last executing test programs: 2m33.734200384s ago: executing program 4 (id=2162): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x1c, 0xffffffffffffffff, &(0x7f0000000000)) 2m33.50690391s ago: executing program 4 (id=2167): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2m33.248201549s ago: executing program 4 (id=2173): r0 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)=']', 0x1}, {0x0}, {&(0x7f00000001c0)="60cf2c28a65ec03848f96535b771cef1538e9103af3785204f", 0x19}, {&(0x7f0000000140)="84574c1d8d7f7cf4302ad64a84", 0xd}], 0x4) 2m33.054119134s ago: executing program 4 (id=2177): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6d706f6c3d62690bbe608ae7a8e257d632a80e6e643a302d", @ANYRESDEC]) 2m32.85371531s ago: executing program 4 (id=2181): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) ioprio_set$uid(0x3, 0x0, 0x0) 2m32.692285213s ago: executing program 4 (id=2185): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf25080001"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 2m17.476855561s ago: executing program 32 (id=2185): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf25080001"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 1m21.239332843s ago: executing program 3 (id=3554): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000500)={0x1010004, 0x1, 0x2, "3bd9d3fe337649c3be563d271262cec19debb50e98a32e00", 0xa0363159}) 1m21.083075796s ago: executing program 3 (id=3557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0xc0}}, 0x0) 1m20.814993466s ago: executing program 3 (id=3563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 1m20.518966258s ago: executing program 3 (id=3566): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1m20.153043151s ago: executing program 3 (id=3574): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="008d7acda0", 0x0, 0x0, 0x0, 0x0, 0x0}) 1m19.92069876s ago: executing program 3 (id=3579): syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x9c) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m4.809477937s ago: executing program 33 (id=3579): syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x9c) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.340056244s ago: executing program 6 (id=5195): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x4, 0x1015, &(0x7f0000002500)=""/4117, 0x0, 0xc}, 0x94) 2.099296084s ago: executing program 6 (id=5200): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301, 0x300}, {0xfffffffd, 0x80000}]}}) 1.867595407s ago: executing program 6 (id=5206): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x1, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0xb}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x48}}, 0x0) 1.788483396s ago: executing program 6 (id=5208): socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40040, 0x0) 1.219157584s ago: executing program 1 (id=5222): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x81}]}}}]}, 0x44}}, 0x0) 919.373712ms ago: executing program 2 (id=5229): r0 = socket(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, &(0x7f0000000100)) 901.378435ms ago: executing program 5 (id=5230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x4004010) 801.762146ms ago: executing program 0 (id=5231): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000000)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) 800.257341ms ago: executing program 1 (id=5232): r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x1}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000140)="ef", 0x1}], 0x1}, 0x40810) 670.730394ms ago: executing program 5 (id=5233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="28000000000301"], 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040020) 670.608036ms ago: executing program 2 (id=5234): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={0xffffffffffffffff, 0x0}, 0x20) 658.086729ms ago: executing program 0 (id=5235): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001800010029bd7000000000201d010000150004"], 0x2c}}, 0x0) 619.07124ms ago: executing program 5 (id=5236): setitimer(0x0, &(0x7f0000000080)={{0x2e, 0xa}, {0x0, 0x10000}}, 0x0) setitimer(0x0, &(0x7f0000000140)={{0x9, 0x7}, {0x0, 0x9}}, 0x0) 575.23177ms ago: executing program 1 (id=5237): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x73, 0x188341) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x604aa59d) 575.130419ms ago: executing program 2 (id=5238): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, 0x0) 504.563777ms ago: executing program 0 (id=5239): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 496.007052ms ago: executing program 5 (id=5240): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 479.677462ms ago: executing program 1 (id=5241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) 392.419372ms ago: executing program 6 (id=5242): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) 347.213127ms ago: executing program 2 (id=5243): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000380)) 340.489445ms ago: executing program 0 (id=5244): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x80, 0x0, @loopback, 0x7ff}], 0x2c) 302.99592ms ago: executing program 5 (id=5245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_DATA={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) 285.027016ms ago: executing program 1 (id=5246): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, 0x0) 182.763557ms ago: executing program 0 (id=5247): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x2) read$smackfs_ptrace(r0, &(0x7f0000000180), 0x14) 182.643969ms ago: executing program 2 (id=5248): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000180)='\x00', 0x1) 153.120789ms ago: executing program 6 (id=5249): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_SETFSLABEL(r0, 0x8919, &(0x7f0000000000)="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") 98.923447ms ago: executing program 0 (id=5250): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x47}, [@ldst={0x5}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 97.453003ms ago: executing program 1 (id=5251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000002010108000000000000000002000026300002802c000180070003"], 0x44}}, 0x4004000) 55.565511ms ago: executing program 5 (id=5252): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f00000000c0)) 0s ago: executing program 2 (id=5253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c00000002060108000000000000000000004000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c000780080012"], 0x5c}}, 0x0) kernel console output (not intermixed with test programs): w, size: 51008 [ 250.711948][ T5804] usb 4-1: USB disconnect, device number 14 [ 250.733817][T11144] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2429'. [ 250.754214][T11145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2428'. [ 250.872143][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 250.872173][ T37] audit: type=1326 audit(1767006657.171:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11150 comm="syz.0.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73915f749 code=0x7ffc0000 [ 250.875033][ T37] audit: type=1326 audit(1767006657.171:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11150 comm="syz.0.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fe73915f749 code=0x7ffc0000 [ 250.875374][ T37] audit: type=1326 audit(1767006657.171:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11150 comm="syz.0.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73915f749 code=0x7ffc0000 [ 250.875685][ T37] audit: type=1326 audit(1767006657.171:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11150 comm="syz.0.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73915f749 code=0x7ffc0000 [ 251.154028][T11163] netlink: 'syz.1.2439': attribute type 46 has an invalid length. [ 251.154054][T11163] netlink: 'syz.1.2439': attribute type 19 has an invalid length. [ 251.340942][ T6379] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 251.341144][ T6379] ath9k_htc: Failed to initialize the device [ 251.341930][ T5804] usb 4-1: ath9k_htc: USB layer deinitialized [ 251.454864][ T37] audit: type=1326 audit(1767006657.751:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11176 comm="syz.1.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 251.464443][ T37] audit: type=1326 audit(1767006657.761:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11176 comm="syz.1.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 251.464498][ T37] audit: type=1326 audit(1767006657.761:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11176 comm="syz.1.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 251.464539][ T37] audit: type=1326 audit(1767006657.761:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11176 comm="syz.1.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 252.057857][T11204] netlink: 'syz.3.2455': attribute type 1 has an invalid length. [ 252.365967][T11219] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 252.666556][ T5804] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 252.709493][T11235] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 252.751675][T11235] bond3 (unregistering): Released all slaves [ 252.829889][ T5804] usb 2-1: unable to get BOS descriptor or descriptor too short [ 252.831053][ T5804] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 252.831078][ T5804] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 252.831096][ T5804] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 252.831114][ T5804] usb 2-1: config 129 has no interface number 0 [ 252.831137][ T5804] usb 2-1: config 129 has no interface number 1 [ 252.831191][ T5804] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 252.831215][ T5804] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 252.831251][ T5804] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 252.831276][ T5804] usb 2-1: config 129 interface 135 has no altsetting 0 [ 252.831293][ T5804] usb 2-1: config 129 interface 5 has no altsetting 0 [ 252.840389][ T5804] usb 2-1: string descriptor 0 read error: -22 [ 252.840543][ T5804] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 252.840565][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.933828][ T5804] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 252.935382][ T5804] usb 2-1: MIDIStreaming interface descriptor not found [ 253.103354][T11245] netlink: 'syz.3.2474': attribute type 2 has an invalid length. [ 253.103381][T11245] netlink: 'syz.3.2474': attribute type 8 has an invalid length. [ 253.103394][T11245] __nla_validate_parse: 1 callbacks suppressed [ 253.103406][T11245] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2474'. [ 253.263825][ T5804] usb 2-1: USB disconnect, device number 16 [ 253.816527][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 254.138266][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 254.154618][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 254.164276][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 254.181942][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 254.182830][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 254.205713][ T5813] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 254.210666][ T5813] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 254.212102][ T5813] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 254.213793][ T5813] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 254.214598][ T5813] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 254.640999][T11292] dummy0: entered allmulticast mode [ 254.866376][ T5811] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 254.932940][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2501'. [ 255.018419][ T5811] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 255.018446][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.046059][ T5811] usb 4-1: config 0 descriptor?? [ 255.069046][ T5811] cp210x 4-1:0.0: cp210x converter detected [ 255.309084][ T5811] usb 4-1: cp210x converter now attached to ttyUSB0 [ 255.389105][T11274] chnl_net:caif_netlink_parms(): no params data found [ 255.532357][ T43] usb 4-1: USB disconnect, device number 15 [ 255.546205][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 255.547132][ T43] cp210x 4-1:0.0: device disconnected [ 255.851802][T11339] netlink: 'syz.1.2516': attribute type 2 has an invalid length. [ 255.851825][T11339] netlink: 'syz.1.2516': attribute type 8 has an invalid length. [ 255.851837][T11339] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2516'. [ 256.265421][T11274] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.265630][T11274] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.265903][T11274] bridge_slave_0: entered allmulticast mode [ 256.296221][ T5813] Bluetooth: hci5: command tx timeout [ 256.303950][T11274] bridge_slave_0: entered promiscuous mode [ 256.318841][T11274] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.326511][T11274] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.326779][T11274] bridge_slave_1: entered allmulticast mode [ 256.329535][T11274] bridge_slave_1: entered promiscuous mode [ 256.667346][T11274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.670185][T11274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.796150][ T6379] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 256.893294][T11386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2538'. [ 256.893322][T11386] openvswitch: netlink: Invalid VLAN frame [ 256.932917][T11274] team0: Port device team_slave_0 added [ 256.942560][T11274] team0: Port device team_slave_1 added [ 256.946076][ T6379] usb 3-1: Using ep0 maxpacket: 32 [ 256.948257][ T6379] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 256.948314][ T6379] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 256.948340][ T6379] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 256.948365][ T6379] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 256.948386][ T6379] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 256.951088][ T6379] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 256.951117][ T6379] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.951136][ T6379] usb 3-1: Product: syz [ 256.951149][ T6379] usb 3-1: Manufacturer: syz [ 256.951162][ T6379] usb 3-1: SerialNumber: syz [ 257.004531][ T6379] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 257.004654][ T6379] imon 3-1:155.0: unable to initialize intf0, err -90 [ 257.004668][ T6379] imon:imon_probe: failed to initialize context! [ 257.004680][ T6379] imon 3-1:155.0: unable to register, err -19 [ 257.118116][T11390] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2540'. [ 257.119230][T11390] unsupported nlmsg_type 40 [ 257.449838][T11274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.449858][T11274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.449883][T11274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.452218][T11274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.452235][T11274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.452261][T11274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.786262][T11274] hsr_slave_0: entered promiscuous mode [ 257.790277][T11274] hsr_slave_1: entered promiscuous mode [ 257.794819][T11274] debugfs: 'hsr0' already exists in 'hsr' [ 257.794844][T11274] Cannot create hsr debugfs directory [ 258.115361][T11427] netlink: 'syz.1.2558': attribute type 1 has an invalid length. [ 258.115378][T11427] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2558'. [ 258.378382][ T5813] Bluetooth: hci5: command tx timeout [ 258.838541][ T37] audit: type=1326 audit(1767006665.132:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11448 comm="syz.1.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 258.838599][ T37] audit: type=1326 audit(1767006665.132:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11448 comm="syz.1.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 258.841574][ T37] audit: type=1326 audit(1767006665.142:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11448 comm="syz.1.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 258.841780][ T37] audit: type=1326 audit(1767006665.142:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11448 comm="syz.1.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 258.886792][ T37] audit: type=1326 audit(1767006665.192:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11448 comm="syz.1.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 258.966740][T11451] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2570'. [ 258.966769][T11451] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2570'. [ 259.040821][T11453] syz.1.2571 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 259.118057][T11455] netlink: 'syz.1.2573': attribute type 4 has an invalid length. [ 259.118080][T11455] netlink: 'syz.1.2573': attribute type 1 has an invalid length. [ 259.118092][T11455] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2573'. [ 259.161096][T11274] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 259.204768][T11274] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 259.320264][T11274] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 259.394159][T11274] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 259.536260][ T5821] usb 3-1: USB disconnect, device number 10 [ 259.662484][T11477] dummy0: mtu less than device minimum [ 259.738376][T11274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.785140][T11274] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.824942][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.825026][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.835483][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.835724][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.374647][T11503] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2592'. [ 260.374678][T11503] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2592'. [ 260.374730][T11503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2592'. [ 260.435862][T11504] netlink: 'syz.0.2591': attribute type 5 has an invalid length. [ 260.455682][ T5813] Bluetooth: hci5: command tx timeout [ 260.563313][T11274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.574461][ T37] audit: type=1326 audit(1767006666.872:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11509 comm="syz.2.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe988b1f749 code=0x7ffc0000 [ 260.576833][ T37] audit: type=1326 audit(1767006666.882:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11509 comm="syz.2.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe988b1f749 code=0x7ffc0000 [ 260.586363][ T37] audit: type=1326 audit(1767006666.892:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11509 comm="syz.2.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fe988b1f749 code=0x7ffc0000 [ 260.587166][ T37] audit: type=1326 audit(1767006666.892:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11509 comm="syz.2.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe988b1f749 code=0x7ffc0000 [ 260.795182][T11521] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2600'. [ 260.879921][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.879994][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.986992][T11528] : renamed from vlan0 (while UP) [ 261.549271][T11274] veth0_vlan: entered promiscuous mode [ 261.600401][T11274] veth1_vlan: entered promiscuous mode [ 261.787836][T11274] veth0_macvtap: entered promiscuous mode [ 261.833251][T11274] veth1_macvtap: entered promiscuous mode [ 261.857141][T11557] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 261.941992][T11274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.023619][T11274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.076529][ T138] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.079960][ T138] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.080008][ T138] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.080042][ T138] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.269968][T11563] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2618'. [ 262.269992][T11563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2618'. [ 262.535449][ T5813] Bluetooth: hci5: command tx timeout [ 262.712942][ T1397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.712965][ T1397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.746192][ T5994] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 262.879899][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.879924][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.895403][ T5994] usb 3-1: Using ep0 maxpacket: 32 [ 262.923021][ T5994] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=26.3f [ 262.923052][ T5994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.923070][ T5994] usb 3-1: Product: syz [ 262.923077][ T5994] usb 3-1: Manufacturer: syz [ 262.923084][ T5994] usb 3-1: SerialNumber: syz [ 262.952176][ T5994] usb 3-1: config 0 descriptor?? [ 263.008902][ T5994] gspca_main: spca501-2.14.0 probing 0000:0000 [ 263.175315][T11587] openvswitch: netlink: IP tunnel dst address not specified [ 263.392006][ T5994] gspca_spca501: reg write: error -71 [ 263.392106][ T5994] spca501 3-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 263.392201][ T5994] spca501 3-1:0.0: probe with driver spca501 failed with error -22 [ 263.409571][ T5994] usb 3-1: USB disconnect, device number 11 [ 263.597711][T11596] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2634'. [ 263.597736][T11596] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 263.712600][T11602] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2636'. [ 263.712629][T11602] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2636'. [ 263.712644][T11602] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2636'. [ 263.905333][ T5994] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 263.991913][T11614] program syz.2.2642 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.992190][T11614] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 264.057693][ T5994] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 264.057729][ T5994] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 264.057767][ T5994] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 264.057788][ T5994] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.069925][T11598] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 264.090563][ T5994] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 265.189297][T11656] netlink: 'syz.0.2661': attribute type 28 has an invalid length. [ 266.072607][T11692] vivid-000: ================= START STATUS ================= [ 266.072717][T11692] vivid-000: Test Pattern: 75% Colorbar [ 266.072786][T11692] vivid-000: Fill Percentage of Frame: 100 [ 266.072808][T11692] vivid-000: Horizontal Movement: No Movement [ 266.072826][T11692] vivid-000: Vertical Movement: No Movement [ 266.072845][T11692] vivid-000: OSD Text Mode: All [ 266.072863][T11692] vivid-000: Show Border: false [ 266.072880][T11692] vivid-000: Show Square: false [ 266.072897][T11692] vivid-000: Sensor Flipped Horizontally: false [ 266.072915][T11692] vivid-000: Sensor Flipped Vertically: false [ 266.072932][T11692] vivid-000: Insert SAV Code in Image: false [ 266.072949][T11692] vivid-000: Insert EAV Code in Image: false [ 266.072966][T11692] vivid-000: Insert Video Guard Band: false [ 266.072984][T11692] vivid-000: Reduced Framerate: false [ 266.073001][T11692] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 266.073021][T11692] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 266.073041][T11692] vivid-000: Enable Capture Cropping: true [ 266.073058][T11692] vivid-000: Enable Capture Composing: true [ 266.073074][T11692] vivid-000: Enable Capture Scaler: false [ 266.073158][T11692] vivid-000: Timestamp Source: End of Frame [ 266.073177][T11692] vivid-000: Colorspace: sRGB [ 266.073194][T11692] vivid-000: Transfer Function: Default [ 266.073210][T11692] vivid-000: Y'CbCr Encoding: Default [ 266.073226][T11692] vivid-000: HSV Encoding: Hue 0-179 [ 266.073242][T11692] vivid-000: Quantization: Default [ 266.073259][T11692] vivid-000: Apply Alpha To Red Only: false [ 266.073277][T11692] vivid-000: Standard Aspect Ratio: 4x3 [ 266.073294][T11692] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 266.073317][T11692] vivid-000: DV Timings: 640x480p59 inactive [ 266.073340][T11692] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 266.073358][T11692] vivid-000: Maximum EDID Blocks: 2 [ 266.073382][T11692] vivid-000: Limited RGB Range (16-235): false [ 266.073400][T11692] vivid-000: Rx RGB Quantization Range: Automatic [ 266.073477][T11692] vivid-000: Power Present: 0x00000001 [ 266.078551][T11692] tpg source WxH: 320x240 (Y'CbCr) [ 266.078603][T11692] tpg field: 1 [ 266.078610][T11692] tpg crop: (0,0)/320x240 [ 266.078623][T11692] tpg compose: (0,0)/320x240 [ 266.078635][T11692] tpg colorspace: 12 [ 266.078643][T11692] tpg transfer function: 6/0 [ 266.078652][T11692] tpg Y'CbCr encoding: 3/0 [ 266.078660][T11692] tpg quantization: 2/0 [ 266.078669][T11692] tpg RGB range: 0/2 [ 266.078678][T11692] vivid-000: ================== END STATUS ================== [ 266.771472][ T6379] usb 6-1: USB disconnect, device number 2 [ 266.776330][T11668] usb 6-1: usb_submit_urb: -2 [ 266.959810][T11718] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20003 [ 267.260438][T11730] overlayfs: failed to resolve './file1': -2 [ 267.745182][ T5974] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 267.756119][T11756] openvswitch: netlink: IP tunnel dst address not specified [ 267.921339][ T5974] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 267.921378][ T5974] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 267.921417][ T5974] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 267.921440][ T5974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.013639][T11743] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 268.054347][ T5974] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 268.192624][T11773] netlink: 'syz.3.2719': attribute type 1 has an invalid length. [ 268.202576][T11774] ieee802154 phy0 wpan0: encryption failed: -22 [ 268.338169][T11777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2720'. [ 268.730213][ T5974] usb 3-1: USB disconnect, device number 12 [ 269.690083][T11829] erspan1: entered allmulticast mode [ 270.133919][T11857] IPVS: set_ctl: invalid protocol: 108 172.20.20.57:20001 [ 270.342028][ T37] audit: type=1326 audit(1767006676.643:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11867 comm="syz.3.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ed24f749 code=0x7ffc0000 [ 270.342342][ T37] audit: type=1326 audit(1767006676.643:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11867 comm="syz.3.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f69ed24f749 code=0x7ffc0000 [ 270.342593][ T37] audit: type=1326 audit(1767006676.643:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11867 comm="syz.3.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ed24f749 code=0x7ffc0000 [ 270.342862][ T37] audit: type=1326 audit(1767006676.643:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11867 comm="syz.3.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ed24f749 code=0x7ffc0000 [ 270.967977][T11893] netlink: 9996 bytes leftover after parsing attributes in process `syz.5.2777'. [ 271.421770][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2787'. [ 272.589254][T11952] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2806'. [ 272.744318][T11960] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 11960 comm: syz.2.2810) [ 272.744560][ T37] audit: type=1800 audit(1767006679.053:114): pid=11960 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.2810" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=27606 res=0 errno=0 [ 273.189705][T11981] overlayfs: missing 'lowerdir' [ 273.289316][ T37] audit: type=1326 audit(1767006679.593:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11984 comm="syz.5.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c2bf749 code=0x7ffc0000 [ 273.292123][ T37] audit: type=1326 audit(1767006679.593:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11984 comm="syz.5.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7fc49c2bf749 code=0x7ffc0000 [ 273.292604][ T37] audit: type=1326 audit(1767006679.593:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11984 comm="syz.5.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c2bf749 code=0x7ffc0000 [ 273.292646][ T37] audit: type=1326 audit(1767006679.593:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11984 comm="syz.5.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c2bf749 code=0x7ffc0000 [ 274.274335][T12034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2847'. [ 274.274364][T12034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2847'. [ 274.365200][T12037] pimreg: entered allmulticast mode [ 274.991721][T12072] nbd: couldn't find a device at index 2147483646 [ 275.251597][T12083] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2871'. [ 275.296065][T12083] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2871'. [ 276.090295][T12132] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2895'. [ 276.242666][T12138] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.258886][T12138] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 276.596122][ T5821] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 276.680133][T12158] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2908'. [ 276.743650][ T5821] usb 2-1: Using ep0 maxpacket: 32 [ 276.747042][ T5821] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 276.747070][ T5821] usb 2-1: config 0 has no interface number 0 [ 276.747119][ T5821] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 276.747141][ T5821] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 276.747165][ T5821] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 276.747193][ T5821] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 276.747216][ T5821] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 276.747236][ T5821] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 276.747254][ T5821] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 276.747275][ T5821] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 276.747297][ T5821] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 276.747320][ T5821] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.815132][ T5821] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 276.815163][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.815182][ T5821] usb 2-1: Product: syz [ 276.815195][ T5821] usb 2-1: Manufacturer: syz [ 276.815209][ T5821] usb 2-1: SerialNumber: syz [ 276.838504][ T5821] usb 2-1: config 0 descriptor?? [ 276.855039][T12141] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 276.855378][T12141] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 276.882147][ T5821] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 276.882170][ T5821] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 276.968439][ T5821] scsi host1: microtekX6 [ 277.034305][T12168] netlink: 'syz.0.2913': attribute type 10 has an invalid length. [ 277.108817][T12168] bond0: left promiscuous mode [ 277.108843][T12168] bond_slave_0: left promiscuous mode [ 277.126433][T12168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.127184][T12168] bond0: entered promiscuous mode [ 277.127199][T12168] bond_slave_0: entered promiscuous mode [ 277.169133][ T5821] usb 2-1: USB disconnect, device number 17 [ 277.203682][ T11] microtek usb (rev 0.4.3): error -19 submitting URB [ 277.212516][T12168] team0: Port device bond0 added [ 277.664507][T12185] ip6tnl1: entered promiscuous mode [ 277.880373][T12195] bond2: option ad_user_port_key: invalid value (45708) [ 277.880399][T12195] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 277.937700][T12195] bond2 (unregistering): Released all slaves [ 278.841639][T12238] efs: cannot read volume header [ 279.719108][T12271] netlink: 'syz.3.2961': attribute type 1 has an invalid length. [ 279.867905][T12276] binder: 12275:12276 ioctl c0046209 0 returned -22 [ 280.044716][T12282] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2968'. [ 280.219304][T12293] netlink: 3536 bytes leftover after parsing attributes in process `syz.0.2973'. [ 280.219329][T12293] netlink: 158 bytes leftover after parsing attributes in process `syz.0.2973'. [ 280.219347][T12293] netlink: 158 bytes leftover after parsing attributes in process `syz.0.2973'. [ 280.273895][T12294] ./file0: Can't open blockdev [ 280.307860][T12243] infiniband syz!: set active [ 280.308964][T12243] infiniband syz!: added team_slave_0 [ 280.339313][T12243] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 280.352332][T12243] infiniband syz!: Couldn't open port 1 [ 280.530540][T12305] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 280.657470][T12243] RDS/IB: syz!: added [ 280.658799][T12243] smc: adding ib device syz! with port count 1 [ 280.659283][T12243] smc: ib device syz! port 1 has no pnetid [ 281.159269][T12325] netlink: 'syz.5.2989': attribute type 10 has an invalid length. [ 281.247875][T12325] team0: Cannot enslave team device to itself [ 281.338358][T12329] cgroup: name respecified [ 281.395707][T12331] Invalid source name [ 281.395726][T12331] UBIFS error (pid: 12331): cannot open "/dev/sg0", error -22 [ 283.110073][T12387] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 283.197703][ T43] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 283.422791][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 283.425605][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.425635][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 283.461854][ T43] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 283.461887][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.461907][ T43] usb 4-1: Product: syz [ 283.461920][ T43] usb 4-1: Manufacturer: syz [ 283.461932][ T43] usb 4-1: SerialNumber: syz [ 283.651480][T12391] netlink: 9896 bytes leftover after parsing attributes in process `syz.2.3022'. [ 283.799532][T12395] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 283.910170][ T43] usb 4-1: cannot find UAC_HEADER [ 284.101981][ T43] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 284.132098][ T43] usb 4-1: USB disconnect, device number 16 [ 284.180671][ T6025] udevd[6025]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.232726][ T5987] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 284.382789][ T5987] usb 3-1: Using ep0 maxpacket: 32 [ 284.387609][ T5987] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 284.387634][ T5987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.387644][ T5987] usb 3-1: Product: syz [ 284.387652][ T5987] usb 3-1: Manufacturer: syz [ 284.387659][ T5987] usb 3-1: SerialNumber: syz [ 284.404801][ T5987] usb 3-1: config 0 descriptor?? [ 284.567841][T12418] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3036'. [ 284.677338][T12418] veth2: entered promiscuous mode [ 284.677359][T12418] veth2: entered allmulticast mode [ 284.847894][ T5987] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 284.847925][ T5987] peak_usb 3-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 285.076496][ T5987] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 285.097818][ T5987] usb 3-1: USB disconnect, device number 13 [ 285.223962][T12435] netlink: zone id is out of range [ 285.223978][T12435] netlink: zone id is out of range [ 285.224033][T12435] netlink: get zone limit has 4 unknown bytes [ 285.659867][T12446] ieee802154 phy0 wpan0: encryption failed: -22 [ 286.357521][T12470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.524017][ T5813] Bluetooth: Wrong link type (-71) [ 286.662727][ T5811] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 286.812564][ T5811] usb 2-1: Using ep0 maxpacket: 16 [ 286.821065][ T5811] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 286.821096][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.821168][ T5811] usb 2-1: Product: syz [ 286.821183][ T5811] usb 2-1: Manufacturer: syz [ 286.821197][ T5811] usb 2-1: SerialNumber: syz [ 286.873430][ T5811] usb 2-1: config 0 descriptor?? [ 286.985841][T12487] netlink: 'syz.3.3069': attribute type 1 has an invalid length. [ 287.109384][ T5811] speedtch 2-1:0.0: speedtch_bind: data interface not found! [ 287.109414][ T5811] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 287.316074][ T5987] usb 2-1: USB disconnect, device number 18 [ 287.378130][T12504] batman_adv: batadv0: adding TT local entry 00:00:00:00:ff:ff to non-existent VLAN 815 [ 287.378352][T12504] batman_adv: batadv0: adding TT local entry 00:00:00:00:ff:ff to non-existent VLAN 815 [ 287.378486][T12504] batman_adv: batadv0: adding TT local entry 00:00:00:00:ff:ff to non-existent VLAN 815 [ 287.378610][T12504] batman_adv: batadv0: adding TT local entry 00:00:00:00:ff:ff to non-existent VLAN 815 [ 287.965432][T12532] netlink: 'syz.1.3092': attribute type 10 has an invalid length. [ 287.965457][T12532] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3092'. [ 288.020521][T12532] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 288.020553][T12532] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 288.112199][T12504] net_ratelimit: 2036 callbacks suppressed [ 288.112239][T12504] batman_adv: batadv0: adding TT local entry 00:00:00:00:ff:ff to non-existent VLAN 815 [ 288.112362][T12504] batman_adv: batadv0: adding TT local entry 00:00:00:00:ff:ff to non-existent VLAN 815 [ 288.112483][T12504] batman_adv: batadv0: adding TT local entry 00:00:00:00:ff:ff to non-existent VLAN 815 [ 288.112600][T12504] batman_adv: batadv0: adding TT local entry 00:00:00:00:ff:ff to non-existent VLAN 815 [ 288.112755][T12504] batman_adv: batadv0: adding TT local entry 00:00:00:00:ff:ff to non-existent VLAN 815 [ 288.112827][T12504] batman_adv: batadv0: adding TT local entry 00:00:00:00:ff:ff to non-existent VLAN 815 [ 288.112899][T12504] batman_adv: batadv0: adding TT local entry 00:00:00:00:ff:ff to non-existent VLAN 815 [ 288.112987][T12504] batman_adv: batadv0: adding TT local entry 00:00:00:00:ff:ff to non-existent VLAN 815 [ 288.113055][T12504] batman_adv: batadv0: adding TT local entry 00:00:00:00:ff:ff to non-existent VLAN 815 [ 288.113123][T12504] batman_adv: batadv0: adding TT local entry 00:00:00:00:ff:ff to non-existent VLAN 815 [ 288.740123][T12562] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3108'. [ 288.740152][T12562] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3108'. [ 289.352116][ T5811] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 289.353253][T12598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3126'. [ 289.353274][T12598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3126'. [ 289.426711][T12600] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.3125'. [ 289.426840][T12600] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.3125'. [ 289.513856][ T5811] usb 2-1: Using ep0 maxpacket: 16 [ 289.515937][ T5811] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 289.515986][ T5811] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 289.519272][ T5811] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 289.519367][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.519386][ T5811] usb 2-1: Product: syz [ 289.519400][ T5811] usb 2-1: Manufacturer: syz [ 289.519412][ T5811] usb 2-1: SerialNumber: syz [ 289.627862][T12610] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3131'. [ 289.627899][T12610] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3131'. [ 289.703929][T12614] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 290.048814][T12627] team0: left allmulticast mode [ 290.048844][T12627] team_slave_0: left allmulticast mode [ 290.048864][T12627] team_slave_1: left allmulticast mode [ 290.048882][T12627] geneve0: left allmulticast mode [ 290.048899][T12627] geneve1: left allmulticast mode [ 290.049341][T12627] bridge0: port 3(team0) entered disabled state [ 290.167104][ T5811] usb 2-1: USB disconnect, device number 19 [ 290.175119][T12627] bridge_slave_0: left allmulticast mode [ 290.175151][T12627] bridge_slave_0: left promiscuous mode [ 290.179598][T12627] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.306858][ T6025] udevd[6025]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.381711][T12627] bridge_slave_1: left allmulticast mode [ 290.381743][T12627] bridge_slave_1: left promiscuous mode [ 290.392585][T12627] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.683032][T12627] bond0: (slave bond_slave_0): Releasing backup interface [ 290.843674][T12627] bond0: (slave c@0): Releasing backup interface [ 290.888764][T12627] team_slave_0: left promiscuous mode [ 290.922846][T12627] team0: Port device team_slave_0 removed [ 290.923850][T12627] team_slave_1: left promiscuous mode [ 290.970801][T12627] team0: Port device team_slave_1 removed [ 290.977260][T12627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.977292][T12627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.026934][T12627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.026964][T12627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.124310][T12644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.262864][T12661] netlink: 'syz.2.3155': attribute type 21 has an invalid length. [ 291.262891][T12661] IPv6: NLM_F_CREATE should be specified when creating new route [ 291.263010][T12661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.263020][T12661] IPv6: NLM_F_CREATE should be set when creating new route [ 291.263075][T12661] IPv6: NLM_F_CREATE should be set when creating new route [ 291.263106][T12661] IPv6: NLM_F_CREATE should be set when creating new route [ 291.812308][T12692] autofs4:pid:12692:validate_dev_ioctl: invalid path supplied for cmd(0xc0189374) [ 292.191482][ T37] audit: type=1326 audit(1767006698.486:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.5.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c2bf749 code=0x7ffc0000 [ 292.191536][ T37] audit: type=1326 audit(1767006698.496:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.5.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c2bf749 code=0x7ffc0000 [ 292.194191][ T37] audit: type=1326 audit(1767006698.496:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.5.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fc49c2bf749 code=0x7ffc0000 [ 292.194241][ T37] audit: type=1326 audit(1767006698.496:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.5.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c2bf749 code=0x7ffc0000 [ 292.194280][ T37] audit: type=1326 audit(1767006698.496:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.5.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c2bf749 code=0x7ffc0000 [ 292.287930][ T37] audit: type=1326 audit(1767006698.586:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12716 comm="syz.2.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe988b1f749 code=0x7ffc0000 [ 292.290866][ T37] audit: type=1326 audit(1767006698.596:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12716 comm="syz.2.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe988b1f749 code=0x7ffc0000 [ 292.299954][ T37] audit: type=1326 audit(1767006698.606:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12716 comm="syz.2.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fe988b1f749 code=0x7ffc0000 [ 292.300318][ T37] audit: type=1326 audit(1767006698.606:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12716 comm="syz.2.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe988b1f749 code=0x7ffc0000 [ 292.471914][ T43] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 292.621774][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 292.624173][ T43] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 292.624202][ T43] usb 2-1: config 0 has no interface number 0 [ 292.651762][ T43] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 292.651792][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.651811][ T43] usb 2-1: Product: syz [ 292.651824][ T43] usb 2-1: Manufacturer: syz [ 292.651837][ T43] usb 2-1: SerialNumber: syz [ 292.671199][ T43] usb 2-1: config 0 descriptor?? [ 292.718294][ T43] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 292.718387][ T43] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 292.912114][ T43] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 292.912701][ T43] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 293.142674][ T5974] usb 2-1: USB disconnect, device number 20 [ 294.481945][T12776] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 294.482119][T12776] net_ratelimit: 336 callbacks suppressed [ 294.482128][T12776] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 294.482374][T12796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3222'. [ 294.959644][ T5804] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 294.986026][T12820] netlink: 'syz.1.3233': attribute type 21 has an invalid length. [ 294.986052][T12820] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3233'. [ 295.076523][ T37] audit: type=1326 audit(1767006701.386:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12821 comm="syz.5.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c2bf749 code=0x7ffc0000 [ 295.101346][ T5804] usb 4-1: Using ep0 maxpacket: 8 [ 295.111066][ T5804] usb 4-1: unable to get BOS descriptor or descriptor too short [ 295.122739][ T5804] usb 4-1: config index 0 descriptor too short (expected 25, got 18) [ 295.122767][ T5804] usb 4-1: config 9 has an invalid interface number: 112 but max is 0 [ 295.122785][ T5804] usb 4-1: config 9 has no interface number 0 [ 295.122828][ T5804] usb 4-1: config 9 interface 112 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 295.122851][ T5804] usb 4-1: config 9 interface 112 has no altsetting 0 [ 295.128725][ T5804] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 8.d3 [ 295.128754][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.128771][ T5804] usb 4-1: Product: syz [ 295.128783][ T5804] usb 4-1: Manufacturer: syz [ 295.128794][ T5804] usb 4-1: SerialNumber: syz [ 295.172148][T12823] [U] ^C [ 295.221659][ T5804] r8152-cfgselector 4-1: Unknown version 0x0000 [ 295.369116][T12833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3240'. [ 295.369227][T12833] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 295.457826][ T5804] r8152-cfgselector 4-1: USB disconnect, device number 17 [ 295.966759][T12864] 9p: Unknown access argument : -22 [ 295.985948][T12862] overlay: ./file0 is not a directory [ 296.121426][T12869] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3256'. [ 296.121456][T12869] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3256'. [ 296.121471][T12869] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3256'. [ 296.338810][T12881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.401503][ T6379] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 296.484295][T12887] m~aW: renamed from bridge_slave_0 [ 296.563612][ T6379] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.563670][ T6379] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.564899][ T6379] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 296.564933][ T6379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 296.564966][ T6379] usb 3-1: SerialNumber: syz [ 296.607995][ T6379] usb 3-1: 0:2 : does not exist [ 296.853172][T12897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3271'. [ 296.994935][ T5974] usb 3-1: USB disconnect, device number 14 [ 297.647724][T12919] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 297.967107][T12929] openvswitch: netlink: Actions may not be safe on all matching packets [ 298.452063][T12954] netlink: 'syz.1.3298': attribute type 21 has an invalid length. [ 298.452165][T12954] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3298'. [ 298.792722][T12970] m~aW: left allmulticast mode [ 298.792984][T12970] bridge0: port 1(1m~aW) entered disabled state [ 298.886164][T12970] bridge_slave_1: left allmulticast mode [ 298.886193][T12970] bridge_slave_1: left promiscuous mode [ 298.886443][T12970] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.022433][T12970] bond0: (slave bond_slave_0): Releasing backup interface [ 299.121357][T12970] bond0: (slave bond_slave_1): Releasing backup interface [ 299.231086][T12970] team0: Port device team_slave_0 removed [ 299.293966][T12970] team0: Port device team_slave_1 removed [ 299.294547][T12970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.294564][T12970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.333287][T12970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.333317][T12970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.364111][T12970] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 299.473762][T13006] openvswitch: netlink: Missing valid actions attribute. [ 299.473797][T13006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.648785][T13014] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3327'. [ 299.648813][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3327'. [ 300.085366][T13038] netlink: 'syz.1.3341': attribute type 1 has an invalid length. [ 300.085392][T13038] netlink: 9184 bytes leftover after parsing attributes in process `syz.1.3341'. [ 300.210856][ T5821] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 300.306235][T13048] openvswitch: netlink: Missing key (keys=40, expected=100) [ 300.364802][ T5821] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 300.364834][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 300.364860][ T5821] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 300.368550][ T5821] usb 4-1: string descriptor 0 read error: -22 [ 300.368722][ T5821] usb 4-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 300.368745][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.383221][ T5821] usb 4-1: config 0 descriptor?? [ 300.394755][ T5821] em28xx 4-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 300.394799][ T5821] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 300.657588][ T5821] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 300.658060][ T5821] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 300.669078][ T5821] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 300.669100][ T5821] em28xx 4-1:0.0: No AC97 audio processor [ 300.682578][ T5821] usb 4-1: USB disconnect, device number 18 [ 300.684789][ T5821] em28xx 4-1:0.0: Disconnecting em28xx [ 300.698131][ T5821] em28xx 4-1:0.0: Freeing device [ 300.867117][T13070] netlink: 300 bytes leftover after parsing attributes in process `syz.5.3357'. [ 301.408527][T13099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3370'. [ 301.576515][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 301.576534][ T37] audit: type=1326 audit(1767006707.887:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13106 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 301.581352][ T37] audit: type=1326 audit(1767006707.897:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13106 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 301.583946][ T37] audit: type=1326 audit(1767006707.897:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13106 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 301.585250][ T37] audit: type=1326 audit(1767006707.897:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13106 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 301.586115][ T37] audit: type=1326 audit(1767006707.897:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13106 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 301.901584][T13122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3382'. [ 301.950213][T13119] bond4: entered promiscuous mode [ 301.950245][T13119] bond4: entered allmulticast mode [ 301.952772][T13119] 8021q: adding VLAN 0 to HW filter on device bond4 [ 301.953666][T13126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3383'. [ 302.135032][T13134] overlayfs: conflicting options: userxattr,metacopy=on [ 302.268292][T13140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3389'. [ 302.296191][T13140] bridge4: entered allmulticast mode [ 302.475006][T13152] mmap: syz.3.3396 (13152) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 302.572172][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3397'. [ 302.572206][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3397'. [ 302.736030][T13167] netlink: 'syz.2.3404': attribute type 21 has an invalid length. [ 303.630431][ T5821] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 303.780286][ T5821] usb 4-1: Using ep0 maxpacket: 8 [ 303.782884][ T5821] usb 4-1: unable to get BOS descriptor or descriptor too short [ 303.785555][ T5821] usb 4-1: config 4 has an invalid interface number: 204 but max is 2 [ 303.785584][ T5821] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 303.785600][ T5821] usb 4-1: config 4 has 1 interface, different from the descriptor's value: 3 [ 303.785620][ T5821] usb 4-1: config 4 has no interface number 0 [ 303.785671][ T5821] usb 4-1: config 4 interface 204 altsetting 8 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 303.785696][ T5821] usb 4-1: config 4 interface 204 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 303.785722][ T5821] usb 4-1: config 4 interface 204 has no altsetting 0 [ 303.794212][ T5821] usb 4-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice= 3.76 [ 303.794244][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.794263][ T5821] usb 4-1: Product: syz [ 303.794277][ T5821] usb 4-1: Manufacturer: 䦰㠡㟨懒廹귪餿澛퀣깻霌悖℀㟊韔ਤ螛䇌綹얀䡬쎮ᯛꉂמּ농ꀰ焃덻퉩Ӱ᷸ꪲ􊠹 [ 303.794298][ T5821] usb 4-1: SerialNumber: syz [ 304.072834][ T5821] kvaser_usb 4-1:4.204: error -ENODEV: Cannot get usb endpoint(s) [ 304.121375][ T5821] usb 4-1: USB disconnect, device number 19 [ 304.726389][T13236] __nla_validate_parse: 2 callbacks suppressed [ 304.726412][T13236] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3438'. [ 304.747387][T13234] netlink: 'syz.3.3437': attribute type 1 has an invalid length. [ 304.927292][T13244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3442'. [ 304.927321][T13244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3442'. [ 304.927335][T13244] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3442'. [ 305.076859][T13253] trusted_key: encrypted_key: master key parameter '' is invalid [ 305.350206][ T941] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 305.463596][T13280] netlink: 284 bytes leftover after parsing attributes in process `syz.0.3459'. [ 305.500096][ T941] usb 2-1: Using ep0 maxpacket: 8 [ 305.502771][ T941] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 305.502801][ T941] usb 2-1: config 0 has no interface number 0 [ 305.502846][ T941] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 305.502871][ T941] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 305.502895][ T941] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 305.502920][ T941] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 305.502943][ T941] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.587652][ T941] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 305.587684][ T941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.587704][ T941] usb 2-1: Product: syz [ 305.587718][ T941] usb 2-1: Manufacturer: syz [ 305.587732][ T941] usb 2-1: SerialNumber: syz [ 305.631977][ T941] usb 2-1: config 0 descriptor?? [ 305.885641][ T941] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 306.067488][ T941] usb 2-1: USB disconnect, device number 21 [ 306.213913][T13316] netlink: 'syz.0.3478': attribute type 2 has an invalid length. [ 306.835317][T13351] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3494'. [ 306.870252][ T6379] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 306.989941][ T941] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 307.030067][ T6379] usb 6-1: Using ep0 maxpacket: 16 [ 307.031941][ T6379] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.031975][ T6379] usb 6-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice= 0.40 [ 307.031988][ T6379] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.035424][ T6379] usb 6-1: config 0 descriptor?? [ 307.057623][ T6379] s2255 6-1:0.0: Could not find bulk-in endpoint [ 307.057766][ T6379] Sensoray 2255 driver load failed: 0xfffffff4 [ 307.057802][ T6379] s2255 6-1:0.0: probe with driver s2255 failed with error -12 [ 307.058726][ T6379] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 307.145641][ T941] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 307.145672][ T941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.145690][ T941] usb 2-1: Product: syz [ 307.145703][ T941] usb 2-1: Manufacturer: syz [ 307.145715][ T941] usb 2-1: SerialNumber: syz [ 307.199714][ T941] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 307.250733][ T6379] usb 6-1: USB disconnect, device number 3 [ 307.261059][ T5974] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 307.522565][T13368] bond2: entered promiscuous mode [ 307.523146][T13368] 8021q: adding VLAN 0 to HW filter on device bond2 [ 307.702750][ T6379] usb 2-1: USB disconnect, device number 22 [ 307.904395][T13393] autofs4:pid:13393:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 308.182411][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3522'. [ 308.372140][ T5974] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 308.372345][ T5974] ath9k_htc: Failed to initialize the device [ 308.416738][ T6379] usb 2-1: ath9k_htc: USB layer deinitialized [ 309.056306][T13447] netlink: 'syz.3.3542': attribute type 21 has an invalid length. [ 309.353235][T13462] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 309.523308][T13469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3553'. [ 309.523360][T13469] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 309.524009][T13469] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3553'. [ 309.728527][T13479] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16 [ 309.801511][ T37] audit: type=1326 audit(1767006716.118:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13480 comm="syz.0.3560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73915f749 code=0x7ffc0000 [ 309.802962][ T37] audit: type=1326 audit(1767006716.118:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13480 comm="syz.0.3560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73915f749 code=0x7ffc0000 [ 309.805347][ T37] audit: type=1326 audit(1767006716.118:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13480 comm="syz.0.3560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fe73915f749 code=0x7ffc0000 [ 309.805614][ T37] audit: type=1326 audit(1767006716.118:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13480 comm="syz.0.3560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73915f749 code=0x7ffc0000 [ 309.805895][ T37] audit: type=1326 audit(1767006716.118:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13480 comm="syz.0.3560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73915f749 code=0x7ffc0000 [ 310.399985][T13500] geneve2: entered promiscuous mode [ 310.402085][ T3544] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 310.402327][ T3544] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 310.402383][ T3544] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 310.402417][ T3544] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 310.476301][T13504] usb usb8: usbfs: process 13504 (syz.1.3570) did not claim interface 0 before use [ 310.686570][T13514] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3576'. [ 310.951634][T13527] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 312.429868][T13587] netlink: 'syz.5.3610': attribute type 3 has an invalid length. [ 312.429890][T13587] netlink: 'syz.5.3610': attribute type 2 has an invalid length. [ 313.692782][ T37] audit: type=1326 audit(1767006720.008:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13650 comm="syz.5.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c2bf749 code=0x50000 [ 313.692843][ T37] audit: type=1326 audit(1767006720.008:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13650 comm="syz.5.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c2bf749 code=0x50000 [ 313.692886][ T37] audit: type=1326 audit(1767006720.008:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13650 comm="syz.5.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c2bf749 code=0x50000 [ 313.692925][ T37] audit: type=1326 audit(1767006720.008:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13650 comm="syz.5.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c2bf749 code=0x50000 [ 313.692966][ T37] audit: type=1326 audit(1767006720.008:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13650 comm="syz.5.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c2bf749 code=0x50000 [ 313.860994][T13655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.899115][ T5804] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 314.059082][ T5804] usb 2-1: Using ep0 maxpacket: 32 [ 314.061193][ T5804] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 314.061219][ T5804] usb 2-1: config 0 has no interface number 0 [ 314.061268][ T5804] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 314.061289][ T5804] usb 2-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 314.063738][ T5804] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 314.063767][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.063787][ T5804] usb 2-1: Product: syz [ 314.063799][ T5804] usb 2-1: Manufacturer: syz [ 314.063813][ T5804] usb 2-1: SerialNumber: syz [ 314.144056][ T5804] usb 2-1: config 0 descriptor?? [ 314.148284][ T5804] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 314.360727][ T5804] usb 2-1: qt2_setup_urbs - submit read urb failed -90 [ 314.361043][ T5804] quatech2 2-1:0.51: probe with driver quatech2 failed with error -90 [ 314.558599][ T6379] usb 2-1: USB disconnect, device number 23 [ 314.684655][T13679] netlink: 'syz.2.3651': attribute type 33 has an invalid length. [ 314.684681][T13679] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3651'. [ 314.829229][ T37] kauditd_printk_skb: 1100 callbacks suppressed [ 314.829247][ T37] audit: type=1326 audit(1767006721.138:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13650 comm="syz.5.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c2bf749 code=0x50000 [ 314.829410][ T37] audit: type=1326 audit(1767006721.138:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13650 comm="syz.5.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c2bf749 code=0x50000 [ 314.829559][ T37] audit: type=1326 audit(1767006721.138:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13650 comm="syz.5.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c2bf749 code=0x50000 [ 314.829719][ T37] audit: type=1326 audit(1767006721.138:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13650 comm="syz.5.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c2bf749 code=0x50000 [ 314.829870][ T37] audit: type=1326 audit(1767006721.138:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13650 comm="syz.5.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c2bf749 code=0x50000 [ 314.830049][ T37] audit: type=1326 audit(1767006721.138:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13650 comm="syz.5.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c2bf749 code=0x50000 [ 314.830165][ T37] audit: type=1326 audit(1767006721.138:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13650 comm="syz.5.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c2bf749 code=0x50000 [ 314.830316][ T37] audit: type=1326 audit(1767006721.138:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13650 comm="syz.5.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c2bf749 code=0x50000 [ 314.830465][ T37] audit: type=1326 audit(1767006721.138:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13650 comm="syz.5.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c2bf749 code=0x50000 [ 314.830650][ T37] audit: type=1326 audit(1767006721.138:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13650 comm="syz.5.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c2bf749 code=0x50000 [ 316.792220][T13757] netlink: 'syz.1.3685': attribute type 4 has an invalid length. [ 316.935706][T13762] netlink: 'syz.5.3690': attribute type 5 has an invalid length. [ 317.165404][T13774] netlink: 45 bytes leftover after parsing attributes in process `syz.2.3696'. [ 317.605266][T13798] kAFS: unable to lookup cell '.,' [ 317.623821][T13800] netlink: 'syz.5.3708': attribute type 4 has an invalid length. [ 317.771762][T13805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3711'. [ 317.776828][T13806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3710'. [ 317.987029][T13818] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 317.987058][T13818] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 318.067834][T13818] vhci_hcd vhci_hcd.0: Device attached [ 318.111220][T13820] vhci_hcd: connection closed [ 318.130426][ T3544] vhci_hcd vhci_hcd.0: stop threads [ 318.134593][ T3544] vhci_hcd vhci_hcd.0: release socket [ 318.134746][ T3544] vhci_hcd vhci_hcd.0: disconnect device [ 318.158357][T13829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3721'. [ 318.158387][T13829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3721'. [ 318.409139][T13844] syz.1.3726(13844): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 318.477132][T13846] netlink: 'syz.5.3728': attribute type 49 has an invalid length. [ 318.601030][ T43] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 318.771109][ T43] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 318.771141][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.771158][ T43] usb 3-1: Product: syz [ 318.771170][ T43] usb 3-1: Manufacturer: syz [ 318.771184][ T43] usb 3-1: SerialNumber: syz [ 318.776695][ T43] usb 3-1: config 0 descriptor?? [ 318.811231][ T43] ch341 3-1:0.0: ch341-uart converter detected [ 319.108524][ T6379] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 319.197722][ T43] usb 3-1: failed to send control message: -71 [ 319.197784][ T43] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 319.221961][ T43] usb 3-1: USB disconnect, device number 15 [ 319.240852][ T43] ch341 3-1:0.0: device disconnected [ 319.258486][ T6379] usb 6-1: Using ep0 maxpacket: 16 [ 319.267158][ T6379] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 319.267194][ T6379] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.267213][ T6379] usb 6-1: Product: syz [ 319.267227][ T6379] usb 6-1: Manufacturer: syz [ 319.267241][ T6379] usb 6-1: SerialNumber: syz [ 319.330167][ T6379] r8152-cfgselector 6-1: Unknown version 0x0000 [ 319.330194][ T6379] r8152-cfgselector 6-1: config 0 descriptor?? [ 319.768577][T13887] Invalid option length (1040122) for dns_resolver key [ 319.806549][ T6379] r8152-cfgselector 6-1: USB disconnect, device number 4 [ 319.977340][T13897] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.071843][T13901] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3755'. [ 320.105752][ T37] kauditd_printk_skb: 2455 callbacks suppressed [ 320.105772][ T37] audit: type=1326 audit(1767006726.409:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13904 comm="syz.0.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73915f749 code=0x7ffc0000 [ 320.105820][ T37] audit: type=1326 audit(1767006726.409:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13904 comm="syz.0.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73915f749 code=0x7ffc0000 [ 320.131728][ T37] audit: type=1326 audit(1767006726.409:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13904 comm="syz.0.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7fe73915f749 code=0x7ffc0000 [ 320.133614][ T37] audit: type=1326 audit(1767006726.439:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13904 comm="syz.0.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73915f749 code=0x7ffc0000 [ 320.585212][T13928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3768'. [ 321.157383][T13959] comedi comedi3: comedi_config --init_data is deprecated [ 321.174306][T13960] QAT: Device 116 not found [ 321.284110][T13964] netlink: 512 bytes leftover after parsing attributes in process `syz.1.3786'. [ 321.580295][T13978] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3793'. [ 321.580324][T13978] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3793'. [ 321.860912][T13997] binder: BC_ACQUIRE_RESULT not supported [ 321.860929][T13997] binder: 13996:13997 ioctl c0306201 200000000080 returned -22 [ 322.293094][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.293163][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.537192][T14035] netlink: 348 bytes leftover after parsing attributes in process `syz.5.3821'. [ 322.783351][T14048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3826'. [ 322.898019][ T5804] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 323.047963][ T5804] usb 6-1: Using ep0 maxpacket: 32 [ 323.050507][ T5804] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.050539][ T5804] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.052365][ T5804] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 323.052393][ T5804] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 323.052413][ T5804] usb 6-1: Product: syz [ 323.052425][ T5804] usb 6-1: Manufacturer: syz [ 323.155775][ T5804] hub 6-1:4.0: USB hub found [ 323.355918][ T5804] hub 6-1:4.0: 1 port detected [ 323.556677][ T5804] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 323.556704][ T5804] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 323.593556][T14068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3837'. [ 323.638981][ T5804] usb 6-1: USB disconnect, device number 5 [ 323.956832][T14078] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 324.541560][ T37] audit: type=1326 audit(1767006730.850:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14107 comm="syz.5.3859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c2bf749 code=0x7ffc0000 [ 324.541887][ T37] audit: type=1326 audit(1767006730.850:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14107 comm="syz.5.3859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c2bf749 code=0x7ffc0000 [ 324.599195][T14110] netlink: 'syz.2.3857': attribute type 21 has an invalid length. [ 324.599298][T14110] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3857'. [ 324.599335][T14110] netlink: 'syz.2.3857': attribute type 1 has an invalid length. [ 324.608941][ T37] audit: type=1326 audit(1767006730.910:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14107 comm="syz.5.3859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fc49c2bf749 code=0x7ffc0000 [ 324.608992][ T37] audit: type=1326 audit(1767006730.910:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14107 comm="syz.5.3859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c2bf749 code=0x7ffc0000 [ 325.207722][T14134] sp0: Synchronizing with TNC [ 325.462926][T14145] bond1: down delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 325.718640][T14158] XFS (nbd1): SB validate failed with error -5. [ 326.456632][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 326.480949][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 326.486148][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 326.566994][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 326.576333][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 326.967574][ T5821] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 327.150543][ T5821] usb 6-1: unable to get BOS descriptor or descriptor too short [ 327.151147][ T5821] usb 6-1: not running at top speed; connect to a high speed hub [ 327.152378][ T5821] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 327.152401][ T5821] usb 6-1: config 0 has no interface number 0 [ 327.152449][ T5821] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 327.152475][ T5821] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 327.152495][ T5821] usb 6-1: config 0 interface 88 has no altsetting 0 [ 327.156027][ T5821] usb 6-1: string descriptor 0 read error: -22 [ 327.156179][ T5821] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 327.156202][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 327.172207][ T5821] usb 6-1: config 0 descriptor?? [ 327.245389][ T5821] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input21 [ 327.532436][ T5821] input: failed to attach handler mousedev to device input21, error: -5 [ 327.577950][ T5821] usb 6-1: USB disconnect, device number 6 [ 327.754499][ T6025] udevd[6025]: Error opening device "/dev/input/event4": No such file or directory [ 327.754634][ T6025] udevd[6025]: Unable to EVIOCGABS device "/dev/input/event4" [ 327.754751][ T6025] udevd[6025]: Unable to EVIOCGABS device "/dev/input/event4" [ 327.935755][T14229] netlink: 'syz.0.3911': attribute type 3 has an invalid length. [ 327.936371][T14231] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 328.184984][T14239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3917'. [ 328.257066][T14239] [: entered promiscuous mode [ 328.344719][T14182] chnl_net:caif_netlink_parms(): no params data found [ 328.395723][T14248] overlay: Unknown parameter 'subj_user' [ 328.687425][ T5813] Bluetooth: hci6: command tx timeout [ 328.787395][T14269] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3928'. [ 328.900397][T14273] bond0: entered allmulticast mode [ 328.969347][T14279] openvswitch: netlink: Key type 31 is not supported [ 329.048154][T14182] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.049423][T14182] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.049651][T14182] bridge_slave_0: entered allmulticast mode [ 329.056079][T14182] bridge_slave_0: entered promiscuous mode [ 329.066201][T14182] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.085862][T14182] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.086188][T14182] bridge_slave_1: entered allmulticast mode [ 329.105088][T14182] bridge_slave_1: entered promiscuous mode [ 329.398705][T14182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.432258][T14182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.701583][T14309] bond2: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 329.725354][T14309] bond2 (unregistering): Released all slaves [ 329.861670][T14182] team0: Port device team_slave_0 added [ 329.882724][T14182] team0: Port device team_slave_1 added [ 330.070405][T14330] netlink: 'syz.2.3957': attribute type 13 has an invalid length. [ 330.227203][ T5987] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 330.365803][T14330] gretap0: refused to change device tx_queue_len [ 330.365831][T14330] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 330.390661][ T5987] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.390710][ T5987] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 330.390739][ T5987] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.397671][T14182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.397691][T14182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.397718][T14182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.401646][T14182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.401661][T14182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.401682][T14182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.403737][ T5987] usb 6-1: config 0 descriptor?? [ 330.553165][ T5987] em28xx 6-1:0.0: audio device (2040:1605): interface 0, class 1 [ 330.628916][ T5987] usb 6-1: USB disconnect, device number 7 [ 330.767091][ T5813] Bluetooth: hci6: command tx timeout [ 330.923775][T14182] hsr_slave_0: entered promiscuous mode [ 330.925420][T14182] hsr_slave_1: entered promiscuous mode [ 330.926512][T14182] debugfs: 'hsr0' already exists in 'hsr' [ 330.926534][T14182] Cannot create hsr debugfs directory [ 331.491871][T14385] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 331.915025][ T941] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 332.061390][T14182] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 332.099211][ T941] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.099239][ T941] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 332.102031][ T941] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 332.102061][ T941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.102080][ T941] usb 2-1: Product: syz [ 332.102093][ T941] usb 2-1: Manufacturer: syz [ 332.102106][ T941] usb 2-1: SerialNumber: syz [ 332.165386][T14414] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 332.166358][ T941] usb 2-1: config 0 descriptor?? [ 332.193439][T14182] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 332.263589][T14182] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 332.319518][ T941] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 332.321611][T14182] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 332.414715][ T6379] usb 2-1: USB disconnect, device number 24 [ 332.467441][ T941] usb 3-1: Using ep0 maxpacket: 8 [ 332.473174][ T941] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 332.473205][ T941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.473225][ T941] usb 3-1: Product: syz [ 332.473238][ T941] usb 3-1: Manufacturer: syz [ 332.473252][ T941] usb 3-1: SerialNumber: syz [ 332.516307][ T941] usb 3-1: config 0 descriptor?? [ 332.540817][ T941] gspca_main: se401-2.14.0 probing 047d:5003 [ 332.804061][T14182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.846822][ T5813] Bluetooth: hci6: command tx timeout [ 332.954382][T14182] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.975457][ T941] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 332.975834][ T941] se401 3-1:0.0: probe with driver se401 failed with error -71 [ 333.036875][ T941] usb 3-1: USB disconnect, device number 16 [ 333.074909][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.075116][ T3544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.112710][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.112845][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.145042][T14448] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4013'. [ 333.367001][T14455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4018'. [ 333.367027][T14455] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4018'. [ 333.377866][T14456] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4017'. [ 333.930998][T14483] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4028'. [ 333.938363][T14182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.008067][ T941] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 334.156748][ T941] usb 2-1: Using ep0 maxpacket: 32 [ 334.164794][ T941] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 334.164894][ T941] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 334.164915][ T941] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.164933][ T941] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 334.164954][ T941] usb 2-1: config 1 has no interface number 0 [ 334.165002][ T941] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 334.165024][ T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.303063][ T941] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 334.500539][ T941] snd_usb_pod 2-1:1.1: set_interface failed [ 334.502778][ T941] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 334.502995][ T941] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 334.540558][ T941] usb 2-1: USB disconnect, device number 25 [ 334.749555][T14182] veth0_vlan: entered promiscuous mode [ 334.769176][T14182] veth1_vlan: entered promiscuous mode [ 334.878854][T14182] veth0_macvtap: entered promiscuous mode [ 334.911012][T14182] veth1_macvtap: entered promiscuous mode [ 334.926708][ T5813] Bluetooth: hci6: command tx timeout [ 334.945987][T14182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.984580][T14182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.005204][ T3544] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.005255][ T3544] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.005289][ T3544] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.005320][ T3544] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.052303][T14522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4046'. [ 335.953773][T14549] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4058'. [ 335.954260][T14549] Unknown options in mask b7f2 [ 336.170837][T14554] delete_channel: no stack [ 336.397684][T14558] netlink: 'syz.5.4064': attribute type 1 has an invalid length. [ 336.491188][T14564] netlink: 'syz.2.4066': attribute type 4 has an invalid length. [ 336.693107][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.693131][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.834990][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.835011][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.020488][T14586] IPVS: length: 235 != 24 [ 337.359389][T14602] tmpfs: Bad value for 'mpol' [ 338.806098][ T37] audit: type=1326 audit(1767006745.111:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14662 comm="syz.1.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 338.806157][ T37] audit: type=1326 audit(1767006745.111:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14662 comm="syz.1.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 338.813041][ T37] audit: type=1326 audit(1767006745.121:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14662 comm="syz.1.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 338.813094][ T37] audit: type=1326 audit(1767006745.121:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14662 comm="syz.1.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 338.814724][ T37] audit: type=1326 audit(1767006745.121:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14662 comm="syz.1.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 338.815104][ T37] audit: type=1326 audit(1767006745.121:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14662 comm="syz.1.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 338.815359][ T37] audit: type=1326 audit(1767006745.121:3731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14662 comm="syz.1.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 338.816197][ T37] audit: type=1326 audit(1767006745.121:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14662 comm="syz.1.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 338.816247][ T37] audit: type=1326 audit(1767006745.121:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14662 comm="syz.1.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 338.817752][ T37] audit: type=1326 audit(1767006745.131:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14662 comm="syz.1.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 339.152045][T14674] ubi31: attaching mtd0 [ 339.200046][T14674] ubi31: scanning is finished [ 339.200104][T14674] ubi31: empty MTD device detected [ 339.393579][T14687] netlink: 'syz.0.4126': attribute type 1 has an invalid length. [ 339.572343][T14674] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 339.572375][T14674] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 339.572393][T14674] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 339.572417][T14674] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 339.572434][T14674] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 339.572449][T14674] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 339.572465][T14674] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 563102357 [ 339.572483][T14674] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 339.577644][T14693] ubi31: background thread "ubi_bgt31d" started, PID 14693 [ 339.606493][ T5804] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 339.789588][ T5804] usb 6-1: Using ep0 maxpacket: 8 [ 339.791740][ T5804] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.794111][ T5804] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 339.794141][ T5804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 339.794159][ T5804] usb 6-1: SerialNumber: syz [ 339.842676][ T5804] usb 6-1: config 0 descriptor?? [ 339.872947][ T5804] uvcvideo 6-1:0.0: Found UVC 0.00 device (05ac:8501) [ 339.885094][ T5804] uvcvideo 6-1:0.0: Failed to create links for entity 255 [ 339.885142][ T5804] uvcvideo 6-1:0.0: Failed to register entities (-22). [ 340.092424][ T5804] usb 6-1: USB disconnect, device number 8 [ 340.909122][T14721] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 340.935946][T14721] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 341.150541][T14732] netlink: 'syz.1.4148': attribute type 27 has an invalid length. [ 341.248064][T14738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4151'. [ 341.412227][T14747] program syz.2.4156 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 342.735798][ T5804] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 342.736500][T14807] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4183'. [ 342.736519][T14807] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4183'. [ 342.888969][ T5804] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 342.889001][ T5804] usb 3-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0x6E, changing to 0xE [ 342.889025][ T5804] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 342.889052][ T5804] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 342.889074][ T5804] usb 3-1: config 0 interface 0 has no altsetting 0 [ 342.893653][ T5804] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 342.893683][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.893702][ T5804] usb 3-1: Product: syz [ 342.893716][ T5804] usb 3-1: Manufacturer: syz [ 342.893730][ T5804] usb 3-1: SerialNumber: syz [ 342.983486][ T5804] usb 3-1: config 0 descriptor?? [ 343.150194][T14820] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4191'. [ 343.400052][ T5804] usb 3-1: USB disconnect, device number 17 [ 343.779180][T14848] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4205'. [ 344.097060][T14866] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4212'. [ 344.202446][T14871] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 344.425873][T14881] trusted_key: encrypted_key: master key parameter is missing [ 344.578248][T14887] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4224'. [ 344.658436][T14894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4227'. [ 344.817717][T14904] netlink: 'syz.2.4233': attribute type 32 has an invalid length. [ 344.976742][ T941] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 345.148954][ T941] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 345.148985][ T941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.149005][ T941] usb 6-1: Product: syz [ 345.149018][ T941] usb 6-1: Manufacturer: syz [ 345.149039][ T941] usb 6-1: SerialNumber: syz [ 345.212239][ T941] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 345.266953][ T5974] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 345.511462][T14897] random: crng reseeded on system resumption [ 346.354198][T14951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4254'. [ 346.608756][ T5974] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 346.608971][ T5974] ath9k_htc: Failed to initialize the device [ 346.639171][ T941] usb 6-1: USB disconnect, device number 9 [ 346.684057][ T941] usb 6-1: ath9k_htc: USB layer deinitialized [ 346.706743][ C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 346.813503][T14960] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 346.895185][ T43] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 347.045227][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 347.051192][ T43] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 347.051223][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.051242][ T43] usb 3-1: Product: syz [ 347.051256][ T43] usb 3-1: Manufacturer: syz [ 347.051270][ T43] usb 3-1: SerialNumber: syz [ 347.115731][ T43] usb 3-1: config 0 descriptor?? [ 347.329472][ T43] usb 3-1: ignoring: not an USB2CAN converter [ 347.464666][ T5804] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 347.532378][ T941] usb 3-1: USB disconnect, device number 18 [ 347.631638][ T5804] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 347.631670][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.631690][ T5804] usb 2-1: Product: syz [ 347.631703][ T5804] usb 2-1: Manufacturer: syz [ 347.631718][ T5804] usb 2-1: SerialNumber: syz [ 348.096111][ T5804] rtl8150 2-1:1.0: couldn't reset the device [ 348.096495][ T5804] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 348.156868][ T5804] usb 2-1: USB disconnect, device number 26 [ 348.279229][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 348.290969][ T37] audit: type=1326 audit(1767006754.592:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15007 comm="syz.0.4283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73915f749 code=0x7ffc0000 [ 348.291033][ T37] audit: type=1326 audit(1767006754.592:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15007 comm="syz.0.4283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73915f749 code=0x7ffc0000 [ 348.307664][ T37] audit: type=1326 audit(1767006754.622:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15007 comm="syz.0.4283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=145 compat=0 ip=0x7fe73915f749 code=0x7ffc0000 [ 348.324409][ T37] audit: type=1326 audit(1767006754.622:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15007 comm="syz.0.4283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73915f749 code=0x7ffc0000 [ 349.105546][T15040] netlink: 'syz.2.4298': attribute type 3 has an invalid length. [ 349.217133][T15046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4300'. [ 349.741567][T15070] netlink: 'syz.6.4312': attribute type 32 has an invalid length. [ 349.794903][ T941] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 349.949222][ T941] usb 6-1: config 0 has an invalid interface number: 129 but max is 0 [ 349.949251][ T941] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.949270][ T941] usb 6-1: config 0 has no interface number 0 [ 349.949316][ T941] usb 6-1: config 0 interface 129 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 349.953621][ T941] usb 6-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=80.8e [ 349.953649][ T941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.953666][ T941] usb 6-1: Product: syz [ 349.953688][ T941] usb 6-1: Manufacturer: syz [ 349.953701][ T941] usb 6-1: SerialNumber: syz [ 350.037947][ T941] r8152-cfgselector 6-1: Unknown version 0x0000 [ 350.037975][ T941] r8152-cfgselector 6-1: config 0 descriptor?? [ 350.067014][ T941] r8152 6-1:0.129: Expected endpoints are not found [ 350.261996][ T941] r8152-cfgselector 6-1: USB disconnect, device number 10 [ 351.042177][T15126] bridge2: entered allmulticast mode [ 351.339641][T15144] netlink: 'syz.1.4349': attribute type 4 has an invalid length. [ 351.339664][T15144] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4349'. [ 351.618811][T15154] bond0: left allmulticast mode [ 351.734699][ T5919] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 351.884601][ T5919] usb 7-1: Using ep0 maxpacket: 8 [ 351.886893][ T5919] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.886952][ T5919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 351.886979][ T5919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 351.887000][ T5919] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 351.887022][ T5919] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 351.887063][ T5919] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 351.887085][ T5919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.892226][ T5919] usb 7-1: config 0 descriptor?? [ 352.127618][ T6379] usb 7-1: USB disconnect, device number 2 [ 352.495394][T15203] Mount JFS Failure: -22 [ 352.495413][T15203] jfs_mount failed w/return code = -22 [ 353.020260][T15232] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 353.211240][T15241] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4399'. [ 354.158162][T15289] binfmt_misc: register: failed to install interpreter file ./file0 [ 354.434318][ T941] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 354.587803][ T941] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 354.587831][ T941] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 354.587850][ T941] usb 7-1: config 220 has no interface number 2 [ 354.587921][ T941] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 354.587947][ T941] usb 7-1: config 220 interface 0 has no altsetting 0 [ 354.587964][ T941] usb 7-1: config 220 interface 76 has no altsetting 0 [ 354.587981][ T941] usb 7-1: config 220 interface 1 has no altsetting 0 [ 354.590360][ T941] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 354.590390][ T941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.590409][ T941] usb 7-1: Product: syz [ 354.590422][ T941] usb 7-1: Manufacturer: syz [ 354.590437][ T941] usb 7-1: SerialNumber: syz [ 354.684296][ T5994] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 354.714369][ T6379] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 354.834373][ T5919] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 354.854305][ T5994] usb 6-1: unable to get BOS descriptor or descriptor too short [ 354.855556][ T5994] usb 6-1: not running at top speed; connect to a high speed hub [ 354.858532][ T5994] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 354.858564][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 354.858589][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 221, setting to 64 [ 354.858614][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 354.858637][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 354.858656][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 113, setting to 64 [ 354.867520][ T6379] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 354.867608][ T6379] usb 3-1: config 0 interface 0 has no altsetting 0 [ 354.874548][ T6379] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 354.874631][ T6379] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 354.874654][ T6379] usb 3-1: Product: syz [ 354.874672][ T6379] usb 3-1: Manufacturer: syz [ 354.874687][ T6379] usb 3-1: SerialNumber: syz [ 354.923298][ T5994] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 354.923337][ T5994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.923356][ T5994] usb 6-1: Product: syz [ 354.923369][ T5994] usb 6-1: Manufacturer: syz [ 354.923383][ T5994] usb 6-1: SerialNumber: syz [ 354.935310][ T6379] usb 3-1: config 0 descriptor?? [ 355.073197][ T5994] usb 6-1: config 0 descriptor?? [ 355.074936][T15307] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 355.081010][T15307] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 355.082275][T15307] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 355.097720][ T5919] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 355.097758][ T5919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.097779][ T5919] usb 2-1: config 0 has no interface number 0 [ 355.097837][ T5919] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 355.097862][ T5919] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.150835][ T5919] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 355.150870][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.150892][ T5919] usb 2-1: Product: syz [ 355.150908][ T5919] usb 2-1: Manufacturer: syz [ 355.150925][ T5919] usb 2-1: SerialNumber: syz [ 355.151816][ T941] usb 7-1: selecting invalid altsetting 0 [ 355.187082][ T6379] usb 3-1: selecting invalid altsetting 0 [ 355.227247][ T5919] usb 2-1: config 0 descriptor?? [ 355.238637][ T941] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 355.238682][ T941] uvcvideo 7-1:220.0: No valid video chain found. [ 355.284523][ T941] usb 7-1: selecting invalid altsetting 0 [ 355.284563][ T941] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 355.325103][ T941] usb 7-1: USB disconnect, device number 3 [ 355.482292][ T5919] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -32 [ 355.485646][ T5994] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 355.516591][ T5919] usb 2-1: USB disconnect, device number 27 [ 355.532484][ T6379] usb 3-1: USB disconnect, device number 19 [ 355.709146][ T5994] usb 6-1: USB disconnect, device number 11 [ 356.019256][T15346] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4451'. [ 357.420421][T15414] netlink: 'syz.5.4485': attribute type 13 has an invalid length. [ 357.633952][T15426] dlm: no locking on control device [ 358.273839][T15452] netlink: 120 bytes leftover after parsing attributes in process `syz.5.4503'. [ 358.273868][T15452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4503'. [ 358.592184][T15470] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4512'. [ 358.828830][T15479] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 359.054329][T15491] netlink: 'syz.6.4522': attribute type 1 has an invalid length. [ 359.351248][T15502] netlink: 'syz.1.4528': attribute type 1 has an invalid length. [ 359.736083][T15524] netlink: 'syz.1.4539': attribute type 9 has an invalid length. [ 359.753648][ T6379] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 359.841166][T15528] IPv6: sit2: Disabled Multicast RS [ 359.842037][T15528] sit2: entered allmulticast mode [ 359.860137][T15530] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4541'. [ 359.860163][T15530] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4541'. [ 359.925318][ T6379] usb 6-1: unable to get BOS descriptor or descriptor too short [ 359.927272][ T6379] usb 6-1: config 2 has an invalid interface number: 57 but max is 0 [ 359.927300][ T6379] usb 6-1: config 2 has an invalid descriptor of length 10, skipping remainder of the config [ 359.927318][ T6379] usb 6-1: config 2 has no interface number 0 [ 359.927345][ T6379] usb 6-1: config 2 interface 57 has no altsetting 0 [ 359.930419][ T6379] usb 6-1: string descriptor 0 read error: -22 [ 359.930541][ T6379] usb 6-1: New USB device found, idVendor=04cb, idProduct=013b, bcdDevice=26.d0 [ 359.930553][ T6379] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.967686][ T6379] gspca_main: finepix-2.14.0 probing 04cb:013b [ 360.173699][ T6379] usb 6-1: USB disconnect, device number 12 [ 360.493557][ T941] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 360.643432][ T941] usb 3-1: Using ep0 maxpacket: 8 [ 360.650718][ T941] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 360.650749][ T941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.650768][ T941] usb 3-1: Product: syz [ 360.650782][ T941] usb 3-1: Manufacturer: syz [ 360.650795][ T941] usb 3-1: SerialNumber: syz [ 360.701745][ T941] usb 3-1: config 0 descriptor?? [ 360.727129][ T941] gspca_main: sq905-2.14.0 probing 2770:9120 [ 361.124613][ T941] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 361.124798][ T941] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 361.157224][ T941] usb 3-1: USB disconnect, device number 20 [ 361.160416][T15565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.184029][ T5859] udevd[5859]: setting mode of /dev/bus/usb/003/020 to 020664 failed: No such file or directory [ 361.185450][ T5859] udevd[5859]: setting owner of /dev/bus/usb/003/020 to uid=0, gid=0 failed: No such file or directory [ 361.226108][T15565] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.287858][T15565] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 361.513223][T15579] netlink: 'syz.6.4566': attribute type 61 has an invalid length. [ 362.239390][T15614] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4583'. [ 362.733734][T15640] fuse: Bad value for 'fd' [ 363.066020][T15658] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4604'. [ 363.066095][T15658] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4604'. [ 363.133426][ T5804] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 363.178089][T15666] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4609'. [ 363.178117][T15666] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4609'. [ 363.293216][ T5804] usb 6-1: Using ep0 maxpacket: 8 [ 363.297311][ T5804] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.297367][ T5804] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 363.301441][ T5804] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 363.301470][ T5804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.301487][ T5804] usb 6-1: Product: syz [ 363.301501][ T5804] usb 6-1: Manufacturer: syz [ 363.301513][ T5804] usb 6-1: SerialNumber: syz [ 363.312812][ T5804] usb 6-1: config 0 descriptor?? [ 363.658836][T15687] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4617'. [ 364.434751][T15727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4639'. [ 365.173221][ T6379] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 365.873619][ T5804] usb 6-1: USB disconnect, device number 13 [ 365.963387][ T6379] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 366.043277][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 366.995951][T15849] netlink: 'syz.2.4698': attribute type 10 has an invalid length. [ 367.028511][T15852] tmpfs: Bad value for 'nr_inodes' [ 367.163791][T15849] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 367.164507][ T1214] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 367.164744][ T1214] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 367.937822][T15897] comedi comedi2: fl512: I/O port conflict (0x2,16) [ 367.955626][T15899] netlink: 'syz.1.4723': attribute type 26 has an invalid length. [ 368.042801][ T6379] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 368.589470][T15928] netdevsim0: mtu less than device minimum [ 368.610833][T15930] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4740'. [ 368.610860][T15930] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4740'. [ 368.610875][T15930] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4740'. [ 368.956658][ C1] sd 0:0:1:0: [sda] tag#772 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 368.956809][ C1] sd 0:0:1:0: [sda] tag#772 CDB: Write(6) 0a 00 72 47 43 76 [ 369.937838][T15994] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4768'. [ 369.937869][T15994] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4768'. [ 369.937884][T15994] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4768'. [ 370.886986][T16039] netlink: 'syz.2.4789': attribute type 1 has an invalid length. [ 370.887009][T16039] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4789'. [ 371.482372][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 371.953814][T16096] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 372.009446][T16096] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 372.735654][T16140] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4840'. [ 372.975921][T16150] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 373.138404][T16160] netlink: 'syz.1.4850': attribute type 3 has an invalid length. [ 373.138430][T16160] netlink: 'syz.1.4850': attribute type 1 has an invalid length. [ 373.138443][T16160] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4850'. [ 374.298175][ T37] audit: type=1326 audit(1767006780.615:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16215 comm="syz.6.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14960f749 code=0x7ffc0000 [ 374.298520][ T37] audit: type=1326 audit(1767006780.615:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16215 comm="syz.6.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14960f749 code=0x7ffc0000 [ 374.314828][ T37] audit: type=1326 audit(1767006780.635:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16215 comm="syz.6.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fb14960f749 code=0x7ffc0000 [ 374.314979][ T37] audit: type=1326 audit(1767006780.635:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16215 comm="syz.6.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14960f749 code=0x7ffc0000 [ 374.315130][ T37] audit: type=1326 audit(1767006780.635:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16215 comm="syz.6.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14960f749 code=0x7ffc0000 [ 374.788711][T16236] netlink: zone id is out of range [ 374.788737][T16236] netlink: zone id is out of range [ 374.788745][T16236] netlink: zone id is out of range [ 374.788753][T16236] netlink: zone id is out of range [ 374.788761][T16236] netlink: zone id is out of range [ 374.788768][T16236] netlink: zone id is out of range [ 374.788776][T16236] netlink: zone id is out of range [ 375.197373][T16256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4896'. [ 375.197403][T16256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4896'. [ 375.197437][T16256] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4896'. [ 375.375698][T16262] tmpfs: Bad value for 'mpol' [ 375.507979][T16271] netlink: 468 bytes leftover after parsing attributes in process `syz.5.4904'. [ 375.508003][T16271] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4904'. [ 376.707142][T16336] netlink: 'syz.5.4938': attribute type 23 has an invalid length. [ 376.903469][T16345] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4941'. [ 377.913395][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 378.061432][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 378.064092][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 378.064120][ T9] usb 3-1: config 0 has no interface number 0 [ 378.071025][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 378.071055][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.071074][ T9] usb 3-1: Product: syz [ 378.071088][ T9] usb 3-1: Manufacturer: syz [ 378.071102][ T9] usb 3-1: SerialNumber: syz [ 378.101362][ T9] usb 3-1: config 0 descriptor?? [ 378.113682][ T9] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 378.113726][ T9] usb 3-1: selecting invalid altsetting 1 [ 378.113741][ T9] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 378.129443][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 378.130627][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 378.130720][ T9] usb 3-1: media controller created [ 378.232160][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 378.337976][T16408] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4972'. [ 378.339691][T16407] netlink: 'syz.5.4971': attribute type 10 has an invalid length. [ 378.339716][T16407] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4971'. [ 378.358257][T16407] bridge0: port 1(dummy0) entered blocking state [ 378.364568][T16407] bridge0: port 1(dummy0) entered disabled state [ 378.364876][T16407] dummy0: entered allmulticast mode [ 378.383946][T16407] dummy0: entered promiscuous mode [ 378.572682][ T37] audit: type=1326 audit(1767006784.896:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16415 comm="syz.1.4978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 378.572977][ T37] audit: type=1326 audit(1767006784.896:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16415 comm="syz.1.4978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 378.575527][ T37] audit: type=1326 audit(1767006784.896:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16415 comm="syz.1.4978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 378.575789][ T37] audit: type=1326 audit(1767006784.896:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16415 comm="syz.1.4978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 378.640787][ T9] usb 3-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 378.654270][ T9] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 378.705462][ T37] audit: type=1326 audit(1767006784.896:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16415 comm="syz.1.4978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 379.051223][ T9] DVB: Unable to find symbol mxl5005s_attach() [ 379.120666][T16437] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4988'. [ 379.187630][ T9] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 379.394743][ T9] usb 3-1: USB disconnect, device number 21 [ 379.681226][ T5974] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 379.831211][ T5974] usb 6-1: Using ep0 maxpacket: 32 [ 379.836823][ T5974] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.836857][ T5974] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.840350][ T5974] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 379.840379][ T5974] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 379.840400][ T5974] usb 6-1: Product: syz [ 379.840413][ T5974] usb 6-1: Manufacturer: syz [ 379.866073][ T5974] hub 6-1:4.0: USB hub found [ 379.931450][ T941] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 380.064780][ T37] audit: type=1326 audit(1767006786.386:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16475 comm="syz.1.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 380.067416][ T37] audit: type=1326 audit(1767006786.386:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16475 comm="syz.1.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 380.067484][ T37] audit: type=1326 audit(1767006786.386:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16475 comm="syz.1.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 380.067578][ T37] audit: type=1326 audit(1767006786.386:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16475 comm="syz.1.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 380.069022][ T5974] hub 6-1:4.0: 3 ports detected [ 380.071279][ T5974] hub 6-1:4.0: insufficient power available to use all downstream ports [ 380.133347][ T941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 380.149356][ T941] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 380.149918][ T941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.149939][ T941] usb 3-1: Product: syz [ 380.149952][ T941] usb 3-1: Manufacturer: syz [ 380.149965][ T941] usb 3-1: SerialNumber: syz [ 380.218141][ T941] usb 3-1: config 0 descriptor?? [ 380.254533][ T941] hub 3-1:0.0: bad descriptor, ignoring hub [ 380.255127][ T941] hub 3-1:0.0: probe with driver hub failed with error -5 [ 380.279558][ T941] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input26 [ 380.289376][ T5974] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 380.289406][ T5974] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 380.424228][ T5974] usb 6-1: USB disconnect, device number 14 [ 380.521250][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 380.681247][ T61] Bluetooth: hci5: command 0x0406 tx timeout [ 380.690033][ T941] usb 3-1: USB disconnect, device number 22 [ 381.508039][T16527] bond0: Error: Cannot enslave bond to itself. [ 382.392160][T16571] netlink: 'syz.5.5053': attribute type 1 has an invalid length. [ 382.480017][T16578] tc_dump_action: action bad kind [ 383.091932][T16609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.412766][T16627] netlink: 'syz.1.5079': attribute type 1 has an invalid length. [ 383.726255][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.726326][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.750661][ T941] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 384.900642][ T941] usb 6-1: Using ep0 maxpacket: 16 [ 384.902950][ T941] usb 6-1: config 0 has an invalid interface number: 77 but max is 0 [ 384.902978][ T941] usb 6-1: config 0 has no interface number 0 [ 384.903026][ T941] usb 6-1: config 0 interface 77 has no altsetting 0 [ 384.906654][ T941] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=8c.11 [ 384.906682][ T941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.906700][ T941] usb 6-1: Product: syz [ 384.906713][ T941] usb 6-1: Manufacturer: syz [ 384.906727][ T941] usb 6-1: SerialNumber: syz [ 384.980069][ T941] usb 6-1: config 0 descriptor?? [ 385.252504][T16683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.253089][T16683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.279249][ T941] ath6kl: Failed to submit usb control message: -71 [ 385.279308][ T941] ath6kl: unable to send the bmi data to the device: -71 [ 385.279323][ T941] ath6kl: Unable to send get target info: -71 [ 385.339512][ T941] ath6kl: Failed to init ath6kl core: -71 [ 385.348683][ T941] ath6kl_usb 6-1:0.77: probe with driver ath6kl_usb failed with error -71 [ 385.382756][ T941] usb 6-1: USB disconnect, device number 15 [ 385.729410][T16727] misc userio: The device must be registered before sending interrupts [ 386.000705][ T6379] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 386.150774][ T6379] usb 2-1: Using ep0 maxpacket: 8 [ 386.154703][ T6379] usb 2-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 386.154732][ T6379] usb 2-1: config 0 has an invalid interface number: 150 but max is 64 [ 386.154751][ T6379] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.154790][ T6379] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 386.154822][ T6379] usb 2-1: config 0 has no interface number 0 [ 386.154880][ T6379] usb 2-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 386.154904][ T6379] usb 2-1: config 0 interface 150 has no altsetting 0 [ 386.154937][ T6379] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 386.154957][ T6379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.174034][ T6379] usb 2-1: config 0 descriptor?? [ 386.490402][ T5804] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 386.640450][ T5804] usb 7-1: Using ep0 maxpacket: 16 [ 386.642754][ T5804] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 386.645182][ T5804] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 386.645209][ T5804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.645228][ T5804] usb 7-1: Product: syz [ 386.645242][ T5804] usb 7-1: Manufacturer: syz [ 386.645255][ T5804] usb 7-1: SerialNumber: syz [ 386.727932][ T5804] usb 7-1: config 0 descriptor?? [ 386.737954][ T5804] hub 7-1:0.0: bad descriptor, ignoring hub [ 386.737995][ T5804] hub 7-1:0.0: probe with driver hub failed with error -5 [ 386.744783][ T5987] usb 2-1: USB disconnect, device number 28 [ 386.793276][ T5804] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 386.913799][T16779] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5155'. [ 386.958956][ T5804] usb 7-1: USB disconnect, device number 4 [ 387.567508][ T37] audit: type=1326 audit(1767006793.887:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16810 comm="syz.1.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 387.569483][ T37] audit: type=1326 audit(1767006793.887:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16810 comm="syz.1.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 387.620916][ T37] audit: type=1326 audit(1767006793.937:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16810 comm="syz.1.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 387.620971][ T37] audit: type=1326 audit(1767006793.947:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16810 comm="syz.1.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 387.621010][ T37] audit: type=1326 audit(1767006793.947:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16810 comm="syz.1.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa134eef749 code=0x7ffc0000 [ 388.586140][T16863] netlink: 'syz.5.5196': attribute type 6 has an invalid length. [ 389.264839][T16898] QAT: failed to copy from user. [ 389.582523][T16912] bond3: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 389.653985][T16912] bond3 (unregistering): Released all slaves [ 389.870992][T16885] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 389.875848][T16885] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 390.005184][T16885] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 390.005331][T16885] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 390.074050][T16936] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5233'. [ 390.155776][T16885] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 390.760472][ T38] INFO: task syz.4.2185:10637 blocked for more than 143 seconds. [ 390.760507][ T38] Not tainted syzkaller #0 [ 390.760516][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 390.760526][ T38] task:syz.4.2185 state:D stack:24456 pid:10637 tgid:10636 ppid:5797 task_flags:0x400140 flags:0x00080002 [ 390.760589][ T38] Call Trace: [ 390.760603][ T38] [ 390.760701][ T38] __schedule+0x145f/0x5070 [ 390.760779][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 390.760820][ T38] ? check_noncircular+0xda/0x150 [ 390.760845][ T38] ? __pfx___schedule+0x10/0x10 [ 390.760872][ T38] ? schedule+0x91/0x360 [ 390.760895][ T38] schedule+0x165/0x360 [ 390.760916][ T38] schedule_timeout+0x9a/0x270 [ 390.760937][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 390.760956][ T38] ? do_raw_spin_lock+0x121/0x290 [ 390.760979][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 390.760992][ T38] ? wait_for_completion+0x267/0x5d0 [ 390.761014][ T38] wait_for_completion+0x2bf/0x5d0 [ 390.761043][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 390.761072][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 390.761085][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 390.761098][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 390.761114][ T38] disable_device+0x1c6/0x320 [ 390.761133][ T38] ? __pfx_disable_device+0x10/0x10 [ 390.761146][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 390.761160][ T38] ? mutex_lock_nested+0x154/0x1d0 [ 390.761176][ T38] ? __ib_unregister_device+0x284/0x3f0 [ 390.761197][ T38] __ib_unregister_device+0x2cb/0x3f0 [ 390.761218][ T38] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 390.761239][ T38] ib_unregister_device_and_put+0xb8/0xf0 [ 390.761260][ T38] nldev_dellink+0x2d1/0x320 [ 390.761280][ T38] ? __pfx_nldev_dellink+0x10/0x10 [ 390.761356][ T38] ? rcu_is_watching+0x15/0xb0 [ 390.761372][ T38] ? cap_capable+0x123/0x440 [ 390.761395][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 390.761416][ T38] ? bpf_lsm_capable+0x9/0x20 [ 390.761431][ T38] ? security_capable+0x7e/0x2e0 [ 390.761446][ T38] ? __pfx_nldev_dellink+0x10/0x10 [ 390.761463][ T38] rdma_nl_rcv+0x6ae/0x980 [ 390.761489][ T38] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 390.761521][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 390.761548][ T38] netlink_unicast+0x846/0xa10 [ 390.761571][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 390.761586][ T38] ? __alloc_skb+0x198/0x3a0 [ 390.761603][ T38] ? netlink_sendmsg+0x642/0xb30 [ 390.761627][ T38] ? skb_put+0x11b/0x210 [ 390.761645][ T38] netlink_sendmsg+0x805/0xb30 [ 390.761670][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.761693][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 390.761711][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.761729][ T38] __sock_sendmsg+0x21c/0x270 [ 390.761754][ T38] ____sys_sendmsg+0x508/0x810 [ 390.761776][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.761799][ T38] ? import_iovec+0x74/0xa0 [ 390.761817][ T38] ___sys_sendmsg+0x21f/0x2a0 [ 390.761836][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.761857][ T38] ? futex_wait+0x285/0x360 [ 390.761893][ T38] ? __fget_files+0x2a/0x420 [ 390.761910][ T38] ? __fget_files+0x3a6/0x420 [ 390.761932][ T38] __x64_sys_sendmsg+0x1a1/0x260 [ 390.761951][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.761975][ T38] ? rcu_is_watching+0x15/0xb0 [ 390.761997][ T38] do_syscall_64+0xec/0xf80 [ 390.762012][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.762027][ T38] ? trace_irq_disable+0x37/0x100 [ 390.762043][ T38] ? clear_bhb_loop+0x60/0xb0 [ 390.762059][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.762073][ T38] RIP: 0033:0x7f228fcaf749 [ 390.762147][ T38] RSP: 002b:00007f228df0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.762166][ T38] RAX: ffffffffffffffda RBX: 00007f228ff05fa0 RCX: 00007f228fcaf749 [ 390.762177][ T38] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 390.762186][ T38] RBP: 00007f228fd33f91 R08: 0000000000000000 R09: 0000000000000000 [ 390.762195][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.762204][ T38] R13: 00007f228ff06038 R14: 00007f228ff05fa0 R15: 00007ffd7560d848 [ 390.762228][ T38] [ 390.762270][ T38] [ 390.762270][ T38] Showing all locks held in the system: [ 390.762279][ T38] 13 locks held by kworker/u8:0/12: [ 390.762294][ T38] 1 lock held by khungtaskd/38: [ 390.762302][ T38] #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 390.762461][ T38] 2 locks held by kworker/u8:17/3544: [ 390.762470][ T38] #0: ffff88813ff69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 390.762506][ T38] #1: ffffc9000cdc7bc0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 390.762542][ T38] 2 locks held by getty/5556: [ 390.762550][ T38] #0: ffff888030e310a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 390.762588][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 390.762629][ T38] 9 locks held by syz-executor/5799: [ 390.762651][ T38] 2 locks held by syz.4.2185/10637: [ 390.762658][ T38] #0: ffffffff99013378 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 390.762693][ T38] #1: ffff888034d74750 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 390.762732][ T38] 2 locks held by syz.3.3579/13523: [ 390.762740][ T38] #0: ffffffff8e8986e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 390.762771][ T38] #1: ffff888034d74750 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 390.762810][ T38] 5 locks held by syz.0.5250/16969: [ 390.762819][ T38] 1 lock held by modprobe/16970: [ 390.762827][ T38] 4 locks held by syz.1.5251/16972: [ 390.762836][ T38] [ 390.762880][ T38] ============================================= [ 390.762880][ T38] [ 390.762897][ T38] NMI backtrace for cpu 1 [ 390.762953][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 390.762981][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 390.762995][ T38] Call Trace: [ 390.763006][ T38] [ 390.763013][ T38] dump_stack_lvl+0xe8/0x150 [ 390.763035][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 390.763056][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 390.763074][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 390.763094][ T38] sys_info+0x135/0x170 [ 390.763111][ T38] watchdog+0xf95/0xfe0 [ 390.763134][ T38] ? watchdog+0x20a/0xfe0 [ 390.763155][ T38] kthread+0x711/0x8a0 [ 390.763177][ T38] ? __pfx_watchdog+0x10/0x10 [ 390.763191][ T38] ? __pfx_kthread+0x10/0x10 [ 390.763207][ T38] ? rt_spin_unlock+0x150/0x200 [ 390.763228][ T38] ? rt_spin_unlock+0x161/0x200 [ 390.763243][ T38] ? __pfx_kthread+0x10/0x10 [ 390.763261][ T38] ret_from_fork+0x510/0xa50 [ 390.763280][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 390.763293][ T38] ? __switch_to+0xc9e/0x1480 [ 390.763315][ T38] ? __pfx_kthread+0x10/0x10 [ 390.763334][ T38] ret_from_fork_asm+0x1a/0x30 [ 390.763365][ T38] [ 390.763370][ T38] Sending NMI from CPU 1 to CPUs 0: [ 390.763414][ C0] NMI backtrace for cpu 0 [ 390.763430][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 390.763451][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 390.763464][ C0] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 390.763487][ C0] RIP: 0010:__lock_acquire+0x1879/0x2cf0 [ 390.763515][ C0] Code: 80 e2 fa 80 78 2b 00 0f b6 c2 0f 44 c1 84 c0 0f 84 3d ff ff ff a8 0c 41 0f 94 44 24 2b 4d 8b 6c 24 10 41 0f b6 85 c6 00 00 00 <85> c0 74 5f 83 f8 01 0f 85 1b ff ff ff 83 3d 23 aa 21 17 00 0f 85 [ 390.763576][ C0] RSP: 0018:ffffc900001165f8 EFLAGS: 00000002 [ 390.763591][ C0] RAX: 0000000000000000 RBX: 00000000000003cd RCX: 0000000000000008 [ 390.763603][ C0] RDX: 0000000000000008 RSI: ffff88801b6be858 RDI: 00000000000003cd [ 390.763615][ C0] RBP: a1a9666ee89b5a44 R08: ffffc900001165c0 R09: 0000000000000020 [ 390.763627][ C0] R10: dffffc0000000000 R11: ffffffff819cebf0 R12: ffffffff95443188 [ 390.763641][ C0] R13: ffffffff925ca368 R14: ffff88801b6bdac0 R15: 0000000000000044 [ 390.763654][ C0] FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 390.763670][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 390.763682][ C0] CR2: 0000001b2f321ff8 CR3: 0000000029604000 CR4: 00000000003526f0 [ 390.763698][ C0] Call Trace: [ 390.763706][ C0] [ 390.763715][ C0] ? lockdep_unlock+0x6c/0xf0 [ 390.763733][ C0] ? __lock_acquire+0x146f/0x2cf0 [ 390.763757][ C0] ? psi_task_switch+0x53/0x880 [ 390.763774][ C0] lock_acquire+0x107/0x340 [ 390.763795][ C0] ? psi_task_switch+0x53/0x880 [ 390.763813][ C0] ? rcu_is_watching+0x15/0xb0 [ 390.763833][ C0] psi_write_begin+0xab/0x160 [ 390.763850][ C0] ? psi_task_switch+0x53/0x880 [ 390.763866][ C0] psi_task_switch+0x53/0x880 [ 390.763891][ C0] ? psi_account_irqtime+0x175/0x750 [ 390.763911][ C0] __schedule+0x2497/0x5070 [ 390.763935][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 390.763959][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 390.763982][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 390.764006][ C0] ? __pfx___schedule+0x10/0x10 [ 390.764034][ C0] preempt_schedule_irq+0x4d/0xa0 [ 390.764058][ C0] irqentry_exit+0x5d8/0x660 [ 390.764076][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 390.764095][ C0] RIP: 0010:unwind_next_frame+0x138b/0x23d0 [ 390.764117][ C0] Code: ad 00 48 8b 14 24 4d 89 3c 24 41 0f b6 44 2d 00 84 c0 0f 85 09 0e 00 00 c6 03 00 4c 8b 64 24 48 4c 8b 7c 24 28 48 8b 44 24 40 <0f> b6 04 28 84 c0 0f 85 73 0b 00 00 41 0f b6 04 2f 84 c0 0f 85 8a [ 390.764132][ C0] RSP: 0018:ffffc90000116b98 EFLAGS: 00000246 [ 390.764146][ C0] RAX: 1ffffffff1ecd60a RBX: ffffc90000116d00 RCX: 0000000000000000 [ 390.764159][ C0] RDX: ffffffff8f66b050 RSI: 0000000000000000 RDI: ffffc90000116d28 [ 390.764172][ C0] RBP: dffffc0000000000 R08: ffffc90000116d27 R09: 0000000000000000 [ 390.764184][ C0] R10: ffffc90000116d18 R11: fffff52000022da5 R12: ffffc90000116d18 [ 390.764198][ C0] R13: 1ffff92000022d9b R14: ffffc90000116cc8 R15: 1ffffffff1ecd60a [ 390.764218][ C0] ? unwind_next_frame+0xeae/0x23d0 [ 390.764242][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 390.764263][ C0] ? arch_stack_walk+0xe4/0x150 [ 390.764286][ C0] __unwind_start+0x5b9/0x760 [ 390.764308][ C0] ? sit_tunnel_xmit+0xb9a/0x1b90 [ 390.764333][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 390.764354][ C0] arch_stack_walk+0xe4/0x150 [ 390.764376][ C0] ? stack_trace_save+0x9c/0xe0 [ 390.764397][ C0] stack_trace_save+0x9c/0xe0 [ 390.764417][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 390.764435][ C0] ? sk_skb_reason_drop+0x127/0x170 [ 390.764456][ C0] ? ip6_output+0x340/0x550 [ 390.764479][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 390.764500][ C0] kasan_save_track+0x3e/0x80 [ 390.764546][ C0] kasan_save_free_info+0x46/0x50 [ 390.764570][ C0] __kasan_slab_free+0x5c/0x80 [ 390.764593][ C0] kmem_cache_free+0x18f/0x8d0 [ 390.764618][ C0] ? sit_tunnel_xmit+0xb9a/0x1b90 [ 390.764643][ C0] sit_tunnel_xmit+0xb9a/0x1b90 [ 390.764670][ C0] ? netif_skb_features+0xb04/0x1540 [ 390.764693][ C0] ? __pfx_sit_tunnel_xmit+0x10/0x10 [ 390.764719][ C0] ? __pfx_skb_csum_hwoffload_help+0x10/0x10 [ 390.764746][ C0] dev_hard_start_xmit+0x2e0/0x840 [ 390.764775][ C0] __dev_queue_xmit+0x14b4/0x31d0 [ 390.764803][ C0] ? __dev_queue_xmit+0x259/0x31d0 [ 390.764829][ C0] ? neigh_connected_output+0x1ea/0x460 [ 390.764847][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 390.764874][ C0] ? neigh_connected_output+0x1ea/0x460 [ 390.764895][ C0] ? read_seqbegin+0xae/0x1e0 [ 390.764910][ C0] ? neigh_connected_output+0x1ea/0x460 [ 390.764926][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 390.764942][ C0] ? read_seqbegin+0x1c3/0x1e0 [ 390.764959][ C0] ? neigh_connected_output+0x3b6/0x460 [ 390.764981][ C0] ? ip6_output+0x126/0x550 [ 390.765002][ C0] ip6_output+0x340/0x550 [ 390.765025][ C0] udp_tunnel6_xmit_skb+0x68d/0xb30 [ 390.765053][ C0] send6+0x5ac/0x8d0 [ 390.765072][ C0] ? rt_read_lock+0x203/0x490 [ 390.765093][ C0] ? send6+0x220/0x8d0 [ 390.765111][ C0] ? __pfx_send6+0x10/0x10 [ 390.765127][ C0] ? rcu_is_watching+0x15/0xb0 [ 390.765146][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 390.765166][ C0] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 390.765190][ C0] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 390.765208][ C0] wg_socket_send_skb_to_peer+0x128/0x200 [ 390.765228][ C0] wg_packet_handshake_send_worker+0x1db/0x320 [ 390.765246][ C0] ? finish_task_switch+0x162/0x940 [ 390.765272][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 390.765293][ C0] ? do_raw_spin_lock+0x121/0x290 [ 390.765320][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 390.765339][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 390.765358][ C0] process_scheduled_works+0xad1/0x1770 [ 390.765388][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 390.765406][ C0] ? do_raw_spin_lock+0x121/0x290 [ 390.765430][ C0] worker_thread+0x8a0/0xda0 [ 390.765459][ C0] kthread+0x711/0x8a0 [ 390.765482][ C0] ? __pfx_worker_thread+0x10/0x10 [ 390.765501][ C0] ? __pfx_kthread+0x10/0x10 [ 390.765521][ C0] ? rt_spin_unlock+0x150/0x200 [ 390.765544][ C0] ? rt_spin_unlock+0x161/0x200 [ 390.765563][ C0] ? __pfx_kthread+0x10/0x10 [ 390.765585][ C0] ret_from_fork+0x510/0xa50 [ 390.765604][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 390.765621][ C0] ? __switch_to+0xc9e/0x1480 [ 390.765646][ C0] ? __pfx_kthread+0x10/0x10 [ 390.765668][ C0] ret_from_fork_asm+0x1a/0x30 [ 390.765698][ C0] [ 390.769978][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 390.770008][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 390.770031][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 390.770044][ T38] Call Trace: [ 390.770053][ T38] [ 390.770062][ T38] vpanic+0x1e0/0x670 [ 390.770095][ T38] panic+0xb9/0xc0 [ 390.770119][ T38] ? __pfx_panic+0x10/0x10 [ 390.770145][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 390.770171][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 390.770199][ T38] watchdog+0xfdf/0xfe0 [ 390.770225][ T38] ? watchdog+0x20a/0xfe0 [ 390.770249][ T38] kthread+0x711/0x8a0 [ 390.770274][ T38] ? __pfx_watchdog+0x10/0x10 [ 390.770290][ T38] ? __pfx_kthread+0x10/0x10 [ 390.770309][ T38] ? rt_spin_unlock+0x150/0x200 [ 390.770337][ T38] ? rt_spin_unlock+0x161/0x200 [ 390.770355][ T38] ? __pfx_kthread+0x10/0x10 [ 390.770378][ T38] ret_from_fork+0x510/0xa50 [ 390.770401][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 390.770420][ T38] ? __switch_to+0xc9e/0x1480 [ 390.770450][ T38] ? __pfx_kthread+0x10/0x10 [ 390.770476][ T38] ret_from_fork_asm+0x1a/0x30 [ 390.770518][ T38] [ 390.770892][ T38] Kernel Offset: disabled