last executing test programs: 2m41.311409248s ago: executing program 4 (id=2797): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000104c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000200003801c00008018000180140001"], 0xd0}}, 0x0) 2m41.106200319s ago: executing program 4 (id=2801): r0 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x280, 0x3, 0x31324d4e, 0x6, 0x0, 0x3, 0x9, 0xfeedcafe, 0x2, 0x3}}) 2m40.848585501s ago: executing program 4 (id=2806): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0xf0, 0x10, 0x793, 0x0, 0x25dfdbfc, {{@in=@dev={0xac, 0x14, 0x14, 0x11}, @in=@multicast2, 0x4, 0xb6e, 0x4e21, 0x2, 0x0, 0x80, 0x20, 0x21, 0x0, 0xee00}, {@in=@empty, 0x4d6, 0xff}, @in=@broadcast, {0x0, 0x10000, 0x1, 0x8000000000000001, 0xffffffff00000001, 0x0, 0x8001, 0x543}, {0x200, 0x7fffffffffffffff, 0xb, 0xfffffffffffffffd}, {}, 0x70bd2c, 0x3500, 0x2, 0x2, 0x0, 0x50}}, 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 2m40.637430744s ago: executing program 4 (id=2809): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x8040) ioctl$BLKRESETZONE(r0, 0x40101283, 0x0) 2m40.447534496s ago: executing program 4 (id=2812): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x88200, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000040)) 2m40.195487591s ago: executing program 4 (id=2817): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0x2) 2m25.114636296s ago: executing program 32 (id=2817): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0x2) 2.878656329s ago: executing program 1 (id=5892): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x4, 0x0) 2.686418119s ago: executing program 1 (id=5895): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f006, 0x6}) 2.436402323s ago: executing program 1 (id=5899): mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) 2.179552161s ago: executing program 1 (id=5904): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0xa2740, 0x1f7) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/112, 0x6c}], 0x2, 0x0, 0x0) 2.119644926s ago: executing program 0 (id=5905): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffff9, 0x1) 1.961846945s ago: executing program 1 (id=5908): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000200001002bbd7000ffdbdf2502202008010000020800000008000400f77f000008000100ac141441080002"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x4000000) 1.896169024s ago: executing program 0 (id=5909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x18, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x80) 1.699161744s ago: executing program 1 (id=5911): r0 = syz_open_dev$usbfs(&(0x7f0000000300), 0xb, 0x101301) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000180)=0x7) 1.67460162s ago: executing program 0 (id=5913): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x5d) 1.5043306s ago: executing program 0 (id=5915): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x3, 0x0, 0x0, 0x0, @loopback, @loopback}}}}) 1.337607901s ago: executing program 0 (id=5918): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000000c640)={0x0, 0x0, &(0x7f000000c600)={&(0x7f000000c580)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2, 0x20, 0x10, 0x7a, 0x2, 0x0, 0x0, 0x4, 0xd}, [@FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x8, 0x2, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x40841}, 0x40080c0) 1.303554451s ago: executing program 3 (id=5919): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfffffffe, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x16, 0x2000000000000338}}}], 0x18}}], 0x2, 0x0) 1.17368772s ago: executing program 0 (id=5921): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x27, 0x4c, 0x3, 0x40, 0x5ab, 0x60, 0x1106, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xd, 0x0, 0x0, [{{0x9, 0x4, 0xa8, 0x0, 0x0, 0xf4, 0x7, 0x50}}]}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef50d", @ANYRESHEX=r0], 0xf8) 1.118753934s ago: executing program 3 (id=5922): r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) close(r0) 1.0300851s ago: executing program 3 (id=5924): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd26, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0x5}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x0, 0x3, 0x0, 0x0, {{0x0, 0x2, 0x7}, {0xa, 0x0, 0x0, "4a774399"}}}]}]}]}}]}, 0x5c}}, 0x0) 951.718185ms ago: executing program 3 (id=5925): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r0, 0x40044160, &(0x7f00000000c0)=0xfffffadc) 851.605706ms ago: executing program 3 (id=5927): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, 0x0) 713.65434ms ago: executing program 3 (id=5930): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) exit(0x0) 547.553361ms ago: executing program 2 (id=5933): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000090) 497.874882ms ago: executing program 2 (id=5934): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) truncate(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x7ff) 479.260678ms ago: executing program 5 (id=5935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000000206011e0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a300000000020000780050003001c0000000c0001800800014008000000050014002000000005000500020000000500010006"], 0x68}}, 0x0) 381.949941ms ago: executing program 2 (id=5936): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix_mp={0xb2, 0x3, 0x32314147, 0x5, 0x7, [{0x7f}, {0x4, 0x3}, {0x6, 0x8}, {0x8, 0x800}, {0x1, 0x4}, {0xd0, 0x9}, {0x8000000, 0x3}, {0x8, 0x3}], 0xff, 0x9c, 0x0, 0x2, 0x6}}) 365.942985ms ago: executing program 5 (id=5937): r0 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x9, 0x7e, 0x2, 0x10001, 0xc, 0x7, 0x200, 0x99, 0x8, 0x7, 0x9, 0x7, 0x8, 0x3, 0x1, 0x1a00, 0x8, 0xeeea, 0x401, 0x10000, 0x8}}) 319.107111ms ago: executing program 2 (id=5938): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) io_submit(0x0, 0x0, 0x0) 258.484851ms ago: executing program 5 (id=5939): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b0, 0x330, 0x0, 0x298, 0x0, 0x298, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0xff000000, 0xff000000, 'veth0_macvtap\x00', 'veth1\x00', {0xff}, {0xff}, 0x32, 0x2, 0x3f}, 0x7a00, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x1, 0x1}}}, {{@ip={@empty, @local, 0x0, 0xff, 'veth0_to_batadv\x00', 'nicvf0\x00', {}, {}, 0x8}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7ff, 0x6, @ipv4=@empty, 0x4e21}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x14}, @multicast1, 0x0, 0x0, 'syzkaller0\x00', 'wg0\x00', {}, {}, 0x89, 0x0, 0x35}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xb3, 0x1}}}, {{@ip={@local, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0xa5, 0x57}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) 224.095249ms ago: executing program 5 (id=5940): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf090000000000005509010000000000e5000000000000003c980000000000005608000002000000c500000007000000b70000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 186.840606ms ago: executing program 2 (id=5941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 87.432526ms ago: executing program 5 (id=5942): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001440)=@nat={'nat\x00', 0x1b, 0x5, 0x4a8, 0x108, 0x340, 0xffffffff, 0x340, 0x340, 0x458, 0x458, 0xffffffff, 0x458, 0x458, 0x5, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, [0xffffffff, 0xff, 0xff000000, 0xff000000], [0xffffffff, 0xffffffff, 0xff000000], 'veth1\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x87, 0xbd, 0x5, 0xa7}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010102, [0x0, 0xff, 0xffffff00], 0x4e21, 0x4e23, 0x4e24, 0x4e20, 0x1, 0x4, 0x10000000, 0x2, 0x3}}}, {{@ipv6={@mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], [0xff000000, 0xff, 0xffffff00, 0xff], 'wg2\x00', 'dummy0\x00', {0xff}, {0xff}, 0x11, 0x0, 0x7, 0x1d}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x19, @ipv4=@multicast2, @ipv6=@loopback, @port=0x4e23, @gre_key=0x2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@loopback, @ipv6=@remote, @port=0x4e24, @icmp_id=0x64}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @remote, [0xffffffff, 0xffffffff, 0xffffffff], [0xff000000, 0xff, 0xff000000], 'veth1_to_bond\x00', '\x00', {0xff}, {0xff}, 0x88, 0xc, 0x0, 0x10}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xb, @ipv6=@private2, @ipv4=@local, @icmp_id=0x65, @icmp_id=0x66}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) 41.326114ms ago: executing program 2 (id=5943): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000500), 0x6) 0s ago: executing program 5 (id=5944): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x0, 0x0, 0x207f, 0x6ae0}) kernel console output (not intermixed with test programs): c000003e syscall=425 compat=0 ip=0x7f6a9659aeb9 code=0x7ffc0000 [ 307.802305][ T30] audit: type=1326 audit(1769427442.060:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12353 comm="syz.0.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6a9659ac22 code=0x7ffc0000 [ 307.863305][ T5907] usb 4-1: Using ep0 maxpacket: 8 [ 307.874667][ T30] audit: type=1326 audit(1769427442.060:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12353 comm="syz.0.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6a9659ac22 code=0x7ffc0000 [ 307.904163][ T5907] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 307.940100][ T5907] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x6F, changing to 0xF [ 307.982363][ T30] audit: type=1326 audit(1769427442.080:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12353 comm="syz.0.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9659aeb9 code=0x7ffc0000 [ 308.005083][ T5907] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 47, changing to 9 [ 308.029535][ T5907] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 25189, setting to 1024 [ 308.071862][ T5907] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.122103][ T5907] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 308.136507][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.160087][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 308.170425][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 308.178794][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 308.192179][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 308.200786][ T5907] usb 4-1: Product: syz [ 308.205382][ T5907] usb 4-1: Manufacturer: syz [ 308.210081][ T5907] usb 4-1: SerialNumber: syz [ 308.215283][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 308.227155][T12348] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 308.255143][ T5907] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 308.265508][ T5907] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 308.271885][ T5907] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 308.483317][ T5907] usb 4-1: USB disconnect, device number 107 [ 308.619827][T12384] netlink: 'syz.1.3089': attribute type 1 has an invalid length. [ 308.753420][T12391] netlink: 'syz.0.3093': attribute type 10 has an invalid length. [ 308.907502][T12398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3096'. [ 308.927712][T12371] chnl_net:caif_netlink_parms(): no params data found [ 309.029435][T12400] netlink: 'syz.0.3097': attribute type 33 has an invalid length. [ 309.071717][T12403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.087149][T12400] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3097'. [ 309.137273][T12400] `: renamed from team0 (while UP) [ 309.364941][T12371] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.412389][T12371] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.419639][T12371] bridge_slave_0: entered allmulticast mode [ 309.500903][T12371] bridge_slave_0: entered promiscuous mode [ 309.532693][T12371] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.566759][T12371] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.594892][T12371] bridge_slave_1: entered allmulticast mode [ 309.631249][T12371] bridge_slave_1: entered promiscuous mode [ 309.704678][T12425] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3108'. [ 309.798830][T12371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.845016][T12371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.015237][T12371] team0: Port device team_slave_0 added [ 310.054472][T12371] team0: Port device team_slave_1 added [ 310.178080][T12371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.235884][T12371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.310981][ T5831] Bluetooth: hci5: command tx timeout [ 310.352997][T12371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.426487][T12371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.457706][T12371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.506186][T12453] SET target dimension over the limit! [ 310.604175][T12371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.663759][T12459] wg1: entered promiscuous mode [ 310.668664][T12459] wg1: entered allmulticast mode [ 310.898644][T12371] hsr_slave_0: entered promiscuous mode [ 310.920997][T12371] hsr_slave_1: entered promiscuous mode [ 310.946387][T12371] debugfs: 'hsr0' already exists in 'hsr' [ 310.965116][T12371] Cannot create hsr debugfs directory [ 311.023933][T12467] xfrm0: entered promiscuous mode [ 311.042835][T12467] xfrm0: entered allmulticast mode [ 311.624633][T12497] xt_nfacct: accounting object `syz1' does not exist [ 311.636596][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3143'. [ 311.648112][ T5922] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 311.835517][ T5922] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 192, changing to 11 [ 311.869189][ T5922] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 311.886549][ T5922] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 311.887907][T12503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3147'. [ 311.911208][ T5922] usb 3-1: Manufacturer: syz [ 311.916041][ T5922] usb 3-1: SerialNumber: syz [ 312.183396][ T5922] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 312.233639][ T5922] usb 3-1: USB disconnect, device number 110 [ 312.357278][T12371] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 312.391138][ T5831] Bluetooth: hci5: command tx timeout [ 312.425989][T12371] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 312.503206][T12371] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 312.554914][T12371] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 312.793356][T12527] ALSA: mixer_oss: invalid OSS volume 'u' [ 313.065201][T12371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.133869][T12371] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.147166][T12540] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 313.175439][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.182620][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.248768][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.255956][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.286944][T12542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3164'. [ 313.453867][T12371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.647481][T12371] veth0_vlan: entered promiscuous mode [ 313.673060][T12371] veth1_vlan: entered promiscuous mode [ 313.730873][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3172'. [ 313.795552][T12371] veth0_macvtap: entered promiscuous mode [ 313.825441][T12371] veth1_macvtap: entered promiscuous mode [ 313.975000][T12371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.017827][T12371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.068739][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.113041][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.165121][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.210298][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.302973][T12580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3182'. [ 314.348935][T12583] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3183'. [ 314.380124][T12580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3182'. [ 314.404859][T12583] 8021q: VLANs not supported on gre0 [ 314.470890][ T5831] Bluetooth: hci5: command tx timeout [ 314.478244][ T3442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.502366][ T3442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.717401][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.755657][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.345998][T12620] capability: warning: `syz.3.3199' uses 32-bit capabilities (legacy support in use) [ 315.551157][ T5907] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 315.726812][ T5907] usb 6-1: Using ep0 maxpacket: 32 [ 315.746202][ T5907] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 315.788565][ T5907] usb 6-1: config 0 has no interface number 0 [ 315.824831][ T5907] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 315.856732][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.875222][ T5907] usb 6-1: Product: syz [ 315.881173][ T5907] usb 6-1: Manufacturer: syz [ 315.910118][ T5907] usb 6-1: SerialNumber: syz [ 315.936727][ T5907] usb 6-1: config 0 descriptor?? [ 315.976734][ T5907] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 316.007628][ T5907] usb 6-1: selecting invalid altsetting 1 [ 316.032490][ T5907] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 316.080179][ T5907] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 316.082155][ T5907] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 316.082212][ T5907] usb 6-1: media controller created [ 316.146324][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 316.321386][ T5907] usb 6-1: DVB: registering adapter 3 frontend 0 (Zarlink ZL10353 DVB-T)... [ 316.335191][ T5907] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 316.513140][ T5907] DVB: Unable to find symbol mxl5005s_attach() [ 316.549696][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 316.549715][ T30] audit: type=1326 audit(1769427451.000:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12666 comm="syz.3.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738d59aeb9 code=0x7ffc0000 [ 316.551193][ T5831] Bluetooth: hci5: command tx timeout [ 316.588724][ T30] audit: type=1326 audit(1769427451.000:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12666 comm="syz.3.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738d59aeb9 code=0x7ffc0000 [ 316.623799][ T5907] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 316.700898][ T30] audit: type=1326 audit(1769427451.090:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12666 comm="syz.3.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f738d59aeb9 code=0x7ffc0000 [ 316.866146][ T5907] usb 6-1: USB disconnect, device number 2 [ 316.890752][ T30] audit: type=1326 audit(1769427451.090:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12666 comm="syz.3.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738d59aeb9 code=0x7ffc0000 [ 317.001526][ T30] audit: type=1326 audit(1769427451.090:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12666 comm="syz.3.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738d59aeb9 code=0x7ffc0000 [ 317.197258][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.203707][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.677197][T12700] netlink: 'syz.2.3234': attribute type 9 has an invalid length. [ 317.766009][T12708] sctp: [Deprecated]: syz.1.3238 (pid 12708) Use of int in maxseg socket option. [ 317.766009][T12708] Use struct sctp_assoc_value instead [ 317.887317][T12714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3241'. [ 318.135376][T12724] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3246'. [ 319.341868][T12776] xt_limit: Overflow, try lower: 0/0 [ 319.771007][T12795] trusted_key: encrypted_key: insufficient parameters specified [ 319.800598][T12797] netlink: 'syz.3.3281': attribute type 2 has an invalid length. [ 319.847244][T12797] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3281'. [ 319.895804][T12800] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3284'. [ 319.930881][T12800] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3284'. [ 319.939902][T12800] netlink: 'syz.0.3284': attribute type 3 has an invalid length. [ 320.021463][T12800] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3284'. [ 320.935812][T12844] openvswitch: netlink: IP tunnel dst address not specified [ 321.484973][T12866] netlink: 'syz.5.3317': attribute type 1 has an invalid length. [ 322.051280][ T5907] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 322.252340][ T5907] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 322.281908][ T5907] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 322.323324][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.350615][ T5907] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 322.973351][ T9] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 323.151515][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 323.184345][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.231023][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 323.255829][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.276352][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 323.295964][T12927] netlink: 'syz.5.3347': attribute type 3 has an invalid length. [ 323.304931][T12927] netlink: 46 bytes leftover after parsing attributes in process `syz.5.3347'. [ 323.316670][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.328060][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 323.363868][ T9] usb 4-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a [ 323.380544][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.397971][ T9] usb 4-1: Product: syz [ 323.405788][ T9] usb 4-1: Manufacturer: syz [ 323.410536][ T9] usb 4-1: SerialNumber: syz [ 323.454807][ T9] usb 4-1: config 0 descriptor?? [ 323.482379][ T9] usb 4-1: bad CDC descriptors [ 323.501269][ T9] cdc_acm 4-1:0.0: Zero length descriptor references [ 323.508038][ T9] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 323.642297][ T5907] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 323.664338][ T5907] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 323.683891][ T5907] stv0680 3-1:4.0: last error: 86, command = 0x78 [ 323.692337][ T5922] usb 4-1: USB disconnect, device number 108 [ 323.697926][ T5907] usb 3-1: USB disconnect, device number 111 [ 324.007672][T12945] netlink: 'syz.5.3356': attribute type 9 has an invalid length. [ 324.569040][T12968] netlink: 'syz.2.3367': attribute type 21 has an invalid length. [ 324.615160][T12968] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3367'. [ 324.645151][T12968] netlink: 'syz.2.3367': attribute type 5 has an invalid length. [ 324.662963][T12968] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3367'. [ 324.850950][T12982] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3374'. [ 325.600950][T13019] netlink: 'syz.3.3392': attribute type 3 has an invalid length. [ 325.608714][T13019] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3392'. [ 325.940957][T13034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3400'. [ 326.027863][T13036] IPv6: NLM_F_REPLACE set, but no existing node found! [ 326.125060][ T30] audit: type=1400 audit(1769427460.570:84): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=13037 comm="syz.1.3403" [ 326.208823][T13040] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3404'. [ 326.387930][T13050] netlink: 'syz.1.3407': attribute type 21 has an invalid length. [ 326.421022][ T39] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 326.602154][ T39] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 326.610231][ T39] usb 3-1: config 1 has no interface number 0 [ 326.660790][ T39] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 326.710738][ T39] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 326.752517][ T39] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.809360][ T39] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 326.841616][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.849644][ T39] usb 3-1: Product: syz [ 326.881031][ T39] usb 3-1: Manufacturer: syz [ 326.881057][ T39] usb 3-1: SerialNumber: syz [ 326.895769][T13044] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 327.102430][T13044] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 327.140447][T13079] netlink: 668 bytes leftover after parsing attributes in process `syz.1.3422'. [ 327.172432][T13079] netlink: 668 bytes leftover after parsing attributes in process `syz.1.3422'. [ 327.351190][ T39] usb 3-1: Incompatible driver and firmware versions [ 327.395872][ T39] usb 3-1: USB disconnect, device number 112 [ 327.634453][T13094] warning: `syz.5.3430' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 329.093126][T13150] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3458'. [ 329.547161][T13172] binder: 13169:13172 ioctl c018620c 200000000000 returned -1 [ 330.081385][T13195] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3481'. [ 330.101785][T13198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3482'. [ 330.532872][T13217] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3491'. [ 330.770934][T13229] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 330.783804][ T30] audit: type=1326 audit(1769427465.230:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13226 comm="syz.5.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1f79aeb9 code=0x7ffc0000 [ 330.876206][ T30] audit: type=1326 audit(1769427465.230:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13226 comm="syz.5.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1f79aeb9 code=0x7ffc0000 [ 331.000065][ T30] audit: type=1326 audit(1769427465.230:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13226 comm="syz.5.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f5a1f79aeb9 code=0x7ffc0000 [ 331.103223][ T30] audit: type=1326 audit(1769427465.290:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13226 comm="syz.5.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1f79aeb9 code=0x7ffc0000 [ 331.211241][ T30] audit: type=1326 audit(1769427465.290:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13226 comm="syz.5.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1f79aeb9 code=0x7ffc0000 [ 334.104121][T13381] !: renamed from dummy0 (while UP) [ 334.136846][T13384] xt_CT: You must specify a L4 protocol and not use inversions on it [ 334.356332][T13393] netlink: 'syz.0.3577': attribute type 21 has an invalid length. [ 334.410603][T13393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3577'. [ 334.594187][T13403] xt_CT: You must specify a L4 protocol and not use inversions on it [ 335.013862][T13416] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 335.043035][T13421] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3590'. [ 335.066800][T13421] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 335.153550][T13419] bond2: Unable to set down delay as MII monitoring is disabled [ 335.197645][T13419] bond2 (unregistering): Released all slaves [ 335.412878][T13426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 335.622226][T13436] netlink: 'syz.2.3597': attribute type 30 has an invalid length. [ 337.008900][T13492] netlink: 'syz.0.3623': attribute type 21 has an invalid length. [ 337.070765][T13492] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3623'. [ 337.319059][T13506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3630'. [ 337.579047][T13518] netlink: 'syz.1.3636': attribute type 32 has an invalid length. [ 337.798255][ T30] audit: type=1326 audit(1769427472.250:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13529 comm="syz.3.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738d59aeb9 code=0x7ffc0000 [ 337.896974][ T30] audit: type=1326 audit(1769427472.280:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13529 comm="syz.3.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738d59aeb9 code=0x7ffc0000 [ 337.970302][ T30] audit: type=1326 audit(1769427472.280:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13529 comm="syz.3.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f738d59aeb9 code=0x7ffc0000 [ 338.048313][ T30] audit: type=1326 audit(1769427472.280:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13529 comm="syz.3.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738d59aeb9 code=0x7ffc0000 [ 338.104114][ T30] audit: type=1326 audit(1769427472.280:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13529 comm="syz.3.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738d59aeb9 code=0x7ffc0000 [ 338.168069][T13545] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3646'. [ 338.552629][T13562] netlink: 'syz.1.3654': attribute type 20 has an invalid length. [ 338.773315][T13571] x_tables: ip_tables: osf match: only valid for protocol 6 [ 338.822887][ T796] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 339.032505][ T796] usb 3-1: Using ep0 maxpacket: 32 [ 339.042285][ T796] usb 3-1: config 0 has an invalid interface number: 150 but max is 0 [ 339.057588][ T796] usb 3-1: config 0 has no interface number 0 [ 339.102994][ T796] usb 3-1: config 0 interface 150 has no altsetting 0 [ 339.115054][ T796] usb 3-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=53.01 [ 339.150730][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.158758][ T796] usb 3-1: Product: syz [ 339.192573][T13587] CIFS: VFS: Malformed UNC in devname [ 339.200756][ T796] usb 3-1: Manufacturer: syz [ 339.205385][ T796] usb 3-1: SerialNumber: syz [ 339.251407][ T796] usb 3-1: config 0 descriptor?? [ 339.296895][ T796] gspca_main: pac7311-2.14.0 probing 093a:2603 [ 339.702460][ T796] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 339.737930][ T796] pac7311 3-1:0.150: probe with driver pac7311 failed with error -71 [ 339.783877][ T796] usb 3-1: USB disconnect, device number 113 [ 340.130756][T13626] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 340.233602][T13630] netlink: 'syz.5.3689': attribute type 3 has an invalid length. [ 340.772852][T13647] xt_CT: No such helper "snmp_trap" [ 340.929189][T13661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3703'. [ 341.159726][T13673] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3708'. [ 341.416876][T13684] PKCS7: Unknown OID: [4] 0.0 [ 341.424876][T13685] openvswitch: netlink: IP tunnel dst address not specified [ 341.432680][T13684] PKCS7: Only support pkcs7_signedData type [ 342.143175][T13719] netlink: 'syz.0.3732': attribute type 5 has an invalid length. [ 342.681191][ T796] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 342.736291][T13739] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.743896][T13739] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.865488][ T796] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 342.894797][ T796] usb 4-1: config 0 has an invalid interface number: 3 but max is 2 [ 342.918155][ T796] usb 4-1: config 0 has no interface number 0 [ 342.947766][ T796] usb 4-1: config 0 has no interface number 1 [ 342.966984][T13739] wg1: left promiscuous mode [ 342.980027][T13739] wg1: left allmulticast mode [ 342.996202][ T796] usb 4-1: too many endpoints for config 0 interface 3 altsetting 255: 255, using maximum allowed: 30 [ 343.027406][ T796] usb 4-1: config 0 interface 3 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 343.079089][T13757] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 343.103661][ T796] usb 4-1: config 0 interface 3 has no altsetting 0 [ 343.121465][T13757] openvswitch: netlink: Message has 16 unknown bytes. [ 343.143968][ T796] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 343.171490][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.196195][T13739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.218606][ T796] usb 4-1: config 0 descriptor?? [ 343.276210][T13739] batman_adv: batadv0: Interface deactivated: 26 [ 343.379794][T13739] 0: left allmulticast mode [ 343.451081][ T796] usb 4-1: Could not set interface, error -71 [ 343.465025][ T796] usb 4-1: selecting invalid altsetting 0 [ 343.494559][ T796] usb 4-1: Could not set interface, error -22 [ 343.530935][ T796] usb 4-1: USB disconnect, device number 109 [ 343.882224][T13739] sit1: left allmulticast mode [ 343.899553][T13739] geneve2: left promiscuous mode [ 343.910564][ T60] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.919013][T13780] x_tables: unsorted underflow at hook 1 [ 343.936683][ T60] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.972373][ T60] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.010142][ T60] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.233652][T13790] program syz.3.3767 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.416293][T13798] netlink: 'syz.1.3771': attribute type 6 has an invalid length. [ 345.033466][T13829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.058232][T13832] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3788'. [ 345.703817][T13860] kAFS: unable to lookup cell '/,' [ 345.771376][T13864] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request [ 345.951971][T13870] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 346.640843][ T39] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 346.704170][T13906] delete_channel: no stack [ 346.812755][ T39] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 346.840902][ T39] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.883352][ T39] usb 4-1: config 0 has no interface number 0 [ 346.904318][ T39] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 346.930267][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.954901][ T39] usb 4-1: Product: syz [ 346.981121][ T39] usb 4-1: Manufacturer: syz [ 346.985768][ T39] usb 4-1: SerialNumber: syz [ 347.023312][ T39] usb 4-1: config 0 descriptor?? [ 347.063233][ T39] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 347.070493][ T39] uvcvideo 4-1:0.64: No valid video chain found. [ 347.240385][ T5908] usb 4-1: USB disconnect, device number 110 [ 347.711266][ T30] audit: type=1326 audit(1769427482.170:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13948 comm="syz.0.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9659aeb9 code=0x7ffc0000 [ 347.828525][ T30] audit: type=1326 audit(1769427482.190:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13948 comm="syz.0.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9659aeb9 code=0x7ffc0000 [ 347.925201][ T30] audit: type=1326 audit(1769427482.200:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13948 comm="syz.0.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f6a9659aeb9 code=0x7ffc0000 [ 347.941476][T13957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3849'. [ 348.018156][ T30] audit: type=1326 audit(1769427482.200:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13948 comm="syz.0.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9659aeb9 code=0x7ffc0000 [ 348.121972][ T30] audit: type=1326 audit(1769427482.200:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13948 comm="syz.0.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9659aeb9 code=0x7ffc0000 [ 348.241414][ T5908] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 348.639506][T13985] xt_TPROXY: Can be used only with -p tcp or -p udp [ 348.771892][ T5908] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 349.191629][ T60] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 349.447172][ T30] audit: type=1326 audit(1769427483.900:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14024 comm="syz.2.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b419aeb9 code=0x7ffc0000 [ 349.552781][ T30] audit: type=1326 audit(1769427483.930:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14024 comm="syz.2.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b419aeb9 code=0x7ffc0000 [ 349.670262][ T30] audit: type=1326 audit(1769427483.930:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14024 comm="syz.2.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b419aeb9 code=0x7ffc0000 [ 349.759681][ T30] audit: type=1326 audit(1769427483.950:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14024 comm="syz.2.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fe7b419aeb9 code=0x7ffc0000 [ 349.793896][T14039] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 349.869405][ T30] audit: type=1326 audit(1769427483.950:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14024 comm="syz.2.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b419aeb9 code=0x7ffc0000 [ 349.940919][T14046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3894'. [ 350.008477][T14046] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 350.045257][ T5907] IPVS: starting estimator thread 0... [ 350.101331][T14046] bridge2: entered allmulticast mode [ 350.170968][T14050] IPVS: using max 27 ests per chain, 64800 per kthread [ 350.233688][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 350.280998][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 351.111226][ T39] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 351.280970][T14107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3924'. [ 351.367136][T14109] binder: 14108:14109 unknown command 1077961494 [ 351.392618][T14109] binder: 14108:14109 ioctl c0306201 200000000100 returned -22 [ 351.640829][ T39] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 351.807878][ T39] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 351.830912][ T5908] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 351.830944][ T39] usb 2-1: config 0 has no interface number 0 [ 351.881631][ T39] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 351.921102][ T39] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 351.975633][ T39] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 352.003136][ T39] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 352.010873][ T5908] usb 6-1: Using ep0 maxpacket: 16 [ 352.022673][ T5908] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 352.033177][ T39] usb 2-1: Product: syz [ 352.037376][ T39] usb 2-1: Manufacturer: syz [ 352.060857][ T39] usb 2-1: SerialNumber: syz [ 352.071194][ T5908] usb 6-1: config 0 has no interface number 0 [ 352.082593][ T39] usb 2-1: config 0 descriptor?? [ 352.095303][ T5908] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 352.105539][ T39] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 352.110728][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.133925][ T5908] usb 6-1: Product: syz [ 352.138125][ T5908] usb 6-1: Manufacturer: syz [ 352.151639][ T39] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 352.160499][ T5908] usb 6-1: SerialNumber: syz [ 352.174748][T14133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.181989][ T39] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 352.194376][ T5908] usb 6-1: config 0 descriptor?? [ 352.217515][ T5908] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 352.222625][ T39] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 352.262672][ T39] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 352.300919][ T39] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 352.331403][ T39] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 352.372070][ T39] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 352.400799][ T39] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 352.422504][ T39] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 352.471417][ T39] usb 2-1: USB disconnect, device number 109 [ 352.501652][ T39] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 352.563227][ T39] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 352.579934][T14143] netlink: 'syz.3.3941': attribute type 7 has an invalid length. [ 352.608879][T14143] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3941'. [ 352.612236][ T39] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 352.621370][ T5908] gspca_spca1528: reg_w err -71 [ 352.647228][T14143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3941'. [ 352.691111][ T5908] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 352.692794][ T39] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 352.736309][ T5908] usb 6-1: USB disconnect, device number 3 [ 352.747491][ T39] keyspan 2-1:0.107: device disconnected [ 353.312386][T14162] netlink: 'syz.5.3950': attribute type 21 has an invalid length. [ 353.617215][T14177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3957'. [ 354.060903][ T9] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 354.230952][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 354.231014][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 354.245952][ T9] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 354.256159][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.261598][T14199] bond1: option miimon: invalid value (18446744071562067968) [ 354.278597][ T9] usb 4-1: Product: syz [ 354.289258][ T9] usb 4-1: Manufacturer: syz [ 354.298421][ T9] usb 4-1: SerialNumber: syz [ 354.331395][T14199] bond1: option miimon: allowed values 0 - 2147483647 [ 354.331867][ T9] usb 4-1: config 0 descriptor?? [ 354.369492][ T9] gspca_main: sq905-2.14.0 probing 2770:9120 [ 354.375322][T14199] bond1 (unregistering): Released all slaves [ 354.784506][ T9] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 354.807653][ T9] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 354.826549][T14226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.834846][ T9] usb 4-1: USB disconnect, device number 111 [ 354.959545][T14229] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3982'. [ 354.972444][T14230] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 355.176509][T14239] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 355.210841][T14239] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 355.231860][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 355.231877][ T30] audit: type=1326 audit(1769427489.690:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14240 comm="syz.1.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ff00000 [ 355.280637][T14243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3989'. [ 355.334334][ T30] audit: type=1326 audit(1769427489.720:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14240 comm="syz.1.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ff00000 [ 355.362592][T14245] netlink: 'syz.5.3990': attribute type 1 has an invalid length. [ 355.392292][T14245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3990'. [ 355.401370][ T30] audit: type=1326 audit(1769427489.720:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14240 comm="syz.1.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ff00000 [ 355.481004][ T30] audit: type=1326 audit(1769427489.720:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14240 comm="syz.1.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ff00000 [ 355.556786][ T30] audit: type=1326 audit(1769427489.720:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14240 comm="syz.1.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ff00000 [ 355.615985][ T30] audit: type=1326 audit(1769427489.720:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14240 comm="syz.1.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ff00000 [ 355.621285][T14252] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3994'. [ 355.651208][T14253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.709620][ T30] audit: type=1326 audit(1769427489.720:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14240 comm="syz.1.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ff00000 [ 355.786686][ T30] audit: type=1326 audit(1769427489.720:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14240 comm="syz.1.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ff00000 [ 355.865262][ T30] audit: type=1326 audit(1769427489.720:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14240 comm="syz.1.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ff00000 [ 355.929551][ T30] audit: type=1326 audit(1769427489.720:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14240 comm="syz.1.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ff00000 [ 356.174606][T14273] x_tables: unsorted entry at hook 3 [ 357.428426][T14321] program syz.0.4027 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 357.632123][T14329] futex_wake_op: syz.0.4032 tries to shift op by 36; fix this program [ 357.934284][T14340] dlm: non-version read from control device 162 [ 358.273395][T14357] vivid-001: disconnect [ 358.289827][T14352] vivid-001: reconnect [ 358.986573][T14393] lo: left promiscuous mode [ 359.011766][T14393] lo: left allmulticast mode [ 359.083433][T14393] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 359.108166][ T9] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 359.310898][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 359.323899][ T9] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 359.351542][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.435736][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 359.845326][ T9] gspca_nw80x: reg_r err -71 [ 359.865687][ T9] nw80x 4-1:3.0: probe with driver nw80x failed with error -71 [ 359.877153][T14426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.908882][ T9] usb 4-1: USB disconnect, device number 112 [ 360.560764][ T5907] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 360.749082][ T5907] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 360.798191][ T5907] usb 3-1: config 0 has no interface number 0 [ 360.809528][ T5907] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 360.873683][ T5907] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 360.915836][ T5907] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 360.937403][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.963612][ T5907] usb 3-1: Product: syz [ 360.978116][ T5907] usb 3-1: Manufacturer: syz [ 360.998992][ T5907] usb 3-1: SerialNumber: syz [ 361.019679][ T5907] usb 3-1: config 0 descriptor?? [ 361.031497][T14446] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 361.065715][ T5907] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 361.131808][ T5907] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 361.331770][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 361.466140][T14490] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20003 [ 361.528021][T14494] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4112'. [ 361.548335][ T5922] usb 3-1: USB disconnect, device number 114 [ 361.581790][ T5922] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 361.622332][ T5922] cyberjack 3-1:0.69: device disconnected [ 361.844287][T14509] netlink: 'syz.5.4121': attribute type 8 has an invalid length. [ 362.182151][T14522] binder: 14520:14522 unknown command 0 [ 362.229642][T14522] binder: 14520:14522 ioctl c0306201 200000000080 returned -22 [ 362.374004][T14530] netlink: 'syz.3.4131': attribute type 21 has an invalid length. [ 362.382019][T14530] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4131'. [ 362.430822][ T5907] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 362.567172][T14537] SET target dimension over the limit! [ 362.602249][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 362.618763][ T5907] usb 3-1: config 7 has an invalid interface number: 123 but max is 0 [ 362.630915][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 362.650459][ T5907] usb 3-1: config 7 has no interface number 0 [ 362.668685][ T5907] usb 3-1: config 7 interface 123 altsetting 6 bulk endpoint 0xC has invalid maxpacket 8 [ 362.678964][ T796] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 362.718538][ T5907] usb 3-1: config 7 interface 123 has no altsetting 0 [ 362.742177][ T5907] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0123, bcdDevice=b0.be [ 362.760725][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.779083][ T5907] usb 3-1: Product: syz [ 362.789216][ T5907] usb 3-1: Manufacturer: syz [ 362.800994][ T5907] usb 3-1: SerialNumber: syz [ 362.820821][T14524] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 362.829536][ T30] kauditd_printk_skb: 2024 callbacks suppressed [ 362.829551][ T30] audit: type=1326 audit(1769427497.280:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14543 comm="syz.3.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738d59aeb9 code=0x7ffc0000 [ 362.901032][ T796] usb 6-1: unable to get BOS descriptor or descriptor too short [ 362.918077][ T796] usb 6-1: not running at top speed; connect to a high speed hub [ 362.932332][ T796] usb 6-1: config 3 has an invalid interface number: 146 but max is 0 [ 362.943289][ T30] audit: type=1326 audit(1769427497.340:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14543 comm="syz.3.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f738d59aeb9 code=0x7ffc0000 [ 362.975081][ T796] usb 6-1: config 3 has no interface number 0 [ 362.982134][ T796] usb 6-1: config 3 interface 146 has no altsetting 0 [ 362.989159][ T30] audit: type=1326 audit(1769427497.340:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14543 comm="syz.3.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f738d59aeb9 code=0x7ffc0000 [ 363.040491][ T796] usb 6-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=56.ea [ 363.051386][ T796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.059453][ T796] usb 6-1: Product: syz [ 363.084118][ T796] usb 6-1: Manufacturer: syz [ 363.099833][ T796] usb 6-1: SerialNumber: syz [ 363.115110][ T5907] kvaser_usb 3-1:7.123: error -ENODEV: Cannot get usb endpoint(s) [ 363.152535][ T5907] usb 3-1: USB disconnect, device number 115 [ 363.344377][ T796] cdc_ether 6-1:3.146: More than one union descriptor, skipping ... [ 363.380381][ T796] usb 6-1: bad CDC descriptors [ 363.398579][ T796] usb 6-1: unsupported MDLM descriptors [ 363.424039][ T796] usb 6-1: USB disconnect, device number 4 [ 363.735988][T14576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4152'. [ 364.411121][ T5907] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 364.481082][T14606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4167'. [ 364.559581][T14610] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 364.602342][ T5907] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 364.615840][ T5907] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 364.627804][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.628804][T14610] bond2 (unregistering): Released all slaves [ 364.648524][ T5907] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 364.958359][T14626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4176'. [ 365.222892][T14637] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4181'. [ 365.375619][T14642] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4184'. [ 365.547673][T14650] netlink: 'syz.5.4187': attribute type 10 has an invalid length. [ 365.623405][T14652] bond2: Unable to set up delay as MII monitoring is disabled [ 365.639821][T14652] bond2 (unregistering): Released all slaves [ 365.675035][ T5907] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 365.703966][T14650] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.711735][T14650] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.739412][T14650] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.746908][T14650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.754465][T14650] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.761657][T14650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.808560][T14650] team0: Port device bridge0 added [ 365.880029][ T5907] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 365.911546][ T5907] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 365.937082][ T5907] usb 4-1: USB disconnect, device number 113 [ 365.961921][T14657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4191'. [ 366.084928][T14660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.613551][T14683] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4204'. [ 366.632812][T14683] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4204'. [ 367.025435][T14699] netlink: 'syz.0.4214': attribute type 1 has an invalid length. [ 367.040884][T14702] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 367.073670][T14702] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 367.234923][T14709] xt_CT: You must specify a L4 protocol and not use inversions on it [ 367.331851][T14715] netlink: 830 bytes leftover after parsing attributes in process `syz.5.4219'. [ 367.503802][T14727] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 368.386654][T14763] geneve2: entered promiscuous mode [ 368.480768][ T5922] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 368.660996][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 368.704172][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 368.740824][ T5922] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 368.778984][ T5922] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x3C, changing to 0xC [ 368.820856][ T5922] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 35 [ 368.856783][ T5922] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 368.890741][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.920169][ T5922] usb 3-1: Product: syz [ 368.925241][ T5922] usb 3-1: Manufacturer: syz [ 368.929851][ T5922] usb 3-1: SerialNumber: syz [ 368.971694][ T5922] usb 3-1: config 0 descriptor?? [ 368.985408][T14759] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 369.011718][T14759] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 369.029151][ T5922] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 369.069278][T14791] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4258'. [ 369.272157][ T5907] usb 3-1: USB disconnect, device number 116 [ 369.488505][T14807] netlink: 'syz.1.4265': attribute type 49 has an invalid length. [ 369.792462][T14819] netlink: 'syz.3.4272': attribute type 9 has an invalid length. [ 369.818432][T14819] netlink: 'syz.3.4272': attribute type 7 has an invalid length. [ 369.859544][T14819] netlink: 'syz.3.4272': attribute type 8 has an invalid length. [ 369.970412][T14825] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4275'. [ 370.091168][ T5907] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 370.264838][ T5907] usb 2-1: Using ep0 maxpacket: 8 [ 370.276662][ T5907] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 370.316000][ T5907] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 370.342300][ T5907] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 370.350431][ T5907] usb 2-1: Product: syz [ 370.382819][ T5907] usb 2-1: Manufacturer: syz [ 370.397988][ T5907] usb 2-1: SerialNumber: syz [ 370.640550][ T5907] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 370.675225][ T5907] usb 2-1: Handspring Visor / Palm OS: port 82, is for unknown use [ 370.700868][ T5907] usb 2-1: Handspring Visor / Palm OS: port 223, is for HotSync use [ 370.739122][ T5907] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 370.777336][T14852] netlink: 'syz.2.4288': attribute type 1 has an invalid length. [ 370.839546][ T5907] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 370.868852][ T5907] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 370.916030][ T5907] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 370.964352][ T5907] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 371.015971][ T5907] usb 2-1: USB disconnect, device number 110 [ 371.056775][ T5907] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 371.090867][ T5907] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 371.126301][ T5907] visor 2-1:1.0: device disconnected [ 371.511544][T14874] xt_policy: too many policy elements [ 371.750062][T14886] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4304'. [ 372.172505][ T30] audit: type=1326 audit(1769427506.630:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.5.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1f79aeb9 code=0x7ffc0000 [ 372.264684][ T30] audit: type=1326 audit(1769427506.630:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.5.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1f79aeb9 code=0x7ffc0000 [ 372.370747][ T30] audit: type=1326 audit(1769427506.630:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.5.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a1f79c747 code=0x7ffc0000 [ 372.469591][ T30] audit: type=1326 audit(1769427506.630:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.5.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5a1f75b78e code=0x7ffc0000 [ 372.582248][ T30] audit: type=1326 audit(1769427506.630:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.5.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5a1f75b78e code=0x7ffc0000 [ 372.663396][ T30] audit: type=1326 audit(1769427506.630:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.5.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5a1f75b78e code=0x7ffc0000 [ 372.782893][ T30] audit: type=1326 audit(1769427506.630:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.5.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5a1f75b78e code=0x7ffc0000 [ 372.901737][ T30] audit: type=1326 audit(1769427506.630:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.5.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1f79aeb9 code=0x7ffc0000 [ 373.014363][ T30] audit: type=1326 audit(1769427506.640:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.5.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1f79aeb9 code=0x7ffc0000 [ 373.818909][T14971] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 373.830633][T14969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4340'. [ 373.954768][ T3459] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.113256][T14983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4348'. [ 374.153146][T14983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4348'. [ 374.411845][T14999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4355'. [ 374.437713][T14999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4355'. [ 374.452516][T14999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4355'. [ 374.533690][T14999] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4355'. [ 374.606955][T14999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4355'. [ 374.792996][T15010] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4361'. [ 375.196346][T15028] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 375.280537][T15036] trusted_key: encrypted_key: keylen parameter is missing [ 376.740893][ T5908] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 376.911525][ T5908] usb 3-1: Using ep0 maxpacket: 16 [ 376.933887][ T5908] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 376.955623][ T5908] usb 3-1: config 0 has no interface number 0 [ 376.991191][ T5908] usb 3-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=c3.b4 [ 377.020975][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.049431][ T5908] usb 3-1: Product: syz [ 377.061756][ T5908] usb 3-1: Manufacturer: syz [ 377.066385][ T5908] usb 3-1: SerialNumber: syz [ 377.113940][ T5908] usb 3-1: config 0 descriptor?? [ 377.402500][ T5908] usb 3-1: USB disconnect, device number 117 [ 377.761297][T15134] netlink: 'syz.3.4421': attribute type 89 has an invalid length. [ 377.991255][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 378.463809][ T30] audit: type=1326 audit(1769427512.920:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15157 comm="syz.1.4434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 378.559137][ T30] audit: type=1326 audit(1769427512.950:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15157 comm="syz.1.4434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 378.631937][T15165] program syz.2.4436 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 378.642024][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.648360][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.674884][ T30] audit: type=1326 audit(1769427512.960:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15157 comm="syz.1.4434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 378.700106][ T30] audit: type=1326 audit(1769427512.960:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15157 comm="syz.1.4434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 378.725310][ T30] audit: type=1326 audit(1769427512.960:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15157 comm="syz.1.4434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 378.810505][ T30] audit: type=1326 audit(1769427512.960:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15157 comm="syz.1.4434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 378.923840][ T30] audit: type=1326 audit(1769427512.960:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15157 comm="syz.1.4434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 379.026035][ T30] audit: type=1326 audit(1769427512.970:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15157 comm="syz.1.4434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 379.128668][ T30] audit: type=1326 audit(1769427512.970:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15157 comm="syz.1.4434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 379.691025][T15204] xt_connbytes: Forcing CT accounting to be enabled [ 379.711057][T15204] xt_NFQUEUE: number of total queues is 0 [ 379.990748][T15219] delete_channel: no stack [ 380.290132][T15234] __nla_validate_parse: 2 callbacks suppressed [ 380.290153][T15234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4472'. [ 380.356982][T15234] netlink: 'syz.2.4472': attribute type 3 has an invalid length. [ 380.386133][T15237] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 380.478484][T15239] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 380.882017][T15256] netlink: 116 bytes leftover after parsing attributes in process `syz.5.4481'. [ 380.920901][T15256] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4481'. [ 381.207771][T15265] bond1: entered promiscuous mode [ 381.265471][T15265] 8021q: adding VLAN 0 to HW filter on device bond1 [ 381.311498][T15278] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 4, id = 0 [ 381.420990][ T30] audit: type=1326 audit(1769427515.870:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15280 comm="syz.1.4493" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x0 [ 381.550369][T15289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4496'. [ 381.598152][T15289] bridge2: entered promiscuous mode [ 381.630928][T15289] bridge2: entered allmulticast mode [ 381.894054][T15306] sctp: [Deprecated]: syz.1.4504 (pid 15306) Use of int in max_burst socket option deprecated. [ 381.894054][T15306] Use struct sctp_assoc_value instead [ 381.971194][ T5907] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 382.120909][T15319] netlink: 'syz.5.4509': attribute type 1 has an invalid length. [ 382.172477][ T5907] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 382.202009][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.225965][ T5907] usb 3-1: Product: syz [ 382.236437][ T5907] usb 3-1: Manufacturer: syz [ 382.263137][ T5907] usb 3-1: SerialNumber: syz [ 382.284985][ T5907] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 382.327188][ T5908] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 383.132237][ T9] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 383.238653][T15362] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4531'. [ 383.311620][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 383.323956][ T9] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 383.334890][ T9] usb 4-1: config 0 has no interface number 0 [ 383.357667][ T9] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 383.389377][ T9] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 383.440791][ T5908] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 383.456835][ T9] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 383.472592][ T5908] ath9k_htc: Failed to initialize the device [ 383.478981][ T9] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 383.494410][ T9] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 383.507319][ T9] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 383.550998][T15368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4534'. [ 383.551294][ T9] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 383.574342][ T9] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 383.589503][ T9] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 383.612264][ T5908] usb 3-1: ath9k_htc: USB layer deinitialized [ 383.637346][ T9] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 383.649669][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.661407][ T9] usb 4-1: Product: syz [ 383.668809][ T9] usb 4-1: Manufacturer: syz [ 383.674113][ T9] usb 4-1: SerialNumber: syz [ 383.694923][ T9] usb 4-1: config 0 descriptor?? [ 383.707331][T15349] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 383.717685][ T9] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 383.728559][ T9] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 383.763386][T15372] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4536'. [ 383.834558][ T9] usb 3-1: USB disconnect, device number 118 [ 384.045123][ T9] usb 4-1: USB disconnect, device number 114 [ 384.157255][T15384] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4542'. [ 384.760116][T15413] process 'syz.0.4557' launched './file0' with NULL argv: empty string added [ 384.900845][ T39] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 385.050619][T15422] No such timeout policy "syz1" [ 385.075999][ T39] usb 2-1: unable to get BOS descriptor or descriptor too short [ 385.120814][ T39] usb 2-1: not running at top speed; connect to a high speed hub [ 385.146878][ T39] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 385.180774][ T39] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 385.231003][ T39] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 385.240040][ T39] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8193, setting to 64 [ 385.322838][ T39] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 385.351087][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.379988][ T39] usb 2-1: Product: syz [ 385.390208][ T39] usb 2-1: Manufacturer: syz [ 385.400306][ T39] usb 2-1: SerialNumber: syz [ 385.600842][T15445] netlink: 'syz.5.4572': attribute type 19 has an invalid length. [ 385.639247][T15445] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4572'. [ 385.669963][ T39] usb 2-1: 0:2 : does not exist [ 385.791386][ T39] usb 2-1: USB disconnect, device number 111 [ 385.819886][T15299] udevd[15299]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 386.405981][T15482] SET target dimension over the limit! [ 386.845281][T15505] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4601'. [ 386.889895][T15505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4601'. [ 386.911564][T15505] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4601'. [ 387.020762][ T39] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 387.194409][ T39] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 387.230825][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.238861][ T39] usb 6-1: Product: syz [ 387.271368][ T39] usb 6-1: Manufacturer: syz [ 387.290764][ T39] usb 6-1: SerialNumber: syz [ 387.311677][ T39] usb 6-1: config 0 descriptor?? [ 387.334476][ T39] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 387.341723][T15521] netlink: 'syz.2.4610': attribute type 1 has an invalid length. [ 387.688948][ T30] audit: type=1326 audit(1769427522.130:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15530 comm="syz.3.4615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738d59aeb9 code=0x7ffc0000 [ 387.726513][T15533] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4616'. [ 387.756477][ T5886] usb 6-1: USB disconnect, device number 5 [ 387.760790][ T30] audit: type=1326 audit(1769427522.130:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15530 comm="syz.3.4615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738d59aeb9 code=0x7ffc0000 [ 387.813924][T15533] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4616'. [ 387.844035][ T30] audit: type=1326 audit(1769427522.130:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15530 comm="syz.3.4615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f738d59aeb9 code=0x7ffc0000 [ 387.916987][ T30] audit: type=1326 audit(1769427522.130:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15530 comm="syz.3.4615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738d59aeb9 code=0x7ffc0000 [ 388.008989][ T30] audit: type=1326 audit(1769427522.130:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15530 comm="syz.3.4615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738d59aeb9 code=0x7ffc0000 [ 388.892410][ T9] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 389.066061][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 389.075333][ T5908] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 389.095365][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.130803][ T9] usb 4-1: Product: syz [ 389.147399][ T9] usb 4-1: Manufacturer: syz [ 389.170857][ T9] usb 4-1: SerialNumber: syz [ 389.180774][T15557] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 389.199241][ T9] usb 4-1: config 0 descriptor?? [ 389.202393][T15557] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 389.240829][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 389.272734][ T5908] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 389.278777][T15557] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 389.300909][ T5908] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.310833][T15557] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 389.351105][T15557] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 389.357050][T15557] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 389.363535][ T5908] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 389.408834][T15557] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 389.414628][ T5908] usb 2-1: config 0 has no interface number 0 [ 389.430860][T15557] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 389.445241][T15598] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4643'. [ 389.454974][ T9] hso 4-1:0.0: Failed to find BULK IN ep [ 389.471866][T15557] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 389.472975][ T5908] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 389.477792][T15557] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 389.517065][ T9] usb-storage 4-1:0.0: USB Mass Storage device detected [ 389.589328][ T5908] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 389.658439][ T5908] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 210 [ 389.704301][ T9] usb 4-1: USB disconnect, device number 115 [ 389.711175][ T5908] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 389.764963][ T30] audit: type=1326 audit(1769427524.210:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.2.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b419aeb9 code=0x7ffc0000 [ 389.815310][ T5908] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 389.849455][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.869810][ T30] audit: type=1326 audit(1769427524.210:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.2.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b419aeb9 code=0x7ffc0000 [ 389.903501][ T5908] usb 2-1: Product: syz [ 389.907730][ T5908] usb 2-1: Manufacturer: syz [ 389.941055][ T5908] usb 2-1: SerialNumber: syz [ 389.964256][ T5908] usb 2-1: config 0 descriptor?? [ 390.020913][T15580] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 390.028244][ T30] audit: type=1326 audit(1769427524.220:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.2.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fe7b419aeb9 code=0x7ffc0000 [ 390.086113][ T5908] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 390.147448][ T30] audit: type=1326 audit(1769427524.220:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.2.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b419aeb9 code=0x7ffc0000 [ 390.298043][ T30] audit: type=1326 audit(1769427524.220:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.2.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b419aeb9 code=0x7ffc0000 [ 390.479955][ T5922] usb 2-1: USB disconnect, device number 112 [ 390.532943][T15557] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 390.591583][T15557] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 390.641465][ T39] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 390.801741][ T39] usb 4-1: Using ep0 maxpacket: 8 [ 390.816434][ T39] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 390.850914][ T39] usb 4-1: config 179 has no interface number 0 [ 390.891389][ T39] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 390.940907][ T39] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 391.000866][ T39] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 391.061145][ T39] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 391.102788][ T39] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 391.149077][ T39] usb 4-1: config 179 interface 65 has no altsetting 0 [ 391.179475][ T39] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 391.209571][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.276368][ T39] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input46 [ 391.401296][ T5180] input input46: unable to receive magic message: -110 [ 391.410818][T15650] [U] [ 391.413877][T15650] [U] [ 391.416594][T15650] [U] [ 391.419299][T15650] [U] [ 391.472762][T15650] [U] [ 391.475507][T15650] [U] [ 391.478207][T15650] [U] [ 391.480916][T15650] [U] [ 391.535497][T15650] [U] [ 391.538244][T15650] [U] [ 391.540946][T15650] [U] [ 391.584123][T15648] [U] [ 391.597098][ T5180] input input46: unable to receive magic message: -32 [ 391.636687][ T5180] input input46: unable to receive magic message: -32 [ 391.701455][ T5180] input input46: unable to receive magic message: -32 [ 391.770969][ T5180] input input46: unable to receive magic message: -32 [ 391.777495][ T5907] usb 4-1: USB disconnect, device number 116 [ 391.777816][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 391.792804][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 392.275630][T15686] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 392.282940][T15686] IPv6: NLM_F_CREATE should be set when creating new route [ 392.290260][T15686] IPv6: NLM_F_CREATE should be set when creating new route [ 392.493638][T15697] dlm: no locking on control device [ 394.211087][T15790] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4719'. [ 394.220314][T15790] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4719'. [ 395.467447][T15857] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4748'. [ 395.993073][T15884] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4758'. [ 396.055861][T15884] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4758'. [ 396.071018][T15892] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4759'. [ 396.313328][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 396.313345][ T30] audit: type=1326 audit(1769427530.770:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15903 comm="syz.1.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 396.474864][ T30] audit: type=1326 audit(1769427530.800:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15903 comm="syz.1.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 396.554113][T15913] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4770'. [ 396.588890][ T30] audit: type=1326 audit(1769427530.830:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15903 comm="syz.1.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 396.718851][ T30] audit: type=1326 audit(1769427530.830:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15903 comm="syz.1.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 396.843715][ T30] audit: type=1326 audit(1769427530.830:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15903 comm="syz.1.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 397.140864][T15942] netlink: 'syz.0.4783': attribute type 9 has an invalid length. [ 397.148648][T15942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4783'. [ 397.443484][ T30] audit: type=1400 audit(1769427531.890:2200): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=15959 comm="syz.0.4790" [ 398.036688][T15987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4801'. [ 398.130297][T15987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4801'. [ 398.357743][T16006] trusted_key: encrypted_key: master key parameter is missing [ 398.365793][T16005] netlink: 'syz.2.4813': attribute type 6 has an invalid length. [ 398.811979][T16024] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 398.841047][T16024] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 399.087864][T16041] netlink: 'syz.2.4829': attribute type 2 has an invalid length. [ 399.155632][T16041] @;: entered promiscuous mode [ 400.990574][ T30] audit: type=1326 audit(1769427535.440:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16136 comm="syz.0.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9659aeb9 code=0x7ffc0000 [ 401.036807][T16142] Cannot find add_set index 2 as target [ 401.080982][ T30] audit: type=1326 audit(1769427535.440:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16136 comm="syz.0.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9659aeb9 code=0x7ffc0000 [ 401.172746][ T30] audit: type=1326 audit(1769427535.500:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16136 comm="syz.0.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f6a9659aeb9 code=0x7ffc0000 [ 401.231669][T16151] __nla_validate_parse: 7 callbacks suppressed [ 401.231688][T16151] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4883'. [ 401.264308][ T30] audit: type=1326 audit(1769427535.500:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16136 comm="syz.0.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9659aeb9 code=0x7ffc0000 [ 401.340895][ T30] audit: type=1326 audit(1769427535.500:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16136 comm="syz.0.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9659aeb9 code=0x7ffc0000 [ 401.411786][T16156] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 401.440366][T16157] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 401.471783][T16156] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 402.309840][T16193] xt_CT: No such helper "snmp" [ 402.310871][ T39] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 402.481979][ T39] usb 2-1: not running at top speed; connect to a high speed hub [ 402.502613][ T39] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 402.520736][ T39] usb 2-1: config 95 has no interface number 0 [ 402.537898][ T39] usb 2-1: config 95 interface 1 has no altsetting 0 [ 402.574791][ T39] usb 2-1: string descriptor 0 read error: -22 [ 402.590907][ T39] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 402.599982][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.788675][T16215] bond2 (unregistering): Released all slaves [ 403.174625][ T39] usb 2-1: USB disconnect, device number 113 [ 403.475760][T16243] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.4927'. [ 403.504361][T16243] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 404.870949][T16302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.973080][T16307] netlink: 'syz.3.4958': attribute type 33 has an invalid length. [ 405.014401][T16307] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4958'. [ 405.051585][ T30] audit: type=1326 audit(1769427539.510:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16308 comm="syz.1.4960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 405.151036][ T30] audit: type=1326 audit(1769427539.540:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16308 comm="syz.1.4960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 405.230752][ T30] audit: type=1326 audit(1769427539.540:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16308 comm="syz.1.4960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 405.321123][ T30] audit: type=1326 audit(1769427539.540:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16308 comm="syz.1.4960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 405.394021][ T30] audit: type=1326 audit(1769427539.540:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16308 comm="syz.1.4960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 405.660279][T16334] dvmrp0: entered allmulticast mode [ 407.261738][ T39] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 407.377224][T16426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5016'. [ 407.431107][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 407.450975][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 407.480941][ T39] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 407.489056][ T39] usb 3-1: config 0 has no interface number 0 [ 407.530832][ T39] usb 3-1: config 0 interface 48 has no altsetting 0 [ 407.556709][ T39] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 407.590798][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.612640][ T39] usb 3-1: Product: syz [ 407.616846][ T39] usb 3-1: Manufacturer: syz [ 407.651120][ T39] usb 3-1: SerialNumber: syz [ 407.677872][ T39] usb 3-1: config 0 descriptor?? [ 407.791582][T16438] netlink: 'syz.3.5024': attribute type 3 has an invalid length. [ 407.823639][T16438] netlink: 'syz.3.5024': attribute type 2 has an invalid length. [ 407.869346][T16443] gtp0: entered promiscuous mode [ 407.897793][T16443] gtp0: entered allmulticast mode [ 407.938381][T16446] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5027'. [ 407.975301][ T9] usb 3-1: USB disconnect, device number 119 [ 408.548744][T16472] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 408.676317][T16479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5043'. [ 408.739881][ T30] audit: type=1326 audit(1769427543.190:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16480 comm="syz.1.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 408.773538][T16479] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5043'. [ 408.853308][ T30] audit: type=1326 audit(1769427543.230:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16480 comm="syz.1.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 408.964834][ T30] audit: type=1326 audit(1769427543.240:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16480 comm="syz.1.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 409.036649][ T30] audit: type=1326 audit(1769427543.240:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16480 comm="syz.1.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 409.159545][ T30] audit: type=1326 audit(1769427543.240:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16480 comm="syz.1.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 409.601371][ T9] usb 2-1: new low-speed USB device number 114 using dummy_hcd [ 409.765154][ T9] usb 2-1: config 7 has an invalid interface number: 112 but max is 1 [ 409.785865][ T9] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 409.825870][ T9] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 409.862712][ T9] usb 2-1: config 7 has no interface number 0 [ 409.899377][ T9] usb 2-1: config 7 interface 112 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 409.943678][T16539] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5074'. [ 409.949946][ T9] usb 2-1: config 7 interface 112 has no altsetting 0 [ 409.986371][ T9] usb 2-1: string descriptor 0 read error: -22 [ 410.007966][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=089b, bcdDevice=ff.2b [ 410.040458][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.100301][ T9] uvcvideo 2-1:7.112: Found UVC 0.00 device (046d:089b) [ 410.140729][ T9] uvcvideo 2-1:7.112: No valid video chain found. [ 410.366194][ T9] usb 2-1: USB disconnect, device number 114 [ 410.753053][T16574] tc_dump_action: action bad kind [ 411.120214][T16594] ip6tnl2: entered promiscuous mode [ 411.294026][T16601] netlink: 'syz.5.5105': attribute type 27 has an invalid length. [ 411.330863][T16601] netlink: 'syz.5.5105': attribute type 3 has an invalid length. [ 411.333722][T16603] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 411.338618][T16601] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5105'. [ 413.046528][T16674] xt_CT: You must specify a L4 protocol and not use inversions on it [ 413.063596][T16677] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 413.663754][T16694] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.671192][T16694] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.067408][T16694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.139464][T16694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.870909][ T49] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.896218][T16728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5165'. [ 414.923455][ T49] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.980910][ T49] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.990337][ T49] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.042899][T16731] No such timeout policy "syz0" [ 415.253784][T16740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5174'. [ 415.455547][T16747] netlink: 'syz.3.5176': attribute type 1 has an invalid length. [ 415.789920][T16763] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 416.660891][T16799] netlink: 'syz.3.5201': attribute type 27 has an invalid length. [ 416.823140][T16799] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.830993][T16799] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.890882][ T10] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 417.039553][T16815] netlink: 'syz.0.5209': attribute type 10 has an invalid length. [ 417.082352][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 417.098370][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 8849, setting to 1024 [ 417.110199][T16799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.128541][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 417.156662][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.169814][T16799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.181910][ T10] usb 3-1: Product: syz [ 417.190035][ T10] usb 3-1: Manufacturer: syz [ 417.200312][ T10] usb 3-1: SerialNumber: syz [ 417.228944][ T10] usb 3-1: config 0 descriptor?? [ 417.258164][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 417.279699][ T10] em28xx 3-1:0.0: DVB interface 0 found: isoc [ 417.371681][T16799] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 417.419438][T16799] bond1: left promiscuous mode [ 417.424516][T16799] bond1: left allmulticast mode [ 417.450785][ T5879] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 417.499610][T16799] bridge2: left promiscuous mode [ 417.519293][T16799] bridge2: left allmulticast mode [ 417.531433][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 417.538802][T16799] ip6tnl2: left promiscuous mode [ 417.545733][T16822] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5213'. [ 417.555665][T16815] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 417.565316][T16815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 417.609549][ T10] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 417.618994][ T5879] usb 6-1: Using ep0 maxpacket: 16 [ 417.638449][ T49] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.650919][ T49] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.670955][ T5879] usb 6-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30 [ 417.690987][ T10] em28xx 3-1:0.0: board has no eeprom [ 417.710974][ T5879] usb 6-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 417.724505][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.750765][ T5879] usb 6-1: config 0 interface 0 has no altsetting 0 [ 417.753975][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.763397][ T5879] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 417.785629][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.793760][ T10] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 417.821287][ T5879] usb 6-1: Product: syz [ 417.825577][ T10] em28xx 3-1:0.0: dvb set to isoc mode. [ 417.841918][ T5879] usb 6-1: Manufacturer: syz [ 417.848001][ T796] em28xx 3-1:0.0: Binding DVB extension [ 417.858118][T16826] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5214'. [ 417.862910][ T5879] usb 6-1: SerialNumber: syz [ 417.877895][ T10] usb 3-1: USB disconnect, device number 120 [ 417.913191][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 417.932609][ T5879] usb 6-1: config 0 descriptor?? [ 417.972146][ T5879] usb 6-1: cannot find UAC_HEADER [ 418.037955][ T796] em28xx 3-1:0.0: Registering input extension [ 418.065773][ T5879] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 418.100795][ T10] em28xx 3-1:0.0: Closing input extension [ 418.111764][T16831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.184104][ T10] em28xx 3-1:0.0: Freeing device [ 418.280470][T16191] udevd[16191]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 418.300481][T16834] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 418.365076][ T796] usb 6-1: USB disconnect, device number 6 [ 419.624469][T16883] sg_write: data in/out 487391/57 bytes for SCSI command 0x0-- guessing data in; [ 419.624469][T16883] program syz.5.5237 not setting count and/or reply_len properly [ 420.091202][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 420.260735][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 420.279753][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.304465][ T10] usb 6-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 420.328360][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.355558][ T10] usb 6-1: Product: syz [ 420.359760][ T10] usb 6-1: Manufacturer: syz [ 420.390444][ T10] usb 6-1: SerialNumber: syz [ 420.416764][ T10] usb 6-1: config 0 descriptor?? [ 420.441957][ T10] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 420.448138][ T10] usb 6-1: selecting invalid altsetting 1 [ 420.701965][T16925] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 420.868411][ T39] usb 6-1: USB disconnect, device number 7 [ 421.083302][T16938] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5264'. [ 421.844737][ T30] audit: type=1326 audit(1769427556.300:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.3.5280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738d59aeb9 code=0x7ffc0000 [ 421.900828][ T30] audit: type=1326 audit(1769427556.320:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.3.5280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738d59aeb9 code=0x7ffc0000 [ 421.962034][ T30] audit: type=1326 audit(1769427556.340:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.3.5280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f738d59aeb9 code=0x7ffc0000 [ 422.051252][ T30] audit: type=1326 audit(1769427556.340:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.3.5280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738d59aeb9 code=0x7ffc0000 [ 422.140877][ T30] audit: type=1326 audit(1769427556.340:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.3.5280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738d59aeb9 code=0x7ffc0000 [ 422.166013][ T10] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 422.247152][T16977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5283'. [ 422.309748][ T30] audit: type=1326 audit(1769427556.760:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16978 comm="syz.5.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1f79aeb9 code=0x7ffc0000 [ 422.340779][T16981] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5285'. [ 422.387044][ T10] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 422.400815][ T10] usb 3-1: config 0 has no interface number 0 [ 422.407060][ T30] audit: type=1326 audit(1769427556.790:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16978 comm="syz.5.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1f79aeb9 code=0x7ffc0000 [ 422.438274][ T10] usb 3-1: config 0 interface 29 has no altsetting 0 [ 422.465627][ T30] audit: type=1326 audit(1769427556.800:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16978 comm="syz.5.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f5a1f79aeb9 code=0x7ffc0000 [ 422.503732][T16983] SET target dimension over the limit! [ 422.519921][ T10] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 422.529303][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.549598][ T30] audit: type=1326 audit(1769427556.800:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16978 comm="syz.5.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1f79aeb9 code=0x7ffc0000 [ 422.578966][ T10] usb 3-1: Product: syz [ 422.590746][ T10] usb 3-1: Manufacturer: syz [ 422.611343][ T10] usb 3-1: SerialNumber: syz [ 422.626509][ T10] usb 3-1: config 0 descriptor?? [ 422.652262][ T30] audit: type=1326 audit(1769427556.800:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16978 comm="syz.5.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1f79aeb9 code=0x7ffc0000 [ 422.865616][ T10] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v65 fw v224.204.25 (2 channels) [ 423.078545][ T10] peak_usb 3-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 423.090718][ T10] peak_usb 3-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 423.224075][ T10] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -71 [ 423.265474][ T10] usb 3-1: USB disconnect, device number 121 [ 423.891796][T17049] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 424.582223][T17085] libceph: resolve '4' (ret=-3): failed [ 424.840956][T17100] netlink: 312 bytes leftover after parsing attributes in process `syz.0.5344'. [ 425.109559][T17112] netlink: 'syz.2.5350': attribute type 10 has an invalid length. [ 425.124134][T17114] xt_hashlimit: size too large, truncated to 1048576 [ 425.145165][T17112] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 425.735408][T17136] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5361'. [ 425.763895][T17139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5362'. [ 425.877964][T17143] SET target dimension over the limit! [ 426.650967][T17178] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 426.653771][T17181] netlink: 'syz.2.5382': attribute type 1 has an invalid length. [ 426.658206][T17178] IPv6: NLM_F_CREATE should be set when creating new route [ 426.673278][T17178] IPv6: NLM_F_CREATE should be set when creating new route [ 426.680510][T17178] IPv6: NLM_F_CREATE should be set when creating new route [ 426.893191][T17193] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5388'. [ 426.901714][T17194] netlink: 'syz.5.5389': attribute type 10 has an invalid length. [ 426.941182][T17194] netlink: 2 bytes leftover after parsing attributes in process `syz.5.5389'. [ 426.950162][T17194] team0: entered promiscuous mode [ 427.027078][T17194] team_slave_0: entered promiscuous mode [ 427.027423][T17193] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5388'. [ 427.051068][T17194] team_slave_1: entered promiscuous mode [ 427.063378][T17194] bridge0: entered promiscuous mode [ 427.069075][T17194] bridge0: port 3(team0) entered blocking state [ 427.151301][T17194] bridge0: port 3(team0) entered disabled state [ 427.157800][T17194] team0: entered allmulticast mode [ 427.213144][T17194] team_slave_0: entered allmulticast mode [ 427.221309][T17194] team_slave_1: entered allmulticast mode [ 427.227061][T17194] bridge0: entered allmulticast mode [ 427.291673][T17194] team0: left allmulticast mode [ 427.296574][T17194] team_slave_0: left allmulticast mode [ 427.339633][T17194] team_slave_1: left allmulticast mode [ 427.355862][T17194] bridge0: left allmulticast mode [ 427.363164][T17207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5394'. [ 427.550962][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 427.550979][ T30] audit: type=1326 audit(1769427562.000:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17219 comm="syz.1.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 427.628665][T17223] netlink: 'syz.2.5403': attribute type 1 has an invalid length. [ 427.690741][ T30] audit: type=1326 audit(1769427562.010:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17219 comm="syz.1.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 427.761011][ T30] audit: type=1326 audit(1769427562.020:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17219 comm="syz.1.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 427.844485][ T30] audit: type=1326 audit(1769427562.020:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17219 comm="syz.1.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 427.944777][ T30] audit: type=1326 audit(1769427562.030:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17219 comm="syz.1.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 428.031110][ T30] audit: type=1326 audit(1769427562.030:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17219 comm="syz.1.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 428.111280][ T30] audit: type=1326 audit(1769427562.030:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17219 comm="syz.1.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 428.211494][ T30] audit: type=1326 audit(1769427562.030:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17219 comm="syz.1.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 428.299959][ T30] audit: type=1326 audit(1769427562.030:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17219 comm="syz.1.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1359aeb9 code=0x7ffc0000 [ 428.385020][T17259] sit0: entered promiscuous mode [ 428.423587][T17259] netlink: 'syz.2.5418': attribute type 1 has an invalid length. [ 428.662105][ T796] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 428.877114][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 428.887459][ T796] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 428.917677][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 428.948578][ T796] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 428.982737][ T796] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 429.003760][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.027025][ T796] usb 4-1: Product: syz [ 429.031501][ T796] usb 4-1: Manufacturer: syz [ 429.036102][ T796] usb 4-1: SerialNumber: syz [ 429.070161][ T796] usb 4-1: config 0 descriptor?? [ 429.111447][ T796] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 429.352414][ T796] ums-isd200 4-1:0.0: probe with driver ums-isd200 failed with error -22 [ 429.564267][ T10] usb 4-1: USB disconnect, device number 117 [ 430.233372][T17337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.540813][ T796] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 430.711044][ T796] usb 6-1: unable to get BOS descriptor or descriptor too short [ 430.730044][ T796] usb 6-1: config 7 has an invalid interface number: 29 but max is 0 [ 430.768696][ T796] usb 6-1: config 7 has no interface number 0 [ 430.784169][ T796] usb 6-1: config 7 interface 29 altsetting 1 endpoint 0x1 has invalid maxpacket 112, setting to 8 [ 430.827374][ T796] usb 6-1: config 7 interface 29 has no altsetting 0 [ 430.855512][ T796] usb 6-1: string descriptor 0 read error: -22 [ 430.873967][ T796] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=a2.36 [ 430.920793][ T796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.955313][ T796] i2c-tiny-usb 6-1:7.29: version a2.36 found at bus 006 address 008 [ 431.147168][T17374] binfmt_misc: register: failed to install interpreter file ./file0 [ 431.161120][T17376] netlink: 'syz.2.5476': attribute type 15 has an invalid length. [ 431.169009][T17376] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5476'. [ 431.362745][T17382] ip6t_srh: unknown srh match flags 4000 [ 431.398000][ T796] (null): failure reading functionality [ 431.424061][ T796] i2c i2c-3: failure reading functionality [ 431.456968][ T796] i2c i2c-3: connected i2c-tiny-usb device [ 431.514111][ T796] usb 6-1: USB disconnect, device number 8 [ 431.731105][ T30] audit: type=1326 audit(1769427566.180:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17398 comm="syz.0.5487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9659aeb9 code=0x7ffc0000 [ 431.900464][T17406] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5491'. [ 432.117348][T17420] xt_bpf: check failed: parse error [ 432.151948][T17421] x_tables: duplicate entry at hook 1 [ 432.622902][T17444] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 433.105719][T17471] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.121484][ T796] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 433.288171][T17480] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5528'. [ 433.312221][ T796] usb 4-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 433.335349][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.366949][ T796] usb 4-1: config 0 descriptor?? [ 433.400577][ T796] usb-storage 4-1:0.0: USB Mass Storage device detected [ 433.452644][ T796] usb-storage 4-1:0.0: This device (090a,1200,2487 S 01 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 433.452644][ T796] Please send a copy of this message to and [ 433.613249][ T796] usb 4-1: USB disconnect, device number 118 [ 434.151731][ T5886] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 434.312440][T17525] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5547'. [ 434.330740][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 434.348808][ T5886] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.402162][ T5886] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 434.432149][ T5886] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 434.457659][T17531] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5551'. [ 434.471859][ T5886] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 434.490016][T17531] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5551'. [ 434.512484][ T5886] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 434.552653][ T5886] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 434.580553][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.622746][ T5886] hub 3-1:1.0: bad descriptor, ignoring hub [ 434.646353][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 434.646371][ T30] audit: type=1326 audit(1769427569.100:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17538 comm="syz.0.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9659aeb9 code=0x7ffc0000 [ 434.680760][ T5886] hub 3-1:1.0: probe with driver hub failed with error -5 [ 434.688464][ T5886] cdc_wdm 3-1:1.0: skipping garbage [ 434.727790][ T30] audit: type=1326 audit(1769427569.140:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17538 comm="syz.0.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f6a9659aeb9 code=0x7ffc0000 [ 434.734585][ T5886] cdc_wdm 3-1:1.0: skipping garbage [ 434.825127][ T5886] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 434.831946][ T30] audit: type=1326 audit(1769427569.140:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17538 comm="syz.0.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9659aeb9 code=0x7ffc0000 [ 434.911399][ T5886] usb 3-1: USB disconnect, device number 122 [ 434.950754][ T30] audit: type=1326 audit(1769427569.140:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17538 comm="syz.0.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9659aeb9 code=0x7ffc0000 [ 435.089275][ T30] audit: type=1326 audit(1769427569.240:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17542 comm="syz.5.5558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1f79aeb9 code=0x7ffc0000 [ 435.164818][T17560] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 435.173600][ T30] audit: type=1326 audit(1769427569.260:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17542 comm="syz.5.5558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f5a1f79aeb9 code=0x7ffc0000 [ 435.253153][ T30] audit: type=1326 audit(1769427569.260:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17542 comm="syz.5.5558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1f79aeb9 code=0x7ffc0000 [ 435.341305][ T30] audit: type=1326 audit(1769427569.260:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17542 comm="syz.5.5558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1f79aeb9 code=0x7ffc0000 [ 436.323917][T17617] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 436.529197][T17627] program syz.1.5599 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 437.293241][T17669] xt_CT: You must specify a L4 protocol and not use inversions on it [ 437.941007][T17699] delete_channel: no stack [ 438.174829][T17713] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 438.353102][T17721] sctp: [Deprecated]: syz.3.5647 (pid 17721) Use of int in max_burst socket option. [ 438.353102][T17721] Use struct sctp_assoc_value instead [ 438.368818][ T796] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 438.450461][T17723] ipt_REJECT: TCP_RESET invalid for non-tcp [ 438.560967][ T796] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 438.584470][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.612740][ T796] usb 3-1: Product: syz [ 438.617034][ T796] usb 3-1: Manufacturer: syz [ 438.627159][ T796] usb 3-1: SerialNumber: syz [ 438.663488][ T796] r8152-cfgselector 3-1: Unknown version 0x0000 [ 438.690115][ T796] r8152-cfgselector 3-1: config 0 descriptor?? [ 438.723479][T17733] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 439.135301][ T5879] r8152-cfgselector 3-1: USB disconnect, device number 123 [ 439.842191][T17780] netlink: 'syz.3.5675': attribute type 8 has an invalid length. [ 440.011108][T17789] netlink: 'syz.2.5677': attribute type 32 has an invalid length. [ 440.090478][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.100017][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.794191][T17828] ip6t_rpfilter: unknown options [ 440.841914][ T30] audit: type=1326 audit(1769427575.300:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17830 comm="syz.3.5701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738d59aeb9 code=0x7ffc0000 [ 440.935486][ T30] audit: type=1326 audit(1769427575.300:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17830 comm="syz.3.5701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738d59aeb9 code=0x7ffc0000 [ 441.010833][ T30] audit: type=1326 audit(1769427575.310:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17830 comm="syz.3.5701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f738d59aeb9 code=0x7ffc0000 [ 441.079743][ T30] audit: type=1326 audit(1769427575.310:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17830 comm="syz.3.5701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738d59aeb9 code=0x7ffc0000 [ 441.132030][T17841] fuse: Bad value for 'fd' [ 441.156925][ T30] audit: type=1326 audit(1769427575.310:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17830 comm="syz.3.5701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738d59aeb9 code=0x7ffc0000 [ 441.621019][ T796] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 441.640799][ T5879] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 441.803633][ T796] usb 2-1: Using ep0 maxpacket: 16 [ 441.823320][ T5879] usb 3-1: config 8 has an invalid interface number: 80 but max is 0 [ 441.844145][ T5879] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 441.855104][ T796] usb 2-1: config 8 has an invalid interface number: 39 but max is 0 [ 441.875097][ T796] usb 2-1: config 8 has no interface number 0 [ 441.884953][ T5879] usb 3-1: config 8 has no interface number 0 [ 441.894134][ T796] usb 2-1: config 8 interface 39 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 521 [ 441.904329][ T5879] usb 3-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 441.928302][ T796] usb 2-1: config 8 interface 39 has no altsetting 0 [ 441.945996][ T5879] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 441.962224][ T796] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 441.973267][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.983954][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.014533][ T796] usb 2-1: Product: syz [ 442.018742][ T796] usb 2-1: Manufacturer: syz [ 442.034495][ T5879] usb 3-1: NFC: intf ffff88802172e000 id ffffffff8efb3900 [ 442.051960][ T796] usb 2-1: SerialNumber: syz [ 442.078654][T17855] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 442.267894][ T5879] usb 3-1: USB disconnect, device number 124 [ 442.310285][ T796] ipheth 2-1:8.39: Unable to find endpoints [ 442.325412][T17889] xt_limit: Overflow, try lower: 268435456/134217728 [ 442.371929][ T796] usb 2-1: USB disconnect, device number 115 [ 442.570453][T17897] hfs: unable to load iocharset "io#harset" [ 443.064951][ T30] audit: type=1326 audit(1769427577.520:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17917 comm="syz.2.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b419aeb9 code=0x7ffc0000 [ 443.146714][T17921] netlink: 'syz.1.5744': attribute type 16 has an invalid length. [ 443.153045][ T30] audit: type=1326 audit(1769427577.520:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17917 comm="syz.2.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b419aeb9 code=0x7ffc0000 [ 443.190807][T17921] netlink: 'syz.1.5744': attribute type 17 has an invalid length. [ 443.230064][ T30] audit: type=1326 audit(1769427577.570:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17917 comm="syz.2.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fe7b419aeb9 code=0x7ffc0000 [ 443.272071][T17926] netlink: 'syz.3.5746': attribute type 3 has an invalid length. [ 443.274651][T17921] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.307340][ T30] audit: type=1326 audit(1769427577.570:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17917 comm="syz.2.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b419aeb9 code=0x7ffc0000 [ 443.336864][T17921] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.343917][ T30] audit: type=1326 audit(1769427577.570:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17917 comm="syz.2.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b419aeb9 code=0x7ffc0000 [ 443.563587][T17936] netlink: 'syz.5.5752': attribute type 3 has an invalid length. [ 443.984565][T17958] netlink: del zone limit has 8 unknown bytes [ 444.053691][T17960] delete_channel: no stack [ 444.528815][T17984] program syz.2.5775 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 444.938552][T18008] : entered promiscuous mode [ 445.080873][T18015] netlink: 'syz.0.5792': attribute type 1 has an invalid length. [ 445.496673][T18043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5803'. [ 445.533223][T18043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5803'. [ 445.581517][T18043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5803'. [ 446.318806][T18083] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 446.732350][T18101] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5833'. [ 446.783195][T18106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5835'. [ 447.043319][T18117] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5841'. [ 447.180818][ T39] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 447.331019][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 447.335231][T18129] PM: Enabling pm_trace changes system date and time during resume. [ 447.335231][T18129] PM: Correct system time has to be restored manually after resume. [ 447.359241][ T39] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 447.400839][ T39] usb 4-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 447.441040][ T39] usb 4-1: config 1 interface 0 has no altsetting 0 [ 447.463667][ T39] usb 4-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 447.490779][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.499912][ T39] usb 4-1: Product: syz [ 447.530942][ T39] usb 4-1: Manufacturer: syz [ 447.535588][ T39] usb 4-1: SerialNumber: syz [ 447.785905][ T39] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input53 [ 447.851597][ C1] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 447.871183][ T39] usb 4-1: USB disconnect, device number 119 [ 447.955186][T18150] ptrace attach of "./syz-executor exec"[5841] was attempted by " "[18150] [ 447.994912][ T39] appletouch 4-1:1.0: input: appletouch disconnected [ 448.321090][T18165] unsupported nla_type 52263 [ 448.420823][ T796] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 448.512563][T18170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.563869][T18173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5869'. [ 448.613714][ T796] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 448.635544][ T796] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.660551][ T796] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.683111][ T796] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 448.716828][ T796] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 448.746213][ T796] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 448.789731][ T796] usb 6-1: config 1 interface 1 has no altsetting 0 [ 448.808415][ T796] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 448.818376][ T796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.834690][ T796] usb 6-1: Product: syz [ 448.839072][ T796] usb 6-1: Manufacturer: syz [ 448.859410][ T796] usb 6-1: SerialNumber: syz [ 448.877694][ T796] cdc_ncm 6-1:1.0: skipping garbage [ 448.900839][ T796] cdc_ncm 6-1:1.0: NCM or ECM functional descriptors missing [ 448.916125][ T796] cdc_ncm 6-1:1.0: bind() failure [ 449.220781][ T5879] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 449.240197][T18194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.334273][ T39] usb 6-1: USB disconnect, device number 9 [ 449.391023][ T5879] usb 4-1: Using ep0 maxpacket: 8 [ 449.400080][ T5879] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 449.424211][ T5879] usb 4-1: config 0 has no interface number 0 [ 449.453336][ T5879] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 449.470924][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.489289][ T5879] usb 4-1: Product: syz [ 449.499418][ T5879] usb 4-1: Manufacturer: syz [ 449.508898][ T5879] usb 4-1: SerialNumber: syz [ 449.534653][ T5879] usb 4-1: config 0 descriptor?? [ 449.759971][ T5879] uvcvideo 4-1:0.31: probe with driver uvcvideo failed with error -22 [ 449.812796][ T5879] usb 4-1: USB disconnect, device number 120 [ 450.214671][T18224] team0: left promiscuous mode [ 450.250584][T18224] team_slave_0: left promiscuous mode [ 450.279577][T18224] team_slave_1: left promiscuous mode [ 450.310407][T18224] bridge0: left promiscuous mode [ 450.391697][T18224] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5894'. [ 450.892693][ T5879] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 450.921381][T18249] ipt_rpfilter: unknown options [ 451.022785][T18253] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5908'. [ 451.080755][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 451.092049][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 451.145450][ T5879] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 451.164905][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.205653][ T5879] usb 3-1: Product: syz [ 451.209853][ T5879] usb 3-1: Manufacturer: syz [ 451.251689][ T5879] usb 3-1: SerialNumber: syz [ 451.278309][ T5879] usb 3-1: config 0 descriptor?? [ 451.306002][ T5879] hub 3-1:0.0: bad descriptor, ignoring hub [ 451.322563][ T5879] hub 3-1:0.0: probe with driver hub failed with error -5 [ 451.361827][ T5879] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input54 [ 451.878329][T18286] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5924'. [ 452.074375][T18293] binder: 18291:18293 ioctl 40046210 0 returned -14 [ 452.870944][ T31] INFO: task syz.4.2817:11819 blocked for more than 143 seconds. [ 452.881612][ T31] Not tainted syzkaller #0 [ 452.892811][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 452.919496][ T31] task:syz.4.2817 state:D stack:28184 pid:11819 tgid:11816 ppid:5840 task_flags:0x400040 flags:0x00080002 [ 452.943552][ T31] Call Trace: [ 452.950223][ T31] [ 452.956284][ T31] __schedule+0x14ea/0x5050 [ 452.961385][ T31] ? __pfx___schedule+0x10/0x10 [ 452.966446][ T31] ? schedule+0x90/0x360 [ 452.973032][ T31] schedule+0x164/0x360 [ 452.977476][ T31] schedule_preempt_disabled+0x13/0x30 [ 452.984077][ T31] __mutex_lock+0x7fe/0x1300 [ 452.988868][ T31] ? __mutex_lock+0x5ac/0x1300 [ 452.994505][ T31] ? usbdev_open+0x182/0x770 [ 452.999293][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 453.005412][ T31] ? bus_find_device+0x27d/0x2d0 [ 453.010542][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 453.022882][ T31] ? __pfx_kobject_get_unless_zero+0x10/0x10 [ 453.042385][ T31] ? usbdev_open+0xa7/0x770 [ 453.051788][ T31] usbdev_open+0x182/0x770 [ 453.056251][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 453.070717][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 453.079379][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 453.087853][ T31] chrdev_open+0x4cd/0x5e0 [ 453.092608][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 453.097663][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 453.105096][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 453.110162][ T31] do_dentry_open+0x7ce/0x1420 [ 453.122199][ T31] vfs_open+0x3b/0x340 [ 453.126302][ T31] ? path_openat+0x346e/0x3e20 [ 453.131872][ T31] path_openat+0x3486/0x3e20 [ 453.136519][ T31] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 453.143011][ T31] ? getname_flags+0xb7/0x540 [ 453.147719][ T31] ? __pfx_path_openat+0x10/0x10 [ 453.155324][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 453.160303][ T31] do_filp_open+0x22d/0x490 [ 453.165774][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 453.171548][ T31] ? _raw_spin_unlock+0x28/0x50 [ 453.176528][ T31] ? alloc_fd+0x64b/0x6c0 [ 453.181901][ T31] do_sys_openat2+0x12f/0x220 [ 453.186708][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 453.195795][ T31] ? exc_page_fault+0x6a/0xc0 [ 453.200613][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 453.206728][ T31] __x64_sys_openat+0x138/0x170 [ 453.212840][ T31] do_syscall_64+0xe2/0xf80 [ 453.217367][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.223965][ T31] ? trace_irq_disable+0x37/0x100 [ 453.229109][ T31] ? clear_bhb_loop+0x60/0xb0 [ 453.235269][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.241468][ T31] RIP: 0033:0x7fa671b5b78e [ 453.246002][ T31] RSP: 002b:00007fa672ae6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 453.255120][ T31] RAX: ffffffffffffffda RBX: 00007fa672ae76c0 RCX: 00007fa671b5b78e [ 453.266019][ T31] RDX: 000000000000a401 RSI: 00007fa672ae6c00 RDI: ffffffffffffff9c [ 453.274964][ T31] RBP: 00007fa672ae6c00 R08: 0000000000000000 R09: 0000000000000000 [ 453.283344][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 453.292593][ T31] R13: 00007fa671e16038 R14: 00007fa671e15fa0 R15: 00007fa671f3fa48 [ 453.300941][ T31] [ 453.304061][ T31] [ 453.304061][ T31] Showing all locks held in the system: [ 453.318305][ T31] 1 lock held by khungtaskd/31: [ 453.324197][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 453.341556][ T31] 4 locks held by kworker/0:2/796: [ 453.346697][ T31] #0: ffff88801f2da148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 453.360511][ T31] #1: ffffc90003327bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 453.375074][ T31] #2: ffff8880289fe198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 453.384727][ T31] #3: ffff888143fe9518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x631/0x4f30 [ 453.395493][ T31] 3 locks held by acpid/5180: [ 453.400187][ T31] #0: ffff88806e585118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_open+0x2d4/0x5b0 [ 453.410399][ T31] #1: ffff88803115f2c0 (&dev->mutex#2){+.+.}-{4:4}, at: input_open_device+0x50/0x3b0 [ 453.423341][ T31] #2: ffff888143fe9518 (&port_dev->status_lock){+.+.}-{4:4}, at: usb_port_resume+0x270/0x1ef0 [ 453.434861][ T31] 2 locks held by getty/5576: [ 453.439549][ T31] #0: ffff88814de920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 453.450415][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 453.462304][ T31] 8 locks held by kworker/1:8/5942: [ 453.467516][ T31] 1 lock held by syz.4.2817/11819: [ 453.473693][ T31] #0: ffff888143f5e198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 453.486279][ T31] 1 lock held by udevd/17890: [ 453.491553][ T31] #0: ffff88806e585118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_open+0x2d4/0x5b0 [ 453.501794][ T31] 1 lock held by syz.1.5911/18259: [ 453.506920][ T31] #0: ffff888143f5e198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 453.518764][ T31] [ 453.521906][ T31] ============================================= [ 453.521906][ T31] [ 453.530471][ T31] NMI backtrace for cpu 0 [ 453.530494][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 453.530513][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 453.530523][ T31] Call Trace: [ 453.530531][ T31] [ 453.530540][ T31] dump_stack_lvl+0xe8/0x150 [ 453.530566][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 453.530589][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 453.530615][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 453.530639][ T31] sys_info+0x135/0x170 [ 453.530663][ T31] watchdog+0xf90/0xfe0 [ 453.530686][ T31] ? watchdog+0x209/0xfe0 [ 453.530710][ T31] kthread+0x726/0x8b0 [ 453.530732][ T31] ? __pfx_watchdog+0x10/0x10 [ 453.530747][ T31] ? __pfx_kthread+0x10/0x10 [ 453.530765][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 453.530787][ T31] ? __pfx_kthread+0x10/0x10 [ 453.530803][ T31] ret_from_fork+0x51b/0xa40 [ 453.530829][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 453.530851][ T31] ? __switch_to+0xc82/0x1410 [ 453.530882][ T31] ? __pfx_kthread+0x10/0x10 [ 453.530902][ T31] ret_from_fork_asm+0x1a/0x30 [ 453.530937][ T31] [ 453.645361][ T31] Sending NMI from CPU 0 to CPUs 1: [ 453.650612][ C1] NMI backtrace for cpu 1 [ 453.650628][ C1] CPU: 1 UID: 0 PID: 5942 Comm: kworker/1:8 Not tainted syzkaller #0 PREEMPT(full) [ 453.650646][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 453.650657][ C1] Workqueue: usb_hub_wq hub_event [ 453.650681][ C1] RIP: 0010:unwind_next_frame+0xeae/0x23c0 [ 453.650701][ C1] Code: 8b 5c 24 78 4c 8b 64 24 48 74 08 48 89 df e8 f9 24 b7 00 48 8b 44 24 18 48 89 03 ba 10 00 00 00 4c 89 e7 31 f6 e8 c2 26 b7 00 <48> 8b 14 24 e9 ca 04 00 00 4c 89 64 24 18 4d 8d 6e 08 4c 89 e8 48 [ 453.650714][ C1] RSP: 0018:ffffc900052664f8 EFLAGS: 00000246 [ 453.650726][ C1] RAX: ffffc90005266618 RBX: ffffc90005266600 RCX: 0000000000000000 [ 453.650738][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90005266628 [ 453.650748][ C1] RBP: dffffc0000000000 R08: ffffc90005266627 R09: 0000000000000000 [ 453.650759][ C1] R10: ffffc90005266618 R11: fffff52000a4ccc5 R12: ffffc90005266618 [ 453.650770][ C1] R13: 1ffff92000a4ccbb R14: ffffc900052665c8 R15: ffffc90005266610 [ 453.650782][ C1] FS: 0000000000000000(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000 [ 453.650794][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 453.650804][ C1] CR2: 0000001b31721ff8 CR3: 000000007d134000 CR4: 00000000003526f0 [ 453.650818][ C1] Call Trace: [ 453.650824][ C1] [ 453.650834][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 453.650850][ C1] ? ath6kl_usb_probe+0x14df/0x15d0 [ 453.650868][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 453.650886][ C1] arch_stack_walk+0x11b/0x150 [ 453.650903][ C1] ? usb_probe_interface+0x668/0xc90 [ 453.650923][ C1] stack_trace_save+0xa9/0x100 [ 453.650939][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 453.650963][ C1] ? arch_stack_walk+0x11b/0x150 [ 453.650981][ C1] kasan_save_track+0x3e/0x80 [ 453.650995][ C1] ? kasan_save_track+0x3e/0x80 [ 453.651007][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 453.651020][ C1] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 453.651034][ C1] ? dummy_urb_enqueue+0x7c/0x780 [ 453.651052][ C1] ? usb_hcd_submit_urb+0x328/0x1b70 [ 453.651068][ C1] ? ath6kl_usb_post_recv_transfers+0x3cd/0x6f0 [ 453.651086][ C1] ? ath6kl_usb_power_on+0x6a/0x280 [ 453.651101][ C1] ? ath6kl_core_init+0x1e1/0x10b0 [ 453.651116][ C1] ? ath6kl_usb_probe+0x14df/0x15d0 [ 453.651148][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 453.651168][ C1] __kasan_kmalloc+0x93/0xb0 [ 453.651182][ C1] __kmalloc_cache_noprof+0x3d1/0x6e0 [ 453.651197][ C1] ? dummy_urb_enqueue+0x7c/0x780 [ 453.651217][ C1] dummy_urb_enqueue+0x7c/0x780 [ 453.651234][ C1] ? usb_hcd_map_urb_for_dma+0x44f/0xd40 [ 453.651255][ C1] usb_hcd_submit_urb+0x328/0x1b70 [ 453.651277][ C1] ath6kl_usb_post_recv_transfers+0x3cd/0x6f0 [ 453.651301][ C1] ath6kl_usb_power_on+0x6a/0x280 [ 453.651318][ C1] ath6kl_core_init+0x1e1/0x10b0 [ 453.651335][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 453.651351][ C1] ? __pfx_ath6kl_core_init+0x10/0x10 [ 453.651366][ C1] ? __asan_memcpy+0x40/0x70 [ 453.651384][ C1] ? ath6kl_core_create+0x7fb/0x9a0 [ 453.651400][ C1] ath6kl_usb_probe+0x14df/0x15d0 [ 453.651423][ C1] usb_probe_interface+0x668/0xc90 [ 453.651445][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 453.651461][ C1] really_probe+0x267/0xaf0 [ 453.651480][ C1] __driver_probe_device+0x18c/0x320 [ 453.651496][ C1] driver_probe_device+0x4f/0x240 [ 453.651512][ C1] __device_attach_driver+0x279/0x430 [ 453.651528][ C1] bus_for_each_drv+0x258/0x2f0 [ 453.651545][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 453.651561][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 453.651578][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 453.651594][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 453.651615][ C1] __device_attach+0x2c5/0x450 [ 453.651630][ C1] ? __pfx___device_attach+0x10/0x10 [ 453.651646][ C1] ? _raw_spin_unlock+0x28/0x50 [ 453.651665][ C1] device_initial_probe+0xa1/0xd0 [ 453.651680][ C1] bus_probe_device+0x12a/0x220 [ 453.651697][ C1] ? device_add+0x726/0xb70 [ 453.651716][ C1] device_add+0x7b6/0xb70 [ 453.651736][ C1] usb_set_configuration+0x1a87/0x2110 [ 453.651764][ C1] usb_generic_driver_probe+0x8d/0x150 [ 453.651782][ C1] usb_probe_device+0x1c4/0x3b0 [ 453.651800][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 453.651816][ C1] really_probe+0x267/0xaf0 [ 453.651833][ C1] __driver_probe_device+0x18c/0x320 [ 453.651849][ C1] driver_probe_device+0x4f/0x240 [ 453.651865][ C1] __device_attach_driver+0x279/0x430 [ 453.651882][ C1] bus_for_each_drv+0x258/0x2f0 [ 453.651899][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 453.651914][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 453.651932][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 453.651950][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 453.651971][ C1] __device_attach+0x2c5/0x450 [ 453.651986][ C1] ? __pfx___device_attach+0x10/0x10 [ 453.652002][ C1] ? _raw_spin_unlock+0x28/0x50 [ 453.652021][ C1] device_initial_probe+0xa1/0xd0 [ 453.652036][ C1] bus_probe_device+0x12a/0x220 [ 453.652052][ C1] ? device_add+0x726/0xb70 [ 453.652071][ C1] device_add+0x7b6/0xb70 [ 453.652091][ C1] usb_new_device+0xa08/0x16f0 [ 453.652111][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 453.652127][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 453.652147][ C1] hub_event+0x2a1c/0x4f30 [ 453.652182][ C1] ? __pfx_hub_event+0x10/0x10 [ 453.652199][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 453.652220][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 453.652238][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 453.652256][ C1] process_scheduled_works+0xaec/0x17a0 [ 453.652286][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 453.652303][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 453.652320][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 453.652334][ C1] ? schedule+0x90/0x360 [ 453.652351][ C1] worker_thread+0xda6/0x1360 [ 453.652376][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 453.652392][ C1] kthread+0x726/0x8b0 [ 453.652408][ C1] ? __pfx_worker_thread+0x10/0x10 [ 453.652426][ C1] ? __pfx_kthread+0x10/0x10 [ 453.652442][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 453.652460][ C1] ? __pfx_kthread+0x10/0x10 [ 453.652475][ C1] ret_from_fork+0x51b/0xa40 [ 453.652495][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 453.652512][ C1] ? __switch_to+0xc82/0x1410 [ 453.652532][ C1] ? __pfx_kthread+0x10/0x10 [ 453.652546][ C1] ret_from_fork_asm+0x1a/0x30 [ 453.652570][ C1] [ 454.273096][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 454.279966][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 454.289069][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 454.299120][ T31] Call Trace: [ 454.302392][ T31] [ 454.305311][ T31] vpanic+0x1e0/0x670 [ 454.309291][ T31] panic+0xc5/0xd0 [ 454.313000][ T31] ? __pfx_panic+0x10/0x10 [ 454.317405][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 454.322774][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 454.328922][ T31] watchdog+0xfda/0xfe0 [ 454.333084][ T31] ? watchdog+0x209/0xfe0 [ 454.337424][ T31] kthread+0x726/0x8b0 [ 454.341492][ T31] ? __pfx_watchdog+0x10/0x10 [ 454.346163][ T31] ? __pfx_kthread+0x10/0x10 [ 454.350754][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 454.355948][ T31] ? __pfx_kthread+0x10/0x10 [ 454.360526][ T31] ret_from_fork+0x51b/0xa40 [ 454.365111][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 454.370214][ T31] ? __switch_to+0xc82/0x1410 [ 454.374880][ T31] ? __pfx_kthread+0x10/0x10 [ 454.379458][ T31] ret_from_fork_asm+0x1a/0x30 [ 454.384405][ T31] [ 454.387767][ T31] Kernel Offset: disabled [ 454.392075][ T31] Rebooting in 86400 seconds..