last executing test programs: 2m44.229164462s ago: executing program 3 (id=4633): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}, @nested={0x4, 0x2}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 2m44.011597941s ago: executing program 3 (id=4636): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x34}}, 0x0) 2m43.870900881s ago: executing program 3 (id=4638): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007500)={0x18, 0x41, 0x107, 0x70fd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc040) 2m43.609225059s ago: executing program 3 (id=4641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5}], {0x14}}, 0xa4}}, 0x0) 2m43.387861836s ago: executing program 3 (id=4644): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x24}}, 0x0) 2m43.240217894s ago: executing program 3 (id=4647): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xffffffffffffffff, 0x20101) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) 2m28.137948318s ago: executing program 32 (id=4647): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xffffffffffffffff, 0x20101) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) 3.415326781s ago: executing program 0 (id=7292): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000200)={0xfffffffd, 0x5, {0x51, 0xfffd, 0x0, {}, {}, @rumble}, {0x55, 0x0, 0x0, {}, {}, @ramp={0x5}}}) 3.026905251s ago: executing program 0 (id=7295): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x5c}, 0x6e) 2.894267215s ago: executing program 2 (id=7296): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x190, 0x0, 0x190, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x20, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) 2.820408202s ago: executing program 4 (id=7298): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x25dfdc01, {0x81, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x1c}}, 0x0) 2.613779927s ago: executing program 0 (id=7300): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000019c0)={0x28, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0x1a}, @nested={0x4, 0x37}]}, 0x28}], 0x1, 0x0, 0x0, 0x20011}, 0x0) 2.411863791s ago: executing program 2 (id=7301): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) 2.404273674s ago: executing program 4 (id=7302): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000024c0)=@filter={'filter\x00', 0xe, 0x4, 0x2330, 0xffffffff, 0xd0, 0x168, 0x168, 0xffffffff, 0xffffffff, 0x2298, 0x2298, 0x2298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x6, 0x5, 0x0, 0x6, 0x4, 0x5], 0x0, 0x2}, {0x1, [0x4, 0x3, 0x4, 0x7, 0x0, 0x2], 0x6, 0x5}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@remote, @rand_addr=0x64010102, 0x0, 0xff, '\x00', 'hsr0\x00', {0xff}, {}, 0x32, 0x1, 0x40}, 0x0, 0x20d0, 0x2130, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x0, './cgroup.cpu/syz0\x00', 0x9, {0x3ff}}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x1, './cgroup.cpu/syz1\x00', 0xf7, {0x8}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x7fff, 0x3, [0x2f, 0x1c, 0x11, 0x40, 0x2b, 0x29, 0xc000, 0x3, 0x1d, 0x12, 0x1c, 0x9, 0x2, 0x9, 0x3e, 0x27], 0x2, 0xe, 0x80}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2390) 2.396737411s ago: executing program 5 (id=7303): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x0, 0x0}, 0x10) 2.392640305s ago: executing program 1 (id=7304): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, 0x0, &(0x7f0000000100)) 2.191499562s ago: executing program 0 (id=7305): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x200c9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x30}, 0x1, 0xffffa888}, 0x20000880) 2.010286752s ago: executing program 2 (id=7306): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) exit(0x0) 1.986098795s ago: executing program 5 (id=7307): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000240)={0x2, 'vlan0\x00', {0x8001}, 0x7}) 1.953916s ago: executing program 1 (id=7308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}}, 0x0) 1.889851892s ago: executing program 4 (id=7309): r0 = socket(0x2b, 0x80801, 0x1) bind$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 1.770562581s ago: executing program 0 (id=7310): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x28, 0x0, 0x0) 1.539039183s ago: executing program 1 (id=7311): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x1c, 0x25, 0x301, 0x70bd26, 0x8000, {0x1}, [@nested={0x8, 0x131, 0x0, 0x1, [@typed={0x4, 0x128}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4840}, 0x40840) 1.53691903s ago: executing program 5 (id=7312): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0xb, 0x0, 0x0) 1.486939354s ago: executing program 4 (id=7313): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x1, 0x0, 0x105, 0xfffffff8, 0x3d}}, 0x0) 1.378343261s ago: executing program 0 (id=7314): bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090585"], 0x0) 1.130958842s ago: executing program 1 (id=7315): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_netdev_private(r0, 0x8991, &(0x7f0000000040)="fa3a") 1.112436469s ago: executing program 5 (id=7316): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000000c0), 0xfde8) 1.03533418s ago: executing program 4 (id=7317): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x71f43, 0x240f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010101}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0xba}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 814.436568ms ago: executing program 2 (id=7318): r0 = getpgrp(0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 684.133065ms ago: executing program 1 (id=7319): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000009440)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000140)='f', 0x1}], 0x1, &(0x7f0000000100)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18, 0x40}}], 0x1, 0x4) 662.140707ms ago: executing program 5 (id=7320): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x45f, 0x4, 0x1, {0xd, @sdr={0xb147019, 0x3af}}, 0x80000001}) 412.026559ms ago: executing program 2 (id=7321): r0 = fsopen(&(0x7f0000000140)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 292.143602ms ago: executing program 4 (id=7322): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x5d419fb19aaad77c}) 185.879592ms ago: executing program 5 (id=7323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x28, 0x0, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x50) 104.127422ms ago: executing program 1 (id=7324): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000006900)=[{{&(0x7f0000002180)={0xa, 0x4e20, 0xfffffffa, @empty, 0x80}, 0x1c, 0x0, 0x0, &(0x7f0000002400)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x43, 0x0, 0x1, 0x80}}}], 0x18}}], 0x1, 0x4004000) 0s ago: executing program 2 (id=7325): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0xa, 0x0, 0x10000, 0x80000}) kernel console output (not intermixed with test programs): 967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16061 comm="syz.0.4836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ff99c629 code=0x7ffc0000 [ 442.509273][T16058] ipvlan1: entered allmulticast mode [ 442.514661][T16058] veth0_vlan: entered allmulticast mode [ 442.560771][ T30] audit: type=1326 audit(1771357619.271:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16061 comm="syz.0.4836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f78ff99c629 code=0x7ffc0000 [ 442.591547][T16058] bridge0: port 3(ipvlan1) entered blocking state [ 442.619777][T16058] bridge0: port 3(ipvlan1) entered disabled state [ 442.653702][T16058] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 442.669155][ T30] audit: type=1326 audit(1771357619.271:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16061 comm="syz.0.4836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ff99c629 code=0x7ffc0000 [ 442.732664][T16068] : entered promiscuous mode [ 442.760913][ T30] audit: type=1326 audit(1771357619.271:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16061 comm="syz.0.4836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ff99c629 code=0x7ffc0000 [ 443.201009][ T30] audit: type=1326 audit(1771357620.011:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16089 comm="syz.0.4849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ff99c629 code=0x7ffc0000 [ 443.302148][ T30] audit: type=1326 audit(1771357620.041:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16089 comm="syz.0.4849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ff99c629 code=0x7ffc0000 [ 443.385355][ T30] audit: type=1326 audit(1771357620.051:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16089 comm="syz.0.4849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f78ff99c629 code=0x7ffc0000 [ 443.473765][ T30] audit: type=1326 audit(1771357620.051:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16089 comm="syz.0.4849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ff99c629 code=0x7ffc0000 [ 443.529258][T16100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4854'. [ 443.574619][ T30] audit: type=1326 audit(1771357620.051:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16089 comm="syz.0.4849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ff99c629 code=0x7ffc0000 [ 443.657495][T16106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4857'. [ 443.749193][T16110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4859'. [ 443.971398][T16120] netlink: 'syz.1.4864': attribute type 1 has an invalid length. [ 444.917561][T16161] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 445.725141][T16193] netlink: 'syz.2.4900': attribute type 11 has an invalid length. [ 445.923930][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 445.941033][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 445.959362][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 445.974361][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 445.982983][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 446.039042][T16203] libceph: resolve '96.' (ret=-3): failed [ 446.878352][T16240] netlink: 320 bytes leftover after parsing attributes in process `syz.1.4919'. [ 446.891469][T16240] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 446.928789][T16210] chnl_net:caif_netlink_parms(): no params data found [ 446.973302][T16243] netlink: 'syz.4.4920': attribute type 1 has an invalid length. [ 447.089093][ T5904] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 447.200585][T16253] netlink: 'syz.4.4924': attribute type 5 has an invalid length. [ 447.264314][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 447.271440][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 447.288933][ T5904] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 447.309317][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x3C, changing to 0xC [ 447.332577][ T5904] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 35 [ 447.360802][T16258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4928'. [ 447.365548][T16210] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.388248][ T5904] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 447.409184][T16258] netlink: set zone limit has 8 unknown bytes [ 447.415913][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.420114][T16210] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.449410][ T5904] usb 3-1: Product: syz [ 447.458024][T16210] bridge_slave_0: entered allmulticast mode [ 447.469580][ T5904] usb 3-1: Manufacturer: syz [ 447.492181][ T5904] usb 3-1: SerialNumber: syz [ 447.496870][T16210] bridge_slave_0: entered promiscuous mode [ 447.512428][T16210] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.534599][ T5904] usb 3-1: config 0 descriptor?? [ 447.540031][T16210] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.549569][T16210] bridge_slave_1: entered allmulticast mode [ 447.560792][T16237] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 447.571077][T16210] bridge_slave_1: entered promiscuous mode [ 447.581961][T16237] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 447.627766][ T5904] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 447.771213][T16210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.833220][T16210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.891047][ T5904] usb 3-1: USB disconnect, device number 111 [ 448.013435][T16210] team0: Port device team_slave_0 added [ 448.035641][T16271] xt_hashlimit: max too large, truncated to 1048576 [ 448.061637][T16210] team0: Port device team_slave_1 added [ 448.099150][ T5828] Bluetooth: hci5: command tx timeout [ 448.177896][T16210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.209255][T16210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.298935][T16210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.331853][T16210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.358929][T16210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.444839][T16285] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4938'. [ 448.449330][T16210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.566605][T16287] SET target dimension over the limit! [ 448.701429][T16210] hsr_slave_0: entered promiscuous mode [ 448.734370][T16210] hsr_slave_1: entered promiscuous mode [ 448.770152][T16210] debugfs: 'hsr0' already exists in 'hsr' [ 448.775977][T16210] Cannot create hsr debugfs directory [ 448.939877][T16298] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 448.950898][T16302] ip6t_srh: unknown srh match flags 5F28 [ 449.490683][ T5904] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 449.685490][ T5904] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.722878][ T5904] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 449.749673][ T5904] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 449.781210][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 449.809904][ T5904] usb 3-1: SerialNumber: syz [ 450.062531][ T5904] usb 3-1: 0:2 : does not exist [ 450.067554][ T5904] usb 3-1: unit 5 not found! [ 450.180235][ T5828] Bluetooth: hci5: command tx timeout [ 450.260606][ T5904] usb 3-1: USB disconnect, device number 112 [ 450.411737][T16209] udevd[16209]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 450.508279][T16210] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 450.599754][T16210] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 450.673671][T16210] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 450.771548][T16210] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 450.949424][T16353] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4969'. [ 451.008403][T16353] team0: Port device team_slave_0 removed [ 451.047119][T16353] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 451.308579][T16210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.405914][T16210] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.453711][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.460967][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.489584][T16368] netlink: 'syz.2.4976': attribute type 7 has an invalid length. [ 451.541440][ T970] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.548726][ T970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.801789][T16210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.012065][T16210] veth0_vlan: entered promiscuous mode [ 452.061619][T16210] veth1_vlan: entered promiscuous mode [ 452.212655][T16210] veth0_macvtap: entered promiscuous mode [ 452.261294][ T5828] Bluetooth: hci5: command tx timeout [ 452.291806][T16210] veth1_macvtap: entered promiscuous mode [ 452.353027][T16210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.384509][T16210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.463118][ T1162] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.533349][ T1162] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.573340][ T1162] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.628287][ T1162] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.942780][ T5904] IPVS: starting estimator thread 0... [ 453.016048][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.041319][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.089050][T16411] IPVS: using max 26 ests per chain, 62400 per kthread [ 453.164755][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.209398][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.374634][ T30] audit: type=1326 audit(1771357630.181:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16421 comm="syz.4.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76fb9c629 code=0x7ffc0000 [ 453.474847][ T30] audit: type=1326 audit(1771357630.181:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16421 comm="syz.4.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76fb9c629 code=0x7ffc0000 [ 453.571317][ T30] audit: type=1326 audit(1771357630.211:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16421 comm="syz.4.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fa76fb9c629 code=0x7ffc0000 [ 453.599542][ T30] audit: type=1326 audit(1771357630.221:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16421 comm="syz.4.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76fb9c629 code=0x7ffc0000 [ 453.624559][ T30] audit: type=1326 audit(1771357630.221:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16421 comm="syz.4.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76fb9c629 code=0x7ffc0000 [ 453.809007][ T5914] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 453.979033][ T5914] usb 6-1: Using ep0 maxpacket: 16 [ 454.006436][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 454.057555][ T5914] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 454.077207][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.118446][ T5914] usb 6-1: Product: syz [ 454.129027][ T5914] usb 6-1: Manufacturer: syz [ 454.133710][ T5914] usb 6-1: SerialNumber: syz [ 454.181218][ T5914] usb 6-1: config 0 descriptor?? [ 454.200344][ T5914] hub 6-1:0.0: bad descriptor, ignoring hub [ 454.219010][ T5914] hub 6-1:0.0: probe with driver hub failed with error -5 [ 454.270523][ T5914] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input57 [ 454.339181][ T5828] Bluetooth: hci5: command tx timeout [ 455.238506][T16479] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5027'. [ 455.400255][T16479] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5027'. [ 455.789346][T16499] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 455.948412][T16507] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 456.109124][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 457.049862][T16548] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5062'. [ 457.069598][ T5965] usb 3-1: new low-speed USB device number 113 using dummy_hcd [ 457.296629][ T5965] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 457.315423][T16555] netlink: 'syz.5.5066': attribute type 4 has an invalid length. [ 457.349279][ T5965] usb 3-1: config 0 has no interface number 0 [ 457.377325][ T5965] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 457.417015][ T5965] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 457.458904][ T5965] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 457.502032][ T5965] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 457.564442][ T5965] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 457.615073][ T5965] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 457.656322][ T5965] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 457.690460][ T5965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.730192][ T5965] usb 3-1: config 0 descriptor?? [ 457.740134][T16541] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 457.799573][ T5965] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 457.866753][ T5904] usb 6-1: USB disconnect, device number 2 [ 457.951134][T16569] ip6tnl1: entered allmulticast mode [ 458.039692][T16541] ldusb 3-1:0.55: Couldn't submit interrupt_in_urb -90 [ 458.065814][ T10] usb 3-1: USB disconnect, device number 113 [ 458.093636][ T10] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 458.820133][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 458.828388][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 458.850740][ T5914] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 459.209269][ T5914] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 459.249191][ T5825] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 459.361433][T16621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.529663][ T5825] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 459.689188][ T5825] usb 2-1: Using ep0 maxpacket: 8 [ 459.697798][ T5825] usb 2-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 459.728467][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.760463][ T5825] usb 2-1: config 0 descriptor?? [ 459.792249][ T5825] uvcvideo 2-1:0.0: Found UVC 0.00 device (2801:0201) [ 459.819025][ T5825] uvcvideo 2-1:0.0: No valid video chain found. [ 459.974489][ T10] usb 2-1: USB disconnect, device number 112 [ 460.382600][T16649] xt_policy: too many policy elements [ 460.978946][ T5825] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 461.075224][T16679] netlink: 'syz.4.5124': attribute type 1 has an invalid length. [ 461.149249][ T5825] usb 3-1: Using ep0 maxpacket: 8 [ 461.177174][ T5825] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 461.207399][ T5825] usb 3-1: config 179 has no interface number 0 [ 461.245364][ T5825] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 461.249422][T16684] netlink: 'syz.5.5125': attribute type 17 has an invalid length. [ 461.299016][ T5825] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 461.309383][T16684] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5125'. [ 461.369679][ T5825] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 461.412292][ T5825] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 461.459017][ T5825] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 461.519161][ T5825] usb 3-1: config 179 interface 65 has no altsetting 0 [ 461.548994][ T5825] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 461.588674][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.627471][ T30] audit: type=1326 audit(1771357638.431:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16692 comm="syz.5.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84b79c629 code=0x7ffc0000 [ 461.671814][T16695] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 461.762430][ T30] audit: type=1326 audit(1771357638.471:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16692 comm="syz.5.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fa84b79c629 code=0x7ffc0000 [ 461.787271][ T5825] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input59 [ 461.882343][ T30] audit: type=1326 audit(1771357638.471:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16692 comm="syz.5.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84b79c629 code=0x7ffc0000 [ 461.950895][ T5825] usb 3-1: USB disconnect, device number 114 [ 462.052582][T16209] udevd[16209]: setting mode of /dev/input/js0 to 020664 failed: No such file or directory [ 462.066703][ T30] audit: type=1326 audit(1771357638.471:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16692 comm="syz.5.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84b79c629 code=0x7ffc0000 [ 462.139608][T16209] udevd[16209]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 462.780952][T16712] veth3: entered promiscuous mode [ 463.139110][ T24] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 463.219076][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 463.300996][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 463.319185][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 463.351817][ T24] usb 3-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 463.369248][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.377686][ T24] usb 3-1: Product: syz [ 463.420072][ T24] usb 3-1: Manufacturer: syz [ 463.424754][ T24] usb 3-1: SerialNumber: syz [ 463.475945][ T24] usb 3-1: config 0 descriptor?? [ 463.492394][ T24] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 463.542836][ T24] usb 3-1: Detected SIO [ 463.547132][ T24] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 463.594806][ T24] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7 [ 463.599523][ T24] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 463.743583][ T5914] usb 3-1: USB disconnect, device number 115 [ 463.748612][ T5914] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 463.749591][ T5914] ftdi_sio 3-1:0.0: device disconnected [ 463.954043][T16749] bond0: (slave bond_slave_1): Releasing backup interface [ 464.940954][T16791] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5177'. [ 465.139205][ T24] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 465.308304][ T24] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 465.328011][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.349898][ T24] usb 3-1: config 0 descriptor?? [ 465.383394][ T24] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 465.739978][T16818] ip6gre1: entered allmulticast mode [ 465.776324][ T30] audit: type=1326 audit(1771357642.581:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16819 comm="syz.5.5191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84b79c629 code=0x7ffc0000 [ 465.805842][ T24] gp8psk: usb out operation failed. [ 465.819118][ T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 465.869286][ T24] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 465.870685][T16822] netlink: 'syz.4.5192': attribute type 1 has an invalid length. [ 465.911552][ T30] audit: type=1326 audit(1771357642.581:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16819 comm="syz.5.5191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84b79c629 code=0x7ffc0000 [ 465.946082][ T24] usb 3-1: USB disconnect, device number 116 [ 466.032557][ T30] audit: type=1326 audit(1771357642.581:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16819 comm="syz.5.5191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fa84b79c629 code=0x7ffc0000 [ 466.113197][ T30] audit: type=1326 audit(1771357642.581:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16819 comm="syz.5.5191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84b79c629 code=0x7ffc0000 [ 466.202484][ T30] audit: type=1326 audit(1771357642.581:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16819 comm="syz.5.5191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84b79c629 code=0x7ffc0000 [ 466.585119][T16850] MPI: mpi too large (107144 bits) [ 466.960914][ T10] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 467.056456][T16867] openvswitch: netlink: Missing valid actions attribute. [ 467.102083][T16867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.160095][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 467.202505][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 467.222962][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.252522][ T10] usb 3-1: Product: syz [ 467.256767][ T10] usb 3-1: Manufacturer: syz [ 467.276351][ T10] usb 3-1: SerialNumber: syz [ 467.305110][ T10] usb 3-1: config 0 descriptor?? [ 467.335934][ T10] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 467.415311][T16879] usb usb8: usbfs: process 16879 (syz.0.5220) did not claim interface 0 before use [ 467.742389][ T10] gspca_vc032x: reg_w err -71 [ 467.778813][ T10] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 467.816703][ T10] usb 3-1: USB disconnect, device number 117 [ 467.864322][T16893] bridge4: entered promiscuous mode [ 468.368768][ T30] audit: type=1326 audit(1771357645.161:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16910 comm="syz.1.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc7b9c629 code=0x7ffc0000 [ 468.523058][ T30] audit: type=1326 audit(1771357645.211:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16910 comm="syz.1.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc7b9c629 code=0x7ffc0000 [ 468.649479][ T30] audit: type=1326 audit(1771357645.211:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16910 comm="syz.1.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9fc7b9c629 code=0x7ffc0000 [ 468.709583][T16924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5243'. [ 468.759039][ T30] audit: type=1326 audit(1771357645.211:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16910 comm="syz.1.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc7b9c629 code=0x7ffc0000 [ 468.841763][ T30] audit: type=1326 audit(1771357645.211:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16910 comm="syz.1.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc7b9c629 code=0x7ffc0000 [ 468.929175][ T30] audit: type=1326 audit(1771357645.361:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16915 comm="syz.2.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f2f9c629 code=0x7ffc0000 [ 469.041427][ T30] audit: type=1326 audit(1771357645.371:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16915 comm="syz.2.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f2f9c629 code=0x7ffc0000 [ 469.135002][T16936] netlink: 'syz.2.5249': attribute type 6 has an invalid length. [ 469.137895][ T30] audit: type=1326 audit(1771357645.381:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16915 comm="syz.2.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f08f2f9c629 code=0x7ffc0000 [ 469.182271][T16936] netlink: 'syz.2.5249': attribute type 7 has an invalid length. [ 469.209777][T16936] netlink: 'syz.2.5249': attribute type 8 has an invalid length. [ 469.253353][ T30] audit: type=1326 audit(1771357645.381:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16915 comm="syz.2.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f2f9c629 code=0x7ffc0000 [ 469.369021][ T30] audit: type=1326 audit(1771357645.381:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16915 comm="syz.2.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f2f9c629 code=0x7ffc0000 [ 469.875747][T16968] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 470.139510][T16978] xt_socket: unknown flags 0x50 [ 471.413558][T17025] netlink: 'syz.5.5292': attribute type 10 has an invalid length. [ 471.459148][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 472.349271][T17063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.455617][T17069] netlink: 'syz.5.5314': attribute type 62 has an invalid length. [ 473.140674][T17095] geneve3: entered promiscuous mode [ 473.388273][T17104] netlink: 'syz.1.5331': attribute type 3 has an invalid length. [ 473.431868][T17104] netlink: 'syz.1.5331': attribute type 3 has an invalid length. [ 474.108976][ T5825] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 474.279178][ T5825] usb 3-1: Using ep0 maxpacket: 16 [ 474.312152][ T5825] usb 3-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 474.329125][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.358447][ T5825] usb 3-1: Product: syz [ 474.368591][ T5825] usb 3-1: Manufacturer: syz [ 474.384006][ T5825] usb 3-1: SerialNumber: syz [ 474.411021][ T5825] usb 3-1: config 0 descriptor?? [ 474.442704][ T5825] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 474.847055][ T5825] gspca_sn9c20x: Write register 1001 failed -71 [ 474.880201][ T5825] gspca_sn9c20x: Device initialization failed [ 474.886429][ T5825] gspca_sn9c20x 3-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 474.905767][T17166] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5361'. [ 474.925359][T17166] 6eth1_to_bond: renamed from gre0 (while UP) [ 474.962995][ T5825] usb 3-1: USB disconnect, device number 118 [ 475.024414][T17166] A link change request failed with some changes committed already. Interface 6eth1_to_bond may have been left with an inconsistent configuration, please check. [ 475.781502][T17196] netlink: 'syz.0.5375': attribute type 64 has an invalid length. [ 475.839215][T17196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5375'. [ 475.890744][T17196] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 476.169257][T17216] netlink: 'syz.0.5386': attribute type 1 has an invalid length. [ 476.214077][T17216] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5386'. [ 476.825777][T17242] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5399'. [ 477.542644][T17275] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5415'. [ 477.596499][T17275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5415'. [ 478.069063][ T24] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 478.208959][ T5965] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 478.231231][ T24] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 478.240366][ T24] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 478.271413][ T24] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 478.308103][ T24] usb 2-1: config 220 has no interface number 2 [ 478.335341][ T24] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 478.378186][ T24] usb 2-1: config 220 interface 0 has no altsetting 0 [ 478.399077][ T24] usb 2-1: config 220 interface 76 has no altsetting 0 [ 478.404088][ T5965] usb 6-1: not running at top speed; connect to a high speed hub [ 478.406005][ T24] usb 2-1: config 220 interface 1 has no altsetting 0 [ 478.459810][ T5965] usb 6-1: config 95 has an invalid interface number: 1 but max is 0 [ 478.479479][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 478.488781][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.497966][ T5965] usb 6-1: config 95 has no interface number 0 [ 478.505207][ T5965] usb 6-1: config 95 interface 1 has no altsetting 0 [ 478.523417][ T5965] usb 6-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 478.545162][ T24] usb 2-1: Product: syz [ 478.547679][ T5965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.558015][ T5965] usb 6-1: Product: syz [ 478.563102][ T5965] usb 6-1: Manufacturer: syz [ 478.567774][ T5965] usb 6-1: SerialNumber: syz [ 478.572773][ T24] usb 2-1: Manufacturer: syz [ 478.584391][ T24] usb 2-1: SerialNumber: syz [ 478.816607][T17314] openvswitch: netlink: IP tunnel dst address not specified [ 478.850072][ T24] usb 2-1: selecting invalid altsetting 0 [ 478.868666][ T24] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 478.896825][ T24] uvcvideo 2-1:220.0: No valid video chain found. [ 478.970723][ T24] usb 2-1: selecting invalid altsetting 0 [ 478.976756][ T24] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 479.029433][ T24] usb 2-1: USB disconnect, device number 113 [ 479.225495][ T5965] usb 6-1: USB disconnect, device number 3 [ 479.317974][T16209] udevd[16209]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 479.699183][T17340] netlink: 'syz.0.5448': attribute type 7 has an invalid length. [ 479.724700][T17340] netlink: 'syz.0.5448': attribute type 8 has an invalid length. [ 480.249966][T17358] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5456'. [ 480.289050][T17358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5456'. [ 480.486451][T17361] Cannot find map_set index 135 as target [ 480.667078][T17369] tipc: Trying to set illegal importance in message [ 480.743184][T17371] kAFS: unable to lookup cell '@' [ 481.135465][T17388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.518602][T17402] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 481.789296][ T10] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 481.875063][T17416] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5485'. [ 481.900853][T17416] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5485'. [ 481.980961][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.998988][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 482.027863][ T10] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 482.047495][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.080743][ T10] usb 3-1: config 0 descriptor?? [ 482.505699][ T10] Bluetooth: Can't get version to change to load ram patch err [ 482.534223][ T10] Bluetooth: Loading patch file failed [ 482.550735][ T10] ath3k 3-1:0.0: probe with driver ath3k failed with error -71 [ 482.590947][ T10] usb 3-1: USB disconnect, device number 119 [ 482.788491][T17439] netlink: 'syz.5.5497': attribute type 8 has an invalid length. [ 482.885327][T17442] bond3: down delay (8) is not a multiple of miimon (5), value rounded to 5 ms [ 482.912962][T17442] bond3 (unregistering): Released all slaves [ 482.947111][T17446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.309130][ T5904] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 483.382364][T17461] vivid-000: disconnect [ 483.420061][T17460] vivid-000: reconnect [ 483.480655][ T5904] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 483.503019][ T5904] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 483.535184][ T5904] usb 6-1: config 220 has no interface number 2 [ 483.565729][ T5904] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 483.599219][ T5904] usb 6-1: config 220 interface 0 has no altsetting 0 [ 483.616365][ T5904] usb 6-1: config 220 interface 76 has no altsetting 0 [ 483.635358][T17469] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 483.652182][ T5904] usb 6-1: config 220 interface 1 has no altsetting 0 [ 483.666041][ T5904] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 483.675965][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.696144][ T5904] usb 6-1: Product: syz [ 483.719074][ T5904] usb 6-1: Manufacturer: syz [ 483.723751][ T5904] usb 6-1: SerialNumber: syz [ 483.987185][ T5904] usb 6-1: selecting invalid altsetting 0 [ 484.022318][ T5904] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 484.047076][ T5904] uvcvideo 6-1:220.0: No valid video chain found. [ 484.091174][ T5904] usb 6-1: selecting invalid altsetting 0 [ 484.112009][ T5904] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 484.160556][ T5904] usb 6-1: USB disconnect, device number 4 [ 484.282630][T17483] bridge0: port 3(dummy0) entered disabled state [ 484.289285][T17483] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.296655][T17483] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.452652][T17483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.477095][T17483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.719072][ T58] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.728057][ T58] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.779178][ T58] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.809960][ T58] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.178923][ T10] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 485.212146][T17507] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5530'. [ 485.278450][T17509] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 485.365236][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 485.376829][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 485.418888][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 485.467257][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 485.500971][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 485.513919][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 485.535123][ T10] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 485.556230][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.577152][ T10] usb 3-1: Product: syz [ 485.586831][ T10] usb 3-1: Manufacturer: syz [ 485.599318][ T10] usb 3-1: SerialNumber: syz [ 485.623735][ T10] usb 3-1: config 0 descriptor?? [ 485.657745][T17520] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5536'. [ 486.053486][ T10] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 486.070814][ T10] input input60: Device does not respond to id packet M [ 486.098556][ T10] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 486.148964][ T10] input input60: Device does not respond to id packet P [ 486.176144][ T10] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 486.200599][ T10] input input60: Device does not respond to id packet B [ 486.229000][ T10] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 486.245521][ T10] input input60: Device does not respond to id packet N [ 486.285077][ T10] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 486.302205][ T10] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 486.323981][ T10] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 486.339716][ T10] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 486.373401][ T10] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input60 [ 486.429835][ T10] usb 3-1: USB disconnect, device number 120 [ 487.017389][T17561] netlink: 'syz.4.5556': attribute type 6 has an invalid length. [ 487.571963][T17587] IPv6: Can't replace route, no match found [ 488.092432][T17603] netlink: 'syz.1.5577': attribute type 309 has an invalid length. [ 488.246010][T17610] syz.2.5580 uses obsolete (PF_INET,SOCK_PACKET) [ 488.739255][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 489.896818][T17688] sctp: [Deprecated]: syz.0.5618 (pid 17688) Use of int in maxseg socket option. [ 489.896818][T17688] Use struct sctp_assoc_value instead [ 489.929100][T17687] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 490.280923][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 490.280945][ T30] audit: type=1326 audit(1771357667.091:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17700 comm="syz.1.5627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc7b9c629 code=0x7ffc0000 [ 490.378974][ T30] audit: type=1326 audit(1771357667.141:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17700 comm="syz.1.5627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f9fc7b9c629 code=0x7ffc0000 [ 490.401789][ T30] audit: type=1326 audit(1771357667.141:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17700 comm="syz.1.5627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc7b9c629 code=0x7ffc0000 [ 490.427328][ T30] audit: type=1326 audit(1771357667.141:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17700 comm="syz.1.5627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc7b9c629 code=0x7ffc0000 [ 490.709056][ T5914] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 490.742836][T17717] xt_recent: Unsupported userspace flags (000000b1) [ 490.890496][ T5914] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 490.909185][ T5914] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 490.952131][ T5914] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 490.962309][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.991606][ T5914] usb 1-1: Product: syz [ 491.016246][ T5914] usb 1-1: Manufacturer: syz [ 491.026485][ T5914] usb 1-1: SerialNumber: syz [ 491.051458][ T5914] usb 1-1: config 0 descriptor?? [ 491.057429][T17706] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 491.069187][T17706] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 491.304253][T17706] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 491.325642][T17706] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 491.599356][ T5914] Error reading MAC address [ 491.618742][T17745] No such timeout policy "syz1" [ 491.639411][ T5914] usb 1-1: USB disconnect, device number 118 [ 491.901253][T17747] "syz.2.5647" (17747) uses obsolete ecb(arc4) skcipher [ 491.999614][ T5965] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 492.097297][T17757] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 492.191387][ T5965] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 492.221173][ T5965] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.259007][ T5965] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.288967][ T5965] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 492.318976][ T5965] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 492.347948][ T5965] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 492.385346][ T5965] usb 6-1: config 1 interface 1 has no altsetting 0 [ 492.401041][ T5965] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 492.410645][ T5965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.418693][ T5965] usb 6-1: Product: syz [ 492.423742][ T5965] usb 6-1: Manufacturer: syz [ 492.428424][ T5965] usb 6-1: SerialNumber: syz [ 492.443378][ T5965] cdc_ncm 6-1:1.0: skipping garbage [ 492.458896][ T5965] cdc_ncm 6-1:1.0: NCM or ECM functional descriptors missing [ 492.473064][ T5965] cdc_ncm 6-1:1.0: bind() failure [ 492.755469][T17778] vivid-007: ================= START STATUS ================= [ 492.799475][T17778] vivid-007: Enable Output Cropping: true [ 492.805705][T17778] vivid-007: Enable Output Composing: true [ 492.842756][T17778] vivid-007: Enable Output Scaler: true [ 492.853030][T17778] vivid-007: Tx RGB Quantization Range: Automatic [ 492.863334][ T10] usb 6-1: USB disconnect, device number 5 [ 492.889225][T17778] vivid-007: Transmit Mode: HDMI [ 492.912021][T17778] vivid-007: Hotplug Present: 0x00000000 [ 492.933451][T17778] vivid-007: RxSense Present: 0x00000000 [ 492.949040][T17778] vivid-007: EDID Present: 0x00000000 [ 492.959018][T17778] vivid-007: ================== END STATUS ================== [ 493.591513][T17807] openvswitch: netlink: Key type 341 is out of range max 32 [ 494.129242][ T5965] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 494.323986][ T5965] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 494.355597][ T5965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.383582][T17836] can: request_module (can-proto-0) failed. [ 494.414673][ T5965] usb 1-1: Product: syz [ 494.423888][ T5965] usb 1-1: Manufacturer: syz [ 494.428567][ T5965] usb 1-1: SerialNumber: syz [ 494.464447][ T5965] usb 1-1: config 0 descriptor?? [ 494.498337][ T5965] gspca_main: sq930x-2.14.0 probing 2770:930c [ 494.671416][T17846] xt_NFQUEUE: number of total queues is 0 [ 494.905804][ T5965] gspca_sq930x: ucbus_write failed -71 [ 494.933936][ T5965] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 494.969708][ T5965] usb 1-1: USB disconnect, device number 119 [ 495.476906][T17872] netlink: 'syz.2.5705': attribute type 6 has an invalid length. [ 496.117270][T17897] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 496.561368][ T5965] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 496.752586][ T5965] usb 2-1: Using ep0 maxpacket: 8 [ 496.761522][ T5965] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 496.793650][ T5965] usb 2-1: config 0 interface 0 has no altsetting 0 [ 496.824848][ T5965] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 496.844095][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.862609][ T5965] usb 2-1: Product: syz [ 496.873111][ T5965] usb 2-1: Manufacturer: syz [ 496.885591][T17927] program syz.0.5732 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 496.895253][ T5965] usb 2-1: SerialNumber: syz [ 496.930073][ T5965] usb 2-1: config 0 descriptor?? [ 496.967269][ T5965] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 496.974900][ T5904] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 497.014874][T17930] netlink: 7 bytes leftover after parsing attributes in process `syz.5.5733'. [ 497.109125][T17933] netlink: 'syz.0.5735': attribute type 3 has an invalid length. [ 497.167039][T17933] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5735'. [ 497.197064][ T5965] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 497.208963][ T5904] usb 3-1: unable to get BOS descriptor or descriptor too short [ 497.228383][ T5965] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 497.251095][ T5904] usb 3-1: config 182 has an invalid interface number: 132 but max is 0 [ 497.266616][ T5904] usb 3-1: config 182 has no interface number 0 [ 497.283783][ T5904] usb 3-1: config 182 interface 132 has no altsetting 0 [ 497.325840][ T5904] usb 3-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=a9.a2 [ 497.345891][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.386425][ T5904] usb 3-1: Product: syz [ 497.393772][ T5965] usb 2-1: USB disconnect, device number 114 [ 497.405156][ T5904] usb 3-1: Manufacturer: syz [ 497.430029][ T5904] usb 3-1: SerialNumber: syz [ 497.432171][T17940] netlink: 'syz.0.5738': attribute type 16 has an invalid length. [ 497.471721][T17940] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5738'. [ 497.546833][T17941] bond1: option tlb_dynamic_lb: invalid value (138) [ 497.585511][T17941] bond1 (unregistering): Released all slaves [ 497.933596][ T30] audit: type=1326 audit(1771357674.741:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17951 comm="syz.4.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76fb9c629 code=0x7ffc0000 [ 498.042415][ T30] audit: type=1326 audit(1771357674.771:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17951 comm="syz.4.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76fb9c629 code=0x7ffc0000 [ 498.068338][T17956] usb usb9: usbfs: process 17956 (syz.0.5745) did not claim interface 2 before use [ 498.105084][ T30] audit: type=1326 audit(1771357674.791:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17951 comm="syz.4.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fa76fb9c629 code=0x7ffc0000 [ 498.159229][ T30] audit: type=1326 audit(1771357674.791:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17951 comm="syz.4.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76fb9c629 code=0x7ffc0000 [ 498.240878][ T5904] usb 3-1: USB disconnect, device number 121 [ 498.514573][T17975] netlink: 'syz.0.5751': attribute type 9 has an invalid length. [ 498.540712][T17975] netlink: 'syz.0.5751': attribute type 7 has an invalid length. [ 498.569113][T17975] netlink: 'syz.0.5751': attribute type 8 has an invalid length. [ 498.761979][T17984] lo: left promiscuous mode [ 498.977402][T17984] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 498.983931][T17991] SET target dimension over the limit! [ 499.739013][ T5965] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 499.889472][ T5904] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 499.918991][ T5965] usb 3-1: Using ep0 maxpacket: 32 [ 499.926236][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 499.953479][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 499.970503][ T5965] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 499.983163][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 499.994821][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 500.007697][ T5965] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 500.039180][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.053067][ T5965] usb 3-1: Product: syz [ 500.057305][ T5965] usb 3-1: Manufacturer: syz [ 500.062601][ T5904] usb 6-1: Using ep0 maxpacket: 8 [ 500.074723][ T5904] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 500.083391][ T5904] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.094535][ T5965] usb 3-1: SerialNumber: syz [ 500.109283][ T5904] usb 6-1: config 0 has no interface number 0 [ 500.120238][ T5965] usb 3-1: config 0 descriptor?? [ 500.155841][ T5904] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 500.195229][ T5965] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input62 [ 500.205597][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.226990][T18029] bond3: option downdelay: invalid value (18446744073709551615) [ 500.235449][ T5904] usb 6-1: Product: syz [ 500.250107][ T5904] usb 6-1: Manufacturer: syz [ 500.258544][T18029] bond3: option downdelay: allowed values 0 - 2147483647 [ 500.297218][ T5904] usb 6-1: SerialNumber: syz [ 500.324016][ T5904] usb 6-1: config 0 descriptor?? [ 500.360876][T18029] bond3 (unregistering): Released all slaves [ 500.466909][ T5965] usb 3-1: USB disconnect, device number 122 [ 500.571571][T18037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5783'. [ 500.621306][ T5904] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 500.661098][ T5904] uvcvideo 6-1:0.31: No valid video chain found. [ 500.841231][ T5965] usb 6-1: USB disconnect, device number 6 [ 501.074418][T18046] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 501.290078][T18059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5792'. [ 501.339171][T18059] netlink: 'syz.0.5792': attribute type 17 has an invalid length. [ 501.569288][T18071] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 502.039161][T18093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5809'. [ 502.188283][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.195173][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.374355][T18106] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 502.452771][T18112] netlink: zone id is out of range [ 502.457996][T18112] netlink: zone id is out of range [ 502.542521][T18112] netlink: zone id is out of range [ 502.547713][T18112] netlink: zone id is out of range [ 502.601022][T18112] netlink: zone id is out of range [ 502.606223][T18112] netlink: zone id is out of range [ 502.624184][T18119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.642304][T18119] batadv_slave_0: entered promiscuous mode [ 502.658656][T18119] batadv_slave_0: entered allmulticast mode [ 502.693014][T18119] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 502.828999][ T5883] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 502.989065][ T5883] usb 1-1: Using ep0 maxpacket: 32 [ 502.997264][ T5883] usb 1-1: config 7 has an invalid interface number: 108 but max is 2 [ 503.019147][ T5883] usb 1-1: config 7 has an invalid interface number: 3 but max is 2 [ 503.057798][ T5883] usb 1-1: config 7 has an invalid interface number: 12 but max is 2 [ 503.109979][ T5883] usb 1-1: config 7 has no interface number 0 [ 503.116174][ T5883] usb 1-1: config 7 has no interface number 1 [ 503.157905][ T5883] usb 1-1: config 7 has no interface number 2 [ 503.171783][ T30] audit: type=1326 audit(1771357679.981:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18129 comm="syz.4.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76fb9c629 code=0x7ffc0000 [ 503.178522][ T5883] usb 1-1: config 7 interface 108 has no altsetting 0 [ 503.269371][ T5883] usb 1-1: config 7 interface 3 has no altsetting 0 [ 503.276055][ T5883] usb 1-1: config 7 interface 12 has no altsetting 0 [ 503.277409][ T30] audit: type=1326 audit(1771357679.981:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18129 comm="syz.4.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76fb9c629 code=0x7ffc0000 [ 503.341991][ T5883] usb 1-1: New USB device found, idVendor=1410, idProduct=a002, bcdDevice=fa.39 [ 503.368974][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.377964][ T5883] usb 1-1: Product: syz [ 503.398908][ T30] audit: type=1326 audit(1771357680.011:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18129 comm="syz.4.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa76fb9c629 code=0x7ffc0000 [ 503.409366][ T5883] usb 1-1: Manufacturer: syz [ 503.460157][ T5883] usb 1-1: SerialNumber: syz [ 503.489444][ T5904] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 503.517841][ T30] audit: type=1326 audit(1771357680.011:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18129 comm="syz.4.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76fb9c629 code=0x7ffc0000 [ 503.598551][ T30] audit: type=1326 audit(1771357680.011:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18129 comm="syz.4.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76fb9c629 code=0x7ffc0000 [ 503.672233][T18149] IPv6: NLM_F_CREATE should be specified when creating new route [ 503.714673][ T5904] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 503.724797][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.729773][ T5883] qmi_wwan 1-1:7.3: probe with driver qmi_wwan failed with error -22 [ 503.776496][ T5904] usb 6-1: config 0 descriptor?? [ 503.813218][ T5883] usb 1-1: USB disconnect, device number 120 [ 504.017956][ T5904] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 504.107055][T18159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5841'. [ 504.222311][ T5904] [drm:udl_init] *ERROR* Selecting channel failed [ 504.289959][ T5904] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 504.314917][ T5904] [drm] Initialized udl on minor 2 [ 504.341434][ T5904] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 504.382634][ T5904] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 504.404668][ T5965] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 504.432436][ T5904] usb 6-1: USB disconnect, device number 7 [ 504.454071][ T5965] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 505.018245][T18189] binfmt_misc: register: failed to install interpreter file ./file0 [ 505.063398][T18194] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5857'. [ 505.223516][T18196] netlink: 'syz.5.5858': attribute type 33 has an invalid length. [ 505.241027][T18196] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5858'. [ 505.273596][T18196] `: renamed from team0 (while UP) [ 505.623638][T18211] binder: 18210:18211 ioctl c00c6211 ffffffffffffffff returned -14 [ 505.663343][T18214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.709071][T18214] batadv_slave_0: entered promiscuous mode [ 505.715171][T18214] batadv_slave_0: entered allmulticast mode [ 505.735400][T18214] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 506.409078][T18247] netlink: 'syz.0.5881': attribute type 2 has an invalid length. [ 506.455264][T18247] @;: entered promiscuous mode [ 506.573667][T18253] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 506.597843][T18253] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 506.739771][ T5883] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 506.901458][ T5883] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 506.929002][ T5883] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.962169][ T5883] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 506.989086][ T5883] usb 3-1: config 1 has no interface number 1 [ 506.995272][ T5883] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 507.062449][ T5883] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 507.089077][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.097145][ T5883] usb 3-1: Product: syz [ 507.126590][ T5883] usb 3-1: Manufacturer: syz [ 507.149017][ T5883] usb 3-1: SerialNumber: syz [ 507.353113][T18276] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5897'. [ 507.394763][ T5883] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 507.439505][ T5883] usb 3-1: MIDIStreaming interface descriptor not found [ 507.588009][ T5883] usb 3-1: USB disconnect, device number 123 [ 507.722454][T16408] udevd[16408]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 507.770590][T18284] bond1: Unable to set up delay as MII monitoring is disabled [ 507.816876][T18284] bond1 (unregistering): Released all slaves [ 508.534665][ T970] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.705508][T18326] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5918'. [ 508.903605][T18336] raw_sendmsg: syz.0.5923 forgot to set AF_INET. Fix it! [ 508.919125][T18335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5924'. [ 509.140402][T18342] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5927'. [ 509.569220][T18362] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5937'. [ 509.607616][T18362] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5937'. [ 509.642101][T18365] netlink: 'syz.4.5938': attribute type 5 has an invalid length. [ 509.681824][T18365] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.5938'. [ 509.955385][T18378] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 510.013769][T18383] netlink: 'syz.5.5947': attribute type 4 has an invalid length. [ 510.213908][ T30] audit: type=1326 audit(1771357687.021:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18389 comm="syz.4.5950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76fb9c629 code=0x7ffc0000 [ 510.315466][ T30] audit: type=1326 audit(1771357687.021:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18389 comm="syz.4.5950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76fb9c629 code=0x7ffc0000 [ 510.409014][ T30] audit: type=1326 audit(1771357687.051:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18389 comm="syz.4.5950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76fb9c629 code=0x7ffc0000 [ 510.493190][ T30] audit: type=1326 audit(1771357687.051:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18389 comm="syz.4.5950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76fb9c629 code=0x7ffc0000 [ 510.568058][ T30] audit: type=1326 audit(1771357687.051:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18389 comm="syz.4.5950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fa76fb9c629 code=0x7ffc0000 [ 510.673422][ T30] audit: type=1326 audit(1771357687.051:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18389 comm="syz.4.5950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76fb9c629 code=0x7ffc0000 [ 510.750994][ T30] audit: type=1326 audit(1771357687.051:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18389 comm="syz.4.5950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76fb9c629 code=0x7ffc0000 [ 510.848981][ T30] audit: type=1326 audit(1771357687.051:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18389 comm="syz.4.5950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76fb9c629 code=0x7ffc0000 [ 510.945853][ T30] audit: type=1326 audit(1771357687.051:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18389 comm="syz.4.5950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa76fb9c629 code=0x7ffc0000 [ 511.036247][ T30] audit: type=1326 audit(1771357687.051:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18389 comm="syz.4.5950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa76fb9c629 code=0x7ffc0000 [ 511.072201][T18418] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 511.399228][ T5965] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 511.591508][ T5965] usb 2-1: Using ep0 maxpacket: 32 [ 511.623614][ T5965] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 511.656498][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.679148][ T5965] usb 2-1: Product: syz [ 511.685255][ T5965] usb 2-1: Manufacturer: syz [ 511.691954][ T5965] usb 2-1: SerialNumber: syz [ 511.723275][ T5965] usb 2-1: config 0 descriptor?? [ 511.950842][ T5965] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device: [ 511.983815][ T5965] eb 2a 3b 80 9b e4 7a f0 [ 512.001585][ T5965] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 512.186184][ T5965] usb 2-1: USB disconnect, device number 115 [ 513.063981][T18497] QAT: Device 7 not found [ 513.541202][ T5883] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 513.730144][ T5883] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 513.749092][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.757490][ T5883] usb 2-1: Product: syz [ 513.798914][ T5883] usb 2-1: Manufacturer: syz [ 513.803603][ T5883] usb 2-1: SerialNumber: syz [ 513.865369][ T5883] usb 2-1: config 0 descriptor?? [ 513.887913][ T5883] ch341 2-1:0.0: ch341-uart converter detected [ 514.309123][ T5883] usb 2-1: failed to send control message: -71 [ 514.315446][ T5883] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 514.391168][ T5883] usb 2-1: USB disconnect, device number 116 [ 514.412140][ T5883] ch341 2-1:0.0: device disconnected [ 514.485819][T18540] Cannot find add_set index 4 as target [ 515.119307][T18566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6035'. [ 515.377603][T18578] nftables ruleset with unbound chain [ 515.642734][T18590] xt_hashlimit: size too large, truncated to 1048576 [ 515.690973][T18590] xt_hashlimit: max too large, truncated to 1048576 [ 515.805016][T18598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6050'. [ 516.057466][T18610] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6056'. [ 516.701126][T18634] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6068'. [ 516.887260][T18644] netlink: 'syz.2.6073': attribute type 10 has an invalid length. [ 516.940875][T18644] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 517.343571][T18659] : renamed from batadv_slave_1 (while UP) [ 517.574003][T18668] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6086'. [ 517.741186][T18674] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6089'. [ 519.079102][T18730] lo: left promiscuous mode [ 519.086737][T18730] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 519.113811][T18730] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 519.144344][T18730] bridge4: left promiscuous mode [ 520.329392][ T5965] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 520.527705][T18790] sctp: [Deprecated]: syz.0.6145 (pid 18790) Use of struct sctp_assoc_value in delayed_ack socket option. [ 520.527705][T18790] Use struct sctp_sack_info instead [ 520.554150][ T5965] usb 3-1: Using ep0 maxpacket: 32 [ 520.574412][T18791] x_tables: duplicate underflow at hook 2 [ 520.580961][ T5965] usb 3-1: config 1 has an invalid interface number: 50 but max is 0 [ 520.593247][ T5965] usb 3-1: config 1 has no interface number 0 [ 520.609753][ T5965] usb 3-1: config 1 interface 50 has no altsetting 0 [ 520.639368][ T5965] usb 3-1: New USB device found, idVendor=04f1, idProduct=3012, bcdDevice=b5.94 [ 520.650301][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.658383][ T5965] usb 3-1: Product: syz [ 520.704163][ T5965] usb 3-1: Manufacturer: syz [ 520.722556][ T5965] usb 3-1: SerialNumber: syz [ 520.754714][ T5965] ipaq 3-1:1.50: PocketPC PDA converter detected [ 520.972891][ T5965] usb 3-1: PocketPC PDA converter now attached to ttyUSB0 [ 521.116472][T18811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6156'. [ 521.166783][ T5965] usb 3-1: USB disconnect, device number 124 [ 521.200846][ T5965] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 521.236928][ T5965] ipaq 3-1:1.50: device disconnected [ 521.429116][T18823] x_tables: unsorted entry at hook 3 [ 521.603579][T18830] netlink: 15 bytes leftover after parsing attributes in process `syz.4.6164'. [ 521.969559][T18846] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6172'. [ 522.079238][T18850] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6176'. [ 522.222834][T18856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6177'. [ 522.747695][T18884] netlink: 328 bytes leftover after parsing attributes in process `syz.2.6191'. [ 522.919228][T18891] netlink: 'syz.4.6194': attribute type 8 has an invalid length. [ 523.299049][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 523.401724][T18913] netlink: 'syz.4.6205': attribute type 1 has an invalid length. [ 523.451683][T18913] netlink: 'syz.4.6205': attribute type 1 has an invalid length. [ 523.588318][ T30] audit: type=1400 audit(1771357700.391:217): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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delete_channel: no stack [ 523.791587][T18924] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 523.807515][T18924] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 523.815708][T18924] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 524.618905][ T5965] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 524.809134][ T5965] usb 2-1: Using ep0 maxpacket: 16 [ 524.830863][ T5965] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 524.866603][ T5965] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 524.903594][ T5965] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 524.927937][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.973056][ T5965] usb 2-1: Product: syz [ 524.977305][ T5965] usb 2-1: Manufacturer: syz [ 524.990178][ T5965] usb 2-1: SerialNumber: syz [ 525.246684][ T5965] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 525.279860][ T10] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 525.403863][ T5965] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 525.450479][ T5965] usb 2-1: USB disconnect, device number 117 [ 525.460887][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 525.489696][ T10] usb 1-1: config 254 has an invalid interface number: 235 but max is 0 [ 525.525195][ T10] usb 1-1: config 254 has no interface number 0 [ 525.552326][T18952] udevd[18952]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 525.581913][ T10] usb 1-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 525.609787][ T10] usb 1-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 525.626640][ T10] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 525.639322][ T10] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 525.656899][ T10] usb 1-1: config 254 interface 235 has no altsetting 0 [ 525.670221][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 525.689122][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.699234][ T10] usb 1-1: Product: syz [ 525.703484][ T10] usb 1-1: Manufacturer: syz [ 525.718318][ T10] usb 1-1: SerialNumber: syz [ 525.751343][T18974] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 526.003184][T18974] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 526.029941][ T10] usbtest 1-1:254.235: Linux gadget zero [ 526.035723][ T10] usbtest 1-1:254.235: high-speed {control in/out bulk-out iso-in} tests (+alt) [ 526.242479][ T10] usb 1-1: USB disconnect, device number 121 [ 526.459623][T19024] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 526.670427][T19031] netlink: 'syz.2.6262': attribute type 2 has an invalid length. [ 527.109302][ T30] audit: type=1400 audit(1771357703.911:218): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=19048 comm="syz.5.6271" [ 527.546030][T19072] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6282'. [ 528.162838][T19094] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 528.378944][ T30] audit: type=1326 audit(1771357705.181:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19104 comm="syz.5.6299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84b79c629 code=0x7ffc0000 [ 528.479146][ T30] audit: type=1326 audit(1771357705.181:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19104 comm="syz.5.6299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84b79c629 code=0x7ffc0000 [ 528.569418][ T30] audit: type=1326 audit(1771357705.221:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19104 comm="syz.5.6299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fa84b79c629 code=0x7ffc0000 [ 528.649218][ T30] audit: type=1326 audit(1771357705.221:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19104 comm="syz.5.6299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84b79c629 code=0x7ffc0000 [ 528.729199][ T30] audit: type=1326 audit(1771357705.221:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19104 comm="syz.5.6299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84b79c629 code=0x7ffc0000 [ 528.982463][ T30] audit: type=1326 audit(1771357705.791:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19127 comm="syz.4.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76fb9c629 code=0x7ffc0000 [ 529.071257][T19132] netlink: 'syz.0.6312': attribute type 10 has an invalid length. [ 529.079344][ T30] audit: type=1326 audit(1771357705.791:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19127 comm="syz.4.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76fb9c629 code=0x7ffc0000 [ 529.104362][T19132] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6312'. [ 529.157853][T19132] batadv0: entered promiscuous mode [ 529.178950][T19132] batadv0: entered allmulticast mode [ 529.178986][ T30] audit: type=1326 audit(1771357705.841:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19127 comm="syz.4.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fa76fb9c629 code=0x7ffc0000 [ 529.209534][T19132] bridge0: port 4(batadv0) entered blocking state [ 529.235939][T19132] bridge0: port 4(batadv0) entered disabled state [ 529.299622][ T30] audit: type=1326 audit(1771357705.841:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19127 comm="syz.4.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76fb9c629 code=0x7ffc0000 [ 529.399051][ T30] audit: type=1326 audit(1771357705.841:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19127 comm="syz.4.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76fb9c629 code=0x7ffc0000 [ 529.490469][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 529.500505][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 529.592780][T19150] netlink: 'syz.0.6321': attribute type 1 has an invalid length. [ 530.362170][T19185] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 530.851801][T19210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6350'. [ 530.931810][T19208] netlink: 196 bytes leftover after parsing attributes in process `syz.5.6348'. [ 530.962003][T19208] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 530.964810][ T30] audit: type=1326 audit(1771357707.761:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19211 comm="syz.0.6351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ff99c629 code=0x7ffc0000 [ 531.061356][ T30] audit: type=1326 audit(1771357707.791:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19211 comm="syz.0.6351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ff99c629 code=0x7ffc0000 [ 531.085412][ T30] audit: type=1326 audit(1771357707.811:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19211 comm="syz.0.6351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f78ff99c629 code=0x7ffc0000 [ 531.114620][T19210] bond3: entered allmulticast mode [ 531.199603][T19210] 8021q: adding VLAN 0 to HW filter on device bond3 [ 531.811863][ T1173] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 531.842993][T19245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6365'. [ 531.871661][T19248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6366'. [ 531.899231][T19245] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6365'. [ 532.009062][ T1173] usb 3-1: Using ep0 maxpacket: 16 [ 532.037158][ T1173] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 532.067363][T19252] ip6t_REJECT: ECHOREPLY is not supported [ 532.080359][ T1173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.112331][ T1173] usb 3-1: Product: syz [ 532.116582][ T1173] usb 3-1: Manufacturer: syz [ 532.146038][ T1173] usb 3-1: SerialNumber: syz [ 532.209828][ T1173] r8152-cfgselector 3-1: Unknown version 0x0000 [ 532.216167][ T1173] r8152-cfgselector 3-1: config 0 descriptor?? [ 532.613314][T19274] sctp: [Deprecated]: syz.0.6380 (pid 19274) Use of int in maxseg socket option. [ 532.613314][T19274] Use struct sctp_assoc_value instead [ 532.686737][ T5914] r8152-cfgselector 3-1: USB disconnect, device number 125 [ 532.741093][T19277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6383'. [ 533.239132][ T10] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 533.433619][ T10] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 533.472351][ T10] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 533.516135][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.561800][ T10] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 534.031613][T19329] netlink: 'syz.1.6407': attribute type 21 has an invalid length. [ 534.058972][T19329] IPv6: NLM_F_CREATE should be specified when creating new route [ 534.094230][T19329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 534.101583][T19329] IPv6: NLM_F_CREATE should be set when creating new route [ 534.108901][T19329] IPv6: NLM_F_CREATE should be set when creating new route [ 534.116168][T19329] IPv6: NLM_F_CREATE should be set when creating new route [ 534.573343][T19349] xt_TPROXY: Can be used only with -p tcp or -p udp [ 534.871878][ T10] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 534.905255][ T10] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 534.923337][ T10] stv0680 1-1:4.0: last error: 86, command = 0x78 [ 534.953090][ T10] usb 1-1: USB disconnect, device number 122 [ 535.076354][T19359] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6421'. [ 535.249153][ T5965] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 535.439788][ T5965] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 535.466865][ T5965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.509077][ T5965] usb 2-1: config 0 descriptor?? [ 535.528108][ T5965] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 535.710851][T19378] bridge0: mtu less than device minimum [ 535.739169][T19378] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 535.959896][ T5965] gspca_stv06xx: I2C: Read error writing address: -71 [ 535.993009][ T5965] usb 2-1: USB disconnect, device number 118 [ 536.019311][ T1173] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 536.092057][T19389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6436'. [ 536.227066][ T1173] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.254869][ T1173] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 536.292578][ T1173] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 536.316939][ T1173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.335018][ T1173] usb 3-1: Product: syz [ 536.348903][ T1173] usb 3-1: Manufacturer: syz [ 536.354058][ T1173] usb 3-1: SerialNumber: syz [ 536.591538][ T1173] usb 3-1: 0:2 : does not exist [ 536.629844][ T1173] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 536.807752][ T1173] usb 3-1: USB disconnect, device number 126 [ 536.913596][T19281] udevd[19281]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 537.902892][T19458] syz.5.6469: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 537.942821][T19461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.959513][T19458] CPU: 0 UID: 0 PID: 19458 Comm: syz.5.6469 Not tainted syzkaller #0 PREEMPT(full) [ 537.959547][T19458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 537.959566][T19458] Call Trace: [ 537.959575][T19458] [ 537.959585][T19458] dump_stack_lvl+0xe8/0x150 [ 537.959622][T19458] warn_alloc+0x249/0x340 [ 537.959646][T19458] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 537.959683][T19458] ? __pfx_warn_alloc+0x10/0x10 [ 537.959711][T19458] ? kasan_save_track+0x4f/0x80 [ 537.959741][T19458] ? kasan_save_track+0x3e/0x80 [ 537.959770][T19458] ? __kasan_kmalloc+0x93/0xb0 [ 537.959789][T19458] ? __kmalloc_cache_noprof+0x31c/0x660 [ 537.959820][T19458] ? xskq_create+0x56/0x170 [ 537.959841][T19458] ? xsk_setsockopt+0x54c/0x990 [ 537.959859][T19458] ? do_sock_setsockopt+0x17c/0x1b0 [ 537.959881][T19458] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 537.959903][T19458] ? do_syscall_64+0x14d/0xf80 [ 537.959932][T19458] __vmalloc_node_range_noprof+0x132/0x1730 [ 537.959998][T19458] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 537.960038][T19458] ? __kasan_kmalloc+0x93/0xb0 [ 537.960065][T19458] vmalloc_user_noprof+0xad/0xe0 [ 537.960097][T19458] ? xskq_create+0xbf/0x170 [ 537.960120][T19458] xskq_create+0xbf/0x170 [ 537.960145][T19458] xsk_init_queue+0x8a/0xe0 [ 537.960169][T19458] xsk_setsockopt+0x54c/0x990 [ 537.960194][T19458] ? __pfx_xsk_setsockopt+0x10/0x10 [ 537.960215][T19458] ? __pfx_aa_sk_perm+0x10/0x10 [ 537.960250][T19458] ? aa_sock_opt_perm+0xff/0x1a0 [ 537.960275][T19458] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 537.960295][T19458] ? __pfx_xsk_setsockopt+0x10/0x10 [ 537.960318][T19458] do_sock_setsockopt+0x17c/0x1b0 [ 537.960346][T19458] __x64_sys_setsockopt+0x13d/0x1b0 [ 537.960376][T19458] do_syscall_64+0x14d/0xf80 [ 537.960400][T19458] ? trace_irq_disable+0x3b/0x150 [ 537.960427][T19458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.960450][T19458] ? clear_bhb_loop+0x40/0x90 [ 537.960476][T19458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.960504][T19458] RIP: 0033:0x7fa84b79c629 [ 537.960531][T19458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.960551][T19458] RSP: 002b:00007fa84c62a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 537.960576][T19458] RAX: ffffffffffffffda RBX: 00007fa84ba15fa0 RCX: 00007fa84b79c629 [ 537.960592][T19458] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 537.960605][T19458] RBP: 00007fa84b832b39 R08: 0000000000000004 R09: 0000000000000000 [ 537.960619][T19458] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.960633][T19458] R13: 00007fa84ba16038 R14: 00007fa84ba15fa0 R15: 00007fa84bb3fa48 [ 537.960673][T19458] [ 537.960687][T19458] Mem-Info: [ 538.283644][T19466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.319225][T19458] active_anon:5940 inactive_anon:0 isolated_anon:0 [ 538.319225][T19458] active_file:15108 inactive_file:40160 isolated_file:0 [ 538.319225][T19458] unevictable:768 dirty:289 writeback:0 [ 538.319225][T19458] slab_reclaimable:10965 slab_unreclaimable:123095 [ 538.319225][T19458] mapped:34653 shmem:1360 pagetables:1263 [ 538.319225][T19458] sec_pagetables:0 bounce:0 [ 538.319225][T19458] kernel_misc_reclaimable:0 [ 538.319225][T19458] free:1271251 free_pcp:12762 free_cma:0 [ 538.408996][T19458] Node 0 active_anon:23660kB inactive_anon:0kB active_file:60264kB inactive_file:160432kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138468kB dirty:1156kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12324kB pagetables:5016kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 538.485973][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 538.485993][ T30] audit: type=1326 audit(1771357715.291:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.0.6474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ff99c629 code=0x7ffc0000 [ 538.569058][T19458] Node 1 active_anon:0kB inactive_anon:0kB active_file:168kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 538.632214][ T30] audit: type=1326 audit(1771357715.341:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.0.6474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ff99c629 code=0x7ffc0000 [ 538.655069][T19458] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 538.744781][ T30] audit: type=1326 audit(1771357715.351:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.0.6474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f78ff99c629 code=0x7ffc0000 [ 538.867616][ T30] audit: type=1326 audit(1771357715.351:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.0.6474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ff99c629 code=0x7ffc0000 [ 538.900601][T19458] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 538.906555][T19458] Node 0 DMA32 free:1129856kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23812kB inactive_anon:0kB active_file:60264kB inactive_file:160432kB unevictable:1536kB writepending:1164kB zspages:0kB present:3129332kB managed:2552932kB mlocked:0kB bounce:0kB free_pcp:49820kB local_pcp:22020kB free_cma:0kB [ 538.983756][ T30] audit: type=1326 audit(1771357715.351:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.0.6474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ff99c629 code=0x7ffc0000 [ 539.055778][T19458] lowmem_reserve[]: 0 0 0 0 0 [ 539.074119][T19458] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:888kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 539.125506][T19458] lowmem_reserve[]: 0 0 0 0 0 [ 539.130723][T19458] Node 1 Normal free:3943592kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:168kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:96kB local_pcp:0kB free_cma:0kB [ 539.255852][T19458] lowmem_reserve[]: 0 0 0 0 0 [ 539.303321][T19458] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 539.345209][T19458] Node 0 DMA32: 2820*4kB (UME) 2883*8kB (UME) 2181*16kB (UME) 398*32kB (UME) 215*64kB (UME) 243*128kB (UME) 106*256kB (UME) 32*512kB (UM) 24*1024kB (UM) 4*2048kB (UM) 226*4096kB (M) = 1128824kB [ 539.434172][T19458] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 539.484392][T19458] Node 1 Normal: 0*4kB 3*8kB (U) 7*16kB (UME) 15*32kB (U) 5*64kB (UM) 6*128kB (UE) 4*256kB (UM) 5*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 960*4096kB (UM) = 3943592kB [ 539.547392][T19458] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 539.593263][T19458] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 539.638932][T19458] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 539.678056][T19458] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 539.724814][T19458] 56621 total pagecache pages [ 539.742685][T19458] 0 pages in swap cache [ 539.758867][T19458] Free swap = 124996kB [ 539.763101][T19458] Total swap = 124996kB [ 539.767322][T19458] 2097051 pages RAM [ 539.825071][T19458] 0 pages HighMem/MovableOnly [ 539.837817][T19458] 426981 pages reserved [ 539.852697][T19458] 0 pages cma reserved [ 540.084597][T19526] ipt_REJECT: ECHOREPLY no longer supported. [ 540.871827][T19557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6515'. [ 542.942169][ T30] audit: type=1326 audit(1771357719.751:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19645 comm="syz.2.6560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f2f9c629 code=0x7ffc0000 [ 543.038940][ T30] audit: type=1326 audit(1771357719.751:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19645 comm="syz.2.6560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f2f9c629 code=0x7ffc0000 [ 543.132467][ T30] audit: type=1326 audit(1771357719.781:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19645 comm="syz.2.6560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f08f2f9c629 code=0x7ffc0000 [ 543.220736][ T30] audit: type=1326 audit(1771357719.781:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19645 comm="syz.2.6560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f2f9c629 code=0x7ffc0000 [ 543.325495][ T30] audit: type=1326 audit(1771357719.781:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19645 comm="syz.2.6560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f2f9c629 code=0x7ffc0000 [ 543.768669][T19681] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 544.230867][T19704] Cannot find set identified by id 65534 to match [ 544.457658][T19713] openvswitch: netlink: IP tunnel dst address not specified [ 544.480675][T19716] bridge0: port 3(veth0_to_bridge) entered blocking state [ 544.488335][T19716] bridge0: port 3(veth0_to_bridge) entered disabled state [ 544.497392][T19712] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 544.552996][T19716] veth0_to_bridge: entered allmulticast mode [ 544.593532][T19716] veth0_to_bridge: entered promiscuous mode [ 544.640370][T19716] bridge0: port 3(veth0_to_bridge) entered blocking state [ 544.648061][T19716] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 545.073029][T19737] openvswitch: netlink: VXLAN extension message has 16 unknown bytes. [ 545.178694][T19743] openvswitch: netlink: IP tunnel dst address not specified [ 545.602025][T19760] netlink: 'syz.4.6615': attribute type 6 has an invalid length. [ 546.948945][ T5965] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 547.156432][ T5965] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 547.185794][ T5965] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 547.208073][ T5965] usb 2-1: config 1 has no interface number 0 [ 547.237979][ T5965] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 547.286516][ T5965] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 547.306679][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.324509][ T5965] usb 2-1: Product: syz [ 547.337003][ T5965] usb 2-1: Manufacturer: syz [ 547.346665][ T5965] usb 2-1: SerialNumber: syz [ 547.378580][ T5965] usb 2-1: selecting invalid altsetting 1 [ 547.653511][T19839] kAFS: unable to lookup cell '(/cL' [ 547.799078][ T5965] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 547.830459][ T5965] cdc_ncm 2-1:1.1: bind() failure [ 547.870935][ T5965] usb 2-1: USB disconnect, device number 119 [ 548.666644][T19876] netlink: 144 bytes leftover after parsing attributes in process `syz.5.6669'. [ 548.695609][T19880] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 549.392407][T19905] netlink: 'syz.0.6682': attribute type 3 has an invalid length. [ 550.117573][ T30] audit: type=1326 audit(1771357726.921:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19939 comm="syz.2.6701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f2f9c629 code=0x7ffc0000 [ 550.206310][ T30] audit: type=1326 audit(1771357726.921:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19939 comm="syz.2.6701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f2f9c629 code=0x7ffc0000 [ 550.231824][ T5965] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 550.293588][ T30] audit: type=1326 audit(1771357726.921:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19939 comm="syz.2.6701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f2f9c629 code=0x7ffc0000 [ 550.369268][ T30] audit: type=1326 audit(1771357726.961:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19939 comm="syz.2.6701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f08f2f9c629 code=0x7ffc0000 [ 550.439373][ T5965] usb 6-1: Using ep0 maxpacket: 16 [ 550.462003][ T5965] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 550.477795][ T30] audit: type=1326 audit(1771357726.961:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19939 comm="syz.2.6701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f2f9c629 code=0x7ffc0000 [ 550.508949][ T5965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.549032][ T5965] usb 6-1: Product: syz [ 550.553331][ T5965] usb 6-1: Manufacturer: syz [ 550.557970][ T5965] usb 6-1: SerialNumber: syz [ 550.582387][ T30] audit: type=1326 audit(1771357726.961:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19939 comm="syz.2.6701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f2f9c629 code=0x7ffc0000 [ 550.635888][ T5965] r8152-cfgselector 6-1: Unknown version 0x0000 [ 550.649032][ T5965] r8152-cfgselector 6-1: config 0 descriptor?? [ 550.662266][ T30] audit: type=1326 audit(1771357726.961:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19939 comm="syz.2.6701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f2f9c629 code=0x7ffc0000 [ 550.757525][ T30] audit: type=1326 audit(1771357726.961:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19939 comm="syz.2.6701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f08f2f9c629 code=0x7ffc0000 [ 550.816932][ T30] audit: type=1326 audit(1771357726.961:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19939 comm="syz.2.6701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f08f2f9c629 code=0x7ffc0000 [ 550.829870][T19962] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6711'. [ 551.111881][ T5914] r8152-cfgselector 6-1: USB disconnect, device number 8 [ 551.343245][T19985] netlink: 'syz.0.6723': attribute type 33 has an invalid length. [ 551.355472][T19986] x_tables: ip_tables: osf match: only valid for protocol 6 [ 551.369271][T19985] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6723'. [ 552.263353][ T30] audit: type=1326 audit(1771357729.071:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20021 comm="syz.5.6741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84b79c629 code=0x7ffc0000 [ 553.199451][T20068] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6762'. [ 553.208522][T20068] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6762'. [ 553.252050][T20072] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6765'. [ 553.387619][ T9] kworker/0:0 (9) used greatest stack depth: 15744 bytes left [ 554.825996][T20149] xt_TCPMSS: Only works on TCP SYN packets [ 555.741751][T20189] SET target dimension over the limit! [ 555.830404][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 555.830425][ T30] audit: type=1326 audit(1771357732.641:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20196 comm="syz.1.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc7b9c629 code=0x7ffc0000 [ 555.928890][ T30] audit: type=1326 audit(1771357732.681:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20196 comm="syz.1.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc7b9c629 code=0x7ffc0000 [ 556.008985][ T30] audit: type=1326 audit(1771357732.681:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20196 comm="syz.1.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f9fc7b9c629 code=0x7ffc0000 [ 556.031926][ T30] audit: type=1326 audit(1771357732.681:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20196 comm="syz.1.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc7b9c629 code=0x7ffc0000 [ 556.055738][ T30] audit: type=1326 audit(1771357732.681:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20196 comm="syz.1.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc7b9c629 code=0x7ffc0000 [ 556.603629][T20232] openvswitch: netlink: Invalid VLAN frame [ 556.995944][ T30] audit: type=1326 audit(1771357733.801:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20246 comm="syz.1.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc7b9c629 code=0x7ffc0000 [ 557.093183][ T30] audit: type=1326 audit(1771357733.831:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20246 comm="syz.1.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc7b9c629 code=0x7ffc0000 [ 557.178587][ T30] audit: type=1326 audit(1771357733.841:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20246 comm="syz.1.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f9fc7b9c629 code=0x7ffc0000 [ 557.250055][ T30] audit: type=1326 audit(1771357733.841:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20246 comm="syz.1.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc7b9c629 code=0x7ffc0000 [ 557.347133][ T30] audit: type=1326 audit(1771357733.841:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20246 comm="syz.1.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc7b9c629 code=0x7ffc0000 [ 557.801574][T20280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6865'. [ 558.069527][T20296] misc userio: No port type given on /dev/userio [ 558.700142][T20326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6887'. [ 558.740290][T20326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6887'. [ 558.768601][T20326] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6887'. [ 558.944804][T20331] bond3 (unregistering): Released all slaves [ 559.269331][ T5825] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 559.439007][ T5825] usb 6-1: Using ep0 maxpacket: 16 [ 559.456377][T20353] xt_l2tp: invalid flags combination: 4 [ 559.469986][ T5825] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 559.496233][ T5825] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 559.530021][ T5825] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 559.569168][ T5825] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 559.602576][ T5825] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 559.629226][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.668893][ T5825] usb 6-1: Product: syz [ 559.673162][ T5825] usb 6-1: Manufacturer: syz [ 559.677803][ T5825] usb 6-1: SerialNumber: syz [ 560.088144][T20370] x_tables: duplicate underflow at hook 3 [ 560.109756][ T5825] usb 6-1: USB disconnect, device number 9 [ 560.176330][T20367] udevd[20367]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 561.665492][T20427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.688855][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 561.688876][ T30] audit: type=1326 audit(1771357738.491:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20431 comm="syz.0.6938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ff99c629 code=0x7ffc0000 [ 561.729040][ T30] audit: type=1326 audit(1771357738.531:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20431 comm="syz.0.6938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ff99c629 code=0x7ffc0000 [ 561.756025][ T30] audit: type=1326 audit(1771357738.551:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20431 comm="syz.0.6938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f78ff99c629 code=0x7ffc0000 [ 561.789186][ T30] audit: type=1326 audit(1771357738.551:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20431 comm="syz.0.6938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ff99c629 code=0x7ffc0000 [ 562.042312][T20442] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6943'. [ 563.049127][T20492] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6967'. [ 563.058164][T20492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6967'. [ 563.069726][T20494] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6966'. [ 563.130606][T20492] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6967'. [ 563.322681][T20504] netlink: 'syz.4.6972': attribute type 61 has an invalid length. [ 563.354935][T20504] netlink: 'syz.4.6972': attribute type 62 has an invalid length. [ 563.471226][T20511] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 563.623462][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.630465][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.715108][T20521] netlink: 'syz.2.6981': attribute type 1 has an invalid length. [ 563.839506][ T5825] usb 2-1: new low-speed USB device number 120 using dummy_hcd [ 564.029283][ T5825] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 564.037545][ T5825] usb 2-1: config 0 has no interface number 0 [ 564.069073][ T5825] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 564.102650][ T5825] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 564.139112][ T5825] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 564.172488][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.208736][ T5825] usb 2-1: config 0 descriptor?? [ 564.250162][ T5825] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 564.481592][T20517] iowarrior 2-1:0.1: Error -90 while submitting URB [ 564.490875][ T1173] usb 2-1: USB disconnect, device number 120 [ 564.710824][ T30] audit: type=1326 audit(1771357741.511:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.2.6998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f2f9c629 code=0x7ffc0000 [ 564.762408][ T30] audit: type=1326 audit(1771357741.511:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.2.6998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f2f9c629 code=0x7ffc0000 [ 564.786282][ T30] audit: type=1326 audit(1771357741.521:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.2.6998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f2f9c629 code=0x7ffc0000 [ 564.871916][ T30] audit: type=1326 audit(1771357741.521:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.2.6998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f2f9c629 code=0x7ffc0000 [ 564.924545][T20564] binder: 20561:20564 ioctl 40046205 0 returned -22 [ 564.965267][ T30] audit: type=1326 audit(1771357741.551:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.2.6998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f08f2f9c629 code=0x7ffc0000 [ 565.078408][ T30] audit: type=1326 audit(1771357741.551:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.2.6998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f2f9c629 code=0x7ffc0000 [ 565.277640][T20575] xt_cgroup: xt_cgroup: no path or classid specified [ 565.667737][T20596] netlink: 656 bytes leftover after parsing attributes in process `syz.2.7016'. [ 566.194843][T20619] openvswitch: netlink: ct_state flags 2c1414ac unsupported [ 566.372330][T20626] netlink: 'syz.0.7031': attribute type 21 has an invalid length. [ 566.421350][T20626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7031'. [ 566.461469][T20631] IPv6: NLM_F_CREATE should be specified when creating new route [ 566.857562][T20650] xt_TCPMSS: Only works on TCP SYN packets [ 567.003820][T20655] [U] v3f"S/4:XTzWtlW= [ 567.040346][T20655] [U] J"e:" [ 568.119033][T20706] netlink: 308 bytes leftover after parsing attributes in process `syz.5.7072'. [ 568.146147][T20710] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 568.681762][T20732] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 568.742862][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 568.744919][T20734] : renamed from bond_slave_0 [ 568.756880][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 568.772508][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 568.785085][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 568.797662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 568.810223][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 568.822780][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 568.835441][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 568.847985][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 568.860567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 569.222108][T20745] --map-set only usable from mangle table [ 569.569244][T20750] IPv6: Can't replace route, no match found [ 569.752375][T20755] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 570.642504][T20776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7104'. [ 570.981848][T20740] Bluetooth: hci5: command 0x0406 tx timeout [ 572.297336][T20817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7122'. [ 572.338715][T20817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7122'. [ 573.748910][ C0] net_ratelimit: 11751 callbacks suppressed [ 573.748932][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 573.767462][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 573.780027][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 573.786543][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 573.786594][ T30] audit: type=1326 audit(1771357750.591:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20835 comm="syz.1.7133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc7b9c629 code=0x7ffc0000 [ 573.793343][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 573.833201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 573.845800][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 573.858370][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 573.870962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 573.883537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 573.896146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 573.925097][ T30] audit: type=1326 audit(1771357750.721:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20835 comm="syz.1.7133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc7b9c629 code=0x7ffc0000 [ 574.148989][ T30] audit: type=1326 audit(1771357750.721:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20835 comm="syz.1.7133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc7b9c629 code=0x7ffc0000 [ 574.229101][ T5914] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 574.280171][ T30] audit: type=1326 audit(1771357750.721:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20835 comm="syz.1.7133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f9fc7b9c629 code=0x7ffc0000 [ 574.420564][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 574.428057][ T30] audit: type=1326 audit(1771357750.721:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20835 comm="syz.1.7133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc7b9c629 code=0x7ffc0000 [ 574.475312][ T5914] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 574.539238][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.612632][ T5914] usb 3-1: config 0 descriptor?? [ 574.648542][ T30] audit: type=1326 audit(1771357750.721:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20835 comm="syz.1.7133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc7b9c629 code=0x7ffc0000 [ 574.693947][ T5914] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 574.829136][ T30] audit: type=1326 audit(1771357750.721:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20835 comm="syz.1.7133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc7b9c629 code=0x7ffc0000 [ 575.033191][ T30] audit: type=1326 audit(1771357750.721:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20835 comm="syz.1.7133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9fc7b9c629 code=0x7ffc0000 [ 575.143274][ T5914] gspca_vc032x: reg_w err -71 [ 575.148043][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 575.229209][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 575.247618][ T30] audit: type=1326 audit(1771357750.721:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20835 comm="syz.1.7133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9fc7b9c629 code=0x7ffc0000 [ 575.289107][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 575.318281][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 575.341064][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 575.370560][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 575.375967][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 575.439379][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 575.481044][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 575.517691][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 575.588365][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 575.616047][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 575.669011][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 575.674405][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 575.756133][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 575.820175][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 575.825640][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 575.907292][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 575.965472][ T5914] gspca_vc032x: Unknown sensor... [ 576.025483][ T5914] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 576.119390][ T5914] usb 3-1: USB disconnect, device number 127 [ 576.586957][T20887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7156'. [ 576.715750][T20889] geneve4: entered promiscuous mode [ 577.579042][ T5914] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 577.710327][T20907] netlink: 'syz.1.7166': attribute type 1 has an invalid length. [ 577.820422][ T5914] usb 3-1: config 0 has an invalid interface number: 207 but max is 0 [ 577.838931][ T5914] usb 3-1: config 0 has no interface number 0 [ 577.892690][ T5914] usb 3-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 577.934094][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.976384][T20911] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7167'. [ 577.998058][ T5914] usb 3-1: Product: syz [ 578.023602][ T5914] usb 3-1: Manufacturer: syz [ 578.059065][ T5914] usb 3-1: SerialNumber: syz [ 578.107091][ T5914] usb 3-1: config 0 descriptor?? [ 578.167919][ T5914] qmi_wwan 3-1:0.207: bogus CDC Union: master=0, slave=1 [ 578.389313][ T5914] qmi_wwan 3-1:0.207: probe with driver qmi_wwan failed with error -22 [ 578.646174][ T5914] usb 3-1: USB disconnect, device number 2 [ 578.759006][ C0] net_ratelimit: 10898 callbacks suppressed [ 578.759029][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 578.777572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 578.790178][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 578.802880][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 578.815571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 578.828134][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 578.840709][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 578.853288][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 578.865904][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 578.878473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 580.255482][T20955] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 580.262082][T20955] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 580.401741][T20955] vhci_hcd vhci_hcd.0: Device attached [ 580.513957][T20962] vhci_hcd vhci_hcd.0: port 0 already used [ 580.611625][T20956] vhci_hcd: connection closed [ 580.620856][ T13] vhci_hcd vhci_hcd.0: stop threads [ 580.694565][ T5914] usb 34-1: SetAddress Request (2) to port 0 [ 580.705343][ T13] vhci_hcd vhci_hcd.0: release socket [ 580.749138][ T5914] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 580.764564][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 580.830555][ T5914] usb 34-1: enqueue for inactive port 0 [ 581.230761][T20980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7200'. [ 581.309260][ T5914] usb usb34-port1: attempt power cycle [ 581.630242][ T30] audit: type=1326 audit(1771357758.441:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20985 comm="syz.5.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84b79c629 code=0x7ffc0000 [ 581.819543][ T30] audit: type=1326 audit(1771357758.461:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20985 comm="syz.5.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84b79c629 code=0x7ffc0000 [ 581.954848][ T5914] usb usb34-port1: unable to enumerate USB device [ 582.062961][ T30] audit: type=1326 audit(1771357758.461:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20985 comm="syz.5.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84b79c629 code=0x7ffc0000 [ 582.269300][ T30] audit: type=1326 audit(1771357758.491:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20985 comm="syz.5.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7fa84b79c629 code=0x7ffc0000 [ 582.487400][ T30] audit: type=1326 audit(1771357758.491:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20985 comm="syz.5.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84b79c629 code=0x7ffc0000 [ 582.699322][ T30] audit: type=1326 audit(1771357758.491:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20985 comm="syz.5.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84b79c629 code=0x7ffc0000 [ 582.893656][ T30] audit: type=1326 audit(1771357758.491:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20985 comm="syz.5.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84b79c629 code=0x7ffc0000 [ 582.956688][T21014] netlink: 'syz.4.7216': attribute type 3 has an invalid length. [ 583.014969][T21014] netlink: 666 bytes leftover after parsing attributes in process `syz.4.7216'. [ 583.083087][ T30] audit: type=1326 audit(1771357758.491:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20985 comm="syz.5.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa84b79c629 code=0x7ffc0000 [ 583.307118][ T30] audit: type=1326 audit(1771357758.491:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20985 comm="syz.5.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa84b79c629 code=0x7ffc0000 [ 583.768855][ C0] net_ratelimit: 12011 callbacks suppressed [ 583.768877][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 583.787426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 583.799949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 583.812567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 583.825166][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 583.837754][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 583.850344][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 583.862901][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 583.875477][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 583.888026][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 584.110887][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 584.618167][T21044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7232'. [ 586.561188][T21085] Cannot find del_set index 4 as target [ 586.793381][T21091] faux_driver vkms: [drm] Unknown color mode 7; guessing buffer size. [ 588.575407][T21131] kAFS: unable to lookup cell '(,cL' [ 588.778866][ C0] net_ratelimit: 12529 callbacks suppressed [ 588.778889][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 588.797559][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 588.810311][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 588.823281][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 588.835872][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 588.848439][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 588.860993][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 588.873614][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 588.886190][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 588.898774][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 589.166165][T21146] xt_bpf: check failed: parse error [ 589.595588][T21153] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7285'. [ 589.700477][T21158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7287'. [ 590.024838][T21164] usb usb8: usbfs: process 21164 (syz.5.7289) did not claim interface 0 before use [ 590.139156][T21153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.237392][T21153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.317158][T21153] bond0 (unregistering): Released all slaves [ 591.444728][T21192] x_tables: duplicate underflow at hook 2 [ 592.690238][ T5883] usb 1-1: new low-speed USB device number 123 using dummy_hcd [ 592.932999][ T5883] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 is Bulk; changing to Interrupt [ 593.003719][ T5883] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 593.069526][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.148731][T21212] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 593.447891][ T5883] usb 1-1: string descriptor 0 read error: -71 [ 593.499809][ T5883] hub 1-1:32.0: USB hub found [ 593.569640][ T5883] hub 1-1:32.0: config failed, can't read hub descriptor (err -22) [ 593.699951][ T31] INFO: task syz.3.4647:15678 blocked for more than 143 seconds. [ 593.789187][ C0] net_ratelimit: 12519 callbacks suppressed [ 593.789226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 593.807716][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 593.819872][ T31] Not tainted syzkaller #0 [ 593.820964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 593.837450][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 593.850026][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 593.862619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 593.875273][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 593.887946][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 593.902286][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 593.918140][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:6d:4e:4c:09:b2, vlan:0) [ 594.004986][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 594.158831][ C0] sched: DL replenish lagged too much [ 594.169757][ T31] task:syz.3.4647 state:D stack:28160 pid:15678 tgid:15676 ppid:5843 task_flags:0x400040 flags:0x00080002 [ 594.339308][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 594.440748][ T31] Call Trace: [ 594.466832][ T31] [ 594.510689][ T31] __schedule+0x1585/0x5340 [ 594.546119][ T31] ? irqentry_exit+0x59e/0x620 [ 594.554544][ T5883] usb 1-1: USB disconnect, device number 123 [ 594.572207][ T31] ? __pfx___schedule+0x10/0x10 [ 594.606573][ T31] ? schedule+0x90/0x360 [ 594.639152][ T31] schedule+0x164/0x360 [ 594.656892][ T31] schedule_preempt_disabled+0x13/0x30 [ 594.685685][ T31] __mutex_lock+0x7fe/0x1300 [ 594.711010][ T31] ? __mutex_lock+0x5ac/0x1300 [ 594.727501][ T31] ? usbdev_open+0x182/0x770 [ 594.744192][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 594.762970][ T31] ? bus_find_device+0x27d/0x2d0 [ 594.779631][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 594.800925][ T31] ? usbdev_open+0xa7/0x770 [ 594.818423][ T31] ? __kmalloc_cache_noprof+0x15b/0x660 [ 594.839200][ T31] usbdev_open+0x182/0x770 [ 594.859024][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 594.880164][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 594.893886][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 594.911847][ T31] chrdev_open+0x4cd/0x5e0 [ 594.930437][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 594.949418][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 594.969234][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 594.991397][ T31] do_dentry_open+0x785/0x14e0 [ 595.010118][ T31] vfs_open+0x3b/0x340 [ 595.014403][ T31] ? path_openat+0x2df0/0x3860 [ 595.032379][ T31] path_openat+0x2e08/0x3860 [ 595.051570][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 595.074844][ T31] ? stack_depot_save_flags+0x33/0x810 [ 595.092610][ T31] ? __pfx_path_openat+0x10/0x10 [ 595.109646][ T31] ? __x64_sys_openat+0x138/0x170 [ 595.130219][ T31] ? do_syscall_64+0x14d/0xf80 [ 595.147274][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.169376][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 595.185701][ T31] do_file_open+0x23e/0x4a0 [ 595.201560][ T31] ? __pfx_do_file_open+0x10/0x10 [ 595.224569][ T31] ? _raw_spin_unlock+0x28/0x50 [ 595.240269][ T31] ? alloc_fd+0x64b/0x6c0 [ 595.259182][ T31] do_sys_openat2+0x113/0x200 [ 595.279058][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 595.292008][ T31] ? exc_page_fault+0x6a/0xc0 [ 595.309352][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 595.329369][ T31] __x64_sys_openat+0x138/0x170 [ 595.344928][ T31] do_syscall_64+0x14d/0xf80 [ 595.363415][ T31] ? trace_irq_disable+0x3b/0x150 [ 595.381457][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.402381][ T31] ? clear_bhb_loop+0x40/0x90 [ 595.421465][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.441277][ T31] RIP: 0033:0x7f949395cece [ 595.456671][ T31] RSP: 002b:00007f9494891b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 595.488617][ T31] RAX: ffffffffffffffda RBX: 00007f94948926c0 RCX: 00007f949395cece [ 595.516787][ T31] RDX: 0000000000020101 RSI: 00007f9494891c00 RDI: ffffffffffffff9c [ 595.543725][ T31] RBP: 00007f9494891c00 R08: 0000000000000000 R09: 0000000000000000 [ 595.570256][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 595.609230][ T31] R13: 00007f9493c16038 R14: 00007f9493c15fa0 R15: 00007f9493d3fa48 [ 595.635462][ T31] [ 595.644805][ T31] [ 595.644805][ T31] Showing all locks held in the system: [ 595.675374][ T31] 1 lock held by khungtaskd/31: [ 595.693734][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 595.731160][ T31] 3 locks held by kworker/0:2/1173: [ 595.749211][ T31] 2 locks held by getty/5579: [ 595.765820][ T31] #0: ffff8880362cb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 595.804921][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 595.887697][ T31] 6 locks held by kworker/1:4/5882: [ 595.907401][ T31] 1 lock held by syz.3.4647/15678: [ 595.928103][ T31] #0: ffff88802a0b8198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 595.960190][ T31] [ 595.967289][ T31] ============================================= [ 595.967289][ T31] [ 596.001878][ T31] NMI backtrace for cpu 1 [ 596.001900][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 596.001924][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 596.001938][ T31] Call Trace: [ 596.001947][ T31] [ 596.001958][ T31] dump_stack_lvl+0xe8/0x150 [ 596.001992][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 596.002026][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 596.002063][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 596.002098][ T31] sys_info+0x135/0x170 [ 596.002126][ T31] watchdog+0xfd9/0x1030 [ 596.002161][ T31] ? watchdog+0x21a/0x1030 [ 596.002197][ T31] kthread+0x388/0x470 [ 596.002217][ T31] ? __pfx_watchdog+0x10/0x10 [ 596.002243][ T31] ? __pfx_kthread+0x10/0x10 [ 596.002264][ T31] ret_from_fork+0x51e/0xb90 [ 596.002294][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 596.002320][ T31] ? __switch_to+0xc7d/0x1450 [ 596.002347][ T31] ? __pfx_kthread+0x10/0x10 [ 596.002367][ T31] ret_from_fork_asm+0x1a/0x30 [ 596.002413][ T31] [ 596.002422][ T31] Sending NMI from CPU 1 to CPUs 0: [ 596.113907][ C0] NMI backtrace for cpu 0 [ 596.113927][ C0] CPU: 0 UID: 0 PID: 5808 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 596.113948][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 596.113960][ C0] RIP: 0010:rcu_read_lock_held+0x0/0x50 [ 596.113992][ C0] Code: 05 b1 ba 67 0e c3 cc cc cc cc cc 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 53 e8 16 93 02 0a 85 c0 74 26 31 db e8 5b e7 00 00 84 [ 596.114008][ C0] RSP: 0018:ffffc900000070b0 EFLAGS: 00000246 [ 596.114025][ C0] RAX: ffffffff89818c00 RBX: ffff88807ccd9000 RCX: 0000000000000100 [ 596.114039][ C0] RDX: ffff888036bf3c80 RSI: 0000000000000000 RDI: 0000000000000000 [ 596.114051][ C0] RBP: 0000000000000001 R08: ffffc900000073e0 R09: ffffc900000073f0 [ 596.114064][ C0] R10: ffffc90000007240 R11: fffff52000000e4a R12: 0000000000000003 [ 596.114077][ C0] R13: ffff88805a1ab4c8 R14: dffffc0000000000 R15: 0000000000000001 [ 596.114090][ C0] FS: 0000555580c46500(0000) GS:ffff88812546a000(0000) knlGS:0000000000000000 [ 596.114105][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 596.114118][ C0] CR2: 000055557e934a28 CR3: 0000000078058000 CR4: 00000000003526f0 [ 596.114135][ C0] Call Trace: [ 596.114143][ C0] [ 596.114149][ C0] ip6_ignore_linkdown+0x66/0x140 [ 596.114175][ C0] find_match+0x9c/0xb40 [ 596.114203][ C0] __find_rr_leaf+0x248/0x760 [ 596.114231][ C0] ? __pfx___find_rr_leaf+0x10/0x10 [ 596.114253][ C0] ? __pfx_fib6_node_lookup+0x10/0x10 [ 596.114279][ C0] ? __asan_memcpy+0x40/0x70 [ 596.114308][ C0] fib6_table_lookup+0x3b4/0xa80 [ 596.114347][ C0] ? __pfx_fib6_table_lookup+0x10/0x10 [ 596.114379][ C0] ip6_pol_route+0x228/0x13d0 [ 596.114403][ C0] ? ip6_pol_route+0x160/0x13d0 [ 596.114431][ C0] ? __pfx_ip6_pol_route+0x10/0x10 [ 596.114455][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 596.114478][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 596.114496][ C0] ? nf_hook_slow+0x176/0x220 [ 596.114515][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 596.114542][ C0] fib6_rule_action+0x9d7/0xc00 [ 596.114562][ C0] ? __pfx_fib6_rule_action+0x10/0x10 [ 596.114578][ C0] ? lock_acquire+0xf0/0x2e0 [ 596.114599][ C0] ? nf_nat_ipv6_in+0x203/0x2c0 [ 596.114624][ C0] ? fib_rules_lookup+0x9b/0xea0 [ 596.114641][ C0] ? __pfx_fib6_rule_action+0x10/0x10 [ 596.114658][ C0] fib_rules_lookup+0x768/0xea0 [ 596.114678][ C0] ? fib_rules_lookup+0x9b/0xea0 [ 596.114699][ C0] ? __pfx_fib_rules_lookup+0x10/0x10 [ 596.114716][ C0] ? l3mdev_update_flow+0x29/0x640 [ 596.114739][ C0] ? l3mdev_update_flow+0x4d1/0x640 [ 596.114763][ C0] fib6_rule_lookup+0x1a0/0x730 [ 596.114780][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 596.114796][ C0] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 596.114815][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 596.114832][ C0] ? ip6t_do_table+0x1df/0x1560 [ 596.114855][ C0] ip6_route_input+0x730/0xad0 [ 596.114874][ C0] ? __pfx_ip6_route_input+0x10/0x10 [ 596.114896][ C0] ? nf_nat_ipv6_in+0x203/0x2c0 [ 596.114927][ C0] ? ip6_rcv_finish_core+0x222/0x420 [ 596.114950][ C0] ip6_rcv_finish+0x141/0x2e0 [ 596.114972][ C0] NF_HOOK+0x336/0x3c0 [ 596.114992][ C0] ? skb_orphan+0xaf/0xd0 [ 596.115013][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 596.115034][ C0] ? NF_HOOK+0x9e/0x3c0 [ 596.115054][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 596.115076][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 596.115102][ C0] ? process_backlog+0x3eb/0x1950 [ 596.115118][ C0] process_backlog+0x7dd/0x1950 [ 596.115146][ C0] __napi_poll+0xae/0x340 [ 596.115169][ C0] ? skb_defer_free_flush+0x233/0x260 [ 596.115196][ C0] net_rx_action+0x627/0xf70 [ 596.115220][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 596.115246][ C0] ? try_to_wake_up+0x7fc/0x1390 [ 596.115274][ C0] handle_softirqs+0x22a/0x870 [ 596.115298][ C0] ? do_softirq+0x76/0xd0 [ 596.115322][ C0] ? tcp_recvmsg+0x21e/0x7f0 [ 596.115345][ C0] do_softirq+0x76/0xd0 [ 596.115366][ C0] [ 596.115372][ C0] [ 596.115379][ C0] __local_bh_enable_ip+0xf8/0x130 [ 596.115401][ C0] tcp_recvmsg+0x21e/0x7f0 [ 596.115426][ C0] ? __pfx_tcp_recvmsg+0x10/0x10 [ 596.115451][ C0] ? aa_sk_perm+0x82d/0x960 [ 596.115476][ C0] ? aa_file_perm+0x12d/0x1630 [ 596.115496][ C0] ? sock_rps_record_flow+0x19/0x400 [ 596.115519][ C0] inet_recvmsg+0x157/0x270 [ 596.115542][ C0] ? __pfx_inet_recvmsg+0x10/0x10 [ 596.115565][ C0] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 596.115581][ C0] ? security_socket_recvmsg+0x7e/0x2c0 [ 596.115605][ C0] sock_recvmsg+0x1a8/0x270 [ 596.115632][ C0] sock_read_iter+0x251/0x320 [ 596.115656][ C0] ? __pfx_sock_read_iter+0x10/0x10 [ 596.115684][ C0] ? bpf_lsm_file_permission+0x9/0x20 [ 596.115703][ C0] ? security_file_permission+0x75/0x260 [ 596.115731][ C0] vfs_read+0x582/0xa70 [ 596.115755][ C0] ? debug_object_free+0x2d7/0x490 [ 596.115777][ C0] ? __pfx_vfs_read+0x10/0x10 [ 596.115804][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 596.115831][ C0] ? irqentry_exit+0x59e/0x620 [ 596.115855][ C0] ksys_read+0x150/0x270 [ 596.115881][ C0] ? __pfx_ksys_read+0x10/0x10 [ 596.115912][ C0] do_syscall_64+0x14d/0xf80 [ 596.115932][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.115950][ C0] ? clear_bhb_loop+0x40/0x90 [ 596.115969][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.115986][ C0] RIP: 0033:0x7f1f67f57817 [ 596.116002][ C0] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 596.116017][ C0] RSP: 002b:00007ffe1a6b7690 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 596.116036][ C0] RAX: ffffffffffffffda RBX: 0000555580c46500 RCX: 00007f1f67f57817 [ 596.116049][ C0] RDX: 0000000000000004 RSI: 00007ffe1a6b76ec RDI: 0000000000000003 [ 596.116060][ C0] RBP: 00007ffe1a6b7b90 R08: 0000000000000000 R09: 0000000000000000 [ 596.116071][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 596.116082][ C0] R13: 00007ffe1a6b76ec R14: 00007ffe1a6b7780 R15: 0000000000000000 [ 596.116104][ C0] [ 598.381407][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 598.388398][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 598.397558][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 598.407678][ T31] Call Trace: [ 598.411003][ T31] [ 598.413970][ T31] vpanic+0x56c/0xa60 [ 598.418007][ T31] ? __pfx___schedule+0x10/0x10 [ 598.422903][ T31] ? __pfx_vpanic+0x10/0x10 [ 598.427465][ T31] ? __pfx_console_unlock+0x10/0x10 [ 598.432727][ T31] panic+0xc5/0xd0 [ 598.436652][ T31] ? __pfx_panic+0x10/0x10 [ 598.441227][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 598.446679][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 598.452977][ T31] watchdog+0x1023/0x1030 [ 598.457366][ T31] ? watchdog+0x21a/0x1030 [ 598.461971][ T31] kthread+0x388/0x470 [ 598.466271][ T31] ? __pfx_watchdog+0x10/0x10 [ 598.471039][ T31] ? __pfx_kthread+0x10/0x10 [ 598.475685][ T31] ret_from_fork+0x51e/0xb90 [ 598.480327][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 598.485493][ T31] ? __switch_to+0xc7d/0x1450 [ 598.490214][ T31] ? __pfx_kthread+0x10/0x10 [ 598.494854][ T31] ret_from_fork_asm+0x1a/0x30 [ 598.499679][ T31] [ 598.503353][ T31] Kernel Offset: disabled [ 598.507697][ T31] Rebooting in 86400 seconds..