] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.029370][T13579] QAT: Device 244 not found [ 481.075534][ T6010] usb 1-1: config 0 descriptor?? [ 481.081472][T13561] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 481.081759][T13561] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 481.130941][ T6010] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 481.372390][ T6010] usb 1-1: USB disconnect, device number 121 [ 482.133460][ T5921] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 482.306243][ T5921] usb 1-1: Using ep0 maxpacket: 8 [ 482.315785][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 482.315823][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 482.315956][ T5921] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 482.315984][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 482.316014][ T5921] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 482.316282][ T5921] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 482.316309][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.424584][ T5921] usb 1-1: config 0 descriptor?? [ 482.426789][T13592] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 482.831403][ T5854] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 482.833446][ T5921] usb 1-1: USB disconnect, device number 122 [ 484.724971][ T6041] usb 1-1: new low-speed USB device number 123 using dummy_hcd [ 484.899003][ T6041] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 484.899038][ T6041] usb 1-1: config 0 has no interface number 0 [ 484.899089][ T6041] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 484.899115][ T6041] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 484.899145][ T6041] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 484.899172][ T6041] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 484.899200][ T6041] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 484.899228][ T6041] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 484.899283][ T6041] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 484.899309][ T6041] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.957703][T13617] geneve2: entered promiscuous mode [ 484.957741][T13617] geneve2: entered allmulticast mode [ 485.031902][ T6041] usb 1-1: config 0 descriptor?? [ 485.033916][T13596] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 485.034073][T13596] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 485.091784][ T6041] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 485.351099][ T6041] usb 1-1: USB disconnect, device number 123 [ 485.357956][ T6041] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 486.048072][T13650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3666'. [ 486.193222][T13656] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3670'. [ 486.455397][T13665] ntfs3(nbd1): try to read out of volume at offset 0x0 [ 487.269671][T13700] netlink: 'syz.0.3691': attribute type 15 has an invalid length. [ 487.269699][T13700] netlink: 723 bytes leftover after parsing attributes in process `syz.0.3691'. [ 487.399592][ T7130] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 487.544623][ T7130] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 487.544687][ T7130] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.556513][ T7130] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 487.556552][ T7130] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 487.556578][ T7130] usb 2-1: Manufacturer: syz [ 487.616958][ T7130] usb 2-1: config 0 descriptor?? [ 487.650223][T13708] netlink: 'syz.0.3694': attribute type 24 has an invalid length. [ 487.744267][ T7130] rc_core: IR keymap rc-hauppauge not found [ 487.744294][ T7130] Registered IR keymap rc-empty [ 487.752794][ T7130] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 487.768411][ T7130] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input60 [ 487.927247][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 487.927480][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 487.927533][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 487.928729][ T10] usb 2-1: USB disconnect, device number 115 [ 488.676291][ T10] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 488.827637][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 488.843171][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 488.843223][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 488.843248][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.893472][ T10] usb 1-1: config 0 descriptor?? [ 488.920090][ T10] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input61 [ 489.104222][ T5192] bcm5974 1-1:0.0: could not read from device [ 489.189596][ T10] bcm5974 1-1:0.0: could not read from device [ 489.310509][ T10] input: failed to attach handler mousedev to device input61, error: -5 [ 489.328307][ T5192] bcm5974 1-1:0.0: could not read from device [ 489.348691][ T10] usb 1-1: USB disconnect, device number 124 [ 489.599996][T13758] Mount JFS Failure: -22 [ 489.600015][T13758] jfs_mount failed w/return code = -22 [ 489.854695][T13766] syz.1.3721 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 490.358729][T13784] netlink: 'syz.2.3730': attribute type 3 has an invalid length. [ 490.358756][T13784] netlink: 'syz.2.3730': attribute type 2 has an invalid length. [ 490.589467][T13790] syz.1.3733 (13790) used greatest stack depth: 18040 bytes left [ 490.833040][T13800] pim6reg: entered allmulticast mode [ 490.917224][T13803] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3739'. [ 490.918236][T13803] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3739'. [ 491.552230][T13829] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 491.920162][T13844] netlink: 'syz.0.3758': attribute type 21 has an invalid length. [ 491.920186][T13844] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3758'. [ 491.938319][T13844] netlink: 'syz.0.3758': attribute type 4 has an invalid length. [ 491.938344][T13844] netlink: 'syz.0.3758': attribute type 5 has an invalid length. [ 491.938359][T13844] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3758'. [ 492.040575][T13848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3761'. [ 492.159606][T13852] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3762'. [ 492.304592][T13858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.634678][T13872] comedi comedi0: dt2817: I/O port conflict (0xee,5) [ 492.742921][T13874] netlink: 'syz.1.3773': attribute type 2 has an invalid length. [ 493.005283][T13878] 8021q: adding VLAN 0 to HW filter on device bond2 [ 493.526608][T13911] binfmt_misc: register: failed to install interpreter file ./file0 [ 493.668089][ T38] audit: type=1326 audit(1756430833.697:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13915 comm="syz.1.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bf92ebe9 code=0x50000 [ 493.668383][ T38] audit: type=1326 audit(1756430833.697:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13915 comm="syz.1.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bf92ebe9 code=0x50000 [ 493.668658][ T38] audit: type=1326 audit(1756430833.697:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13915 comm="syz.1.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bf92ebe9 code=0x50000 [ 493.668952][ T38] audit: type=1326 audit(1756430833.697:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13915 comm="syz.1.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bf92ebe9 code=0x50000 [ 493.669214][ T38] audit: type=1326 audit(1756430833.697:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13915 comm="syz.1.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bf92ebe9 code=0x50000 [ 493.669475][ T38] audit: type=1326 audit(1756430833.697:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13915 comm="syz.1.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bf92ebe9 code=0x50000 [ 493.669747][ T38] audit: type=1326 audit(1756430833.697:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13915 comm="syz.1.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bf92ebe9 code=0x50000 [ 493.670176][ T38] audit: type=1326 audit(1756430833.697:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13915 comm="syz.1.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bf92ebe9 code=0x50000 [ 493.670227][ T38] audit: type=1326 audit(1756430833.697:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13915 comm="syz.1.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bf92ebe9 code=0x50000 [ 493.671252][ T38] audit: type=1326 audit(1756430833.697:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13915 comm="syz.1.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe1bf92ebe9 code=0x50000 [ 494.074000][ T31] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 494.232947][ T31] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 494.232976][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.232995][ T31] usb 5-1: Product: syz [ 494.233008][ T31] usb 5-1: Manufacturer: syz [ 494.233021][ T31] usb 5-1: SerialNumber: syz [ 494.265923][ T31] usb 5-1: config 0 descriptor?? [ 494.319181][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 494.319253][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 494.355973][ T31] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 494.657481][ T10] usb 5-1: USB disconnect, device number 117 [ 494.716990][T13942] netlink: 'syz.3.3806': attribute type 21 has an invalid length. [ 494.717106][T13942] netlink: 'syz.3.3806': attribute type 1 has an invalid length. [ 495.569282][T13964] IPVS: set_ctl: invalid protocol: 44 172.30.1.3:20004 [ 495.973920][T13974] Driver unsupported XDP return value 0 on prog (id 293) dev N/A, expect packet loss! [ 497.074383][ T993] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 497.120943][T14011] geneve2: entered promiscuous mode [ 497.120986][T14011] geneve2: entered allmulticast mode [ 497.248986][ T993] usb 1-1: New USB device found, idVendor=1fb9, idProduct=0401, bcdDevice=a0.60 [ 497.249020][ T993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.249042][ T993] usb 1-1: Product: syz [ 497.249058][ T993] usb 1-1: Manufacturer: syz [ 497.249074][ T993] usb 1-1: SerialNumber: syz [ 497.293156][ T993] usb 1-1: config 0 descriptor?? [ 497.305141][ T993] cp210x 1-1:0.0: cp210x converter detected [ 497.437329][T14016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3842'. [ 497.522344][ T993] usb 1-1: cp210x converter now attached to ttyUSB0 [ 497.585416][T14022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3846'. [ 497.710338][ T993] usb 1-1: USB disconnect, device number 125 [ 497.778459][ T993] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 497.779239][ T993] cp210x 1-1:0.0: device disconnected [ 498.035876][T14034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.433195][T14047] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 498.970238][ T7130] IPVS: starting estimator thread 0... [ 499.060077][T14072] IPVS: using max 7 ests per chain, 16800 per kthread [ 499.696452][T14099] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 499.834819][T14106] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3885'. [ 499.834860][T14106] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3885'. [ 499.883567][T14106] geneve2: entered promiscuous mode [ 500.337486][T14129] overlayfs: failed to resolve 'smackfsdef=&:': -2 [ 500.504312][ T5921] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 500.653860][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 500.656255][ T5921] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 500.656284][ T5921] usb 3-1: config 0 has no interface number 0 [ 500.681762][ T5921] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 500.681793][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.681816][ T5921] usb 3-1: Product: syz [ 500.681833][ T5921] usb 3-1: Manufacturer: syz [ 500.681849][ T5921] usb 3-1: SerialNumber: syz [ 500.723703][ T5921] usb 3-1: config 0 descriptor?? [ 500.756043][ T5921] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 500.756084][ T5921] usb 3-1: selecting invalid altsetting 1 [ 500.756103][ T5921] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 500.760525][ T5921] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 500.761046][ T5921] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 500.761100][ T5921] usb 3-1: media controller created [ 500.852702][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 501.141575][ T5921] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 501.236284][ T5921] usb 3-1: USB disconnect, device number 117 [ 501.358316][T14161] netlink: 'syz.0.3911': attribute type 3 has an invalid length. [ 501.358343][T14161] netlink: 'syz.0.3911': attribute type 3 has an invalid length. [ 501.358405][T14161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3911'. [ 501.915124][T14179] gretap1: entered allmulticast mode [ 503.812442][T14257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.293652][T14271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.740277][T14282] netlink: 'syz.1.3970': attribute type 2 has an invalid length. [ 504.781705][T14282] : entered promiscuous mode [ 505.010227][T14291] sctp: [Deprecated]: syz.1.3974 (pid 14291) Use of int in max_burst socket option. [ 505.010227][T14291] Use struct sctp_assoc_value instead [ 505.778537][T14318] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3983'. [ 506.974058][ T993] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 507.112855][ T993] usb 5-1: Using ep0 maxpacket: 8 [ 507.115497][ T993] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 507.115527][ T993] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 507.115564][ T993] usb 5-1: config 135 has no interface number 0 [ 507.115599][ T993] usb 5-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 507.115678][ T993] usb 5-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 507.115706][ T993] usb 5-1: config 135 interface 230 has no altsetting 0 [ 507.120561][ T993] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 507.120593][ T993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.120616][ T993] usb 5-1: Product: syz [ 507.120632][ T993] usb 5-1: Manufacturer: syz [ 507.120648][ T993] usb 5-1: SerialNumber: syz [ 507.195873][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4010'. [ 507.252316][ T993] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 507.252387][ T31] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 507.271434][ T993] usb 5-1: No valid video chain found. [ 507.398281][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.398310][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 507.401479][ T31] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 507.401513][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 507.401535][ T31] usb 4-1: SerialNumber: syz [ 507.461957][ T7130] usb 5-1: USB disconnect, device number 118 [ 507.572604][ T993] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 507.670118][ T31] usb 4-1: 0:2 : does not exist [ 507.712727][ T993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 507.712764][ T993] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 507.716087][ T993] usb 1-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 507.716120][ T993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.716142][ T993] usb 1-1: Product: syz [ 507.716159][ T993] usb 1-1: Manufacturer: syz [ 507.716175][ T993] usb 1-1: SerialNumber: syz [ 507.783472][ T993] usb 1-1: config 0 descriptor?? [ 507.816785][ T31] usb 4-1: USB disconnect, device number 112 [ 507.986489][ T993] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 508.203174][ T993] usb 1-1: USB disconnect, device number 126 [ 508.327182][ T6355] udevd[6355]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 508.361597][ T5921] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 508.471162][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 508.520498][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 508.530031][ T5921] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 508.530060][ T5921] usb 3-1: config 0 has no interface number 0 [ 508.530124][ T5921] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 508.530150][ T5921] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 508.530172][ T5921] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 508.530198][ T5921] usb 3-1: config 0 interface 2 altsetting 0 has an endpoint descriptor with address 0x5F, changing to 0xF [ 508.530224][ T5921] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xF has invalid maxpacket 28271, setting to 1024 [ 508.530252][ T5921] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 508.542924][ T5921] usb 3-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82 [ 508.542957][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.542978][ T5921] usb 3-1: Product: syz [ 508.542993][ T5921] usb 3-1: Manufacturer: syz [ 508.543008][ T5921] usb 3-1: SerialNumber: syz [ 508.658793][ T5921] usb 3-1: config 0 descriptor?? [ 508.660389][T14390] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 508.859613][T14406] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4027'. [ 508.901158][ T5921] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 2 is not bulk. [ 508.901180][ T5921] microtek usb (rev 0.4.3): can only deal with one output endpoints. Bailing out. [ 508.965873][ T5921] usb 3-1: USB disconnect, device number 118 [ 509.080341][T14408] veth3: entered promiscuous mode [ 509.733025][T14440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4044'. [ 509.915407][T14448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4048'. [ 510.076405][ T45] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 510.221537][ T45] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 510.233853][ T45] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 510.233889][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.233915][ T45] usb 5-1: Product: syz [ 510.233932][ T45] usb 5-1: Manufacturer: syz [ 510.233951][ T45] usb 5-1: SerialNumber: syz [ 510.278064][ T45] usb 5-1: config 0 descriptor?? [ 510.425006][T14466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4056'. [ 510.510959][ T45] powermate: unknown product id 0240 [ 510.570314][ T5921] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 510.610341][ T45] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input63 [ 510.661781][ C1] powermate: config urb returned -71 [ 510.664210][ C1] powermate: config urb returned -71 [ 510.664418][ C1] powermate: config urb returned -71 [ 510.664630][ C1] powermate: config urb returned -71 [ 510.719605][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 510.727221][ T5921] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 510.727252][ T5921] usb 3-1: config 0 has no interface number 0 [ 510.760795][ T5921] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 510.760828][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.760849][ T5921] usb 3-1: Product: syz [ 510.760865][ T5921] usb 3-1: Manufacturer: syz [ 510.760881][ T5921] usb 3-1: SerialNumber: syz [ 510.809013][ T5921] usb 3-1: config 0 descriptor?? [ 510.820080][ T45] usb 5-1: USB disconnect, device number 119 [ 510.820176][ C1] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 510.901097][ T5921] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 510.901192][ T5921] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 511.033320][ T5921] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 511.226717][ T5921] radio-raremono 3-1:0.35: raremono_cmd_main failed (-71) [ 511.277127][ T5921] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 511.317704][ T5921] usb 3-1: USB disconnect, device number 119 [ 511.318759][ T5921] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 511.546185][T14493] IPv6: sit1: Disabled Multicast RS [ 511.968411][ T38] kauditd_printk_skb: 2330 callbacks suppressed [ 511.968431][ T38] audit: type=1326 audit(1756430853.331:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14507 comm="syz.2.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f115aebe9 code=0x7ffc0000 [ 511.971229][ T38] audit: type=1326 audit(1756430853.331:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14507 comm="syz.2.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f115aebe9 code=0x7ffc0000 [ 511.979813][ T38] audit: type=1326 audit(1756430853.353:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14507 comm="syz.2.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f8f115aebe9 code=0x7ffc0000 [ 511.980506][ T38] audit: type=1326 audit(1756430853.353:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14507 comm="syz.2.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f115aebe9 code=0x7ffc0000 [ 511.981039][ T38] audit: type=1326 audit(1756430853.353:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14507 comm="syz.2.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f115aebe9 code=0x7ffc0000 [ 512.454881][T14527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4087'. [ 512.455051][T14527] bridge_slave_1: left allmulticast mode [ 512.455084][T14527] bridge_slave_1: left promiscuous mode [ 512.455398][T14527] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.557677][ T38] audit: type=1326 audit(1756430853.964:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14528 comm="syz.2.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f115aebe9 code=0x7ffc0000 [ 512.557738][ T38] audit: type=1326 audit(1756430853.964:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14528 comm="syz.2.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f115aebe9 code=0x7ffc0000 [ 512.557789][ T38] audit: type=1326 audit(1756430853.964:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14528 comm="syz.2.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f8f115aebe9 code=0x7ffc0000 [ 512.557837][ T38] audit: type=1326 audit(1756430853.975:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14528 comm="syz.2.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f115aebe9 code=0x7ffc0000 [ 512.557886][ T38] audit: type=1326 audit(1756430853.975:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14528 comm="syz.2.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f115aebe9 code=0x7ffc0000 [ 512.680989][T14527] bridge_slave_0: left allmulticast mode [ 512.681029][T14527] bridge_slave_0: left promiscuous mode [ 512.713177][T14527] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.553654][T14562] netlink: 'syz.0.4104': attribute type 2 has an invalid length. [ 513.621536][T14562] : entered promiscuous mode [ 513.819389][T14575] overlayfs: failed to resolve './file0': -2 [ 513.991659][T14581] netlink: 'syz.0.4114': attribute type 7 has an invalid length. [ 513.991683][T14581] netlink: 'syz.0.4114': attribute type 3 has an invalid length. [ 513.991699][T14581] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4114'. [ 514.373640][ T993] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 514.392894][T14595] netlink: 'syz.4.4121': attribute type 3 has an invalid length. [ 514.392918][T14595] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4121'. [ 514.522111][ T993] usb 4-1: Using ep0 maxpacket: 32 [ 514.524868][ T993] usb 4-1: config 0 has an invalid interface number: 123 but max is 0 [ 514.524898][ T993] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 514.524921][ T993] usb 4-1: config 0 has no interface number 0 [ 514.545146][ T993] usb 4-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 514.545177][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.545199][ T993] usb 4-1: Product: syz [ 514.545214][ T993] usb 4-1: Manufacturer: syz [ 514.545229][ T993] usb 4-1: SerialNumber: syz [ 514.614294][ T993] usb 4-1: config 0 descriptor?? [ 514.648065][ T993] cdc_acm 4-1:0.123: More than one union descriptor, skipping ... [ 514.648090][ T993] cdc_acm 4-1:0.123: skipping garbage [ 514.812129][ T45] usb 4-1: USB disconnect, device number 113 [ 514.839091][ T31] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 514.989229][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 514.993451][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.993479][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 514.993542][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 514.993573][ T31] usb 2-1: config 1 interface 0 has no altsetting 1 [ 515.052735][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 515.052771][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.052795][ T31] usb 2-1: Product: syz [ 515.052811][ T31] usb 2-1: Manufacturer: syz [ 515.052827][ T31] usb 2-1: SerialNumber: syz [ 515.114287][ T31] cdc_ncm 2-1:1.0: skipping garbage [ 515.114309][ T31] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 515.114353][ T31] cdc_ncm 2-1:1.0: bind() failure [ 515.311006][ T993] usb 2-1: USB disconnect, device number 116 [ 515.506931][T14626] binder: 14623:14626 ioctl c018620c 200000000380 returned -22 [ 515.967762][T14644] netlink: 'syz.0.4146': attribute type 1 has an invalid length. [ 515.967788][T14644] netlink: 'syz.0.4146': attribute type 3 has an invalid length. [ 515.967804][T14644] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4146'. [ 516.153137][T14650] netlink: 'syz.2.4148': attribute type 2 has an invalid length. [ 516.153163][T14650] netlink: 'syz.2.4148': attribute type 11 has an invalid length. [ 516.153179][T14650] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4148'. [ 516.243255][T14654] netlink: 'syz.0.4150': attribute type 1 has an invalid length. [ 516.539042][T14665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4156'. [ 516.845109][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 516.845130][ T38] audit: type=1400 audit(1756430858.556:2409): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=14675 comm="syz.2.4162" netif=wpan0 [ 517.379359][T14701] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4174'. [ 518.119881][ T31] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 518.259761][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 518.260826][ T31] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 518.300761][ T31] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 518.300796][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 518.300819][ T31] usb 5-1: Product: syz [ 518.300835][ T31] usb 5-1: Manufacturer: syz [ 518.334056][ T31] usb 5-1: config 0 descriptor?? [ 518.380128][ T31] gspca_main: 2770:9120 too many config [ 518.570109][ T5921] usb 5-1: USB disconnect, device number 120 [ 518.681292][T14742] openvswitch: netlink: IP tunnel dst address not specified [ 518.832864][T14748] netlink: 'syz.2.4197': attribute type 26 has an invalid length. [ 519.015939][T14752] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4200'. [ 519.580197][T14768] netlink: 324 bytes leftover after parsing attributes in process `syz.4.4207'. [ 519.606351][T14770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 521.152606][T14812] netlink: 'syz.1.4229': attribute type 3 has an invalid length. [ 521.152630][T14812] netlink: 666 bytes leftover after parsing attributes in process `syz.1.4229'. [ 522.054027][T14847] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4246'. [ 522.054354][T14847] 0X: renamed from caif0 [ 522.177802][T14847] 0X: entered allmulticast mode [ 522.177831][T14847] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 522.528419][ T5854] Bluetooth: hci3: unexpected event for opcode 0x080b [ 522.995206][T14888] netlink: 'syz.0.4267': attribute type 6 has an invalid length. [ 523.870854][ T31] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 523.992272][ T45] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 524.011304][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 524.013979][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 524.014005][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 524.017144][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 524.017173][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.017196][ T31] usb 4-1: Product: syz [ 524.017211][ T31] usb 4-1: Manufacturer: syz [ 524.017227][ T31] usb 4-1: SerialNumber: syz [ 524.150152][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 524.156843][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a [ 524.156877][ T45] usb 1-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 524.156899][ T45] usb 1-1: Product: syz [ 524.204642][ T45] usb 1-1: config 0 descriptor?? [ 524.230629][ T45] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 524.230963][ T45] gspca_stv06xx: st6422 sensor detected [ 524.286143][T14935] cgroup: noprefix used incorrectly [ 524.488048][ T31] usb 4-1: cannot find UAC_HEADER [ 524.659289][ T45] STV06xx 1-1:0.0: probe with driver STV06xx failed with error -71 [ 524.671686][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 524.697920][ T45] usb 1-1: USB disconnect, device number 127 [ 524.772422][T14948] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.4297' sets config #0 [ 524.772622][ T31] usb 4-1: USB disconnect, device number 114 [ 524.824408][ T6355] udevd[6355]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 525.052493][T14952] Process accounting resumed [ 526.565114][T15006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.871027][T15015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4329'. [ 527.117391][ T38] audit: type=1400 audit(1756430869.586:2410): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15020 comm="syz.3.4333" daddr=fe80::aa dest=20004 [ 527.660461][T15042] netlink: 'syz.4.4342': attribute type 21 has an invalid length. [ 527.660588][T15042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4342'. [ 528.028454][T15052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4347'. [ 528.156142][ T38] audit: type=1326 audit(1756430870.701:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15055 comm="syz.3.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5e55ebe9 code=0x7ffc0000 [ 528.156264][ T38] audit: type=1326 audit(1756430870.701:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15055 comm="syz.3.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5e55ebe9 code=0x7ffc0000 [ 528.198102][ T38] audit: type=1326 audit(1756430870.744:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15055 comm="syz.3.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f1f5e55ebe9 code=0x7ffc0000 [ 528.198179][ T38] audit: type=1326 audit(1756430870.744:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15055 comm="syz.3.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5e55ebe9 code=0x7ffc0000 [ 528.198235][ T38] audit: type=1326 audit(1756430870.744:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15055 comm="syz.3.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5e55ebe9 code=0x7ffc0000 [ 528.398046][ T38] audit: type=1326 audit(1756430870.959:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15063 comm="syz.0.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198a16ebe9 code=0x7ffc0000 [ 528.398221][ T38] audit: type=1326 audit(1756430870.959:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15063 comm="syz.0.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198a16ebe9 code=0x7ffc0000 [ 528.463019][ T38] audit: type=1326 audit(1756430871.013:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15063 comm="syz.0.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f198a16ebe9 code=0x7ffc0000 [ 528.463081][ T38] audit: type=1326 audit(1756430871.013:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15063 comm="syz.0.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198a16ebe9 code=0x7ffc0000 [ 528.590592][T15073] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4357'. [ 529.126112][T15091] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 529.160722][T15092] ip6gre1: entered allmulticast mode [ 529.239226][T15095] ip6gre1: entered allmulticast mode [ 530.283732][ T6041] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 530.432621][ T6041] usb 5-1: Using ep0 maxpacket: 8 [ 530.435433][ T6041] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 530.435469][ T6041] usb 5-1: config 179 has no interface number 0 [ 530.435528][ T6041] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 530.435557][ T6041] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 530.435592][ T6041] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 530.435621][ T6041] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 530.435646][ T6041] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 530.435676][ T6041] usb 5-1: config 179 interface 65 has no altsetting 0 [ 530.435712][ T6041] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 530.435736][ T6041] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.718940][ T6041] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input66 [ 530.837443][ T6041] usb 5-1: USB disconnect, device number 121 [ 531.122079][ T6010] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 531.266937][ T6010] usb 4-1: config index 0 descriptor too short (expected 897, got 27) [ 531.266967][ T6010] usb 4-1: config 2 has an invalid interface number: 1 but max is -1 [ 531.266989][ T6010] usb 4-1: config 2 has an invalid interface number: 1 but max is -1 [ 531.267009][ T6010] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 0 [ 531.267032][ T6010] usb 4-1: config 2 has no interface number 0 [ 531.317238][ T6010] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=20.da [ 531.317274][ T6010] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.317296][ T6010] usb 4-1: Product: syz [ 531.317312][ T6010] usb 4-1: Manufacturer: syz [ 531.317328][ T6010] usb 4-1: SerialNumber: syz [ 531.575238][ T6010] cdc_ncm 4-1:2.1: CDC Union missing and no IAD found [ 531.575290][ T6010] cdc_ncm 4-1:2.1: bind() failure [ 531.577813][T15178] netlink: 'syz.0.4409': attribute type 3 has an invalid length. [ 531.577838][T15178] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4409'. [ 531.615957][ T6010] usb 4-1: no audio or video endpoints found [ 531.629312][ T6010] usb 4-1: USB disconnect, device number 115 [ 531.700431][ T45] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 531.800865][T15183] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4411'. [ 531.840583][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 531.843361][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 531.846605][ T45] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 531.846637][ T45] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 531.846659][ T45] usb 3-1: Product: syz [ 531.846674][ T45] usb 3-1: Manufacturer: syz [ 531.846689][ T45] usb 3-1: SerialNumber: syz [ 532.129044][ T45] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 532.129075][ T45] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 532.129095][ T45] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 532.307339][ T45] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 532.307434][ T45] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 532.332792][ T45] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 532.362202][ T45] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 532.386856][ T45] usb 3-1: USB disconnect, device number 120 [ 532.414331][ T45] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 532.438444][ T45] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 532.439326][ T45] visor 3-1:1.0: device disconnected [ 532.751541][T15204] (unnamed net_device) (uninitialized): peer notification delay (3) is not a multiple of miimon (9), value rounded to 0 ms [ 533.020490][T15213] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.4426'. [ 533.286993][T15223] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4429'. [ 533.287025][T15223] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4429'. [ 533.321662][ T993] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 533.461356][ T45] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 533.461849][ T993] usb 2-1: Using ep0 maxpacket: 32 [ 533.465094][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 533.468343][ T993] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 533.468374][ T993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.468396][ T993] usb 2-1: Product: syz [ 533.468413][ T993] usb 2-1: Manufacturer: syz [ 533.468429][ T993] usb 2-1: SerialNumber: syz [ 533.479777][ T993] usb 2-1: config 0 descriptor?? [ 533.508129][ T6041] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 533.518698][ T993] pvrusb2: Hardware description: Terratec Grabster AV400 [ 533.518718][ T993] pvrusb2: ********** [ 533.518731][ T993] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 533.518745][ T993] pvrusb2: Important functionality might not be entirely working. [ 533.518758][ T993] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 533.518773][ T993] pvrusb2: ********** [ 533.621301][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 533.623803][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.626896][ T45] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 533.626928][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.626949][ T45] usb 3-1: Product: syz [ 533.626966][ T45] usb 3-1: Manufacturer: syz [ 533.626982][ T45] usb 3-1: SerialNumber: syz [ 533.687731][ T45] usb 3-1: config 0 descriptor?? [ 533.702625][ T45] usb 3-1: bad CDC descriptors [ 533.703907][ T45] usb 3-1: unsupported MDLM descriptors [ 533.761751][ T6041] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 533.762508][ T6041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.762527][ T6041] usb 5-1: Product: syz [ 533.762538][ T6041] usb 5-1: Manufacturer: syz [ 533.762548][ T6041] usb 5-1: SerialNumber: syz [ 533.838802][ T2368] pvrusb2: Invalid write control endpoint [ 533.961390][ T993] usb 3-1: USB disconnect, device number 121 [ 533.999208][ T6041] usb 5-1: config 0 descriptor?? [ 534.057510][ T45] usb 2-1: USB disconnect, device number 117 [ 534.243016][ T6041] hso 5-1:0.0: Failed to find BULK IN ep [ 534.252371][ T6041] usb-storage 5-1:0.0: USB Mass Storage device detected [ 534.352457][ T2368] pvrusb2: Invalid write control endpoint [ 534.352475][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 534.352488][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 534.352498][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 534.352510][ T2368] pvrusb2: Device being rendered inoperable [ 534.407709][ T2368] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 534.407779][ T2368] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 534.438373][ T2368] pvrusb2: Attached sub-driver cx25840 [ 534.438391][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 534.438404][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 534.566513][ T6041] usb 5-1: USB disconnect, device number 122 [ 535.346218][ T45] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 535.391398][ T5921] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 535.484392][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 535.486959][ T45] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 535.486987][ T45] usb 2-1: config 0 has no interface number 0 [ 535.490138][ T45] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 535.490169][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.490192][ T45] usb 2-1: Product: syz [ 535.490207][ T45] usb 2-1: Manufacturer: syz [ 535.490223][ T45] usb 2-1: SerialNumber: syz [ 535.559206][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 535.561179][ T45] usb 2-1: config 0 descriptor?? [ 535.561813][ T5921] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 535.597016][ T45] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 535.597111][ T45] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 535.613506][ T5921] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 535.613546][ T5921] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 535.613572][ T5921] usb 4-1: Product: syz [ 535.613589][ T5921] usb 4-1: Manufacturer: syz [ 535.613606][ T5921] usb 4-1: SerialNumber: syz [ 535.673536][T15273] ieee802154 phy0 wpan0: encryption failed: -90 [ 535.776107][ T45] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 535.776761][ T45] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 535.916202][ T5921] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 535.916230][ T5921] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 535.916251][ T5921] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 535.916272][ T5921] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 535.996700][ T45] usb 2-1: USB disconnect, device number 118 [ 536.106126][ T5921] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 536.106211][ T5921] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 536.128956][ T5921] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 536.146833][ T5921] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 536.169352][ T5921] usb 4-1: USB disconnect, device number 116 [ 536.206274][ T5921] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 536.269089][T15284] sctp: [Deprecated]: syz.2.4461 (pid 15284) Use of int in max_burst socket option deprecated. [ 536.269089][T15284] Use struct sctp_assoc_value instead [ 536.274791][ T5921] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 536.275798][ T5921] visor 4-1:1.0: device disconnected [ 537.483671][T15331] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4482'. [ 537.509309][ T38] kauditd_printk_skb: 2 callbacks suppressed [ 537.509329][ T38] audit: type=1326 audit(1756430880.744:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15332 comm="syz.3.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5e55ebe9 code=0x7ffc0000 [ 537.512050][ T38] audit: type=1326 audit(1756430880.744:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15332 comm="syz.3.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5e55ebe9 code=0x7ffc0000 [ 537.516717][ T38] audit: type=1326 audit(1756430880.744:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15332 comm="syz.3.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f1f5e55ebe9 code=0x7ffc0000 [ 537.516785][ T38] audit: type=1326 audit(1756430880.744:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15332 comm="syz.3.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5e55ebe9 code=0x7ffc0000 [ 537.516847][ T38] audit: type=1326 audit(1756430880.744:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15332 comm="syz.3.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5e55ebe9 code=0x7ffc0000 [ 537.683699][ T31] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 537.843007][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 537.867526][ T31] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 537.867556][ T31] usb 3-1: config 0 has no interface number 0 [ 537.867614][ T31] usb 3-1: config 0 interface 12 has no altsetting 0 [ 537.889667][ T31] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 537.889700][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.889723][ T31] usb 3-1: Product: syz [ 537.889740][ T31] usb 3-1: Manufacturer: syz [ 537.889754][ T31] usb 3-1: SerialNumber: syz [ 537.928970][ T31] usb 3-1: config 0 descriptor?? [ 537.989243][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4492'. [ 538.308538][T15358] netlink: 'syz.3.4497': attribute type 5 has an invalid length. [ 538.343470][ T31] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 538.343530][ T31] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 538.343550][ T31] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 538.343650][ T31] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 538.402332][ T31] usb 3-1: USB disconnect, device number 122 [ 538.494659][T15364] netlink: 'syz.4.4500': attribute type 12 has an invalid length. [ 538.494686][T15364] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4500'. [ 538.673288][T15372] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 540.765779][T15447] netlink: 'syz.0.4541': attribute type 6 has an invalid length. [ 540.852779][ T31] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 540.871376][ T45] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 540.980515][ T5854] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 540.993168][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 540.995957][ T31] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 540.995987][ T31] usb 3-1: config 179 has no interface number 0 [ 540.996041][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 540.996070][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 540.996099][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 540.996127][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 540.996156][ T31] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 540.996201][ T31] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 540.996225][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.007078][T15441] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 541.015627][ T45] usb 2-1: config index 0 descriptor too short (expected 65069, got 45) [ 541.015664][ T45] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 541.015691][ T45] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 541.015718][ T45] usb 2-1: config 0 has an invalid descriptor of length 177, skipping remainder of the config [ 541.015741][ T45] usb 2-1: config 0 has no interfaces? [ 541.015778][ T45] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 541.015806][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.037238][ T45] usb 2-1: config 0 descriptor?? [ 541.067160][ T5844] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 541.222363][ T5844] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 541.222394][ T5844] usb 4-1: config 0 has no interface number 0 [ 541.222576][ T5844] usb 4-1: config 0 interface 122 has no altsetting 0 [ 541.260571][ T5844] usb 4-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 541.260605][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.260628][ T5844] usb 4-1: Product: syz [ 541.260644][ T5844] usb 4-1: Manufacturer: syz [ 541.260801][ T5844] usb 4-1: SerialNumber: syz [ 541.363671][ T31] usb 2-1: USB disconnect, device number 119 [ 541.593194][ T5844] usb 4-1: config 0 descriptor?? [ 541.604093][ T10] usb 3-1: USB disconnect, device number 123 [ 541.604193][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 541.604266][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 541.676738][T15465] netlink: 'syz.4.4550': attribute type 26 has an invalid length. [ 542.033219][ T5844] usb 4-1: USB disconnect, device number 117 [ 542.034448][ T5844] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 542.393196][T15486] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4560'. [ 542.752623][T15500] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4567'. [ 543.221850][ T6041] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 543.360295][ T6041] usb 1-1: Using ep0 maxpacket: 16 [ 543.362904][ T6041] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.362960][ T6041] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 543.362991][ T6041] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 543.363020][ T6041] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 543.363057][ T6041] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 543.365971][ T6041] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 543.366005][ T6041] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.366028][ T6041] usb 1-1: Product: syz [ 543.366054][ T6041] usb 1-1: Manufacturer: syz [ 543.366069][ T6041] usb 1-1: SerialNumber: syz [ 543.486134][ T6041] usb 1-1: config 0 descriptor?? [ 543.500139][ T6041] xbox_remote_probe: endpoint_in message size==0? [ 543.640186][T15530] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4581'. [ 543.640220][T15530] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4581'. [ 543.734631][ T45] usb 1-1: USB disconnect, device number 2 [ 543.931126][T15538] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4585'. [ 544.472692][ T6041] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 544.479597][T15559] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4596'. [ 544.609143][ T6041] usb 2-1: Using ep0 maxpacket: 32 [ 544.613596][ T6041] usb 2-1: unable to get BOS descriptor or descriptor too short [ 544.615309][ T6041] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 544.649761][ T6041] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 544.649792][ T6041] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.649814][ T6041] usb 2-1: Product: syz [ 544.649829][ T6041] usb 2-1: Manufacturer: syz [ 544.649845][ T6041] usb 2-1: SerialNumber: syz [ 544.917896][ T6041] usb 2-1: Limiting number of CPorts to U8_MAX [ 544.962605][ T6041] usb 2-1: Not enough endpoints found in device, aborting! [ 545.042442][T15574] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4604'. [ 545.113489][ T5844] usb 2-1: USB disconnect, device number 120 [ 545.237247][T15577] netlink: zone id is out of range [ 545.237265][T15577] netlink: del zone limit has 8 unknown bytes [ 545.703076][T15591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4611'. [ 545.703111][T15591] netlink: 'syz.4.4611': attribute type 1 has an invalid length. [ 546.055193][T15604] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 546.174745][ T5921] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 546.323887][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 546.338654][ T5921] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 546.338689][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.338711][ T5921] usb 2-1: Product: syz [ 546.338727][ T5921] usb 2-1: Manufacturer: syz [ 546.338743][ T5921] usb 2-1: SerialNumber: syz [ 546.382655][ T5921] usb 2-1: config 0 descriptor?? [ 546.405653][ T5921] gspca_main: sq930x-2.14.0 probing 2770:930c [ 546.486664][ T38] audit: type=1326 audit(1756430890.368:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15613 comm="syz.4.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f926ebe9 code=0x7ffc0000 [ 546.487697][ T38] audit: type=1326 audit(1756430890.368:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15613 comm="syz.4.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f926ebe9 code=0x7ffc0000 [ 546.505436][ T38] audit: type=1326 audit(1756430890.389:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15613 comm="syz.4.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7ff6f926ebe9 code=0x7ffc0000 [ 546.505502][ T38] audit: type=1326 audit(1756430890.389:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15613 comm="syz.4.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f926ebe9 code=0x7ffc0000 [ 546.505619][ T38] audit: type=1326 audit(1756430890.389:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15613 comm="syz.4.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f926ebe9 code=0x7ffc0000 [ 546.813284][ T5921] gspca_sq930x: ucbus_write failed -71 [ 547.013507][ T5921] gspca_sq930x: Sensor ov9630 not yet treated [ 547.013611][ T5921] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 547.046329][ T5921] usb 2-1: USB disconnect, device number 121 [ 547.492792][ T38] audit: type=1326 audit(1756430891.451:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15638 comm="syz.2.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f115aebe9 code=0x7ffc0000 [ 547.493391][ T38] audit: type=1326 audit(1756430891.451:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15638 comm="syz.2.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f115aebe9 code=0x7ffc0000 [ 547.505941][ T38] audit: type=1326 audit(1756430891.462:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15638 comm="syz.2.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f8f115aebe9 code=0x7ffc0000 [ 547.506403][ T38] audit: type=1326 audit(1756430891.462:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15638 comm="syz.2.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f115aebe9 code=0x7ffc0000 [ 547.506454][ T38] audit: type=1326 audit(1756430891.462:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15638 comm="syz.2.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f115aebe9 code=0x7ffc0000 [ 547.824666][T15646] overlayfs: missing 'lowerdir' [ 547.931319][T15648] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4641'. [ 547.931349][T15648] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4641'. [ 547.969381][T15652] geneve3: entered promiscuous mode [ 547.969416][T15652] geneve3: entered allmulticast mode [ 548.714472][T15674] /dev/nullb0: Can't open blockdev [ 549.193285][T15697] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 549.711903][T15714] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4670'. [ 550.861173][T15735] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.861719][T15735] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.413746][ T10] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 551.569461][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 551.569543][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 551.617802][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 551.633129][ T10] usb 2-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=79.ba [ 551.633163][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.633185][ T10] usb 2-1: Product: syz [ 551.633202][ T10] usb 2-1: Manufacturer: syz [ 551.633217][ T10] usb 2-1: SerialNumber: syz [ 551.684366][ T10] usb 2-1: config 0 descriptor?? [ 551.745878][T15779] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.903052][ T10] snd-usb-hiface 2-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 552.087671][ T5844] usb 2-1: USB disconnect, device number 122 [ 552.350138][T15735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.379369][T15735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.433454][T15759] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 553.433491][T15759] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 553.433646][T15759] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 553.610449][ T3606] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.632873][ T3606] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.632923][ T3606] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.632963][ T3606] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.764844][T15801] netlink: 336 bytes leftover after parsing attributes in process `syz.2.4710'. [ 553.794943][T15806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4711'. [ 553.794987][T15806] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4711'. [ 554.382440][T15824] tmpfs: Bad value for 'mpol' [ 554.544864][ T38] kauditd_printk_skb: 5 callbacks suppressed [ 554.547233][ T38] audit: type=1326 audit(1756430899.005:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15828 comm="syz.2.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f115aebe9 code=0x7ffc0000 [ 554.558052][ T38] audit: type=1326 audit(1756430899.026:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15828 comm="syz.2.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f8f115aebe9 code=0x7ffc0000 [ 554.558128][ T38] audit: type=1326 audit(1756430899.026:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15828 comm="syz.2.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f115aebe9 code=0x7ffc0000 [ 554.558184][ T38] audit: type=1326 audit(1756430899.026:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15828 comm="syz.2.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f115aebe9 code=0x7ffc0000 [ 554.979085][T15847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4728'. [ 555.681581][T15876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.946207][T15883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4742'. [ 556.045119][ T5844] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 556.185781][ T5844] usb 1-1: Using ep0 maxpacket: 16 [ 556.190287][ T5844] usb 1-1: config index 0 descriptor too short (expected 1828, got 36) [ 556.190316][ T5844] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 556.190337][ T5844] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 556.190392][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 556.190417][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 556.190445][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 556.262144][ T5844] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 556.262175][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.262196][ T5844] usb 1-1: Product: syz [ 556.262211][ T5844] usb 1-1: Manufacturer: syz [ 556.262228][ T5844] usb 1-1: SerialNumber: syz [ 556.309154][ T5844] usb 1-1: config 0 descriptor?? [ 556.323960][ T5844] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 556.324269][ T5844] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 556.324346][ T5844] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 556.351579][ T5844] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 556.351679][ T5844] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 556.351768][ T5844] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 556.351856][ T5844] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 556.351944][ T5844] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 556.393061][ T5844] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 556.395819][ T5844] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 556.395955][ T5844] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 556.396070][ T5844] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 556.396160][ T5844] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 556.398805][ T5844] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 556.440886][ T38] audit: type=1326 audit(1756430901.054:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15896 comm="syz.3.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5e55ebe9 code=0x7ffc0000 [ 556.440958][ T38] audit: type=1326 audit(1756430901.054:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15896 comm="syz.3.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5e55ebe9 code=0x7ffc0000 [ 556.471914][ T38] audit: type=1326 audit(1756430901.075:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15896 comm="syz.3.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f1f5e55ebe9 code=0x7ffc0000 [ 556.471982][ T38] audit: type=1326 audit(1756430901.075:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15896 comm="syz.3.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5e55ebe9 code=0x7ffc0000 [ 556.560193][ T5844] usb 1-1: USB disconnect, device number 3 [ 556.590526][ T5844] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 556.609966][ T5844] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 556.610925][ T5844] keyspan 1-1:0.0: device disconnected [ 557.497315][T15933] libceph: resolve '4' (ret=-3): failed [ 557.934745][T15951] bridge_slave_1: left allmulticast mode [ 557.934778][T15951] bridge_slave_1: left promiscuous mode [ 557.935065][T15951] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.021219][ T6041] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 558.037835][T15951] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 558.141918][T15957] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4777'. [ 558.184181][ T6041] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.184212][ T6041] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 558.184253][ T6041] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 558.184277][ T6041] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 558.186004][ T6041] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 558.186043][ T6041] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 558.186066][ T6041] usb 1-1: SerialNumber: syz [ 558.433439][ T6041] usb 1-1: 0:2 : does not exist [ 558.433531][ T6041] usb 1-1: unit 5 not found! [ 558.547761][ T6041] usb 1-1: USB disconnect, device number 4 [ 558.605767][T15975] netlink: 'syz.4.4782': attribute type 1 has an invalid length. [ 558.809807][ T6355] udevd[6355]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 559.188754][T15995] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4792'. [ 559.363774][ T5844] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 559.503610][ T5844] usb 5-1: Using ep0 maxpacket: 32 [ 559.506278][ T5844] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 559.506307][ T5844] usb 5-1: config 0 has no interface number 0 [ 559.506360][ T5844] usb 5-1: config 0 interface 2 has no altsetting 0 [ 559.545090][ T5844] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 559.545122][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.545142][ T5844] usb 5-1: Product: syz [ 559.545157][ T5844] usb 5-1: Manufacturer: syz [ 559.545173][ T5844] usb 5-1: SerialNumber: syz [ 559.583676][ T5844] usb 5-1: config 0 descriptor?? [ 559.782984][ T5844] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 560.119524][ T5844] usb 5-1: USB disconnect, device number 123 [ 560.218963][ T5977] udevd[5977]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 560.302040][T16028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.171632][ T6041] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 561.329975][ T6041] usb 5-1: Using ep0 maxpacket: 8 [ 561.333056][ T6041] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 561.333086][ T6041] usb 5-1: config 179 has no interface number 0 [ 561.333146][ T6041] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 561.333176][ T6041] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 561.333205][ T6041] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 561.333233][ T6041] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 561.333262][ T6041] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 561.333291][ T6041] usb 5-1: config 179 interface 65 has no altsetting 0 [ 561.333328][ T6041] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 561.333353][ T6041] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.477061][T16068] lo: entered promiscuous mode [ 561.478925][T16068] tunl0: entered promiscuous mode [ 561.514285][T16068] gre0: entered promiscuous mode [ 561.560399][ T6041] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input67 [ 561.589554][T16068] gretap0: entered promiscuous mode [ 561.590266][T16068] erspan0: entered promiscuous mode [ 561.603066][T16068] ip_vti0: entered promiscuous mode [ 561.604007][T16068] ip6_vti0: entered promiscuous mode [ 561.604688][T16068] ip6tnl0: entered promiscuous mode [ 561.605243][T16068] ip6gre0: entered promiscuous mode [ 561.605809][T16068] syz_tun: entered promiscuous mode [ 561.606460][T16068] ip6gretap0: entered promiscuous mode [ 561.607029][T16068] vcan0: entered promiscuous mode [ 561.607369][T16068] bond0: entered promiscuous mode [ 561.607385][T16068] bond_slave_0: entered promiscuous mode [ 561.607592][T16068] bond_slave_1: entered promiscuous mode [ 561.608463][T16068] team0: entered promiscuous mode [ 561.608481][T16068] team_slave_0: entered promiscuous mode [ 561.608662][T16068] team_slave_1: entered promiscuous mode [ 561.609031][T16068] dummy0: entered promiscuous mode [ 561.609601][T16068] nlmon0: entered promiscuous mode [ 561.628714][T16068] caif0: entered promiscuous mode [ 561.665828][T16068] batadv0: entered promiscuous mode [ 561.718465][T16068] vxcan0: entered promiscuous mode [ 561.737226][T16068] vxcan1: entered promiscuous mode [ 561.775329][T16071] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4832'. [ 561.776398][T16068] veth0: entered promiscuous mode [ 561.800848][ T5192] input input67: unable to receive magic message: -71 [ 561.816067][T16068] veth1: entered promiscuous mode [ 561.917532][T16068] wg0: entered promiscuous mode [ 561.918254][T16068] wg1: entered promiscuous mode [ 561.918874][T16068] wg2: entered promiscuous mode [ 561.919508][T16068] veth0_to_bridge: entered promiscuous mode [ 561.951269][T16068] bridge_slave_0: entered promiscuous mode [ 561.954641][T16068] veth1_to_bridge: entered promiscuous mode [ 561.955393][T16068] bridge_slave_1: entered promiscuous mode [ 561.979904][T16068] veth0_to_bond: entered promiscuous mode [ 562.047478][ T5192] input input67: unable to receive magic message: -71 [ 562.144187][T16068] bond0: (slave bond_slave_0): Releasing backup interface [ 562.258807][ T5192] input input67: unable to receive magic message: -71 [ 562.442784][T16068] veth1_to_bond: entered promiscuous mode [ 562.561984][ T5192] input input67: unable to receive magic message: -71 [ 562.699337][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 562.699424][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 562.700117][ T6041] usb 5-1: USB disconnect, device number 124 [ 562.736676][T16068] bond0: (slave bond_slave_1): Releasing backup interface [ 562.902920][T16068] veth0_to_team: entered promiscuous mode [ 563.036223][T16068] team0: Port device team_slave_0 removed [ 563.036787][T16068] veth1_to_team: entered promiscuous mode [ 563.140793][T16068] team0: Port device team_slave_1 removed [ 563.141293][T16068] veth0_to_batadv: entered promiscuous mode [ 563.148961][T16068] batadv_slave_0: entered promiscuous mode [ 563.149340][T16068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.149383][T16068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.215105][T16068] veth1_to_batadv: entered promiscuous mode [ 563.230716][T16068] batadv_slave_1: entered promiscuous mode [ 563.230921][T16068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.230950][T16068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.266653][T16068] xfrm0: entered promiscuous mode [ 563.267706][T16068] veth0_to_hsr: entered promiscuous mode [ 563.277097][T16068] veth1_to_hsr: entered promiscuous mode [ 563.296421][T16068] hsr0: entered promiscuous mode [ 563.297173][T16068] veth1_virt_wifi: entered promiscuous mode [ 563.303167][T16068] veth0_virt_wifi: entered promiscuous mode [ 563.317815][T16068] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 563.337349][T16068] vlan0: entered promiscuous mode [ 563.341660][T16068] vlan1: entered promiscuous mode [ 563.348680][T16068] macvlan0: entered promiscuous mode [ 563.362039][T16068] macvlan1: entered promiscuous mode [ 563.368270][T16068] ipvlan0: entered promiscuous mode [ 563.368760][T16068] ipvlan1: entered promiscuous mode [ 563.394553][T16068] veth0_macvtap: entered promiscuous mode [ 563.401032][T16068] macsec0: entered promiscuous mode [ 563.407034][T16068] geneve0: entered promiscuous mode [ 563.416110][T16068] geneve1: entered promiscuous mode [ 563.416912][T16068] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 563.424113][T16068] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 563.434063][T16068] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 563.434991][T16068] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 563.438968][T16068] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 563.449118][T16068] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 563.454305][T16068] ip6tnl1: entered promiscuous mode [ 563.465204][T16068] syztnl2: entered promiscuous mode [ 563.465399][T16068] bridge1: entered promiscuous mode [ 563.473090][T16068] gretap1: entered promiscuous mode [ 563.473278][T16068] bond1: entered promiscuous mode [ 563.484806][T16068] ip6erspan0: entered promiscuous mode [ 563.489165][T16068] veth2: entered promiscuous mode [ 563.489404][T16068] sit1: entered promiscuous mode [ 563.523314][T16068] veth4: entered promiscuous mode [ 563.523547][T16068] veth5: entered promiscuous mode [ 563.792948][T16102] process 'syz.4.4846' launched './file0' with NULL argv: empty string added [ 564.553590][T16129] geneve2: entered promiscuous mode [ 564.553624][T16129] geneve2: entered allmulticast mode [ 564.577543][T16134] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4859'. [ 565.126663][T16154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4869'. [ 565.762488][T16180] geneve3: entered promiscuous mode [ 565.762520][T16180] geneve3: entered allmulticast mode [ 565.785077][ T5844] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 565.930362][ T5844] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 565.930398][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 565.930428][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 565.936310][ T5844] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 565.936344][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.936366][ T5844] usb 5-1: Product: syz [ 565.936383][ T5844] usb 5-1: Manufacturer: syz [ 565.936405][ T5844] usb 5-1: SerialNumber: syz [ 566.003761][ T5844] usb 5-1: config 0 descriptor?? [ 566.978123][ T993] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 567.100324][T16194] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 567.100503][T16194] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 567.135113][ T993] usb 3-1: Using ep0 maxpacket: 32 [ 567.139389][ T993] usb 3-1: config 0 has an invalid interface number: 37 but max is 1 [ 567.139420][ T993] usb 3-1: config 0 has no interface number 1 [ 567.157902][ T993] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 567.157935][ T993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.157958][ T993] usb 3-1: Product: syz [ 567.157973][ T993] usb 3-1: Manufacturer: syz [ 567.157990][ T993] usb 3-1: SerialNumber: syz [ 567.238722][ T993] usb 3-1: config 0 descriptor?? [ 567.249346][T16194] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 567.249372][T16194] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 567.279409][T16194] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 567.279439][T16194] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 567.322370][T16194] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 567.322792][T16194] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 567.531160][ T993] qcserial 3-1:0.37: Qualcomm USB modem converter detected [ 567.564580][T16216] block nbd4: Attempted send on invalid socket [ 567.564607][T16216] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 567.812876][ T993] usb 3-1: USB disconnect, device number 124 [ 567.819671][ T993] qcserial 3-1:0.37: device disconnected [ 568.019589][T16218] bond3: entered allmulticast mode [ 568.612271][T16239] MPI: mpi too large (124808 bits) [ 569.547284][T16266] /dev/sg0: Can't lookup blockdev [ 570.397798][T16287] /dev/nullb0: Can't open blockdev [ 571.080024][T16305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4935'. [ 573.145467][T16360] sctp: [Deprecated]: syz.2.4962 (pid 16360) Use of int in max_burst socket option. [ 573.145467][T16360] Use struct sctp_assoc_value instead [ 573.485369][ T993] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 573.625947][ T993] usb 2-1: Using ep0 maxpacket: 16 [ 573.652310][ T993] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 573.652344][ T993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.652465][ T993] usb 2-1: Product: syz [ 573.652482][ T993] usb 2-1: Manufacturer: syz [ 573.652500][ T993] usb 2-1: SerialNumber: syz [ 573.710334][ T993] usb 2-1: config 0 descriptor?? [ 573.749985][ T993] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 573.897340][T16377] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 574.006037][ T993] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 574.006216][ T993] visor 2-1:0.0: probe with driver visor failed with error -5 [ 574.216175][ T993] usb 2-1: USB disconnect, device number 123 [ 574.627680][ T38] audit: type=1400 audit(1756430920.559:2450): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=16390 comm="syz.2.4975" [ 574.904256][T16395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4978'. [ 575.024448][T16399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4979'. [ 575.024515][T16399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4979'. [ 575.138357][T16403] netlink: 'syz.4.4981': attribute type 1 has an invalid length. [ 575.138385][T16403] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4981'. [ 576.022661][ T5844] iguanair 5-1:0.0: failed to get version [ 576.023124][ T5844] iguanair 5-1:0.0: probe with driver iguanair failed with error -110 [ 576.068161][ T5844] usb 5-1: USB disconnect, device number 125 [ 576.355797][T16433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4996'. [ 576.626263][T16439] ISOFS: Unable to identify CD-ROM format. [ 577.299999][T16469] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5015'. [ 577.300032][T16469] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5015'. [ 577.418819][T16475] vlan0: entered promiscuous mode [ 577.959014][T16496] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551615) [ 577.959046][T16496] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 578.015736][T16500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5029'. [ 579.836881][ T993] IPVS: starting estimator thread 0... [ 579.934161][T16560] IPVS: using max 6 ests per chain, 14400 per kthread [ 579.941694][T16562] netlink: 'syz.0.5059': attribute type 1 has an invalid length. [ 579.941747][T16562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5059'. [ 580.103569][T16569] program syz.3.5060 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 581.371836][T16614] netlink: 'syz.4.5084': attribute type 21 has an invalid length. [ 581.371969][T16614] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5084'. [ 581.388684][ T5844] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 581.490723][T16620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5087'. [ 581.539019][ T5844] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 581.539050][ T5844] usb 2-1: config 0 has no interface number 0 [ 581.539111][ T5844] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 581.539158][ T5844] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 581.539183][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.551702][ T5844] usb 2-1: config 0 descriptor?? [ 581.616938][ T5844] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input69 [ 581.806658][ T5844] usb 2-1: USB disconnect, device number 124 [ 582.143292][T16638] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 582.143465][T16638] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 582.389454][T16646] netlink: 'syz.3.5100': attribute type 1 has an invalid length. [ 582.749623][T16662] netlink: 'syz.1.5108': attribute type 10 has an invalid length. [ 582.832559][ T6010] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 582.938418][T16662] team0: Port device wlan1 added [ 582.972245][ T6010] usb 5-1: Using ep0 maxpacket: 8 [ 582.975091][ T6010] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 582.975131][ T6010] usb 5-1: config 0 interface 0 has no altsetting 0 [ 582.980129][ T6010] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 582.980162][ T6010] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.980185][ T6010] usb 5-1: Product: syz [ 582.980200][ T6010] usb 5-1: Manufacturer: syz [ 582.980216][ T6010] usb 5-1: SerialNumber: syz [ 583.056012][ T6010] usb 5-1: config 0 descriptor?? [ 583.063657][ T6010] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 583.248291][T16671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 583.295942][ T6010] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 583.298656][ T6010] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 583.509234][ T6010] usb 5-1: USB disconnect, device number 126 [ 583.699786][T16688] vti0: entered promiscuous mode [ 584.721746][T16721] tmpfs: Bad value for 'mpol' [ 584.753025][T16722] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5137'. [ 584.781843][T16722] netlink: 18 bytes leftover after parsing attributes in process `syz.1.5137'. [ 584.781873][T16722] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 584.945140][T16728] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5144'. [ 585.485775][T16752] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 585.759904][ T5922] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 585.892616][T16771] comedi comedi0: No channels found! [ 585.936301][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 585.944553][ T5922] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 585.944582][ T5922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.944604][ T5922] usb 1-1: config 0 has no interface number 0 [ 585.944659][ T5922] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 585.944688][ T5922] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 585.944717][ T5922] usb 1-1: config 0 interface 52 has no altsetting 0 [ 585.953427][ T5922] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 585.953463][ T5922] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 585.953505][ T5922] usb 1-1: Manufacturer: syz [ 585.985653][ T5922] usb 1-1: config 0 descriptor?? [ 586.014085][ T5922] hub 1-1:0.52: bad descriptor, ignoring hub [ 586.014133][ T5922] hub 1-1:0.52: probe with driver hub failed with error -5 [ 586.309827][ T5922] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input70 [ 586.480603][ T5922] usb 1-1: Failed to suspend device, error -71 [ 586.481964][ T5922] usb 1-1: USB disconnect, device number 5 [ 586.507596][T16783] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 586.914806][ T6010] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 587.054905][ T6010] usb 5-1: Using ep0 maxpacket: 16 [ 587.065271][ T6010] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 587.065302][ T6010] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.065323][ T6010] usb 5-1: config 0 has no interface number 0 [ 587.065372][ T6010] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 587.065409][ T6010] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 587.065439][ T6010] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 587.065469][ T6010] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 587.065493][ T6010] usb 5-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 587.065518][ T6010] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 587.065564][ T6010] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 587.065589][ T6010] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.198554][ T6010] usb 5-1: config 0 descriptor?? [ 587.199560][T16785] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 587.226727][ T6010] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 587.252358][ T5844] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 587.278218][T16803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5179'. [ 587.278915][T16803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5179'. [ 587.390943][ T5844] usb 3-1: Using ep0 maxpacket: 8 [ 587.394231][ T5844] usb 3-1: unable to get BOS descriptor or descriptor too short [ 587.396468][ T5844] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 587.396497][ T5844] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 587.396518][ T5844] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 587.441859][ T5844] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 587.441891][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.441912][ T5844] usb 3-1: Product: syz [ 587.441927][ T5844] usb 3-1: Manufacturer: syz [ 587.441942][ T5844] usb 3-1: SerialNumber: syz [ 587.580702][ T6010] snd-usb-audio 5-1:0.126: probe with driver snd-usb-audio failed with error -12 [ 587.608287][ T6010] usb 5-1: USB disconnect, device number 127 [ 587.962163][ T5844] usb 3-1: 0:2 : does not exist [ 588.027482][ T5844] usb 3-1: USB disconnect, device number 125 [ 588.127662][ T6355] udevd[6355]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 588.159391][ T38] audit: type=1326 audit(1756430935.075:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16814 comm="syz.3.5184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5e55ebe9 code=0x7ffc0000 [ 588.162025][ T38] audit: type=1326 audit(1756430935.075:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16814 comm="syz.3.5184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5e55ebe9 code=0x7ffc0000 [ 588.182262][ T38] audit: type=1326 audit(1756430935.097:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16814 comm="syz.3.5184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f1f5e55ebe9 code=0x7ffc0000 [ 588.192608][ T38] audit: type=1326 audit(1756430935.108:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16814 comm="syz.3.5184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5e55ebe9 code=0x7ffc0000 [ 588.593167][T16830] Invalid option length (0) for dns_resolver key [ 588.594788][T16831] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5192'. [ 588.686252][ T993] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 588.835076][ T993] usb 4-1: Using ep0 maxpacket: 16 [ 588.837756][ T993] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 588.837784][ T993] usb 4-1: config 0 has no interface number 0 [ 588.837836][ T993] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 588.846230][ T993] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 588.846276][ T993] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 588.846303][ T993] usb 4-1: Product: syz [ 588.846320][ T993] usb 4-1: SerialNumber: syz [ 588.915118][ T993] usb 4-1: config 0 descriptor?? [ 588.949183][ T993] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 589.027860][T16847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5199'. [ 589.214935][ T10] usb 4-1: USB disconnect, device number 118 [ 589.706899][T16870] netlink: 'syz.4.5209': attribute type 1 has an invalid length. [ 590.428495][ T6041] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 590.460287][T16899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5224'. [ 590.460322][T16899] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5224'. [ 590.517696][T16902] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5226'. [ 590.596535][ T6041] usb 1-1: Using ep0 maxpacket: 16 [ 590.607581][ T6041] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 590.607619][ T6041] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.607644][ T6041] usb 1-1: Product: syz [ 590.607661][ T6041] usb 1-1: Manufacturer: syz [ 590.607679][ T6041] usb 1-1: SerialNumber: syz [ 590.649387][ T6041] r8152-cfgselector 1-1: Unknown version 0x0000 [ 590.649415][ T6041] r8152-cfgselector 1-1: config 0 descriptor?? [ 591.083306][ T6010] r8152-cfgselector 1-1: USB disconnect, device number 6 [ 591.237335][ T38] audit: type=1326 audit(1756430938.369:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16919 comm="syz.3.5237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5e55ebe9 code=0x7ffc0000 [ 591.237400][ T38] audit: type=1326 audit(1756430938.369:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16919 comm="syz.3.5237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5e55ebe9 code=0x7ffc0000 [ 591.237450][ T38] audit: type=1326 audit(1756430938.380:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16919 comm="syz.3.5237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f1f5e55ebe9 code=0x7ffc0000 [ 591.237499][ T38] audit: type=1326 audit(1756430938.380:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16919 comm="syz.3.5237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5e55ebe9 code=0x7ffc0000 [ 591.573760][T16932] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5240'. [ 591.574190][T16932] 0: renamed from hsr0 (while UP) [ 591.661180][T16932] 0: entered allmulticast mode [ 591.661205][T16932] hsr_slave_0: entered allmulticast mode [ 591.661229][T16932] hsr_slave_1: entered allmulticast mode [ 591.661847][T16932] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 592.963405][ T38] audit: type=1107 audit(1756430940.182:2459): pid=16982 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 593.326711][T17004] tmpfs: Bad value for 'mpol' [ 593.955735][T17026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5285'. [ 593.955770][T17026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5285'. [ 593.955790][T17026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5285'. [ 594.082207][ T10] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 594.160302][T17032] NILFS (nbd0): device size too small [ 594.250571][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 594.255517][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.255549][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 594.262839][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 594.262877][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.262900][ T10] usb 4-1: Product: syz [ 594.262918][ T10] usb 4-1: Manufacturer: syz [ 594.262937][ T10] usb 4-1: SerialNumber: syz [ 594.484644][T17038] dlm: no locking on control device [ 594.492914][ T38] audit: type=1326 audit(1756430941.878:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17039 comm="syz.4.5289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f926ebe9 code=0x7ffc0000 [ 594.545965][ T38] audit: type=1326 audit(1756430941.931:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17039 comm="syz.4.5289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7ff6f926ebe9 code=0x7ffc0000 [ 594.548662][ T38] audit: type=1326 audit(1756430941.931:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17039 comm="syz.4.5289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f926ebe9 code=0x7ffc0000 [ 594.604017][ T38] audit: type=1326 audit(1756430941.985:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17039 comm="syz.4.5289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f926ebe9 code=0x7ffc0000 [ 594.639168][ T10] usb 4-1: 0:2 : does not exist [ 594.639266][ T10] usb 4-1: unit 9 not found! [ 594.678250][ T10] usb 4-1: 4:0: cannot get min/max values for control 4 (id 4) [ 594.833787][ T10] usb 4-1: USB disconnect, device number 119 [ 594.988186][ T6355] udevd[6355]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 595.340557][ T5844] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 595.480222][ T5844] usb 5-1: Using ep0 maxpacket: 8 [ 595.482898][ T5844] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 595.482927][ T5844] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.482947][ T5844] usb 5-1: config 0 has no interface number 0 [ 595.482998][ T5844] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 595.483028][ T5844] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 595.483057][ T5844] usb 5-1: config 0 interface 52 has no altsetting 0 [ 595.484640][ T5844] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 595.484669][ T5844] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 595.484691][ T5844] usb 5-1: Manufacturer: syz [ 595.596894][ T5844] usb 5-1: config 0 descriptor?? [ 595.610846][ T5844] hub 5-1:0.52: bad descriptor, ignoring hub [ 595.610893][ T5844] hub 5-1:0.52: probe with driver hub failed with error -5 [ 595.883186][ T5844] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input71 [ 595.932631][T17068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5305'. [ 595.932658][T17068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5305'. [ 596.082731][ T38] audit: type=1326 audit(1756430943.584:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17071 comm="syz.0.5309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198a16ebe9 code=0x7ffc0000 [ 596.082796][ T38] audit: type=1326 audit(1756430943.584:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17071 comm="syz.0.5309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198a16ebe9 code=0x7ffc0000 [ 596.085751][ T38] audit: type=1326 audit(1756430943.584:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17071 comm="syz.0.5309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f198a16ebe9 code=0x7ffc0000 [ 596.096174][ T38] audit: type=1326 audit(1756430943.584:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17071 comm="syz.0.5309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198a16ebe9 code=0x7ffc0000 [ 596.132093][ T38] audit: type=1326 audit(1756430943.584:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17071 comm="syz.0.5309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198a16ebe9 code=0x7ffc0000 [ 596.180072][ T10] usb 5-1: USB disconnect, device number 2 [ 596.697822][T17087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.879023][T17094] openvswitch: netlink: Missing valid actions attribute. [ 596.879060][T17094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 597.056068][ T10] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 597.235879][ T10] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 597.235913][ T10] usb 5-1: config 0 has no interface number 0 [ 597.235965][ T10] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 597.244544][ T10] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 597.244582][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.244608][ T10] usb 5-1: Product: syz [ 597.244626][ T10] usb 5-1: Manufacturer: syz [ 597.244645][ T10] usb 5-1: SerialNumber: syz [ 597.287008][T17107] netlink: 'syz.1.5326': attribute type 4 has an invalid length. [ 597.299233][ T10] usb 5-1: config 0 descriptor?? [ 597.301910][T17093] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 597.320550][ T10] usb-storage 5-1:0.20: USB Mass Storage device detected [ 597.357649][ T10] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 597.510845][ T10] scsi host1: usb-storage 5-1:0.20 [ 597.709188][ T5844] usb 5-1: USB disconnect, device number 3 [ 597.881182][T17130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5335'. [ 597.933195][ C0] vkms_vblank_simulate: vblank timer overrun [ 598.152809][T17137] vlan0: entered promiscuous mode [ 599.833721][T17207] netlink: 'syz.0.5373': attribute type 21 has an invalid length. [ 599.833841][T17207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5373'. [ 599.935737][T17211] @: renamed from veth0_vlan (while UP) [ 600.392105][T17217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.433448][T17217] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.498766][T17217] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 601.240597][ T6010] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 601.321643][T17258] cgroup: none used incorrectly [ 601.380704][ T6010] usb 1-1: Using ep0 maxpacket: 32 [ 601.385480][ T6010] usb 1-1: unable to get BOS descriptor or descriptor too short [ 601.387088][ T6010] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 601.387119][ T6010] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 601.387142][ T6010] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 601.387166][ T6010] usb 1-1: config 128 has no interface number 0 [ 601.387225][ T6010] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 601.387256][ T6010] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 601.387281][ T6010] usb 1-1: config 128 interface 127 has no altsetting 0 [ 601.427764][T17262] netlink: 'syz.3.5401': attribute type 5 has an invalid length. [ 601.455361][ T6010] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 601.455394][ T6010] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.455416][ T6010] usb 1-1: Product: syz [ 601.455431][ T6010] usb 1-1: Manufacturer: syz [ 601.455446][ T6010] usb 1-1: SerialNumber: syz [ 601.457474][T17262] ip6erspan0: entered promiscuous mode [ 601.820263][T17271] netlink: 276 bytes leftover after parsing attributes in process `syz.1.5405'. [ 601.892326][ T6010] usb 1-1: USB disconnect, device number 7 [ 602.007139][ T6355] udevd[6355]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 602.063687][ T38] audit: type=1400 audit(1756430949.989:2469): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=1188 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.218 dest=38390 netif=eth0 [ 602.116952][ T38] audit: type=1400 audit(1756430950.053:2470): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=1188 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.218 dest=38390 netif=eth0 [ 602.139856][ T38] audit: type=1400 audit(1756430950.085:2471): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=1188 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.218 dest=38390 netif=eth0 [ 602.139930][ T38] audit: type=1400 audit(1756430950.085:2472): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=1188 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.218 dest=38390 netif=eth0 [ 602.180346][ T38] audit: type=1400 audit(1756430950.118:2473): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=1188 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.218 dest=38390 netif=eth0 [ 602.341719][ T38] audit: type=1400 audit(1756430950.300:2474): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=1188 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.218 dest=38390 netif=eth0 [ 602.400901][ T38] audit: type=1400 audit(1756430950.364:2475): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=1188 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.218 dest=38390 netif=eth0 [ 602.495917][T17288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5411'. [ 602.495946][T17288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5411'. [ 602.495963][T17288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5411'. [ 602.756981][ T38] audit: type=1400 audit(1756430950.740:2476): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=1188 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.218 dest=38390 netif=eth0 [ 602.852374][ T38] audit: type=1400 audit(1756430950.836:2477): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=1188 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.218 dest=38390 netif=eth0 [ 603.543831][ T38] audit: type=1400 audit(1756430951.587:2478): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=1188 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.218 dest=38390 netif=eth0 [ 608.380955][ T38] kauditd_printk_skb: 3 callbacks suppressed [ 608.380975][ T38] audit: type=1400 audit(1756430956.780:2482): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=1188 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.218 dest=38390 netif=eth0 [ 608.841307][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 608.841422][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 609.187796][ T38] audit: type=1400 audit(1756430957.639:2483): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=1188 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.218 dest=38390 netif=eth0 [ 614.808791][ T38] audit: type=1400 audit(1756430963.668:2484): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=1188 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.218 dest=38390 netif=eth0 [ 616.355191][ T38] audit: type=1400 audit(1756430965.331:2485): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=1188 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.218 dest=38390 netif=eth0 [ 618.372182][ C1] ================================================================== [ 618.372208][ C1] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2c72/0x53e0 [ 618.372249][ C1] Read of size 1 at addr ffff88802751d0f0 by task ktimers/1/29 [ 618.372268][ C1] [ 618.372298][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 618.372326][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 618.372345][ C1] Call Trace: [ 618.372354][ C1] [ 618.372366][ C1] dump_stack_lvl+0x189/0x250 [ 618.372402][ C1] ? __kasan_check_byte+0x12/0x40 [ 618.372436][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 618.372470][ C1] ? lock_release+0x4b/0x3e0 [ 618.372505][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 618.372543][ C1] print_report+0xca/0x240 [ 618.372573][ C1] ? xfrm_state_find+0x2c72/0x53e0 [ 618.372601][ C1] kasan_report+0x118/0x150 [ 618.372633][ C1] ? xfrm_state_find+0x2c72/0x53e0 [ 618.372668][ C1] xfrm_state_find+0x2c72/0x53e0 [ 618.372711][ C1] ? xfrm_state_find+0x2bf/0x53e0 [ 618.372746][ C1] ? __pfx_xfrm_state_find+0x10/0x10 [ 618.372787][ C1] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 618.372829][ C1] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 618.372856][ C1] ? xfrm_policy_lookup_bytype+0x123/0x1280 [ 618.372882][ C1] ? xfrm_policy_lookup_bytype+0x1221/0x1280 [ 618.372926][ C1] ? xfrm_expand_policies+0x41f/0x6a0 [ 618.372975][ C1] xfrm_lookup_with_ifid+0x590/0x1a90 [ 618.373013][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 618.373043][ C1] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 618.373085][ C1] ? icmp6_dst_alloc+0x2b4/0x460 [ 618.373108][ C1] ndisc_send_skb+0x41f/0x1440 [ 618.373141][ C1] ? ndisc_send_skb+0x20c/0x1440 [ 618.373177][ C1] ? __pfx_ndisc_send_skb+0x10/0x10 [ 618.373223][ C1] addrconf_rs_timer+0x369/0x670 [ 618.373255][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 618.373288][ C1] call_timer_fn+0x17b/0x5f0 [ 618.373318][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 618.373344][ C1] ? call_timer_fn+0xbe/0x5f0 [ 618.373375][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 618.373411][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 618.373440][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 618.373466][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 618.373492][ C1] __run_timer_base+0x648/0x970 [ 618.373528][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 618.373564][ C1] run_timer_softirq+0xb7/0x180 [ 618.373591][ C1] handle_softirqs+0x22c/0x710 [ 618.373626][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 618.373660][ C1] run_ktimerd+0xcf/0x190 [ 618.373691][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 618.373721][ C1] ? schedule+0x91/0x360 [ 618.373746][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 618.373771][ C1] smpboot_thread_fn+0x542/0xa60 [ 618.373800][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 618.373834][ C1] kthread+0x711/0x8a0 [ 618.373870][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 618.373900][ C1] ? __pfx_kthread+0x10/0x10 [ 618.373938][ C1] ? __pfx_kthread+0x10/0x10 [ 618.373986][ C1] ret_from_fork+0x3fc/0x770 [ 618.374019][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 618.374053][ C1] ? __switch_to_asm+0x39/0x70 [ 618.374075][ C1] ? __switch_to_asm+0x33/0x70 [ 618.374098][ C1] ? __pfx_kthread+0x10/0x10 [ 618.374133][ C1] ret_from_fork_asm+0x1a/0x30 [ 618.374165][ C1] [ 618.374175][ C1] [ 618.374181][ C1] Allocated by task 16843: [ 618.374193][ C1] kasan_save_track+0x3e/0x80 [ 618.374218][ C1] __kasan_slab_alloc+0x6c/0x80 [ 618.374243][ C1] kmem_cache_alloc_noprof+0x143/0x310 [ 618.374272][ C1] xfrm_state_alloc+0x24/0x2f0 [ 618.374298][ C1] __find_acq_core+0x8a7/0x1c00 [ 618.374328][ C1] xfrm_find_acq+0x8f/0xd0 [ 618.374358][ C1] xfrm_alloc_userspi+0x6b3/0xc90 [ 618.374378][ C1] xfrm_user_rcv_msg+0x7a0/0xab0 [ 618.374395][ C1] netlink_rcv_skb+0x205/0x470 [ 618.374421][ C1] xfrm_netlink_rcv+0x79/0x90 [ 618.374439][ C1] netlink_unicast+0x843/0xa10 [ 618.374458][ C1] netlink_sendmsg+0x805/0xb30 [ 618.374484][ C1] __sock_sendmsg+0x219/0x270 [ 618.374503][ C1] ____sys_sendmsg+0x508/0x820 [ 618.374551][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 618.374580][ C1] __x64_sys_sendmsg+0x1a1/0x260 [ 618.374609][ C1] do_syscall_64+0xfa/0x3b0 [ 618.374638][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.374660][ C1] [ 618.374666][ C1] Freed by task 6010: [ 618.374677][ C1] kasan_save_track+0x3e/0x80 [ 618.374700][ C1] kasan_save_free_info+0x46/0x50 [ 618.374718][ C1] __kasan_slab_free+0x5b/0x80 [ 618.374742][ C1] kmem_cache_free+0x195/0x510 [ 618.374770][ C1] xfrm_state_gc_task+0x54e/0x6d0 [ 618.374792][ C1] process_scheduled_works+0xade/0x17b0 [ 618.374818][ C1] worker_thread+0x8a0/0xda0 [ 618.374843][ C1] kthread+0x711/0x8a0 [ 618.374872][ C1] ret_from_fork+0x3fc/0x770 [ 618.374899][ C1] ret_from_fork_asm+0x1a/0x30 [ 618.374919][ C1] [ 618.374925][ C1] The buggy address belongs to the object at ffff88802751cd80 [ 618.374925][ C1] which belongs to the cache xfrm_state of size 992 [ 618.374944][ C1] The buggy address is located 880 bytes inside of [ 618.374944][ C1] freed 992-byte region [ffff88802751cd80, ffff88802751d160) [ 618.374977][ C1] [ 618.374984][ C1] The buggy address belongs to the physical page: [ 618.375012][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802751d200 pfn:0x2751c [ 618.375042][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 618.375064][ C1] flags: 0x80000000000040(head|node=0|zone=1) [ 618.375088][ C1] page_type: f5(slab) [ 618.375110][ C1] raw: 0080000000000040 ffff88801ab5b500 dead000000000122 0000000000000000 [ 618.375132][ C1] raw: ffff88802751d200 00000000800e000b 00000000f5000000 0000000000000000 [ 618.375154][ C1] head: 0080000000000040 ffff88801ab5b500 dead000000000122 0000000000000000 [ 618.375175][ C1] head: ffff88802751d200 00000000800e000b 00000000f5000000 0000000000000000 [ 618.375196][ C1] head: 0080000000000002 ffffea00009d4701 00000000ffffffff 00000000ffffffff [ 618.375217][ C1] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004 [ 618.375229][ C1] page dumped because: kasan: bad access detected [ 618.375246][ C1] page_owner tracks the page as allocated [ 618.375255][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 12092, tgid 12089 (syz.1.2939), ts 428559878545, free_ts 428389450051 [ 618.375300][ C1] post_alloc_hook+0x240/0x2a0 [ 618.375332][ C1] get_page_from_freelist+0x2119/0x21b0 [ 618.375354][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 618.375377][ C1] alloc_pages_mpol+0xd1/0x380 [ 618.375406][ C1] allocate_slab+0x8a/0x370 [ 618.375426][ C1] ___slab_alloc+0x8d1/0xdd0 [ 618.375459][ C1] kmem_cache_alloc_noprof+0xe6/0x310 [ 618.375487][ C1] xfrm_state_alloc+0x24/0x2f0 [ 618.375513][ C1] pfkey_add+0x6e4/0x2e00 [ 618.375541][ C1] pfkey_sendmsg+0xbfe/0x1090 [ 618.375569][ C1] __sock_sendmsg+0x219/0x270 [ 618.375590][ C1] ____sys_sendmsg+0x508/0x820 [ 618.375619][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 618.375649][ C1] __x64_sys_sendmsg+0x1a1/0x260 [ 618.375680][ C1] do_syscall_64+0xfa/0x3b0 [ 618.375709][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.375730][ C1] page last free pid 12083 tgid 12083 stack trace: [ 618.375745][ C1] __free_frozen_pages+0xb59/0xce0 [ 618.375777][ C1] __put_partials+0x159/0x1a0 [ 618.375796][ C1] __slab_free+0x2b3/0x390 [ 618.375816][ C1] qlist_free_all+0x97/0x140 [ 618.375840][ C1] kasan_quarantine_reduce+0x148/0x160 [ 618.375865][ C1] __kasan_slab_alloc+0x22/0x80 [ 618.375891][ C1] kmem_cache_alloc_noprof+0x143/0x310 [ 618.375920][ C1] getname_flags+0xb8/0x540 [ 618.375952][ C1] do_sys_openat2+0xbc/0x1c0 [ 618.375978][ C1] __x64_sys_openat+0x138/0x170 [ 618.375999][ C1] do_syscall_64+0xfa/0x3b0 [ 618.376028][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.376051][ C1] [ 618.376057][ C1] Memory state around the buggy address: [ 618.376070][ C1] ffff88802751cf80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 618.376087][ C1] ffff88802751d000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 618.376104][ C1] >ffff88802751d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 618.376117][ C1] ^ [ 618.376131][ C1] ffff88802751d100: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 618.376148][ C1] ffff88802751d180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 618.376161][ C1] ================================================================== [ 618.376182][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 618.376202][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 618.376230][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 618.376245][ C1] Call Trace: [ 618.376255][ C1] [ 618.376265][ C1] dump_stack_lvl+0x99/0x250 [ 618.376300][ C1] ? __asan_memcpy+0x40/0x70 [ 618.376325][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 618.376359][ C1] ? __pfx__printk+0x10/0x10 [ 618.376392][ C1] vpanic+0x281/0x750 [ 618.376427][ C1] ? __pfx_print_hex_dump+0x10/0x10 [ 618.376461][ C1] ? __pfx_vpanic+0x10/0x10 [ 618.376503][ C1] panic+0xb9/0xc0 [ 618.376536][ C1] ? __pfx_panic+0x10/0x10 [ 618.376569][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 618.376602][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 618.376638][ C1] ? xfrm_state_find+0x2c72/0x53e0 [ 618.376669][ C1] check_panic_on_warn+0x89/0xb0 [ 618.376693][ C1] ? xfrm_state_find+0x2c72/0x53e0 [ 618.376724][ C1] end_report+0x78/0x160 [ 618.376753][ C1] kasan_report+0x129/0x150 [ 618.376785][ C1] ? xfrm_state_find+0x2c72/0x53e0 [ 618.376821][ C1] xfrm_state_find+0x2c72/0x53e0 [ 618.376864][ C1] ? xfrm_state_find+0x2bf/0x53e0 [ 618.376899][ C1] ? __pfx_xfrm_state_find+0x10/0x10 [ 618.376941][ C1] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 618.376989][ C1] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 618.377015][ C1] ? xfrm_policy_lookup_bytype+0x123/0x1280 [ 618.377043][ C1] ? xfrm_policy_lookup_bytype+0x1221/0x1280 [ 618.377087][ C1] ? xfrm_expand_policies+0x41f/0x6a0 [ 618.377128][ C1] xfrm_lookup_with_ifid+0x590/0x1a90 [ 618.377166][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 618.377194][ C1] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 618.377236][ C1] ? icmp6_dst_alloc+0x2b4/0x460 [ 618.377261][ C1] ndisc_send_skb+0x41f/0x1440 [ 618.377294][ C1] ? ndisc_send_skb+0x20c/0x1440 [ 618.377329][ C1] ? __pfx_ndisc_send_skb+0x10/0x10 [ 618.377376][ C1] addrconf_rs_timer+0x369/0x670 [ 618.377407][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 618.377440][ C1] call_timer_fn+0x17b/0x5f0 [ 618.377471][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 618.377497][ C1] ? call_timer_fn+0xbe/0x5f0 [ 618.377527][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 618.377565][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 618.377594][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 618.377622][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 618.377650][ C1] __run_timer_base+0x648/0x970 [ 618.377687][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 618.377725][ C1] run_timer_softirq+0xb7/0x180 [ 618.377754][ C1] handle_softirqs+0x22c/0x710 [ 618.377789][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 618.377826][ C1] run_ktimerd+0xcf/0x190 [ 618.377858][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 618.377889][ C1] ? schedule+0x91/0x360 [ 618.377921][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 618.377950][ C1] smpboot_thread_fn+0x542/0xa60 [ 618.377985][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 618.378020][ C1] kthread+0x711/0x8a0 [ 618.378057][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 618.378086][ C1] ? __pfx_kthread+0x10/0x10 [ 618.378124][ C1] ? __pfx_kthread+0x10/0x10 [ 618.378159][ C1] ret_from_fork+0x3fc/0x770 [ 618.378191][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 618.378224][ C1] ? __switch_to_asm+0x39/0x70 [ 618.378247][ C1] ? __switch_to_asm+0x33/0x70 [ 618.378269][ C1] ? __pfx_kthread+0x10/0x10 [ 618.378305][ C1] ret_from_fork_asm+0x1a/0x30 [ 618.378337][ C1] [ 618.378500][ C1] Kernel Offset: disabled