last executing test programs: 8m43.000165929s ago: executing program 1 (id=475): openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats', 0x0, 0x0) 8m42.966514074s ago: executing program 1 (id=477): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/renderD128', 0x800, 0x0) 8m42.930870263s ago: executing program 1 (id=479): pause() 8m39.891039652s ago: executing program 1 (id=590): writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) 8m38.079892659s ago: executing program 1 (id=591): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 8m36.77956056s ago: executing program 1 (id=606): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2m45.045388706s ago: executing program 2 (id=4709): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) fchmod(0xffffffffffffffff, 0x118) 2m44.77969705s ago: executing program 2 (id=4714): r0 = socket(0x2c, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11b, 0x1, 0x0, 0x0) 2m44.491310882s ago: executing program 2 (id=4719): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x62a2, 0x1, 0x1, 0xf, 0x773, 0x8}, 0x20) 2m44.283107779s ago: executing program 2 (id=4724): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37, 0x40024}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10005}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x24004004) 2m43.926377171s ago: executing program 2 (id=4732): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000500)="002e000000000000d8c1a2", 0xb}], 0x1, 0x9, 0x8000400, 0x0) 2m43.687964206s ago: executing program 2 (id=4736): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000240)={0x60, 0x18, 0xd, 0x5360, 0x5}, 0x8, 0x2, 0x81, 0x0, 0x5, 0x101, 0x0}) 2m28.678483956s ago: executing program 32 (id=4736): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000240)={0x60, 0x18, 0xd, 0x5360, 0x5}, 0x8, 0x2, 0x81, 0x0, 0x5, 0x101, 0x0}) 2m27.409889567s ago: executing program 4 (id=5021): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0x1f8, 0xfeffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [0x0, 0xffffff00, 0xffffffff], 'bridge_slave_0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2, 0x24}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x3, 0x68e], 0x3}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x376a, 0xdf8, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) 2m27.153859037s ago: executing program 4 (id=5025): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xffffeffe, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x2}}, [@filter_kind_options=@f_route={{0x52}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x10, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 2m26.870342987s ago: executing program 4 (id=5027): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006750d920e70451668aba0102030309021b00010000000009040000010202ff"], 0x0) 2m24.622180237s ago: executing program 4 (id=5051): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x300, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4, 0xfffffffb}}}}, 0x480) 2m24.394013528s ago: executing program 4 (id=5056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000001c0)=@generic={0x1, 0x0, 0x3}) 2m24.171599343s ago: executing program 4 (id=5060): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, 0x0, 0x62, 0x7, 0x60000000, 0x0, 0x4, 0x100, 0x0}) 2m9.025650225s ago: executing program 33 (id=5060): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, 0x0, 0x62, 0x7, 0x60000000, 0x0, 0x4, 0x100, 0x0}) 3.032921352s ago: executing program 5 (id=7581): prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001840)={[0x9]}, 0x8, 0x80000) 2.77957488s ago: executing program 5 (id=7586): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) lseek(r0, 0x164, 0x0) 2.608908419s ago: executing program 5 (id=7590): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x51, 0x5, 0x100, 0x1, @remote, @local, 0x7800, 0x40, 0x6, 0xd}}) 2.356039546s ago: executing program 5 (id=7594): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x545d, &(0x7f0000000200)=0x3) 2.139550853s ago: executing program 5 (id=7599): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8, 0x17, 0xffffffff}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x2c}}, 0x0) 1.944896589s ago: executing program 5 (id=7603): r0 = inotify_init() syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000109737107d071004c1ec0102030109021b00010040b0000904000001362434000905df03", @ANYRES64=r0], 0x0) 1.580452185s ago: executing program 7 (id=7610): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x5, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x4d2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}}]}, 0x50}}, 0x0) 1.48103801s ago: executing program 3 (id=7613): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) read$hiddev(r0, 0x0, 0x0) 1.352607007s ago: executing program 7 (id=7615): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x8001, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x83, 0x27, 0x10, {0x4, 0x6fd8e84b}, 0x3, 0xed}}) 1.184797265s ago: executing program 0 (id=7617): r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x80, 0x0, @mcast2={0xff, 0x5}}, 0x1c) 1.129608324s ago: executing program 7 (id=7618): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x3fb, @private2, 0xfffdfff9}}, 0xfff, 0x9}, &(0x7f0000000200)=0x90) 1.129330314s ago: executing program 6 (id=7619): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)=@overlay={0x3, 0x1, 0x4, 0x10, 0x47, {}, {0x4, 0x0, 0xfd, 0xff, 0x90, 0x2, "00da29d1"}, 0xfffffffc, 0x3, {}, 0x7}) 1.124935881s ago: executing program 3 (id=7620): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 993.928254ms ago: executing program 7 (id=7621): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0xa) 959.103085ms ago: executing program 6 (id=7622): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) 946.463171ms ago: executing program 0 (id=7623): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) 750.911706ms ago: executing program 3 (id=7624): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x3c, 0x18, 0x1, 0xfffffffd, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010141}}}]}, 0x3c}}, 0x0) 744.245019ms ago: executing program 0 (id=7625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0) 733.815209ms ago: executing program 6 (id=7626): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x38, 0x2, 0x80, "d569e800001e00000000008000", 0xa0363159}) 733.541104ms ago: executing program 7 (id=7627): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) 497.818749ms ago: executing program 6 (id=7628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01010000000000000000010000090900010073797a3100000000380000000b0a03060000000000000000000000080900020073797a31000000000800044000000001040012800900010073797a300000000078000000160a01080000000000000000010000070900010073797a31000000000900020073797a31000000000900020073797a320000000040000380080002400000000608000140000000002c0003801400010070696d726567310000000000000000001400010070696d72656731"], 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x8880) 486.51564ms ago: executing program 3 (id=7629): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xa1}}) 486.098531ms ago: executing program 7 (id=7630): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f00000001c0)={[{}]}) 469.270102ms ago: executing program 0 (id=7631): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/66, 0x42}], 0x1, 0x103c, 0xd) 301.630794ms ago: executing program 6 (id=7632): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 240.327831ms ago: executing program 0 (id=7633): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80008004, 0x4) 119.17172ms ago: executing program 3 (id=7634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000000080)={0x1c, 0x3, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8000}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4810}, 0x0) 76.422459ms ago: executing program 0 (id=7635): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x628, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote], 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffffff, 0xffffffff, 0xff000000], 0xffffff7f, 0x1, {0x4}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) 35.978457ms ago: executing program 6 (id=7636): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) 0s ago: executing program 3 (id=7637): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x25dfdbff, {0x81, 0x80, 0x80, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): T10] usb 5-1: config 220 has no interface number 2 [ 437.615573][ T10] usb 5-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 437.630543][ T10] usb 5-1: config 220 interface 0 has no altsetting 0 [ 437.653863][ T10] usb 5-1: config 220 interface 76 has no altsetting 0 [ 437.669497][ T10] usb 5-1: config 220 interface 1 has no altsetting 0 [ 437.692337][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 437.703754][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.738577][ T10] usb 5-1: Product: syz [ 437.745128][ T10] usb 5-1: Manufacturer: syz [ 437.762418][ T10] usb 5-1: SerialNumber: syz [ 438.006167][ T10] usb 5-1: selecting invalid altsetting 0 [ 438.020273][ T10] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 438.035566][ T10] uvcvideo 5-1:220.0: No valid video chain found. [ 438.046813][ T10] usb 5-1: selecting invalid altsetting 0 [ 438.046844][ T10] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 438.069217][ T10] usb 5-1: USB disconnect, device number 125 [ 438.562359][T19536] netlink: 'syz.3.4810': attribute type 10 has an invalid length. [ 438.590602][T19536] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4810'. [ 438.600437][ T10] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 438.633045][T19536] dummy0: entered promiscuous mode [ 438.649839][T19536] bridge0: port 3(dummy0) entered blocking state [ 438.672051][T19536] bridge0: port 3(dummy0) entered disabled state [ 438.695041][T19536] dummy0: entered allmulticast mode [ 438.734967][T19536] bridge0: port 3(dummy0) entered blocking state [ 438.741489][T19536] bridge0: port 3(dummy0) entered forwarding state [ 438.822778][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.852158][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 438.875846][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=8000, bcdDevice= 0.00 [ 438.923093][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 438.931218][ T10] usb 1-1: SerialNumber: syz [ 439.206039][ T10] usb 1-1: 0:2 : does not exist [ 439.285425][ T10] usb 1-1: USB disconnect, device number 127 [ 439.374891][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.095719][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.102251][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.112791][T19626] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4837'. [ 440.921787][ T6765] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 441.142773][ T6765] usb 4-1: Using ep0 maxpacket: 32 [ 441.160028][ T6765] usb 4-1: config 4 has an invalid interface number: 128 but max is 0 [ 441.187825][ T6765] usb 4-1: config 4 has no interface number 0 [ 441.214698][ T6765] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.228293][T19684] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 441.253703][ T6765] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.274281][ T6765] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 441.309319][ T6765] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.359088][ T6765] hub 4-1:4.128: USB hub found [ 441.450921][T19694] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 441.571823][ T6765] hub 4-1:4.128: 2 ports detected [ 441.596328][ T6765] hub 4-1:4.128: Using single TT (err -22) [ 441.763817][ T6765] hub 4-1:4.128: hub_hub_status failed (err = -71) [ 441.780378][ T6765] hub 4-1:4.128: config failed, can't get hub status (err -71) [ 441.848876][ T6765] usb 4-1: USB disconnect, device number 124 [ 443.075789][T19783] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4891'. [ 443.192821][ T10] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 443.342129][T19793] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4894'. [ 443.392260][ T10] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 443.410810][T19793] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4894'. [ 443.422889][ T10] usb 4-1: config 0 has no interface number 0 [ 443.429013][ T10] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 443.477961][ T10] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 443.498141][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.532530][ T10] usb 4-1: Product: syz [ 443.536840][ T10] usb 4-1: Manufacturer: syz [ 443.589276][ T10] usb 4-1: SerialNumber: syz [ 443.617536][T19803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4897'. [ 443.621025][ T10] usb 4-1: config 0 descriptor?? [ 443.666810][T19771] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 443.681907][ T10] usb-storage 4-1:0.20: USB Mass Storage device detected [ 443.735375][ T10] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 443.896015][ T10] scsi host1: usb-storage 4-1:0.20 [ 444.136655][ T48] usb 4-1: USB disconnect, device number 125 [ 444.164699][T19837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4906'. [ 444.170303][T19834] !: renamed from dummy0 (while UP) [ 445.273870][T19900] binfmt_misc: register: failed to install interpreter file ./file0 [ 447.134478][ T30] audit: type=1326 audit(1769737435.519:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19997 comm="syz.0.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25d19aeb9 code=0x7ffc0000 [ 447.181327][ T30] audit: type=1326 audit(1769737435.549:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19997 comm="syz.0.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fc25d19aeb9 code=0x7ffc0000 [ 447.236259][ T30] audit: type=1326 audit(1769737435.549:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19997 comm="syz.0.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25d19aeb9 code=0x7ffc0000 [ 447.339700][ T30] audit: type=1326 audit(1769737435.549:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19997 comm="syz.0.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25d19aeb9 code=0x7ffc0000 [ 447.915952][T20038] ptrace attach of "./syz-executor exec"[6633] was attempted by ""[20038] [ 448.144647][ T30] audit: type=1326 audit(1769737436.539:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20050 comm="syz.3.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4519aeb9 code=0x7ffc0000 [ 448.262131][ T30] audit: type=1326 audit(1769737436.579:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20050 comm="syz.3.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fcb4519aeb9 code=0x7ffc0000 [ 448.345297][ T30] audit: type=1326 audit(1769737436.579:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20050 comm="syz.3.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4519aeb9 code=0x7ffc0000 [ 448.405303][ T30] audit: type=1326 audit(1769737436.579:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20050 comm="syz.3.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4519aeb9 code=0x7ffc0000 [ 448.756624][T20083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 448.805316][T20087] tc_dump_action: action bad kind [ 449.367550][ T6630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 449.377233][ T6630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 449.388336][ T6630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 449.403869][ T6630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 449.421938][ T6630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 449.617800][T20130] delete_channel: no stack [ 450.104473][ T30] audit: type=1326 audit(1769737438.499:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20180 comm="syz.3.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4519aeb9 code=0x7ffc0000 [ 450.167169][ T30] audit: type=1326 audit(1769737438.539:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20180 comm="syz.3.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4519aeb9 code=0x7ffc0000 [ 450.189798][T20182] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 450.196762][T20182] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 450.205199][T20199] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 450.220557][T20182] vhci_hcd vhci_hcd.0: Device attached [ 450.229620][T20192] vhci_hcd: connection closed [ 450.240097][ T12] vhci_hcd vhci_hcd.3: stop threads [ 450.277943][ T12] vhci_hcd vhci_hcd.3: release socket [ 450.362155][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 450.441215][T20223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5025'. [ 450.600142][T20125] chnl_net:caif_netlink_parms(): no params data found [ 451.042088][ T10] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 451.108540][T20125] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.220187][T20125] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.321320][T20125] bridge_slave_0: entered allmulticast mode [ 451.341867][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 451.358091][T20125] bridge_slave_0: entered promiscuous mode [ 451.406564][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.453888][T20125] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.506572][T20125] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.514071][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 451.531945][ T6629] Bluetooth: hci5: command tx timeout [ 451.559405][T20125] bridge_slave_1: entered allmulticast mode [ 451.592472][T20125] bridge_slave_1: entered promiscuous mode [ 451.620561][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.669747][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 451.754333][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.787198][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 451.815898][T20125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.855683][ T10] usb 5-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a [ 451.878902][T20125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.890024][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.911251][ T10] usb 5-1: Product: syz [ 451.920227][ T10] usb 5-1: Manufacturer: syz [ 451.941717][ T10] usb 5-1: SerialNumber: syz [ 451.974980][ T10] usb 5-1: config 0 descriptor?? [ 452.014222][ T10] usb 5-1: bad CDC descriptors [ 452.047189][ T10] cdc_acm 5-1:0.0: Zero length descriptor references [ 452.061293][T20125] team0: Port device team_slave_0 added [ 452.069083][ T10] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 452.089159][T20125] team0: Port device team_slave_1 added [ 452.107246][T20387] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.5040' sets config #0 [ 452.245508][ T10] usb 5-1: USB disconnect, device number 126 [ 452.258183][T20125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.298730][T20125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.365767][T20125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.378815][T20125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.389800][T20125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.446218][T20125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.728802][T20125] hsr_slave_0: entered promiscuous mode [ 452.753982][T20125] hsr_slave_1: entered promiscuous mode [ 452.801925][T20125] debugfs: 'hsr0' already exists in 'hsr' [ 452.807693][T20125] Cannot create hsr debugfs directory [ 452.816211][T20456] netlink: 'syz.0.5049': attribute type 21 has an invalid length. [ 452.921949][T20456] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5049'. [ 453.102109][T20481] netlink: 'syz.3.5053': attribute type 29 has an invalid length. [ 453.598669][T20560] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 453.602240][ T6629] Bluetooth: hci5: command tx timeout [ 453.810663][T20125] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 453.858204][T20125] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 453.925305][T20125] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 453.962166][T20581] netlink: 5 bytes leftover after parsing attributes in process `syz.5.5068'. [ 453.976194][T20125] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 454.009834][T20581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 454.378548][T20125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.499320][T20125] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.532466][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.539629][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.613214][T20327] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.620411][T20327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.812552][ T798] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 454.866263][T20125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.981051][T20125] veth0_vlan: entered promiscuous mode [ 455.002579][ T798] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 455.010797][ T798] usb 4-1: config 0 has no interface number 0 [ 455.030594][T20125] veth1_vlan: entered promiscuous mode [ 455.049967][ T798] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 455.091793][ T798] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 455.132190][ T798] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 455.151166][T20125] veth0_macvtap: entered promiscuous mode [ 455.170901][ T798] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 455.193555][T20125] veth1_macvtap: entered promiscuous mode [ 455.212148][ T798] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 455.234454][ T798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.273404][ T798] usb 4-1: Product: syz [ 455.277699][ T798] usb 4-1: Manufacturer: syz [ 455.286345][T20125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.301726][ T798] usb 4-1: SerialNumber: syz [ 455.325033][T20125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.339560][ T798] usb 4-1: config 0 descriptor?? [ 455.404214][ T798] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 455.419705][ T70] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.440677][ T70] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.456690][ T798] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.237/input/input47 [ 455.497685][ T70] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.534044][ T70] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.586250][ T6005] usb 4-1: USB disconnect, device number 126 [ 455.673448][ T798] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 455.682694][ T6629] Bluetooth: hci5: command tx timeout [ 455.783883][T20321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.818774][T20321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.880124][ T798] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.917141][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.931641][ T798] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 455.949973][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.959074][ T798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 455.973965][ T798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 455.985675][ T798] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 456.021300][ T798] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 456.034748][ T798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 456.049995][ T798] usb 1-1: Product: syz [ 456.057545][ T798] usb 1-1: Manufacturer: syz [ 456.063713][ T798] usb 1-1: SerialNumber: syz [ 456.081455][ T798] usb 1-1: config 0 descriptor?? [ 456.327305][ T798] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 456.340619][ T798] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 456.485410][T20713] program syz.5.5095 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 456.533105][ T798] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 456.552719][ T798] radio-si470x 1-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 456.582671][ T798] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 456.650248][ T798] usb 1-1: USB disconnect, device number 2 [ 456.742404][T20724] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5098'. [ 456.783908][T20724] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5098'. [ 457.317655][T20752] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 457.762158][ T6629] Bluetooth: hci5: command tx timeout [ 457.977035][T20784] dlm: no locking on control device [ 458.669126][T20820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5137'. [ 459.444239][T20859] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5156'. [ 460.215288][T20897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5171'. [ 460.453340][ T798] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 460.643739][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 460.643758][ T30] audit: type=1326 audit(1769737449.029:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20914 comm="syz.3.5174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4519aeb9 code=0x7ffc0000 [ 460.704995][ T798] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 460.725094][ T798] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.758311][ T30] audit: type=1326 audit(1769737449.029:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20914 comm="syz.3.5174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4519aeb9 code=0x7ffc0000 [ 460.787986][ T798] usb 7-1: config 0 descriptor?? [ 460.814532][ T798] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 460.871597][ T30] audit: type=1326 audit(1769737449.069:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20914 comm="syz.3.5174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fcb4519aeb9 code=0x7ffc0000 [ 460.920410][ T30] audit: type=1326 audit(1769737449.069:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20914 comm="syz.3.5174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4519aeb9 code=0x7ffc0000 [ 461.027776][ T30] audit: type=1326 audit(1769737449.069:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20914 comm="syz.3.5174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4519aeb9 code=0x7ffc0000 [ 461.136381][T20932] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5181'. [ 461.220163][ T798] gspca_stv06xx: I2C: Read error writing address: -71 [ 461.232203][ T798] usb 7-1: USB disconnect, device number 2 [ 461.437861][ T30] audit: type=1326 audit(1769737449.829:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20948 comm="syz.5.5185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc7d9aeb9 code=0x7ffc0000 [ 461.523407][ T30] audit: type=1326 audit(1769737449.859:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20948 comm="syz.5.5185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7efcc7d9aeb9 code=0x7ffc0000 [ 461.600962][ T30] audit: type=1326 audit(1769737449.859:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20948 comm="syz.5.5185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc7d9aeb9 code=0x7ffc0000 [ 461.657977][ T30] audit: type=1326 audit(1769737449.859:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20948 comm="syz.5.5185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc7d9aeb9 code=0x7ffc0000 [ 462.180704][ T30] audit: type=1326 audit(1769737450.569:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20969 comm="syz.0.5193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25d19aeb9 code=0x7ffc0000 [ 462.216062][T20972] x_tables: ip_tables: osf match: only valid for protocol 6 [ 463.333939][T21024] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5217'. [ 464.572926][T21085] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5241'. [ 464.897972][T21101] netlink: 'syz.3.5248': attribute type 63 has an invalid length. [ 464.934549][T21101] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5248'. [ 464.944874][T21103] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5247'. [ 464.991784][T21101] gretap0: entered allmulticast mode [ 465.002243][T21101] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 465.181964][T21112] lo: entered allmulticast mode [ 465.471838][ T798] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 465.564918][T21133] xt_connbytes: Forcing CT accounting to be enabled [ 465.682008][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 465.702777][ T798] usb 4-1: config 0 has an invalid interface number: 205 but max is 0 [ 465.741573][ T798] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.786607][ T798] usb 4-1: config 0 has no interface number 0 [ 465.793714][ T798] usb 4-1: config 0 interface 205 has no altsetting 0 [ 465.814102][ T798] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 465.827107][ T798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.846551][ T798] usb 4-1: Product: syz [ 465.863874][ T798] usb 4-1: Manufacturer: syz [ 465.888848][ T798] usb 4-1: SerialNumber: syz [ 465.929484][ T798] usb 4-1: config 0 descriptor?? [ 465.954799][ T798] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 466.000450][ T798] dvb-usb: bulk message failed: -22 (3/0) [ 466.037539][ T798] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 466.074199][ T798] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 466.102718][ T798] usb 4-1: media controller created [ 466.142639][ T798] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 466.200452][ T798] dvb-usb: bulk message failed: -22 (6/0) [ 466.214478][ T798] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 466.250041][ T798] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input48 [ 466.299681][ T798] dvb-usb: schedule remote query interval to 150 msecs. [ 466.322240][ T798] dvb-usb: bulk message failed: -22 (3/0) [ 466.344994][ T798] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 466.404798][ T798] usb 4-1: USB disconnect, device number 127 [ 466.559855][ T798] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 466.721064][T21200] netlink: 'syz.0.5277': attribute type 11 has an invalid length. [ 466.738215][T21200] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5277'. [ 467.226181][T21225] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 467.634163][T21241] netlink: zone id is out of range [ 467.659844][T21241] netlink: zone id is out of range [ 467.674805][T21241] netlink: zone id is out of range [ 467.683949][T21243] netlink: 'syz.3.5297': attribute type 2 has an invalid length. [ 467.701793][T21241] netlink: zone id is out of range [ 467.711591][T21241] netlink: zone id is out of range [ 467.728402][T21241] netlink: zone id is out of range [ 467.744901][T21241] netlink: zone id is out of range [ 467.760319][T21241] netlink: zone id is out of range [ 467.772611][T21241] netlink: zone id is out of range [ 467.870923][T21251] ip6t_rpfilter: unknown options [ 468.892114][T21296] netlink: 'syz.0.5319': attribute type 6 has an invalid length. [ 468.947213][ T6630] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 468.958487][ T6630] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 468.962272][T21296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5319'. [ 468.976603][ T6630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 468.989052][ T6630] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 468.997507][ T6630] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 469.324697][T21334] netlink: 'syz.3.5326': attribute type 27 has an invalid length. [ 469.399222][T21334] gretap0: left allmulticast mode [ 469.476521][T21334] bridge0: port 3(dummy0) entered disabled state [ 469.483147][T21334] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.491849][T21334] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.502446][T21344] Cannot find set identified by id 0 to match [ 469.582976][T21334] wg1: left promiscuous mode [ 469.714564][T21334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.760559][T21334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.858827][T21334] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 469.878385][T21334] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 469.977367][T21334] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 470.049215][T21334] bond1: left promiscuous mode [ 470.071054][T21334] bond2: left allmulticast mode [ 470.156145][T20327] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.212205][T20327] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.244889][T20327] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.284015][T20327] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.421411][T21378] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5340'. [ 470.441611][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 470.441630][ T30] audit: type=1326 audit(1769737458.829:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21379 comm="syz.0.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25d19aeb9 code=0x7ffc0000 [ 470.558855][ T30] audit: type=1326 audit(1769737458.869:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21379 comm="syz.0.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc25d19aeb9 code=0x7ffc0000 [ 470.632473][T21396] netlink: 'syz.5.5341': attribute type 11 has an invalid length. [ 470.655046][ T30] audit: type=1326 audit(1769737458.869:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21379 comm="syz.0.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25d19aeb9 code=0x7ffc0000 [ 470.778992][ T30] audit: type=1326 audit(1769737458.869:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21379 comm="syz.0.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25d19aeb9 code=0x7ffc0000 [ 470.837265][T21308] chnl_net:caif_netlink_parms(): no params data found [ 471.042038][ T6629] Bluetooth: hci6: command tx timeout [ 471.161438][T21308] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.184999][T21308] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.205057][T21488] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5351'. [ 471.225883][T21308] bridge_slave_0: entered allmulticast mode [ 471.256520][T21308] bridge_slave_0: entered promiscuous mode [ 471.282846][T21488] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5351'. [ 471.308073][T21308] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.322529][T21308] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.340000][T21308] bridge_slave_1: entered allmulticast mode [ 471.347232][T21492] netlink: 180 bytes leftover after parsing attributes in process `syz.5.5352'. [ 471.363555][T21308] bridge_slave_1: entered promiscuous mode [ 471.371257][T21492] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5352'. [ 471.552759][T21308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.597959][T21308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.759817][T21308] team0: Port device team_slave_0 added [ 471.788363][T21308] team0: Port device team_slave_1 added [ 471.877265][T21545] net_ratelimit: 3 callbacks suppressed [ 471.877285][T21545] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 472.008429][T21308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.053619][T21308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.169789][T21308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.229290][T21308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.258912][T21308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.363992][T21308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.704096][T21308] hsr_slave_0: entered promiscuous mode [ 472.723164][T21308] hsr_slave_1: entered promiscuous mode [ 472.729664][T21308] debugfs: 'hsr0' already exists in 'hsr' [ 472.764574][T21308] Cannot create hsr debugfs directory [ 472.770189][T21608] netlink: 'syz.0.5371': attribute type 29 has an invalid length. [ 472.804241][T21608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5371'. [ 473.122009][ T6629] Bluetooth: hci6: command tx timeout [ 473.170291][T21660] veth2: entered promiscuous mode [ 473.221333][T21660] veth2: entered allmulticast mode [ 473.609113][T21709] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5382'. [ 473.734566][T21713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5383'. [ 473.890023][T21308] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 473.930622][T21308] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 474.015621][T21725] batadv1: entered promiscuous mode [ 474.052328][T21725] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 474.071790][T21308] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 474.155023][T21308] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 474.512959][T21759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5393'. [ 474.536095][T21308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.629664][T21308] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.680347][T20319] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.687577][T20319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.753634][T21767] sctp: [Deprecated]: syz.6.5396 (pid 21767) Use of int in max_burst socket option deprecated. [ 474.753634][T21767] Use struct sctp_assoc_value instead [ 474.815369][T20319] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.822822][T20319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.033394][T21779] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5401'. [ 475.086370][T21308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.202165][ T6629] Bluetooth: hci6: command tx timeout [ 475.257700][T21308] veth0_vlan: entered promiscuous mode [ 475.354109][T21308] veth1_vlan: entered promiscuous mode [ 475.525342][T21308] veth0_macvtap: entered promiscuous mode [ 475.691393][T21799] bond0: entered promiscuous mode [ 475.726845][T21799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.814346][T21308] veth1_macvtap: entered promiscuous mode [ 475.895630][T21308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.992171][T21308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.076342][ T70] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.114005][ T70] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.140500][ T70] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.171108][ T70] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.295987][T21848] bond1 (unregistering): Released all slaves [ 476.772456][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.780343][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.822081][T21950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5431'. [ 476.940019][T20327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.963479][T20327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.284559][ T6629] Bluetooth: hci6: command tx timeout [ 477.399174][T21985] netlink: 'syz.7.5312': attribute type 3 has an invalid length. [ 477.427230][T21985] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5312'. [ 478.251274][T22033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5460'. [ 478.793765][T22063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5471'. [ 478.794109][T22063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 478.916023][ T30] audit: type=1326 audit(1769737467.299:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22067 comm="syz.0.5475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25d19aeb9 code=0x7ffc0000 [ 478.917704][ T30] audit: type=1326 audit(1769737467.309:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22067 comm="syz.0.5475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fc25d19aeb9 code=0x7ffc0000 [ 478.917753][ T30] audit: type=1326 audit(1769737467.309:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22067 comm="syz.0.5475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25d19aeb9 code=0x7ffc0000 [ 478.917802][ T30] audit: type=1326 audit(1769737467.309:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22067 comm="syz.0.5475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25d19aeb9 code=0x7ffc0000 [ 479.507178][T22094] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5485'. [ 479.783395][T22110] Zero length message leads to an empty skb [ 479.964484][T22120] xt_TPROXY: Can be used only with -p tcp or -p udp [ 480.510309][T22149] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5507'. [ 481.095029][T22184] netlink: 'syz.3.5521': attribute type 6 has an invalid length. [ 481.415468][T22204] netlink: 'syz.0.5528': attribute type 32 has an invalid length. [ 481.427262][ T6484] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 481.611869][ T6484] usb 7-1: Using ep0 maxpacket: 16 [ 481.637062][ T6484] usb 7-1: config 0 has an invalid interface number: 147 but max is 0 [ 481.676625][ T6484] usb 7-1: config 0 has no interface number 0 [ 481.707218][ T6484] usb 7-1: config 0 interface 147 altsetting 0 bulk endpoint 0xA has invalid maxpacket 40 [ 481.742303][ T6484] usb 7-1: config 0 interface 147 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 481.806676][ T6484] usb 7-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 481.854285][ T6484] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.875580][ T6484] usb 7-1: Product: syz [ 481.879820][ T6484] usb 7-1: Manufacturer: syz [ 481.891913][ T6484] usb 7-1: SerialNumber: syz [ 481.917610][ T6484] usb 7-1: config 0 descriptor?? [ 481.931234][T22189] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 481.939734][T22189] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 482.189103][ T6484] net1080 7-1:0.147: probe with driver net1080 failed with error -71 [ 482.246461][ T6484] usb 7-1: USB disconnect, device number 3 [ 482.404452][T22245] bond1: option fail_over_mac: invalid value (244) [ 482.435276][T22245] bond1 (unregistering): Released all slaves [ 482.771138][T22329] xfrm1: entered allmulticast mode [ 482.872011][ T6484] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 483.052068][ T6484] usb 4-1: Using ep0 maxpacket: 8 [ 483.075789][ T6484] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 483.098770][T22344] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 483.119767][ T6484] usb 4-1: config 0 interface 0 has no altsetting 0 [ 483.131917][T22348] netlink: 344 bytes leftover after parsing attributes in process `syz.7.5555'. [ 483.137018][ T6484] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 483.163121][ T6484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.188605][ T6484] usb 4-1: Product: syz [ 483.194542][ T6484] usb 4-1: Manufacturer: syz [ 483.211351][ T6484] usb 4-1: SerialNumber: syz [ 483.230528][ T6484] usb 4-1: config 0 descriptor?? [ 483.253797][ T6484] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 483.499744][ T6484] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 483.530501][ T6484] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 483.752066][ T6802] usb 4-1: USB disconnect, device number 2 [ 484.189639][T22397] IPVS: set_ctl: invalid protocol: 22 172.30.1.7:20004 [ 484.397560][T22408] netlink: 'syz.6.5572': attribute type 21 has an invalid length. [ 484.438113][T22408] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5572'. [ 485.274135][T22455] fuse: Invalid uid '00000000000000000003' [ 486.751999][T22542] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 486.974153][T22551] netlink: 'syz.5.5629': attribute type 10 has an invalid length. [ 486.998062][T22551] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 487.168706][T22561] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5631'. [ 487.680858][T22588] netlink: 4316 bytes leftover after parsing attributes in process `syz.3.5644'. [ 487.696651][T22589] team_slave_1: entered allmulticast mode [ 488.111491][T22605] netlink: 'syz.3.5653': attribute type 11 has an invalid length. [ 488.338188][T22616] netlink: 'syz.0.5657': attribute type 27 has an invalid length. [ 488.617448][T22616] bridge0: port 3(netdevsim0) entered disabled state [ 488.624536][T22616] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.632022][T22616] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.794734][T22616] batadv0: left promiscuous mode [ 488.868705][T22638] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5666'. [ 488.949103][T22638] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5666'. [ 489.089735][T22616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.209057][T22616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.361396][T22656] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5674'. [ 489.661992][T22616] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 489.668727][T22616] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 489.722159][T22616] bond2: left allmulticast mode [ 489.838210][T22616] xfrm1: left allmulticast mode [ 489.873937][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.911875][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.920890][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.012810][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.370504][T22699] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5692'. [ 490.389267][T22695] netlink: 'syz.0.5690': attribute type 17 has an invalid length. [ 490.430326][T22699] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5692'. [ 490.442003][T22695] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5690'. [ 490.581929][T22708] netlink: 'syz.5.5694': attribute type 27 has an invalid length. [ 490.888723][T22708] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.896158][T22708] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.011375][T22729] netlink: 'syz.3.5703': attribute type 3 has an invalid length. [ 491.022039][ T6484] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 491.120103][ T30] audit: type=1326 audit(1769737479.509:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22732 comm="syz.6.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd0b9aeb9 code=0x7ffc0000 [ 491.193516][ T6484] usb 8-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 491.210986][ T30] audit: type=1326 audit(1769737479.509:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22732 comm="syz.6.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd0b9aeb9 code=0x7ffc0000 [ 491.234045][ T6484] usb 8-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.297250][ T6484] usb 8-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.313011][ T6484] usb 8-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 491.330410][ T30] audit: type=1326 audit(1769737479.549:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22732 comm="syz.6.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f9bd0b9aeb9 code=0x7ffc0000 [ 491.361186][ T6484] usb 8-1: config 0 interface 0 has no altsetting 0 [ 491.368655][ T6484] usb 8-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 491.382945][ T30] audit: type=1326 audit(1769737479.549:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22732 comm="syz.6.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd0b9aeb9 code=0x7ffc0000 [ 491.431788][ T6484] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.465045][ T6484] usb 8-1: config 0 descriptor?? [ 491.502075][ T30] audit: type=1326 audit(1769737479.549:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22732 comm="syz.6.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd0b9aeb9 code=0x7ffc0000 [ 491.532372][ T6484] hub 8-1:0.0: USB hub found [ 491.563918][T22708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.626109][T22708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.709777][ T6484] hub 8-1:0.0: 4 ports detected [ 491.778805][T22708] veth1_vlan: left allmulticast mode [ 491.911010][ T6484] hub 8-1:0.0: hub_hub_status failed (err = -71) [ 491.931357][ T6484] hub 8-1:0.0: config failed, can't get hub status (err -71) [ 492.009218][T22708] ip6tnl1: left allmulticast mode [ 492.015916][ T6484] usb 8-1: USB disconnect, device number 2 [ 492.045696][T22708] bond4: left promiscuous mode [ 492.050594][T22708] bond4: left allmulticast mode [ 492.109923][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.124431][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.170166][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.212282][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.385306][T22780] bridge_slave_0: left allmulticast mode [ 492.409607][T22780] bridge_slave_0: left promiscuous mode [ 492.423555][T22780] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.538879][T22780] bridge_slave_1: left allmulticast mode [ 492.572736][T22780] bridge_slave_1: left promiscuous mode [ 492.606168][T22780] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.684682][T22797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5726'. [ 492.694296][T22780] bond0: (slave bond_slave_0): Releasing backup interface [ 492.766593][T22780] bond0: (slave bond_slave_1): Releasing backup interface [ 492.859046][T22780] team0: Port device team_slave_0 removed [ 492.906316][T22780] team0: Port device team_slave_1 removed [ 492.920029][T22780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.945009][T22780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.974691][T22780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.987992][T22780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.004762][T22780] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 493.262526][T22820] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5735'. [ 493.271521][T22820] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5735'. [ 493.533925][T22833] xt_TPROXY: Can be used only with -p tcp or -p udp [ 493.675750][T22841] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5744'. [ 493.869557][T22851] sctp: [Deprecated]: syz.7.5749 (pid 22851) Use of int in max_burst socket option. [ 493.869557][T22851] Use struct sctp_assoc_value instead [ 493.870221][T22841] bond0 (unregistering): (slave 30): Releasing backup interface [ 493.956277][T22841] bond0 (unregistering): Released all slaves [ 494.084690][T22850] veth3: entered promiscuous mode [ 494.504499][T22895] vxcan3: entered promiscuous mode [ 494.509672][T22895] vxcan3: entered allmulticast mode [ 494.789014][T22916] tipc: Can't bind to reserved service type 2 [ 495.190378][T22945] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5778'. [ 495.232281][T22945] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5778'. [ 495.259062][T22945] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5778'. [ 495.284820][ T6484] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 495.483955][ T6484] usb 4-1: Using ep0 maxpacket: 8 [ 495.518311][ T6484] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.544639][ T6484] usb 4-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 495.556712][ T6484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.577283][ T6484] usb 4-1: Product: syz [ 495.597081][ T6484] usb 4-1: Manufacturer: syz [ 495.619325][ T6484] usb 4-1: SerialNumber: syz [ 495.632293][ T6484] usb 4-1: config 0 descriptor?? [ 495.672119][T22965] netlink: 'syz.0.5786': attribute type 4 has an invalid length. [ 495.683025][ T6484] cdc_phonet 4-1:0.0: invalid descriptor buffer length [ 495.691424][ T6484] cdc_phonet 4-1:0.0: probe with driver cdc_phonet failed with error -22 [ 495.700761][T22965] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5786'. [ 495.776785][T22972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.859820][T22975] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.5789'. [ 495.870489][ T6802] usb 4-1: USB disconnect, device number 3 [ 495.989611][T22985] netlink: 'syz.6.5791': attribute type 1 has an invalid length. [ 496.408259][ T916] kworker/1:2 (916) used greatest stack depth: 15520 bytes left [ 496.557675][T23011] openvswitch: netlink: EtherType 5a8 is less than min 600 [ 496.822194][ T6484] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 496.971889][ T6805] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 496.998462][ T6484] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 497.024469][ T6484] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.033627][ T6765] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 497.067703][ T6484] usb 7-1: config 0 descriptor?? [ 497.092625][ T6484] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 497.122297][ T6805] usb 4-1: Using ep0 maxpacket: 32 [ 497.139880][ T6805] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 497.158566][ T6805] usb 4-1: config 0 has no interface number 0 [ 497.178900][ T6805] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 497.210337][ T6805] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 497.235947][ T6765] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 497.249176][ T6805] usb 4-1: config 0 interface 85 has no altsetting 0 [ 497.251639][ T6765] usb 1-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 497.274492][ T6805] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 497.292041][ T6805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.303917][ T6765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.319667][ T6805] usb 4-1: Product: syz [ 497.332019][ T6805] usb 4-1: Manufacturer: syz [ 497.338078][ T6765] usb 1-1: Product: syz [ 497.352085][ T6805] usb 4-1: SerialNumber: syz [ 497.354135][ T6765] usb 1-1: Manufacturer: syz [ 497.360986][ T6805] usb 4-1: config 0 descriptor?? [ 497.382775][ T6765] usb 1-1: SerialNumber: syz [ 497.498219][T23053] xt_TCPMSS: Only works on TCP SYN packets [ 497.504639][ T6484] gp8psk: usb out operation failed. [ 497.512253][ T6484] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 497.544109][ T6484] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 497.584196][ T6484] usb 7-1: USB disconnect, device number 4 [ 497.618979][ T6765] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 497.653555][ T6765] command write [95] error -22 [ 497.693331][ T6765] usb 1-1: USB disconnect, device number 3 [ 497.802394][ T6805] appletouch 4-1:0.85: Failed to request geyser raw mode [ 497.835131][ T6805] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 497.902301][ T6805] usb 4-1: USB disconnect, device number 4 [ 498.133822][T23098] gretap0: refused to change device tx_queue_len [ 498.144633][T23098] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 498.537630][T23124] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5824'. [ 498.550891][T23121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5825'. [ 498.570806][T23124] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 498.671791][ T6005] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 498.759320][T23132] i2c i2c-0: Invalid block read size 255 [ 498.892176][ T6005] usb 7-1: config 54 has an invalid interface number: 154 but max is 0 [ 498.923472][ T6005] usb 7-1: config 54 has no interface number 0 [ 498.947450][ T6005] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 498.967366][ T6005] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.975836][T23144] TCP: TCP_TX_DELAY enabled [ 498.995335][ T6005] usb 7-1: Product: syz [ 498.999539][ T6005] usb 7-1: Manufacturer: syz [ 499.040713][ T6005] usb 7-1: SerialNumber: syz [ 499.328566][ T12] usb 7-1: Failed to submit usb control message: -71 [ 499.337063][ T6005] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 499.370699][ T12] usb 7-1: unable to send the bmi data to the device: -71 [ 499.405555][ T6005] usb 7-1: USB disconnect, device number 5 [ 499.419922][ T12] usb 7-1: unable to get target info from device [ 499.465611][ T12] usb 7-1: could not get target info (-71) [ 499.510645][ T12] usb 7-1: could not probe fw (-71) [ 499.667760][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.714579][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.738045][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.774338][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.286997][T23217] SET target dimension over the limit! [ 500.720731][T23241] program syz.7.5864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 500.877630][T23250] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 501.340619][T23275] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5877'. [ 501.370251][T23275] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5877'. [ 501.404365][T23275] netlink: 'syz.3.5877': attribute type 6 has an invalid length. [ 501.453201][T23275] netlink: 'syz.3.5877': attribute type 5 has an invalid length. [ 501.481323][T23275] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5877'. [ 501.543986][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.550321][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.578774][T23291] openvswitch: netlink: IPv4 tun info is not correct [ 501.772028][ T6005] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 501.931455][T23312] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5890'. [ 501.962416][ T6005] usb 7-1: Using ep0 maxpacket: 32 [ 501.992947][ T6005] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 502.015607][ T6005] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 502.027394][ T6005] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 502.082875][ T6005] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 502.144846][ T6005] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 502.171328][ T6005] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 502.192190][ T6005] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.204202][ T6005] usb 7-1: Product: syz [ 502.208514][ T6005] usb 7-1: Manufacturer: syz [ 502.220878][ T6005] usb 7-1: SerialNumber: syz [ 502.258996][ T6005] usb 7-1: config 0 descriptor?? [ 502.405926][ T30] audit: type=1326 audit(1769737490.799:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23335 comm="syz.7.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7af79aeb9 code=0x50000 [ 502.489589][ T30] audit: type=1326 audit(1769737490.799:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23335 comm="syz.7.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7af79aeb9 code=0x50000 [ 502.559149][ T30] audit: type=1326 audit(1769737490.799:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23335 comm="syz.7.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7af79aeb9 code=0x50000 [ 502.628687][ T30] audit: type=1326 audit(1769737490.799:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23335 comm="syz.7.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7af79aeb9 code=0x50000 [ 502.674238][ T30] audit: type=1326 audit(1769737490.799:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23335 comm="syz.7.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7af79aeb9 code=0x50000 [ 502.705466][ T6005] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 502.723818][ T6005] input input52: Device does not respond to id packet M [ 502.740128][ T6005] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 502.749249][ T30] audit: type=1326 audit(1769737490.799:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23335 comm="syz.7.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7af79aeb9 code=0x50000 [ 502.776744][ T6005] input input52: Device does not respond to id packet P [ 502.790849][ T30] audit: type=1326 audit(1769737490.799:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23335 comm="syz.7.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7af79aeb9 code=0x50000 [ 502.815692][ T6005] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 502.822381][ T6005] input input52: Device does not respond to id packet B [ 502.830681][ T6005] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 502.837259][ T30] audit: type=1326 audit(1769737490.799:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23335 comm="syz.7.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7af79aeb9 code=0x50000 [ 502.871764][ T6005] input input52: Device does not respond to id packet N [ 502.889386][ T6005] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 502.901819][ T6005] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 502.909864][ T6005] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 502.917034][ T30] audit: type=1326 audit(1769737490.799:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23335 comm="syz.7.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7af79aeb9 code=0x50000 [ 502.939495][ T6765] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 502.955153][ T6005] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 502.967963][ T6005] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input52 [ 502.983194][ T30] audit: type=1326 audit(1769737490.799:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23335 comm="syz.7.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7af79aeb9 code=0x50000 [ 503.022399][ T6005] usb 7-1: USB disconnect, device number 6 [ 503.153906][ T6765] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 503.206777][ T6765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.236702][T23361] bond0 (unregistering): Released all slaves [ 503.250965][ T6765] usb 4-1: Product: syz [ 503.303125][ T6765] usb 4-1: Manufacturer: syz [ 503.307769][ T6765] usb 4-1: SerialNumber: syz [ 503.394355][ T6765] usb 4-1: config 0 descriptor?? [ 503.630767][ T6765] hso 4-1:0.0: Can't find BULK IN endpoint [ 503.642277][ T6765] usb-storage 4-1:0.0: USB Mass Storage device detected [ 503.782387][ T6005] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 503.811200][T23461] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5910'. [ 503.833910][ T6802] usb 4-1: USB disconnect, device number 5 [ 503.980647][ T6005] usb 7-1: unable to get BOS descriptor or descriptor too short [ 504.002359][ T6005] usb 7-1: not running at top speed; connect to a high speed hub [ 504.013465][ T6005] usb 7-1: config 2 has an invalid interface number: 226 but max is 1 [ 504.022667][ T6005] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 504.033952][ T6005] usb 7-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 504.043859][T23473] kAFS: unable to lookup cell ' [ 504.043859][T23473] $)-.ײfYǝa2s [ 504.043859][T23473] ' [ 504.059878][ T6005] usb 7-1: config 2 has no interface number 0 [ 504.067813][ T6005] usb 7-1: config 2 interface 226 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 504.099497][ T6005] usb 7-1: config 2 interface 226 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 504.141497][ T6005] usb 7-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 504.170208][ T6005] usb 7-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 504.184897][ T6005] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.194126][ T6005] usb 7-1: Product: syz [ 504.198309][ T6005] usb 7-1: Manufacturer: syz [ 504.204453][ T6005] usb 7-1: SerialNumber: syz [ 504.468556][ T6005] usb 7-1: USB disconnect, device number 7 [ 504.927892][T23517] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 505.264126][T23530] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5929'. [ 505.328340][T23533] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5930'. [ 505.832979][T23556] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5938'. [ 505.846579][ T6005] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 506.027826][ T6005] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 506.049047][ T6005] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 506.069583][ T6005] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.103110][ T6005] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 506.455613][T23584] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 506.630321][T23593] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5950'. [ 507.167626][T23617] openvswitch: netlink: Key type 344 is out of range max 32 [ 507.168760][T23618] IPv6: NLM_F_CREATE should be specified when creating new route [ 507.214703][T23620] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5961'. [ 507.406959][ T6005] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 507.426136][ T6005] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 507.460238][ T6005] stv0680 7-1:4.0: last error: 86, command = 0x78 [ 507.499126][ T6005] usb 7-1: USB disconnect, device number 8 [ 508.057555][T23665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5975'. [ 508.820422][T23712] netlink: 'syz.0.5995': attribute type 1 has an invalid length. [ 509.772855][T23766] ip6t_srh: unknown srh match flags 4000 [ 510.275757][T23795] dummy0: left allmulticast mode [ 510.280743][T23795] dummy0: left promiscuous mode [ 510.307308][T23795] bridge0: port 3(dummy0) entered disabled state [ 510.378905][T23795] bridge_slave_0: left allmulticast mode [ 510.401050][T23795] bridge_slave_0: left promiscuous mode [ 510.434910][T23795] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.511958][T23795] bridge_slave_1: left allmulticast mode [ 510.517660][T23795] bridge_slave_1: left promiscuous mode [ 510.589707][T23795] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.640305][T23795] .`: (slave bond_slave_0): Releasing backup interface [ 510.654774][T23813] netlink: zone id is out of range [ 510.680548][T23795] .`: (slave bond_slave_1): Releasing backup interface [ 510.690649][T23813] netlink: zone id is out of range [ 510.710390][T23813] netlink: zone id is out of range [ 510.724327][T23795] team0: Port device team_slave_0 removed [ 510.739121][T23813] netlink: zone id is out of range [ 510.749980][T23795] team0: Port device team_slave_1 removed [ 510.765731][T23813] netlink: zone id is out of range [ 510.771492][T23795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.791282][T23813] netlink: zone id is out of range [ 510.806251][T23795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.818262][T23813] netlink: zone id is out of range [ 510.844452][T23795] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 510.861059][T23813] netlink: zone id is out of range [ 511.086410][T23829] pim6reg: entered allmulticast mode [ 511.998929][T23874] bridge1: entered promiscuous mode [ 512.534981][T23903] bridge_slave_0: left allmulticast mode [ 512.553473][T23903] bridge_slave_0: left promiscuous mode [ 512.591974][T23903] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.673703][T23903] bridge_slave_1: left allmulticast mode [ 512.718308][T23903] bridge_slave_1: left promiscuous mode [ 512.771991][T23903] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.830463][T23903] team0: Port device team_slave_0 removed [ 512.842560][T23903] team0: Port device team_slave_1 removed [ 512.849086][T23903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.858200][T23903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.884407][T23903] net_ratelimit: 351 callbacks suppressed [ 512.884429][T23903] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 513.123772][ T6765] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 513.301021][ T6765] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 513.319811][ T6765] usb 8-1: config 179 has no interface number 0 [ 513.331130][ T6765] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 513.374409][ T6765] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 513.411723][ T6765] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 513.443387][ T6765] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 513.475376][ T6765] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 513.509484][ T6765] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 513.539155][ T6765] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.563083][T23916] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 513.592127][T23916] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 513.846315][T23916] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 513.853054][T23916] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 513.932342][T23916] vhci_hcd vhci_hcd.0: Device attached [ 513.961410][T23954] vhci_hcd: connection closed [ 513.962502][ T6802] usb 8-1: USB disconnect, device number 3 [ 513.963012][ C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 513.983142][ C0] dummy_hcd dummy_hcd.7: timer fired with no URBs pending? [ 514.043338][ T13] vhci_hcd vhci_hcd.7: stop threads [ 514.049469][ T13] vhci_hcd vhci_hcd.7: release socket [ 514.080012][ T13] vhci_hcd vhci_hcd.7: disconnect device [ 514.111925][ T48] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 514.286870][T23986] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6098'. [ 514.299129][T23987] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6097'. [ 514.319587][T23987] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6097'. [ 514.509190][T23993] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 514.557450][T24002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6101'. [ 514.560469][T24001] bond0: option all_slaves_active: invalid value (6) [ 514.584697][T23993] block device autoloading is deprecated and will be removed. [ 514.853474][T24018] i2c i2c-0: Invalid block write size 252 [ 515.344626][T24040] ALSA: mixer_oss: invalid OSS volume '' [ 515.375049][T24040] ALSA: mixer_oss: invalid OSS volume ' a=!˹=+LKWM:~' [ 515.436332][T24040] ALSA: mixer_oss: invalid OSS volume '%wѺM#i6[NVLKK-' [ 515.438063][T24084] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6120'. [ 515.468725][T24084] [: entered promiscuous mode [ 515.485417][T24040] ALSA: mixer_oss: invalid OSS volume 'ڶZ:3.F?Y^x1b' [ 515.494020][T24040] ALSA: mixer_oss: invalid OSS volume ' $i.A_|#Xd#>z^a' [ 515.662014][T24040] ALSA: mixer_oss: invalid OSS volume '*moG%BuZk@mIv /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 597.522013][ T31] task:syz.2.4736 state:D stack:28184 pid:19251 tgid:19247 ppid:6634 task_flags:0x400040 flags:0x00080002 [ 597.522072][ T31] Call Trace: [ 597.522081][ T31] [ 597.522095][ T31] __schedule+0x14ea/0x5050 [ 597.522143][ T31] ? __pfx___schedule+0x10/0x10 [ 597.522169][ T31] ? schedule+0x90/0x360 [ 597.522187][ T31] schedule+0x164/0x360 [ 597.522206][ T31] schedule_preempt_disabled+0x13/0x30 [ 597.522224][ T31] __mutex_lock+0x7fe/0x1300 [ 597.522250][ T31] ? __mutex_lock+0x5ac/0x1300 [ 597.522270][ T31] ? usbdev_open+0x182/0x770 [ 597.522299][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 597.522318][ T31] ? bus_find_device+0x27d/0x2d0 [ 597.522342][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 597.522363][ T31] ? __pfx_kobject_get_unless_zero+0x10/0x10 [ 597.522395][ T31] ? usbdev_open+0xa7/0x770 [ 597.522421][ T31] usbdev_open+0x182/0x770 [ 597.522444][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 597.522466][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 597.522491][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 597.522516][ T31] chrdev_open+0x4cd/0x5e0 [ 597.522539][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 597.522556][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 597.522587][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 597.522606][ T31] do_dentry_open+0x7ce/0x1420 [ 597.522643][ T31] vfs_open+0x3b/0x340 [ 597.522662][ T31] ? path_openat+0x346e/0x3e20 [ 597.522687][ T31] path_openat+0x3486/0x3e20 [ 597.522730][ T31] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 597.522752][ T31] ? getname_flags+0xb7/0x540 [ 597.522770][ T31] ? __pfx_path_openat+0x10/0x10 [ 597.522794][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 597.522829][ T31] do_filp_open+0x22d/0x490 [ 597.522854][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 597.522897][ T31] ? _raw_spin_unlock+0x28/0x50 [ 597.522919][ T31] ? alloc_fd+0x64b/0x6c0 [ 597.522947][ T31] do_sys_openat2+0x12f/0x220 [ 597.522971][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 597.522994][ T31] ? exc_page_fault+0x6a/0xc0 [ 597.523018][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 597.523048][ T31] __x64_sys_openat+0x138/0x170 [ 597.523075][ T31] do_syscall_64+0xe2/0xf80 [ 597.523095][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.523115][ T31] ? trace_irq_disable+0x37/0x100 [ 597.523134][ T31] ? clear_bhb_loop+0x60/0xb0 [ 597.523158][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.523184][ T31] RIP: 0033:0x7fe5ce15b78e [ 597.523206][ T31] RSP: 002b:00007fe5cf128b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 597.523229][ T31] RAX: ffffffffffffffda RBX: 00007fe5cf1296c0 RCX: 00007fe5ce15b78e [ 597.523245][ T31] RDX: 0000000000000002 RSI: 00007fe5cf128c00 RDI: ffffffffffffff9c [ 597.523259][ T31] RBP: 00007fe5cf128c00 R08: 0000000000000000 R09: 0000000000000000 [ 597.523273][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 597.523287][ T31] R13: 00007fe5ce416038 R14: 00007fe5ce415fa0 R15: 00007fe5ce53fa48 [ 597.523318][ T31] [ 597.523336][ T31] INFO: task syz.4.5060:20543 blocked for more than 143 seconds. [ 597.523351][ T31] Not tainted syzkaller #0 [ 597.523362][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 597.523377][ T31] task:syz.4.5060 state:D stack:28184 pid:20543 tgid:20538 ppid:6635 task_flags:0x400040 flags:0x00080002 [ 597.523429][ T31] Call Trace: [ 597.523437][ T31] [ 597.523450][ T31] __schedule+0x14ea/0x5050 [ 597.523477][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 597.523498][ T31] ? irqentry_exit+0x59c/0x620 [ 597.523518][ T31] ? trace_irq_disable+0x37/0x100 [ 597.523546][ T31] ? __pfx___schedule+0x10/0x10 [ 597.523575][ T31] ? schedule+0x90/0x360 [ 597.523597][ T31] schedule+0x164/0x360 [ 597.523618][ T31] schedule_preempt_disabled+0x13/0x30 [ 597.523635][ T31] __mutex_lock+0x7fe/0x1300 [ 597.523660][ T31] ? __mutex_lock+0x5ac/0x1300 [ 597.523686][ T31] ? usbdev_open+0x182/0x770 [ 597.523712][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 597.523731][ T31] ? bus_find_device+0x27d/0x2d0 [ 597.523754][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 597.523776][ T31] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 597.523797][ T31] ? usbdev_open+0xa7/0x770 [ 597.523824][ T31] usbdev_open+0x182/0x770 [ 597.523848][ T31] ? kobject_get_unless_zero+0x167/0x1f0 [ 597.523873][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 597.523901][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 597.523926][ T31] chrdev_open+0x4cd/0x5e0 [ 597.523948][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 597.523966][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 597.523994][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 597.524010][ T31] do_dentry_open+0x7ce/0x1420 [ 597.524044][ T31] vfs_open+0x3b/0x340 [ 597.524062][ T31] ? path_openat+0x346e/0x3e20 [ 597.524089][ T31] path_openat+0x3486/0x3e20 [ 597.524139][ T31] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 597.524162][ T31] ? getname_flags+0xb7/0x540 [ 597.524182][ T31] ? __pfx_path_openat+0x10/0x10 [ 597.524207][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 597.524243][ T31] do_filp_open+0x22d/0x490 [ 597.524270][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 597.524313][ T31] ? _raw_spin_unlock+0x28/0x50 [ 597.524337][ T31] ? alloc_fd+0x64b/0x6c0 [ 597.524374][ T31] do_sys_openat2+0x12f/0x220 [ 597.524399][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 597.524421][ T31] ? exc_page_fault+0x6a/0xc0 [ 597.524443][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 597.524471][ T31] __x64_sys_openat+0x138/0x170 [ 597.524498][ T31] do_syscall_64+0xe2/0xf80 [ 597.524518][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.524536][ T31] ? trace_irq_disable+0x37/0x100 [ 597.524555][ T31] ? clear_bhb_loop+0x60/0xb0 [ 597.524576][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.524596][ T31] RIP: 0033:0x7f0334b5b78e [ 597.524612][ T31] RSP: 002b:00007f0332df5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 597.524633][ T31] RAX: ffffffffffffffda RBX: 00007f0332df66c0 RCX: 00007f0334b5b78e [ 597.524648][ T31] RDX: 0000000000000082 RSI: 00007f0332df5c00 RDI: ffffffffffffff9c [ 597.524663][ T31] RBP: 00007f0332df5c00 R08: 0000000000000000 R09: 0000000000000000 [ 597.524676][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 597.524690][ T31] R13: 00007f0334e16038 R14: 00007f0334e15fa0 R15: 00007f0334f3fa48 [ 597.524721][ T31] [ 597.524751][ T31] [ 597.524751][ T31] Showing all locks held in the system: [ 597.524761][ T31] 5 locks held by kworker/0:1/10: [ 597.524777][ T31] 1 lock held by khungtaskd/31: [ 597.524788][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 597.524870][ T31] 1 lock held by udevd/5195: [ 597.524883][ T31] 2 locks held by getty/5581: [ 597.524895][ T31] #0: ffff8880304240a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 597.524946][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 597.524999][ T31] 5 locks held by kworker/1:3/6564: [ 597.525012][ T31] 4 locks held by syz-executor/6633: [ 597.525032][ T31] 1 lock held by syz.2.4736/19251: [ 597.525044][ T31] #0: ffff888028b2d198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 597.525098][ T31] 1 lock held by syz.4.5060/20543: [ 597.525110][ T31] #0: ffff888028b2d198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 597.525165][ T31] 6 locks held by syz.6.7636/28968: [ 597.525177][ T31] 2 locks held by syz.0.7635/28969: [ 597.525189][ T31] [ 597.525196][ T31] ============================================= [ 597.525196][ T31] [ 597.525212][ T31] NMI backtrace for cpu 1 [ 597.525227][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 597.525246][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 597.525255][ T31] Call Trace: [ 597.525262][ T31] [ 597.525268][ T31] dump_stack_lvl+0xe8/0x150 [ 597.525291][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 597.525312][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 597.525337][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 597.525362][ T31] sys_info+0x135/0x170 [ 597.525386][ T31] watchdog+0xf90/0xfe0 [ 597.525409][ T31] ? watchdog+0x209/0xfe0 [ 597.525432][ T31] kthread+0x726/0x8b0 [ 597.525454][ T31] ? __pfx_watchdog+0x10/0x10 [ 597.525471][ T31] ? __pfx_kthread+0x10/0x10 [ 597.525492][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 597.525515][ T31] ? __pfx_kthread+0x10/0x10 [ 597.525534][ T31] ret_from_fork+0x51b/0xa40 [ 597.525561][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 597.525583][ T31] ? __switch_to+0xc82/0x1410 [ 597.525607][ T31] ? __pfx_kthread+0x10/0x10 [ 597.525626][ T31] ret_from_fork_asm+0x1a/0x30 [ 597.525661][ T31] [ 597.525668][ T31] Sending NMI from CPU 1 to CPUs 0: [ 597.525699][ C0] NMI backtrace for cpu 0 [ 597.525712][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 597.525729][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 597.525740][ C0] Workqueue: usb_hub_wq hub_event [ 597.525757][ C0] RIP: 0010:do_raw_spin_lock+0x138/0x2f0 [ 597.525775][ C0] Code: df be 04 00 00 00 49 89 d6 e8 44 da 8b 00 48 8d 7c 24 40 be 04 00 00 00 e8 35 da 8b 00 8b 44 24 40 b9 01 00 00 00 f0 0f b1 0b <0f> 85 20 01 00 00 43 c6 44 34 04 f8 65 8b 1d 79 c1 51 11 43 0f b6 [ 597.525789][ C0] RSP: 0018:ffffc90000007dc0 EFLAGS: 00000046 [ 597.525801][ C0] RAX: 0000000000000000 RBX: ffff8880b8628240 RCX: 0000000000000001 [ 597.525812][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000007e00 [ 597.525821][ C0] RBP: ffffc90000007e70 R08: 0000000000000003 R09: 0000000000000004 [ 597.525831][ C0] R10: dffffc0000000000 R11: fffff52000000fc0 R12: 1ffff92000000fbc [ 597.525842][ C0] R13: ffff8880b8628248 R14: dffffc0000000000 R15: 1ffff110170c5049 [ 597.525853][ C0] FS: 0000000000000000(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000 [ 597.525865][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 597.525876][ C0] CR2: 00007fc25d0708c0 CR3: 000000000e346000 CR4: 00000000003526f0 [ 597.525891][ C0] Call Trace: [ 597.525897][ C0] [ 597.525904][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 597.525920][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 597.525934][ C0] ? sched_clock_cpu+0x74/0x440 [ 597.525953][ C0] ? ktime_get+0x45/0x200 [ 597.525970][ C0] _raw_spin_lock_irqsave+0x4c/0x60 [ 597.525990][ C0] hrtimer_interrupt+0xfa/0x1010 [ 597.526005][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 597.526018][ C0] ? sched_clock+0x3f/0x60 [ 597.526034][ C0] ? sched_clock_cpu+0x74/0x440 [ 597.526053][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 597.526067][ C0] ? lockdep_softirqs_on+0x11d/0x180 [ 597.526085][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 597.526101][ C0] ? handle_softirqs+0x689/0x7c0 [ 597.526116][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 597.526132][ C0] __sysvec_apic_timer_interrupt+0x102/0x3d0 [ 597.526149][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 597.526164][ C0] [ 597.526170][ C0] [ 597.526176][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 597.526191][ C0] RIP: 0010:rcu_is_watching+0x70/0xb0 [ 597.526206][ C0] Code: c3 d8 e6 f3 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d 29 05 49 11 74 11 83 e0 04 c1 e8 02 5b <41> 5e 41 5f e9 47 38 f0 09 cc e8 91 0e 8a ff eb e8 48 c7 c7 c0 0e [ 597.526218][ C0] RSP: 0018:ffffc900000f64f8 EFLAGS: 00000202 [ 597.526231][ C0] RAX: 0000000000000001 RBX: ffffffff91078301 RCX: 0000000080000001 [ 597.526241][ C0] RDX: ffffc900000f6601 RSI: ffffffff8c073a60 RDI: ffffffff8c073a20 [ 597.526252][ C0] RBP: dffffc0000000000 R08: ffffc900000f6ad8 R09: 0000000000000000 [ 597.526263][ C0] R10: ffffc900000f6698 R11: fffff5200001ecd5 R12: ffffc900000f6ae8 [ 597.526274][ C0] R13: ffffffff81759195 R14: ffffffff8df79dd0 R15: dffffc0000000000 [ 597.526286][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 597.526308][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 597.526322][ C0] lock_release+0x4b/0x3a0 [ 597.526339][ C0] ? deref_stack_reg+0x19f/0x230 [ 597.526356][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 597.526371][ C0] unwind_next_frame+0x1aaa/0x23c0 [ 597.526389][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 597.526403][ C0] ? __netdev_alloc_skb+0xc1/0x850 [ 597.526422][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 597.526440][ C0] arch_stack_walk+0x11b/0x150 [ 597.526457][ C0] ? ath6kl_usb_post_recv_transfers+0x207/0x6f0 [ 597.526478][ C0] stack_trace_save+0xa9/0x100 [ 597.526494][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 597.526511][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 597.526525][ C0] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 597.526538][ C0] ? dummy_urb_enqueue+0x7c/0x780 [ 597.526556][ C0] ? usb_hcd_submit_urb+0x328/0x1b70 [ 597.526574][ C0] ? ath6kl_usb_post_recv_transfers+0x3cd/0x6f0 [ 597.526590][ C0] ? ath6kl_usb_power_on+0x6a/0x280 [ 597.526606][ C0] ? ath6kl_core_init+0x1e1/0x10b0 [ 597.526626][ C0] ? ath6kl_usb_probe+0x14df/0x15d0 [ 597.526643][ C0] kasan_save_track+0x3e/0x80 [ 597.526656][ C0] ? kasan_save_track+0x3e/0x80 [ 597.526668][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 597.526681][ C0] ? kmem_cache_alloc_node_noprof+0x427/0x6f0 [ 597.526700][ C0] ? __alloc_skb+0x1d7/0x390 [ 597.526714][ C0] ? __netdev_alloc_skb+0xc1/0x850 [ 597.526750][ C0] __kasan_slab_alloc+0x6c/0x80 [ 597.526765][ C0] kmem_cache_alloc_node_noprof+0x427/0x6f0 [ 597.526785][ C0] ? __alloc_skb+0x1d7/0x390 [ 597.526799][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 597.526813][ C0] ? __alloc_skb+0x193/0x390 [ 597.526829][ C0] __alloc_skb+0x1d7/0x390 [ 597.526846][ C0] __netdev_alloc_skb+0xc1/0x850 [ 597.526861][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 597.526882][ C0] ath6kl_usb_post_recv_transfers+0x207/0x6f0 [ 597.526907][ C0] ath6kl_usb_power_on+0x6a/0x280 [ 597.526924][ C0] ath6kl_core_init+0x1e1/0x10b0 [ 597.526941][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 597.526958][ C0] ? __pfx_ath6kl_core_init+0x10/0x10 [ 597.526973][ C0] ? __asan_memcpy+0x40/0x70 [ 597.526992][ C0] ? ath6kl_core_create+0x7fb/0x9a0 [ 597.527009][ C0] ath6kl_usb_probe+0x14df/0x15d0 [ 597.527032][ C0] usb_probe_interface+0x668/0xc90 [ 597.527054][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 597.527071][ C0] really_probe+0x267/0xaf0 [ 597.527089][ C0] __driver_probe_device+0x18c/0x320 [ 597.527105][ C0] driver_probe_device+0x4f/0x240 [ 597.527122][ C0] __device_attach_driver+0x279/0x430 [ 597.527139][ C0] bus_for_each_drv+0x258/0x2f0 [ 597.527156][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 597.527171][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 597.527189][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 597.527203][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 597.527224][ C0] __device_attach+0x2c5/0x450 [ 597.527240][ C0] ? __pfx___device_attach+0x10/0x10 [ 597.527256][ C0] ? _raw_spin_unlock+0x28/0x50 [ 597.527275][ C0] device_initial_probe+0xa1/0xd0 [ 597.527291][ C0] bus_probe_device+0x12a/0x220 [ 597.527307][ C0] ? device_add+0x726/0xb70 [ 597.527326][ C0] device_add+0x7b6/0xb70 [ 597.527347][ C0] usb_set_configuration+0x1a87/0x2110 [ 597.527376][ C0] usb_generic_driver_probe+0x8d/0x150 [ 597.527395][ C0] usb_probe_device+0x1c4/0x3b0 [ 597.527413][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 597.527429][ C0] really_probe+0x267/0xaf0 [ 597.527447][ C0] __driver_probe_device+0x18c/0x320 [ 597.527463][ C0] driver_probe_device+0x4f/0x240 [ 597.527480][ C0] __device_attach_driver+0x279/0x430 [ 597.527497][ C0] bus_for_each_drv+0x258/0x2f0 [ 597.527515][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 597.527530][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 597.527548][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 597.527562][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 597.527583][ C0] __device_attach+0x2c5/0x450 [ 597.527598][ C0] ? __pfx___device_attach+0x10/0x10 [ 597.527618][ C0] ? _raw_spin_unlock+0x28/0x50 [ 597.527638][ C0] device_initial_probe+0xa1/0xd0 [ 597.527653][ C0] bus_probe_device+0x12a/0x220 [ 597.527670][ C0] ? device_add+0x726/0xb70 [ 597.527690][ C0] device_add+0x7b6/0xb70 [ 597.527710][ C0] usb_new_device+0xa08/0x16f0 [ 597.527730][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 597.527746][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 597.527766][ C0] hub_event+0x2a1c/0x4f30 [ 597.527803][ C0] ? __pfx_hub_event+0x10/0x10 [ 597.527819][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 597.527841][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 597.527859][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 597.527877][ C0] process_scheduled_works+0xaec/0x17a0 [ 597.527908][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 597.527926][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 597.527942][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 597.527956][ C0] ? schedule+0x90/0x360 [ 597.527973][ C0] worker_thread+0xda6/0x1360 [ 597.527999][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 597.528016][ C0] kthread+0x726/0x8b0 [ 597.528038][ C0] ? __pfx_worker_thread+0x10/0x10 [ 597.528056][ C0] ? __pfx_kthread+0x10/0x10 [ 597.528072][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 597.528090][ C0] ? __pfx_kthread+0x10/0x10 [ 597.528105][ C0] ret_from_fork+0x51b/0xa40 [ 597.528125][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 597.528143][ C0] ? __switch_to+0xc82/0x1410 [ 597.528161][ C0] ? __pfx_kthread+0x10/0x10 [ 597.528176][ C0] ret_from_fork_asm+0x1a/0x30 [ 597.528200][ C0] [ 597.538926][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 597.538946][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 597.538967][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 597.538979][ T31] Call Trace: [ 597.538987][ T31] [ 597.538996][ T31] vpanic+0x1e0/0x670 [ 597.539025][ T31] panic+0xc5/0xd0 [ 597.539045][ T31] ? __pfx_panic+0x10/0x10 [ 597.539067][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 597.539098][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 597.539126][ T31] watchdog+0xfda/0xfe0 [ 597.539150][ T31] ? watchdog+0x209/0xfe0 [ 597.539174][ T31] kthread+0x726/0x8b0 [ 597.539197][ T31] ? __pfx_watchdog+0x10/0x10 [ 597.539215][ T31] ? __pfx_kthread+0x10/0x10 [ 597.539238][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 597.539261][ T31] ? __pfx_kthread+0x10/0x10 [ 597.539282][ T31] ret_from_fork+0x51b/0xa40 [ 597.539309][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 597.539332][ T31] ? __switch_to+0xc82/0x1410 [ 597.539358][ T31] ? __pfx_kthread+0x10/0x10 [ 597.539387][ T31] ret_from_fork_asm+0x1a/0x30 [ 597.539422][ T31] [ 597.539809][ T31] Kernel Offset: disabled