last executing test programs: 7m28.002110743s ago: executing program 2 (id=460): pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) 7m27.88141714s ago: executing program 2 (id=461): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x8, 0xb) 7m27.783604975s ago: executing program 2 (id=462): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x11}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m27.496434903s ago: executing program 2 (id=463): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000020c0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x61, 0x0, 0x30, 0x61, 0x2e, 0x5f, 0x2e]}}, 0x0, 0x2d, 0x0, 0x1, 0x10000001}, 0x28) 7m27.375366905s ago: executing program 2 (id=464): syz_usb_connect$cdc_ecm(0x0, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12015002020000102505a1a440422f6218010902500001010940030904000f0202060005052406ff"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 7m16.717780131s ago: executing program 2 (id=469): syz_emit_ethernet(0x7b, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x45, 0x2f, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x880b, 0x1, 0x0, [], "a6"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x80}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x20}, 0x2, {0xfffffffd}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 6m51.212523633s ago: executing program 32 (id=469): syz_emit_ethernet(0x7b, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x45, 0x2f, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x880b, 0x1, 0x0, [], "a6"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x80}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x20}, 0x2, {0xfffffffd}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 3m26.28275669s ago: executing program 4 (id=2799): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000280)=""/73}, 0x20) 3m26.064431523s ago: executing program 4 (id=2806): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) get_mempolicy(&(0x7f0000000040), 0x0, 0x8000000000000001, &(0x7f0000ffc000/0x3000)=nil, 0x4) 3m25.770164297s ago: executing program 4 (id=2811): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) 3m25.233933506s ago: executing program 4 (id=2818): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x501, 0x0, 0x25dfdbf9, {}, [@IFLA_IFNAME={0x14, 0x3, 'team_slave_1\x00'}]}, 0x34}}, 0x40848c0) 3m25.054999637s ago: executing program 4 (id=2822): mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) 3m24.823958411s ago: executing program 4 (id=2827): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 3m9.685345059s ago: executing program 33 (id=2827): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 2m30.347064166s ago: executing program 5 (id=3653): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca0ebc000000000000008000f0fffeffe809005300fff5dd00000010000163d4f99d69e216e9cc21000a0c10000000008003000000", 0x58}], 0x1) 2m30.026617862s ago: executing program 5 (id=3658): r0 = io_uring_setup(0x43b6, &(0x7f0000000280)={0x0, 0x31a9, 0x40, 0x2, 0x1cd}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f00000004c0)={0x1, 0x1, 0x0, &(0x7f00000003c0)=[{0x0}], 0x0}, 0x20) 2m29.702426738s ago: executing program 5 (id=3664): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x80) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000280)=@generic={0x0, r0}, 0x18) 2m29.437262199s ago: executing program 5 (id=3669): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b04000000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2004000c) 2m29.274672211s ago: executing program 5 (id=3672): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000080)={0x4, 0x1, 0x1000, 0x10, 0xe, 0x5, 0x4, 0x7, 0xa4, 0x6, 0x9, "215c3c2761cfe9cfdd0bbb33f13c37fca3b522e35995834e0ce35f7c61693f66"}) 2m29.011816498s ago: executing program 5 (id=3678): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)={0x14, 0x26, 0x1, 0x70bd29, 0x25dfdbfb, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xc040) 2m13.77589944s ago: executing program 34 (id=3678): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)={0x14, 0x26, 0x1, 0x70bd29, 0x25dfdbfb, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xc040) 2.617610975s ago: executing program 1 (id=5429): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f0000000900)) 2.442266712s ago: executing program 1 (id=5434): syz_emit_ethernet(0x80, 0x0, 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100027a2571407be5c955bd460102030109022b00010406100109044a06020806620809060000000205070209050f0010008000090725010c8005"], 0x0) 1.329247304s ago: executing program 6 (id=5453): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd25, 0x0, {{@in6=@private2, @in6=@mcast1, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0xd42, 0x0, 0x2dd}, 0x0, 0x6e6bc0}, [@tmpl={0x84, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x0, 0x0, 0x3}]}]}, 0x13c}}, 0x0) 1.328182763s ago: executing program 7 (id=5454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) 1.255686916s ago: executing program 0 (id=5456): r0 = timerfd_create(0x0, 0x80000) read(r0, 0x0, 0x0) 1.159547106s ago: executing program 6 (id=5457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x67}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.137851367s ago: executing program 7 (id=5458): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x6, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xc74, 0x0, 0xffffffff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10, {0x7, 0x0, 0xba6d, 0x0, 0x0, 0x7}}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff9}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x494}}, 0x0) 1.087725895s ago: executing program 0 (id=5459): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_cred(r0, 0x1, 0x31, 0x0, 0x0) 1.073932389s ago: executing program 3 (id=5460): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x8, 0x5, 0x3800000, 0x800, 0x14, 0x8, 0x8, 0x0, 0xa83, 0x5, 0x8, 0x0, 0x9, 0x888e, 0x1, 0x7fffffff, 0x4b2, 0x4319, 0x2, 0x2}}) 978.214296ms ago: executing program 1 (id=5461): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x9, 0x1, &(0x7f0000000040)=[0x95c6], &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)}) 948.049262ms ago: executing program 6 (id=5462): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x4ac4023a, 0x3, 0x80, "3fdd5335df2e225b4a4531da982d84a3b8545bd2ec6e5e344e3c3c4699cd745e", 0xa0363159}) 919.612125ms ago: executing program 7 (id=5463): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) listen(0xffffffffffffffff, 0x8) 863.724235ms ago: executing program 0 (id=5464): r0 = syz_open_dev$vim2m(&(0x7f00000013c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x2, 0x80, "010000dd0000c1ae000001000000000000000008ffe6000000000000da00", 0x56544943}) 846.245057ms ago: executing program 3 (id=5465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) 710.739901ms ago: executing program 1 (id=5466): r0 = socket$caif_stream(0x25, 0x1, 0x5) accept(r0, 0x0, 0x0) 688.745727ms ago: executing program 0 (id=5467): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000400)=0xf) 688.617594ms ago: executing program 7 (id=5468): r0 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)='id:') 688.049782ms ago: executing program 6 (id=5469): creat(&(0x7f00000000c0)='./bus\x00', 0x107) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x44, &(0x7f0000000100)='trans=rdma,\xd6\xd2\x1e\x80\xc2W\xbe\xbf\x16S\x84j\xea1Z\x8e\xe9\xc7\x0ep*\xd9\x94Mk\xb9\xc6\x9e\xcf\xd7\x9eoc\xe2(\x03\xc3!{\x8aY\x17\xd0\xa3\xfe\xe3/\xc4\f\b2t\x1c4\x93/^\x91\xe8\xabK\x9e\x14.\xb3\x92\x13\x80\x96m\xc7\x96\"\xcb\xdc\xcc\xd8\x18\"\x9eT\x97Kh5i\x8f\xfc\xd8=\x8b\xe9\x1b\xce\xe4\xf5$\xf1sa,\x8f\xb6\x89\xcfZ\xa0\xae>Xs=\xadu\x9aQ\xe2z\xaf\x90\x90\x9b\x92\x9b\xeb\aQb#\xec}\xa79\xd7\xe6<6\xadL\xd8$\xd3\xa9\x1d\xd9W\x8a\xb9F\x982%g!\x8a\"@*\xb8\xc6\xddw\xefY\xefJ\x0e\xc5%S.\n\xde\x95l\xd9\x1cPp\xb3\xfe+rY\xc24\x99\x88\xe7\njs\xb2\x8f') 563.668456ms ago: executing program 3 (id=5470): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000100), 0x0) 500.009297ms ago: executing program 3 (id=5471): r0 = syz_open_dev$video4linux(&(0x7f0000000400), 0x3, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x200, 0xffffffffffffffff, 0x0, 0x0}) 396.879343ms ago: executing program 7 (id=5472): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) close(r0) 335.629718ms ago: executing program 0 (id=5473): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="8800000010000d040400fdf20000000000000000", @ANYRES32=0x0, @ANYBLOB="0010000019500000540012800c0001006d6163766c616e0044000280080032000800000008000700d1ae0000080001000200000008000300020000000800010002000000080007000600000008000700060000000600020001000000140035006d6163766c616e30"], 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) 320.191214ms ago: executing program 6 (id=5474): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001880)="5c00000012006b1e003de3d86e6c1dff05137e0300000000000000b68675f8001d000a00a0e69eeab556a7e60f1e611ca66982949a36c23d3b48dfd8cdbf9367b4fa0a64080003000601000008000300110fff0000", 0x55}, {&(0x7f0000000180)="6a628b6699d9dd", 0x7}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4040844) 310.728972ms ago: executing program 3 (id=5475): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000100), 0x4) 247.733846ms ago: executing program 1 (id=5476): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000014001b0528bd7000ffdbb62511f3"], 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) 157.880158ms ago: executing program 7 (id=5477): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x200, @private0, 0x8}}, 0x80, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x10b8}, 0x200008c0) 140.501799ms ago: executing program 0 (id=5478): r0 = fsopen(&(0x7f0000000240)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000d00)='#:::\x04\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14 (1833:0201) [ 343.981144][ T819] uvcvideo 2-1:0.0: No valid video chain found. [ 344.057120][ T819] usb 2-1: USB disconnect, device number 43 [ 344.294939][ T9808] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 344.294970][ T9808] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 345.282512][ T5826] Bluetooth: hci5: command 0x0406 tx timeout [ 346.287806][ T9860] netlink: 'syz.5.1789': attribute type 1 has an invalid length. [ 346.287834][ T9860] netlink: 924 bytes leftover after parsing attributes in process `syz.5.1789'. [ 346.456861][ T5909] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 346.611254][ T5909] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.611285][ T5909] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 346.611340][ T5909] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 346.611365][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.679761][ T5909] usb 4-1: config 0 descriptor?? [ 346.925011][ T5909] Bluetooth: Can't get state to change to load ram patch err [ 346.925043][ T5909] Bluetooth: Loading patch file failed [ 346.925081][ T5909] ath3k 4-1:0.0: probe with driver ath3k failed with error -121 [ 347.165959][ T36] usb 4-1: USB disconnect, device number 44 [ 349.715508][ T9931] netlink: 'syz.5.1819': attribute type 1 has an invalid length. [ 350.934013][ T9968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1836'. [ 353.160086][T10035] netlink: 'syz.3.1869': attribute type 10 has an invalid length. [ 353.242593][T10035] geneve0: entered promiscuous mode [ 353.566053][T10035] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 353.977932][T10053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.667009][T10080] netlink: 'syz.5.1890': attribute type 3 has an invalid length. [ 358.656852][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 358.656875][ T37] audit: type=1326 audit(1776648151.673:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10187 comm="syz.5.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe643c4c819 code=0x7ffc0000 [ 358.683947][ T37] audit: type=1326 audit(1776648151.673:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10187 comm="syz.5.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe643c4c819 code=0x7ffc0000 [ 358.726153][ T37] audit: type=1326 audit(1776648151.733:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10187 comm="syz.5.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fe643c4c819 code=0x7ffc0000 [ 358.779636][ T37] audit: type=1326 audit(1776648151.793:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10187 comm="syz.5.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe643c4c819 code=0x7ffc0000 [ 358.805642][ T37] audit: type=1326 audit(1776648151.813:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10187 comm="syz.5.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe643c4c819 code=0x7ffc0000 [ 358.894925][T10192] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 358.894957][T10192] CIFS mount error: No usable UNC path provided in device string! [ 358.894957][T10192] [ 358.895211][T10192] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 359.162761][T10199] comedi comedi4: bad chanlist[0]=0x7ffffffc chan=65532 range length=2 [ 359.222162][T10201] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 359.492627][T10213] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1950'. [ 360.012969][T10229] netlink: 'syz.3.1960': attribute type 1 has an invalid length. [ 360.012992][T10229] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1960'. [ 361.290678][T10247] netlink: 'syz.1.1969': attribute type 21 has an invalid length. [ 361.290708][T10247] IPv6: NLM_F_CREATE should be specified when creating new route [ 361.290933][T10247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 361.290946][T10247] IPv6: NLM_F_CREATE should be set when creating new route [ 361.291082][T10247] IPv6: NLM_F_CREATE should be set when creating new route [ 361.291124][T10247] IPv6: NLM_F_CREATE should be set when creating new route [ 361.650391][T10235] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 364.256744][T10329] netlink: 'syz.1.2008': attribute type 10 has an invalid length. [ 364.369310][T10329] geneve0: entered promiscuous mode [ 364.427269][T10329] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 365.090661][ T6184] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 365.250025][ T6184] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 365.250076][ T6184] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.328712][ T6184] usb 4-1: config 0 descriptor?? [ 365.383548][ T6184] cp210x 4-1:0.0: cp210x converter detected [ 365.952161][ T6184] usb 4-1: cp210x converter now attached to ttyUSB0 [ 365.987045][ T6184] usb 4-1: USB disconnect, device number 45 [ 366.197175][ T6184] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 366.198006][ T6184] cp210x 4-1:0.0: device disconnected [ 366.266853][T10378] netlink: 276 bytes leftover after parsing attributes in process `syz.4.2032'. [ 366.700984][ T819] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 366.863148][ T819] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 366.863180][ T819] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 366.863203][ T819] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.863222][ T819] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 366.863245][ T819] usb 2-1: config 1 has no interface number 0 [ 366.863294][ T819] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 366.863318][ T819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.935447][ T819] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 366.966588][ T6184] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 367.125021][ T819] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 367.125583][ T819] snd_usb_pod 2-1:1.1: invalid control EP [ 367.125602][ T819] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 367.125907][ T819] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 367.157828][ T819] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 367.182208][ T6184] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 367.182240][ T6184] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.182265][ T6184] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 367.182302][ T6184] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.184180][ T6184] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 367.184215][ T6184] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 367.184231][ T6184] usb 6-1: Product: syz [ 367.184242][ T6184] usb 6-1: Manufacturer: syz [ 367.408646][ T6184] cdc_wdm 6-1:1.0: skipping garbage [ 367.408669][ T6184] cdc_wdm 6-1:1.0: skipping garbage [ 367.408759][ T6184] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 367.440877][ T5955] usb 2-1: USB disconnect, device number 44 [ 367.620811][T10400] 9pnet_fd: p9_fd_create_tcp (10400): problem connecting socket to 127.0.0.1 [ 367.675177][ T6184] usb 6-1: USB disconnect, device number 8 [ 368.087695][T10412] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2049'. [ 368.087727][T10412] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2049'. [ 368.366945][T10420] netlink: 'syz.3.2052': attribute type 8 has an invalid length. [ 368.526059][T10424] netlink: 'syz.4.2054': attribute type 10 has an invalid length. [ 368.603676][T10424] geneve0: entered promiscuous mode [ 368.748247][T10424] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 370.511141][T10478] netlink: 'syz.1.2081': attribute type 1 has an invalid length. [ 370.511168][T10478] netlink: 2096 bytes leftover after parsing attributes in process `syz.1.2081'. [ 370.511200][T10478] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2081'. [ 370.931707][T10492] tmpfs: Bad value for 'mpol' [ 371.388618][T10502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2093'. [ 371.388648][T10502] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 371.388667][T10502] openvswitch: netlink: Message has 16 unknown bytes. [ 371.483681][T10506] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2095'. [ 371.802567][T10514] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2099'. [ 374.414031][ T5955] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 374.564616][ T5955] usb 4-1: Using ep0 maxpacket: 32 [ 374.569786][ T5955] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 374.569819][ T5955] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 374.569843][ T5955] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 374.569865][ T5955] usb 4-1: config 1 has no interface number 0 [ 374.569913][ T5955] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 374.569938][ T5955] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 374.569983][ T5955] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 374.570009][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.798789][ T819] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 374.866313][ T5955] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 374.983439][ T819] usb 2-1: too many configurations: 70, using maximum allowed: 8 [ 374.985402][ T819] usb 2-1: config index 0 descriptor too short (expected 65505, got 72) [ 375.011382][ T819] usb 2-1: config index 1 descriptor too short (expected 65505, got 72) [ 375.026428][ T819] usb 2-1: config index 2 descriptor too short (expected 65505, got 72) [ 375.029485][ T819] usb 2-1: config index 3 descriptor too short (expected 65505, got 72) [ 375.108789][ T5955] snd_usb_pod 4-1:1.1: invalid control EP [ 375.108813][ T5955] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 375.109964][ T5955] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 375.110608][ T5955] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 375.158300][T10589] bond1: option lacp_active: invalid value (8) [ 375.209645][ T819] usb 2-1: config index 4 descriptor too short (expected 65505, got 72) [ 375.221828][ T819] usb 2-1: config index 5 descriptor too short (expected 65505, got 72) [ 375.232018][ T819] usb 2-1: config index 6 descriptor too short (expected 65505, got 72) [ 375.245936][ T819] usb 2-1: config index 7 descriptor too short (expected 65505, got 72) [ 375.273559][ T819] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 375.273598][ T819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.273621][ T819] usb 2-1: Product: syz [ 375.273638][ T819] usb 2-1: Manufacturer: syz [ 375.273655][ T819] usb 2-1: SerialNumber: syz [ 375.331207][ T819] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 375.396521][ T5955] usb 4-1: USB disconnect, device number 46 [ 375.469020][T10589] bond1 (unregistering): Released all slaves [ 375.641813][ T5824] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 377.052604][ T5824] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 377.053309][ T5824] ath9k_htc: Failed to initialize the device [ 378.044177][ T36] usb 2-1: USB disconnect, device number 45 [ 378.075731][T10619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2150'. [ 378.080623][ T36] usb 2-1: ath9k_htc: USB layer deinitialized [ 378.120892][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 378.460982][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2153'. [ 379.485798][T10663] kAFS: No cell specified [ 379.563616][ T36] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 379.760038][ T36] usb 2-1: Using ep0 maxpacket: 16 [ 379.762768][ T36] usb 2-1: config 251 has an invalid interface number: 202 but max is 0 [ 379.762799][ T36] usb 2-1: config 251 has no interface number 0 [ 379.762846][ T36] usb 2-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 379.762875][ T36] usb 2-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 379.762899][ T36] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 379.762928][ T36] usb 2-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 379.762955][ T36] usb 2-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 25 [ 379.762981][ T36] usb 2-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 379.763010][ T36] usb 2-1: config 251 interface 202 has no altsetting 0 [ 379.772510][ T36] usb 2-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 379.772615][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.772681][ T36] usb 2-1: Product: syz [ 379.772725][ T36] usb 2-1: Manufacturer: syz [ 379.772770][ T36] usb 2-1: SerialNumber: syz [ 379.938731][T10659] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 379.939549][T10659] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 380.457060][ T36] cxacru 2-1:251.202: send of cm 0x90 failed (-71) [ 380.457099][ T36] cxacru 2-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 380.523394][ T36] cxacru 2-1:251.202: probe with driver cxacru failed with error -22 [ 380.640475][ T36] usb 2-1: USB disconnect, device number 46 [ 381.425568][T10701] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2190'. [ 383.118449][T10742] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2211'. [ 383.118557][T10742] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2211'. [ 384.169626][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.616952][T10781] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 385.263338][T10803] capability: warning: `syz.3.2240' uses deprecated v2 capabilities in a way that may be insecure [ 387.825830][T10870] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2272'. [ 387.830297][T10870] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 388.106477][T10876] netlink: 'syz.4.2275': attribute type 21 has an invalid length. [ 388.106504][T10876] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2275'. [ 388.106607][T10876] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2275'. [ 388.226420][ T5897] ath6kl: Failed to submit usb control message: -71 [ 388.226473][ T5897] ath6kl: unable to send the bmi data to the device: -71 [ 388.226490][ T5897] ath6kl: Unable to send get target info: -71 [ 388.229486][ T5897] ath6kl: Failed to init ath6kl core: -71 [ 388.230957][ T5897] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 388.310866][ T5897] usb 5-1: USB disconnect, device number 40 [ 388.556403][T10882] delete_channel: no stack [ 388.728968][T10892] mmap: syz.3.2282 (10892) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 388.878198][T10902] netlink: 'syz.5.2286': attribute type 2 has an invalid length. [ 389.758435][ T5955] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 389.808935][T10902] hmac(sha224): entered promiscuous mode [ 389.936993][ T5955] usb 4-1: Using ep0 maxpacket: 32 [ 389.942819][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 389.942852][ T5955] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 389.978177][ T5955] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 389.978212][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 389.978240][ T5955] usb 4-1: Product: syz [ 389.978255][ T5955] usb 4-1: Manufacturer: syz [ 389.978271][ T5955] usb 4-1: SerialNumber: syz [ 390.099786][ T5955] usb 4-1: config 0 descriptor?? [ 390.213496][T10935] tmpfs: Bad value for 'mpol' [ 390.337514][ T5824] usb 4-1: USB disconnect, device number 47 [ 391.404273][ T5904] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 391.564262][ T5904] usb 4-1: Using ep0 maxpacket: 16 [ 391.567284][ T5904] usb 4-1: config 251 has an invalid interface number: 202 but max is 0 [ 391.567315][ T5904] usb 4-1: config 251 has no interface number 0 [ 391.567364][ T5904] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 391.567391][ T5904] usb 4-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 391.567416][ T5904] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 391.567445][ T5904] usb 4-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 391.567478][ T5904] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 25 [ 391.567502][ T5904] usb 4-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 391.567530][ T5904] usb 4-1: config 251 interface 202 has no altsetting 0 [ 391.570868][ T5904] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 391.570902][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.570924][ T5904] usb 4-1: Product: syz [ 391.570940][ T5904] usb 4-1: Manufacturer: syz [ 391.570956][ T5904] usb 4-1: SerialNumber: syz [ 391.778923][T10966] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 391.779610][T10966] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 392.002153][ T5904] cxacru 4-1:251.202: send of cm 0x90 failed (-71) [ 392.002189][ T5904] cxacru 4-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 392.002400][ T5904] cxacru 4-1:251.202: probe with driver cxacru failed with error -22 [ 392.051280][ T5904] usb 4-1: USB disconnect, device number 48 [ 392.861274][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2343'. [ 393.799219][T11059] dns_resolver: Unsupported content type (16) [ 394.634266][ T37] audit: type=1107 audit(1776648187.581:43): pid=11081 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 395.436534][T11117] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2389'. [ 395.637516][T11125] tipc: Can't bind to reserved service type 1 [ 396.401281][T11155] usb usb8: usbfs: process 11155 (syz.3.2406) did not claim interface 0 before use [ 396.776150][T11170] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2413'. [ 396.776195][T11170] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2413'. [ 396.922470][T11170] bond0: (slave bond_slave_0): Releasing backup interface [ 397.080889][T11170] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 397.643416][ T5904] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 397.811185][ T5904] usb 2-1: Using ep0 maxpacket: 8 [ 397.828597][ T5904] usb 2-1: unable to get BOS descriptor or descriptor too short [ 397.864165][ T5904] usb 2-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 397.864200][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.864223][ T5904] usb 2-1: Product: syz [ 397.864239][ T5904] usb 2-1: Manufacturer: syz [ 397.864256][ T5904] usb 2-1: SerialNumber: syz [ 398.181402][ T5904] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 398.202097][ T5904] usb 2-1: unit 8 not found! [ 398.294903][ T5904] usb 2-1: USB disconnect, device number 47 [ 398.807004][ T5998] udevd[5998]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 399.239439][T11249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2453'. [ 400.888122][ T37] audit: type=1326 audit(1776648193.914:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11299 comm="syz.1.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca792c819 code=0x7ffc0000 [ 400.888183][ T37] audit: type=1326 audit(1776648193.914:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11299 comm="syz.1.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca792c819 code=0x7ffc0000 [ 400.948091][ T37] audit: type=1326 audit(1776648193.974:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11299 comm="syz.1.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca792c819 code=0x7ffc0000 [ 400.948462][ T37] audit: type=1326 audit(1776648193.974:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11299 comm="syz.1.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca792c819 code=0x7ffc0000 [ 400.954493][ T37] audit: type=1326 audit(1776648193.984:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11299 comm="syz.1.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7faca792c819 code=0x7ffc0000 [ 400.954812][ T37] audit: type=1326 audit(1776648193.984:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11299 comm="syz.1.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca792c819 code=0x7ffc0000 [ 400.983843][ T37] audit: type=1326 audit(1776648193.984:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11299 comm="syz.1.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7faca792c819 code=0x7ffc0000 [ 400.984003][ T37] audit: type=1326 audit(1776648194.014:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11299 comm="syz.1.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca792c819 code=0x7ffc0000 [ 400.984153][ T37] audit: type=1326 audit(1776648194.014:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11299 comm="syz.1.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7faca792c819 code=0x7ffc0000 [ 401.434902][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2486'. [ 401.664727][T11321] ±ÿ: renamed from team_slave_1 (while UP) [ 402.388771][ T5824] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 402.555364][T11305] syz.4.2482 (11305): drop_caches: 2 [ 402.566742][ T5824] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 402.566774][ T5824] usb 4-1: config 0 has no interface number 0 [ 402.566823][ T5824] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 402.566853][ T5824] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 402.618342][ T5824] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 402.618376][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.618400][ T5824] usb 4-1: Product: syz [ 402.618423][ T5824] usb 4-1: Manufacturer: syz [ 402.640696][ T5824] usb 4-1: SerialNumber: syz [ 402.662552][ T5824] usb 4-1: config 0 descriptor?? [ 402.663522][T11334] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 402.683564][ T5824] usb-storage 4-1:0.20: USB Mass Storage device detected [ 402.699188][ T5824] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 402.897949][ T5824] scsi host1: usb-storage 4-1:0.20 [ 403.129629][ T5824] usb 4-1: USB disconnect, device number 49 [ 403.133294][T11360] netlink: 'syz.4.2508': attribute type 16 has an invalid length. [ 403.133328][T11360] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2508'. [ 403.483461][T11368] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2511'. [ 404.115023][T11389] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2521'. [ 404.576585][T11404] netlink: 'syz.1.2529': attribute type 21 has an invalid length. [ 405.171802][T11423] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 406.193836][T11466] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 406.242262][T11467] tmpfs: Bad value for 'mpol' [ 407.540301][T11504] delete_channel: no stack [ 408.375741][ T5824] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 408.549734][ T5824] usb 4-1: unable to get BOS descriptor or descriptor too short [ 408.555091][ T5824] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 408.555123][ T5824] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 408.555144][ T5824] usb 4-1: config 63 has no interface number 0 [ 408.555179][ T5824] usb 4-1: config 63 interface 66 has no altsetting 0 [ 408.610944][ T5824] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 408.610980][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.611003][ T5824] usb 4-1: Product: syz [ 408.611018][ T5824] usb 4-1: Manufacturer: syz [ 408.611036][ T5824] usb 4-1: SerialNumber: syz [ 408.914296][ T5824] uvcvideo 4-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 408.924411][ T5824] uvcvideo 4-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 408.937011][ T5824] uvcvideo 4-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 408.939601][ T5824] uvcvideo 4-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 408.943754][ T5824] uvcvideo 4-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 408.944298][ T5824] uvcvideo 4-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 408.944390][ T5824] uvcvideo 4-1:63.66: No streaming interface found for terminal 29. [ 408.944414][ T5824] uvcvideo 4-1:63.66: Entity type for entity Output 32773 was not initialized! [ 409.027968][ T5824] usb 4-1: USB disconnect, device number 50 [ 409.143322][T11558] netlink: 63 bytes leftover after parsing attributes in process `syz.5.2604'. [ 409.921845][T11588] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2619'. [ 409.921872][T11588] netlink: 'syz.4.2619': attribute type 1 has an invalid length. [ 409.950380][T11589] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2618'. [ 409.984902][ T36] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 410.165059][ T36] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 410.165089][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.165107][ T36] usb 2-1: Product: syz [ 410.165119][ T36] usb 2-1: Manufacturer: syz [ 410.165133][ T36] usb 2-1: SerialNumber: syz [ 410.219675][ T36] usb 2-1: config 0 descriptor?? [ 410.241977][ T36] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 048 [ 410.427168][T11602] openvswitch: netlink: IP tunnel attribute has 6 unknown bytes. [ 410.469238][ T36] (null): failure setting delay to 10us [ 410.469307][ T36] i2c-tiny-usb 2-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 410.541153][ T36] usb 2-1: USB disconnect, device number 48 [ 411.147039][ T37] audit: type=1326 audit(1776648204.189:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11623 comm="syz.5.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe643c4c819 code=0x7ffc0000 [ 411.147114][ T37] audit: type=1326 audit(1776648204.189:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11623 comm="syz.5.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe643c4c819 code=0x7ffc0000 [ 411.163062][ T37] audit: type=1326 audit(1776648204.199:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11623 comm="syz.5.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fe643c4c819 code=0x7ffc0000 [ 411.163518][ T37] audit: type=1326 audit(1776648204.199:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11623 comm="syz.5.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe643c4c819 code=0x7ffc0000 [ 411.418322][ T36] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 411.567667][ T36] usb 5-1: unable to get BOS descriptor or descriptor too short [ 411.571006][ T36] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 253, changing to 7 [ 411.598207][ T36] usb 5-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 411.598242][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.598264][ T36] usb 5-1: Product: syz [ 411.598280][ T36] usb 5-1: Manufacturer: syz [ 411.598296][ T36] usb 5-1: SerialNumber: syz [ 411.660305][ T36] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 411.660876][ T36] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 411.934273][T11644] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2645'. [ 411.934385][ T10] usb 5-1: USB disconnect, device number 41 [ 412.208628][T11658] netlink: 'syz.3.2653': attribute type 1 has an invalid length. [ 412.208671][T11658] netlink: 'syz.3.2653': attribute type 2 has an invalid length. [ 413.811090][T11718] netlink: 'syz.1.2683': attribute type 303 has an invalid length. [ 414.166238][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2690'. [ 415.033094][T11767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2709'. [ 415.321032][T11780] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 416.701758][ T36] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 416.869767][ T36] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 416.869806][ T36] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 416.869852][ T36] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 416.884952][ T36] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 416.884985][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.885006][ T36] usb 6-1: Product: syz [ 416.885023][ T36] usb 6-1: Manufacturer: syz [ 416.885039][ T36] usb 6-1: SerialNumber: syz [ 416.959374][ T36] usb 6-1: config 0 descriptor?? [ 417.189207][ T36] powermate: unknown product id 0240 [ 417.189228][ T36] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 417.189488][ T36] powermate 6-1:0.0: probe with driver powermate failed with error -5 [ 417.237910][ T36] usb 6-1: USB disconnect, device number 9 [ 417.543319][T11793] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.543831][T11793] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.393043][T11793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.524933][T11793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.067937][ T67] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.080598][ T67] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.084238][ T67] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.084294][ T67] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.912779][T12075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2856'. [ 425.912841][T12075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2856'. [ 425.912890][T12075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2856'. [ 425.912940][T12075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2856'. [ 425.912988][T12075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2856'. [ 425.913035][T12075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2856'. [ 425.913083][T12075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2856'. [ 425.913132][T12075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2856'. [ 425.913180][T12075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2856'. [ 425.913230][T12075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2856'. [ 427.148649][T12122] 9pnet_fd: Insufficient options for proto=fd [ 427.246319][ T5833] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 427.451776][ T5833] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 427.451806][ T5833] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 427.451826][ T5833] usb 2-1: config 220 has no interface number 2 [ 427.451884][ T5833] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 427.451910][ T5833] usb 2-1: config 220 interface 0 has no altsetting 0 [ 427.451929][ T5833] usb 2-1: config 220 interface 76 has no altsetting 0 [ 427.452036][ T5833] usb 2-1: config 220 interface 1 has no altsetting 0 [ 427.502363][ T5833] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 427.502489][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.502566][ T5833] usb 2-1: Product: syz [ 427.502613][ T5833] usb 2-1: Manufacturer: syz [ 427.502670][ T5833] usb 2-1: SerialNumber: syz [ 427.901769][ T5833] usb 2-1: selecting invalid altsetting 0 [ 427.941291][ T5833] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 427.941332][ T5833] uvcvideo 2-1:220.0: No valid video chain found. [ 427.965080][T12142] netlink: 'syz.3.2891': attribute type 10 has an invalid length. [ 428.042821][ T5833] usb 2-1: selecting invalid altsetting 0 [ 428.042865][ T5833] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 428.091136][ T5833] usb 2-1: USB disconnect, device number 49 [ 428.114295][T12142] team0: Device veth1_macvtap failed to register rx_handler [ 429.337945][T12189] openvswitch: netlink: Flow actions attr not present in new flow. [ 429.409055][T12193] netlink: 'syz.1.2914': attribute type 10 has an invalid length. [ 429.442039][T12193] bridge0: port 3(team0) entered disabled state [ 429.512832][T12193] team0: left allmulticast mode [ 429.512857][T12193] team_slave_0: left allmulticast mode [ 429.512880][T12193] ±ÿ: left allmulticast mode [ 429.512904][T12193] team0: left promiscuous mode [ 429.512934][T12193] team_slave_0: left promiscuous mode [ 429.513277][T12193] ±ÿ: left promiscuous mode [ 429.549803][T12193] bridge0: port 3(team0) entered disabled state [ 429.689305][T12193] team0: Cannot enslave team device to itself [ 430.884622][T12251] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 432.174509][T12298] __nla_validate_parse: 43 callbacks suppressed [ 432.174533][T12298] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2965'. [ 432.589131][T12313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2973'. [ 432.615422][ T5909] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 432.655838][T12313] IPv6: sit1: Disabled Multicast RS [ 432.680606][T12313] sit1: entered allmulticast mode [ 432.766661][ T5909] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 432.766691][ T5909] usb 6-1: config 0 has no interface number 0 [ 432.766734][ T5909] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 432.766760][ T5909] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 432.769473][ T5909] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 432.769503][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.769526][ T5909] usb 6-1: Product: syz [ 432.769541][ T5909] usb 6-1: Manufacturer: syz [ 432.769559][ T5909] usb 6-1: SerialNumber: syz [ 432.857802][ T5909] usb 6-1: config 0 descriptor?? [ 432.859012][T12305] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 432.884452][ T5909] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 433.004851][ T5909] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 433.293721][ T5909] usb 6-1: USB disconnect, device number 10 [ 433.350791][ T5909] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 433.366223][ T5909] cyberjack 6-1:0.69: device disconnected [ 433.903013][ T5909] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 434.073838][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 434.076516][ T5909] usb 2-1: config index 0 descriptor too short (expected 59428, got 36) [ 434.076546][ T5909] usb 2-1: config 1 has an invalid interface number: 105 but max is -1 [ 434.076569][ T5909] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.076591][ T5909] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 434.076613][ T5909] usb 2-1: config 1 has no interface number 0 [ 434.076659][ T5909] usb 2-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 434.076689][ T5909] usb 2-1: config 1 interface 105 has no altsetting 0 [ 434.155150][ T5909] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 434.155191][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 434.155214][ T5909] usb 2-1: Product: syz [ 434.155229][ T5909] usb 2-1: Manufacturer: syz [ 434.155245][ T5909] usb 2-1: SerialNumber: syz [ 434.241762][T12351] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 434.486996][ T5909] aqc111 2-1:1.105: probe with driver aqc111 failed with error -22 [ 434.673639][ T5905] usb 2-1: USB disconnect, device number 50 [ 435.228031][T12385] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 435.228063][T12385] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 435.228166][T12385] vhci_hcd vhci_hcd.0: Device attached [ 435.270460][T12386] vhci_hcd: cannot find the pending unlink 2097409 [ 435.270498][T12386] vhci_hcd: connection closed [ 435.282791][ T1230] vhci_hcd vhci_hcd.5: stop threads [ 435.282820][ T1230] vhci_hcd vhci_hcd.5: release socket [ 435.282864][ T1230] vhci_hcd vhci_hcd.5: disconnect device [ 435.544750][T12395] tmpfs: Bad value for 'mpol' [ 436.557092][T12436] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3035'. [ 436.991869][T12449] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3040'. [ 437.080700][T12451] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3042'. [ 437.157614][T12457] netlink: 'syz.1.3046': attribute type 25 has an invalid length. [ 437.157641][T12457] netlink: 'syz.1.3046': attribute type 3 has an invalid length. [ 437.157657][T12457] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3046'. [ 437.827762][T12483] veth1_macvtap: left promiscuous mode [ 437.855916][T12483] macsec0: entered promiscuous mode [ 437.855953][T12483] macsec0: entered allmulticast mode [ 438.037932][T12488] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3060'. [ 438.037966][T12488] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3060'. [ 438.038016][T12488] netlink: 6 bytes leftover after parsing attributes in process `syz.5.3060'. [ 439.387944][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 439.428795][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 439.466343][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 439.468971][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 439.481097][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 441.619233][ T5133] Bluetooth: hci1: command tx timeout [ 442.018242][T12528] chnl_net:caif_netlink_parms(): no params data found [ 442.446106][T12528] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.446327][T12528] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.446548][T12528] bridge_slave_0: entered allmulticast mode [ 442.463322][T12528] bridge_slave_0: entered promiscuous mode [ 442.537615][T12528] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.537776][T12528] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.537999][T12528] bridge_slave_1: entered allmulticast mode [ 442.572560][T12528] bridge_slave_1: entered promiscuous mode [ 442.850448][T12528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.879471][T12528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.099247][T12528] team0: Port device team_slave_0 added [ 443.129366][T12528] team0: Port device team_slave_1 added [ 443.201113][T12528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.201134][T12528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.201165][T12528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.276086][T12528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.276105][T12528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.276131][T12528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.446424][T12528] hsr_slave_0: entered promiscuous mode [ 443.447955][T12528] hsr_slave_1: entered promiscuous mode [ 443.461429][T12528] debugfs: 'hsr0' already exists in 'hsr' [ 443.461460][T12528] Cannot create hsr debugfs directory [ 443.592575][T12641] openvswitch: netlink: Missing valid actions attribute. [ 443.592617][T12641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.698114][ T5133] Bluetooth: hci1: command tx timeout [ 444.602758][T12673] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.960011][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3153'. [ 445.552428][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.787098][ T5133] Bluetooth: hci1: command tx timeout [ 445.844711][T12704] openvswitch: netlink: IP tunnel dst address not specified [ 446.315952][T12528] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 446.438392][T12528] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 446.439450][T12528] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 446.652473][T12528] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 446.655442][T12528] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 446.701231][T12528] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 446.702262][T12528] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 446.757477][T12528] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 447.115609][T12750] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 447.115609][T12750] Please contact the netfilter-devel mailing list or update your nftables rules. [ 447.377935][T12755] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3194'. [ 447.668636][T12766] netlink: 'syz.1.3190': attribute type 4 has an invalid length. [ 447.668661][T12766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3190'. [ 447.668706][T12766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3190'. [ 447.866571][ T5133] Bluetooth: hci1: command tx timeout [ 448.034691][T12528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.162620][T12528] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.213236][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.231088][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.353907][ T1230] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.354065][ T1230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.739015][T12797] openvswitch: netlink: Missing key (keys=40, expected=80) [ 448.741424][T12795] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3205'. [ 449.264175][T12814] exfat: Deprecated parameter 'debug' [ 449.319455][T12814] exFAT-fs (nullb0): invalid boot record signature [ 449.319474][T12814] exFAT-fs (nullb0): failed to read boot sector [ 449.319486][T12814] exFAT-fs (nullb0): failed to recognize exfat type [ 450.290431][T12528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.761072][T12528] veth0_vlan: entered promiscuous mode [ 451.800537][T12895] netlink: zone id is out of range [ 451.800556][T12895] netlink: zone id is out of range [ 451.800565][T12895] netlink: zone id is out of range [ 451.800574][T12895] netlink: zone id is out of range [ 451.800587][T12895] netlink: zone id is out of range [ 451.800664][T12895] netlink: zone id is out of range [ 451.800674][T12895] netlink: zone id is out of range [ 451.800684][T12895] netlink: zone id is out of range [ 451.800693][T12895] netlink: zone id is out of range [ 451.901190][T12897] netlink: 'syz.3.3247': attribute type 2 has an invalid length. [ 451.901218][T12897] netlink: 'syz.3.3247': attribute type 1 has an invalid length. [ 451.901235][T12897] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3247'. [ 452.073385][T12528] veth1_vlan: entered promiscuous mode [ 452.261969][T12528] veth0_macvtap: entered promiscuous mode [ 452.273554][T12528] veth1_macvtap: entered promiscuous mode [ 452.399445][T12528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.560380][T12528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.682069][ T6946] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.693312][ T6946] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.738527][ T6946] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.769148][ T6946] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.058582][T12939] bond3: option fail_over_mac: invalid value (127) [ 454.100487][T12939] bond3 (unregistering): Released all slaves [ 454.411934][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.411959][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.790493][ T6945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.790517][ T6945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.594525][T12992] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3291'. [ 455.999006][T13010] net_ratelimit: 37 callbacks suppressed [ 455.999031][T13010] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 456.756172][T13026] /dev/nullb0: Can't open blockdev [ 456.801876][ T819] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 456.965406][ T819] usb 4-1: Using ep0 maxpacket: 16 [ 456.984654][ T819] usb 4-1: unable to get BOS descriptor or descriptor too short [ 456.985988][ T819] usb 4-1: config 3 has an invalid interface number: 11 but max is 0 [ 456.986016][ T819] usb 4-1: config 3 has no interface number 0 [ 456.986086][ T819] usb 4-1: config 3 interface 11 altsetting 225 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 456.986119][ T819] usb 4-1: config 3 interface 11 altsetting 225 has an invalid descriptor for endpoint zero, skipping [ 456.986144][ T819] usb 4-1: config 3 interface 11 altsetting 225 has an endpoint descriptor with address 0xB4, changing to 0x84 [ 456.986172][ T819] usb 4-1: config 3 interface 11 altsetting 225 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 456.986205][ T819] usb 4-1: config 3 interface 11 has no altsetting 0 [ 456.987490][T13039] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3314'. [ 457.099265][ T819] usb 4-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=d4.bb [ 457.099301][ T819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.099324][ T819] usb 4-1: Product: syz [ 457.099340][ T819] usb 4-1: Manufacturer: syz [ 457.099357][ T819] usb 4-1: SerialNumber: syz [ 457.268453][T13045] bridge0: port 3(hsr0) entered blocking state [ 457.268594][T13045] bridge0: port 3(hsr0) entered disabled state [ 457.268877][T13045] hsr0: entered allmulticast mode [ 457.268897][T13045] hsr_slave_0: entered allmulticast mode [ 457.268919][T13045] hsr_slave_1: entered allmulticast mode [ 457.380016][T13045] hsr0: entered promiscuous mode [ 457.380897][T13045] bridge0: port 3(hsr0) entered blocking state [ 457.381009][T13045] bridge0: port 3(hsr0) entered forwarding state [ 457.450426][ T819] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.11/input/input16 [ 457.505927][ C0] appletouch 4-1:3.11: atp_complete: usb_submit_urb failed with result -1 [ 457.711763][ T819] usb 4-1: USB disconnect, device number 51 [ 457.987450][ T819] appletouch 4-1:3.11: input: appletouch disconnected [ 458.153907][T13071] netlink: 'syz.3.3328': attribute type 8 has an invalid length. [ 458.183553][T13073] netlink: 'syz.1.3330': attribute type 10 has an invalid length. [ 458.381491][ T37] audit: type=1326 audit(1776648251.453:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13078 comm="syz.6.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b3dac819 code=0x7ffc0000 [ 458.381670][ T37] audit: type=1326 audit(1776648251.453:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13078 comm="syz.6.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b3dac819 code=0x7ffc0000 [ 458.388489][ T37] audit: type=1326 audit(1776648251.453:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13078 comm="syz.6.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f76b3dac819 code=0x7ffc0000 [ 458.388652][ T37] audit: type=1326 audit(1776648251.453:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13078 comm="syz.6.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b3dac819 code=0x7ffc0000 [ 459.032862][T13106] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3348'. [ 459.071821][T13102] bridge_slave_0: left allmulticast mode [ 459.071854][T13102] bridge_slave_0: left promiscuous mode [ 459.106438][T13102] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.186924][T13102] bridge_slave_1: left allmulticast mode [ 459.186961][T13102] bridge_slave_1: left promiscuous mode [ 459.187339][T13102] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.332332][T13102] bond0: (slave bond_slave_0): Releasing backup interface [ 459.497777][T13102] bond0: (slave bond_slave_1): Releasing backup interface [ 459.686521][T13102] team0: Port device team_slave_0 removed [ 459.777646][T13102] team0: Port device team_slave_1 removed [ 459.791998][T13102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.792030][T13102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.842029][T13102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.842061][T13102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.907611][T13102] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 459.907749][T13109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 461.020461][T13150] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3368'. [ 461.311971][ T37] audit: type=1326 audit(1776648254.364:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13156 comm="syz.6.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b3dac819 code=0x7ffc0000 [ 461.316243][ T37] audit: type=1326 audit(1776648254.374:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13156 comm="syz.6.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b3dac819 code=0x7ffc0000 [ 461.318923][ T37] audit: type=1326 audit(1776648254.374:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13156 comm="syz.6.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b3dac819 code=0x7ffc0000 [ 461.358464][ T37] audit: type=1326 audit(1776648254.384:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13156 comm="syz.6.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f76b3dac819 code=0x7ffc0000 [ 461.358865][ T37] audit: type=1326 audit(1776648254.394:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13156 comm="syz.6.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b3dac819 code=0x7ffc0000 [ 461.359000][ T37] audit: type=1326 audit(1776648254.394:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13156 comm="syz.6.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b3dac819 code=0x7ffc0000 [ 461.503774][T13158] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3371'. [ 461.804117][T13168] netlink: 'syz.6.3376': attribute type 1 has an invalid length. [ 462.065348][T13177] openvswitch: netlink: IPv4 tun info is not correct [ 462.567643][T13192] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3387'. [ 462.567672][T13192] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3387'. [ 463.749430][T13235] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 464.022546][T13246] Smack: duplicate mount options [ 464.367829][ T1004] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 464.433958][T13262] IPv6: NLM_F_CREATE should be specified when creating new route [ 464.542228][ T1004] usb 7-1: No LPM exit latency info found, disabling LPM. [ 464.543805][ T1004] usb 7-1: config 1 interface 0 altsetting 249 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 464.543842][ T1004] usb 7-1: config 1 interface 0 has no altsetting 0 [ 464.557231][ T1004] usb 7-1: string descriptor 0 read error: -22 [ 464.557397][ T1004] usb 7-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.40 [ 464.557423][ T1004] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.643344][T13252] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 464.910441][ T1004] usbhid 7-1:1.0: can't add hid device: -71 [ 464.910570][ T1004] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 464.943604][ T1004] usb 7-1: USB disconnect, device number 2 [ 465.351696][T13291] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 466.291526][T13325] team0: entered allmulticast mode [ 466.295925][T13325] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3451'. [ 466.295956][T13325] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 466.386928][ T819] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 466.557188][ T819] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 466.557223][ T819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.557246][ T819] usb 6-1: Product: syz [ 466.557262][ T819] usb 6-1: Manufacturer: syz [ 466.557278][ T819] usb 6-1: SerialNumber: syz [ 466.627057][ T819] r8152-cfgselector 6-1: Unknown version 0x0000 [ 466.627086][ T819] r8152-cfgselector 6-1: config 0 descriptor?? [ 466.895705][ T819] r8152-cfgselector 6-1: Unknown version 0x0000 [ 466.897529][ T819] r8152-cfgselector 6-1: No union descriptors [ 467.099150][ T819] r8152-cfgselector 6-1: USB disconnect, device number 11 [ 467.246392][ T5955] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 467.359496][T13349] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 467.396246][ T5955] usb 4-1: Using ep0 maxpacket: 32 [ 467.400692][ T5955] usb 4-1: config 7 has an invalid interface number: 15 but max is 2 [ 467.400724][ T5955] usb 4-1: config 7 has an invalid interface number: 192 but max is 2 [ 467.400748][ T5955] usb 4-1: config 7 has an invalid interface number: 96 but max is 2 [ 467.400770][ T5955] usb 4-1: config 7 has an invalid interface number: 51 but max is 2 [ 467.400791][ T5955] usb 4-1: config 7 has 4 interfaces, different from the descriptor's value: 3 [ 467.400815][ T5955] usb 4-1: config 7 has no interface number 0 [ 467.400833][ T5955] usb 4-1: config 7 has no interface number 1 [ 467.400851][ T5955] usb 4-1: config 7 has no interface number 2 [ 467.400869][ T5955] usb 4-1: config 7 has no interface number 3 [ 467.400956][ T5955] usb 4-1: too many endpoints for config 7 interface 192 altsetting 139: 39, using maximum allowed: 30 [ 467.401009][ T5955] usb 4-1: config 7 interface 192 altsetting 139 has 0 endpoint descriptors, different from the interface descriptor's value: 39 [ 467.401051][ T5955] usb 4-1: config 7 interface 96 altsetting 255 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 467.401094][ T5955] usb 4-1: config 7 interface 51 altsetting 207 has a duplicate endpoint with address 0xA, skipping [ 467.401120][ T5955] usb 4-1: config 7 interface 51 altsetting 207 has a duplicate endpoint with address 0xA, skipping [ 467.401145][ T5955] usb 4-1: config 7 interface 15 has no altsetting 0 [ 467.401165][ T5955] usb 4-1: config 7 interface 192 has no altsetting 0 [ 467.401186][ T5955] usb 4-1: config 7 interface 96 has no altsetting 0 [ 467.401206][ T5955] usb 4-1: config 7 interface 51 has no altsetting 0 [ 467.457800][ T5955] usb 4-1: string descriptor 0 read error: -22 [ 467.457966][ T5955] usb 4-1: New USB device found, idVendor=12d1, idProduct=dfe6, bcdDevice=3f.1b [ 467.457993][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.751938][T13357] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3470'. [ 467.868957][ T5909] usb 4-1: USB disconnect, device number 52 [ 468.664307][T13387] openvswitch: netlink: IPv4 tun info is not correct [ 469.243588][T13415] openvswitch: netlink: Multiple metadata blocks provided [ 469.516282][T13429] openvswitch: netlink: IPv4 tun info is not correct [ 470.642512][T13472] netlink: 392 bytes leftover after parsing attributes in process `syz.1.3523'. [ 471.094424][ T31] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 471.253406][ T31] usb 6-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 471.253501][ T31] usb 6-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 471.253555][ T31] usb 6-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 471.256409][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 471.256447][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 471.256465][ T31] usb 6-1: SerialNumber: syz [ 471.614359][ T31] rndis_host 6-1:253.0: probe with driver rndis_host failed with error -22 [ 471.731235][T13499] ip6gre1: entered promiscuous mode [ 471.731264][T13499] ip6gre1: entered allmulticast mode [ 471.822047][ T31] usb 6-1: USB disconnect, device number 12 [ 473.050683][T13547] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3561'. [ 473.228613][T13527] Mount JFS Failure: -22 [ 473.228636][T13527] jfs_mount failed w/return code = -22 [ 473.272487][T13554] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3563'. [ 473.272522][T13554] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3563'. [ 473.272558][T13554] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3563'. [ 473.811410][T13575] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3574'. [ 473.840568][T13575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.979106][T13581] netlink: 276 bytes leftover after parsing attributes in process `syz.5.3578'. [ 474.261954][T13595] mmap: syz.5.3584 (13595): VmData 37462016 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 474.473368][T13601] tmpfs: Bad value for 'nr_inodes' [ 475.347353][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3603'. [ 475.594267][T13642] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3608'. [ 477.393487][T13711] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3642'. [ 477.393525][T13711] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3642'. [ 477.594844][T13711] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 479.622833][T13792] netlink: 'syz.6.3681': attribute type 1 has an invalid length. [ 479.622856][T13792] __nla_validate_parse: 36 callbacks suppressed [ 479.622868][T13792] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3681'. [ 479.627355][T13792] netlink: 'syz.6.3681': attribute type 1 has an invalid length. [ 479.792740][T13794] MPI: mpi too large (107144 bits) [ 479.850606][T13798] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3684'. [ 480.011931][T13788] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 480.835238][T13829] netlink: 'syz.3.3698': attribute type 9 has an invalid length. [ 481.427477][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 481.427499][ T37] audit: type=1326 audit(1776648274.494:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13847 comm="syz.3.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3c18c819 code=0x7ffc0000 [ 481.427553][ T37] audit: type=1326 audit(1776648274.494:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13847 comm="syz.3.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3c18c819 code=0x7ffc0000 [ 481.515611][ T37] audit: type=1326 audit(1776648274.584:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13847 comm="syz.3.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fae3c18c819 code=0x7ffc0000 [ 481.515662][ T37] audit: type=1326 audit(1776648274.584:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13847 comm="syz.3.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3c18c819 code=0x7ffc0000 [ 481.515698][ T37] audit: type=1326 audit(1776648274.584:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13847 comm="syz.3.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3c18c819 code=0x7ffc0000 [ 481.741917][T13855] netlink: 'syz.6.3711': attribute type 4 has an invalid length. [ 481.741946][T13855] netlink: 'syz.6.3711': attribute type 1 has an invalid length. [ 481.741962][T13855] netlink: 228 bytes leftover after parsing attributes in process `syz.6.3711'. [ 483.347315][ T37] audit: type=1326 audit(1776648276.415:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13908 comm="syz.1.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca792c819 code=0x7ffc0000 [ 483.349564][ T37] audit: type=1326 audit(1776648276.415:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13908 comm="syz.1.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca792c819 code=0x7ffc0000 [ 483.419954][ T37] audit: type=1326 audit(1776648276.485:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13908 comm="syz.1.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca792c819 code=0x7ffc0000 [ 483.419998][ T37] audit: type=1326 audit(1776648276.495:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13908 comm="syz.1.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca792c819 code=0x7ffc0000 [ 483.420031][ T37] audit: type=1326 audit(1776648276.495:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13908 comm="syz.1.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7faca792c819 code=0x7ffc0000 [ 487.607736][ T5955] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 487.757843][ T5955] usb 4-1: Using ep0 maxpacket: 32 [ 487.761222][ T5955] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 487.761254][ T5955] usb 4-1: config 2 has no interface number 0 [ 487.761302][ T5955] usb 4-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 487.761332][ T5955] usb 4-1: config 2 interface 88 has no altsetting 0 [ 487.835271][ T5955] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 487.835319][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.835343][ T5955] usb 4-1: Product: syz [ 487.835360][ T5955] usb 4-1: Manufacturer: syz [ 487.835377][ T5955] usb 4-1: SerialNumber: syz [ 487.931157][T14037] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 488.164618][T14037] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 488.380633][ T5955] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 488.380939][ T5955] asix 4-1:2.88: probe with driver asix failed with error -71 [ 488.465682][ T5955] usb 4-1: USB disconnect, device number 53 [ 490.108087][T14103] netlink: 'syz.3.3816': attribute type 1 has an invalid length. [ 491.023110][T14133] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3830'. [ 494.049519][T14212] vivid-007: ================= START STATUS ================= [ 494.049559][T14212] vivid-007: Enable Output Cropping: true [ 494.049602][T14212] vivid-007: Enable Output Composing: true [ 494.049627][T14212] vivid-007: Enable Output Scaler: true [ 494.049651][T14212] vivid-007: Tx RGB Quantization Range: Automatic [ 494.049676][T14212] vivid-007: Transmit Mode: HDMI [ 494.049699][T14212] vivid-007: Hotplug Present: 0x00000000 [ 494.049723][T14212] vivid-007: RxSense Present: 0x00000000 [ 494.049747][T14212] vivid-007: EDID Present: 0x00000000 [ 494.049771][T14212] vivid-007: ================== END STATUS ================== [ 495.147724][T14236] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3884'. [ 495.532530][T14246] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3887'. [ 496.197583][ T5826] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 496.325847][ T5826] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 496.330059][ T5826] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 496.362180][ T5826] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 496.429678][ T5826] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 498.631158][ T5133] Bluetooth: hci6: command tx timeout [ 499.726125][T14334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3926'. [ 499.801051][T14336] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3928'. [ 500.111446][T14247] chnl_net:caif_netlink_parms(): no params data found [ 500.709671][ T5133] Bluetooth: hci6: command tx timeout [ 500.958043][T14247] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.973252][T14247] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.973734][T14247] bridge_slave_0: entered allmulticast mode [ 501.009958][T14247] bridge_slave_0: entered promiscuous mode [ 501.067187][T14247] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.072556][T14247] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.074519][T14247] bridge_slave_1: entered allmulticast mode [ 501.153633][T14247] bridge_slave_1: entered promiscuous mode [ 501.356500][T14374] CIFS mount error: No usable UNC path provided in device string! [ 501.356500][T14374] [ 501.356527][T14374] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 501.584862][T14247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.620989][T14379] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 501.649717][T14247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.110153][T14247] team0: Port device team_slave_0 added [ 502.175750][T14247] team0: Port device team_slave_1 added [ 502.788808][ T5133] Bluetooth: hci6: command tx timeout [ 502.851263][T14247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.851286][T14247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.851932][T14247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.852851][T14405] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3960'. [ 503.107735][T14247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.107755][T14247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.107784][T14247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.867756][ T5133] Bluetooth: hci6: command tx timeout [ 505.184196][T14247] hsr_slave_0: entered promiscuous mode [ 505.203043][T14247] hsr_slave_1: entered promiscuous mode [ 505.204228][T14247] debugfs: 'hsr0' already exists in 'hsr' [ 505.204260][T14247] Cannot create hsr debugfs directory [ 506.252583][T14459] bond1: Removing last arp target with arp_interval on [ 506.252613][T14459] bond1: Removing last ns target with arp_interval on [ 507.011528][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.012957][ T5897] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 507.217258][ T5897] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 507.217323][ T5897] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 507.217353][ T5897] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 507.217396][ T5897] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 507.217419][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.359086][ T5897] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 507.360622][ T5897] usb 2-1: invalid MIDI out EP 0 [ 507.622934][T14494] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4003'. [ 509.687367][ T5897] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 509.694310][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 509.823830][ T5897] usb 2-1: USB disconnect, device number 51 [ 511.836767][T14560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.656986][T14247] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 513.769401][T14247] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 513.770507][T14247] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 514.576451][T14247] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 514.700155][T14626] bridge6: entered promiscuous mode [ 514.700189][T14626] bridge6: entered allmulticast mode [ 514.874744][T14247] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 515.021458][T14247] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 515.024704][T14247] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 515.068994][T14247] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 515.433612][T14654] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4077'. [ 516.253433][T14672] overlay: ./file0 is not a directory [ 516.274170][T14247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.454039][T14676] syz.6.4088: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 516.454705][T14676] CPU: 0 UID: 0 PID: 14676 Comm: syz.6.4088 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 516.454735][T14676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 516.454754][T14676] Call Trace: [ 516.454764][T14676] [ 516.454775][T14676] dump_stack_lvl+0xe8/0x150 [ 516.454820][T14676] warn_alloc+0x263/0x3e0 [ 516.454844][T14676] ? unwind_get_return_address+0x4d/0x90 [ 516.454873][T14676] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 516.454898][T14676] ? arch_stack_walk+0xfb/0x150 [ 516.454936][T14676] ? __pfx_warn_alloc+0x10/0x10 [ 516.454968][T14676] ? __pfx_stack_trace_save+0x10/0x10 [ 516.454990][T14676] ? __pfx_hlock_conflict+0x10/0x10 [ 516.455036][T14676] __vmalloc_node_range_noprof+0x132/0x1750 [ 516.455075][T14676] ? add_lock_to_list+0xc7/0x100 [ 516.455110][T14676] ? lockdep_unlock+0x5d/0xd0 [ 516.455132][T14676] ? __lock_acquire+0x146e/0x2cf0 [ 516.455182][T14676] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 516.455231][T14676] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 516.455261][T14676] vmalloc_noprof+0xb2/0xe0 [ 516.455296][T14676] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 516.455326][T14676] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 516.455352][T14676] ? dvb_demux_do_ioctl+0x323/0x540 [ 516.455395][T14676] dvb_demux_do_ioctl+0x460/0x540 [ 516.455441][T14676] dvb_usercopy+0x199/0x2e0 [ 516.455467][T14676] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 516.455496][T14676] ? __pfx_dvb_usercopy+0x10/0x10 [ 516.455534][T14676] ? __fget_files+0x3a6/0x420 [ 516.455566][T14676] ? __fget_files+0x2a/0x420 [ 516.455608][T14676] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 516.455636][T14676] dvb_demux_ioctl+0x29/0x40 [ 516.455663][T14676] __se_sys_ioctl+0xff/0x170 [ 516.455689][T14676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.455717][T14676] do_syscall_64+0x15f/0xf80 [ 516.455750][T14676] ? trace_irq_disable+0x3b/0x140 [ 516.455775][T14676] ? clear_bhb_loop+0x40/0x90 [ 516.455806][T14676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.455841][T14676] RIP: 0033:0x7f76b3dac819 [ 516.455869][T14676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.455892][T14676] RSP: 002b:00007f76b1ffe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 516.455916][T14676] RAX: ffffffffffffffda RBX: 00007f76b4025fa0 RCX: 00007f76b3dac819 [ 516.455934][T14676] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 516.455950][T14676] RBP: 00007f76b3e42c91 R08: 0000000000000000 R09: 0000000000000000 [ 516.455965][T14676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.455979][T14676] R13: 00007f76b4026038 R14: 00007f76b4025fa0 R15: 00007ffe291308d8 [ 516.456017][T14676] [ 516.499890][T14676] Mem-Info: [ 516.499947][T14676] active_anon:262 inactive_anon:7701 isolated_anon:0 [ 516.499947][T14676] active_file:5681 inactive_file:37681 isolated_file:0 [ 516.499947][T14676] unevictable:768 dirty:345 writeback:0 [ 516.499947][T14676] slab_reclaimable:12140 slab_unreclaimable:113728 [ 516.499947][T14676] mapped:40619 shmem:1365 pagetables:1568 [ 516.499947][T14676] sec_pagetables:0 bounce:0 [ 516.499947][T14676] kernel_misc_reclaimable:0 [ 516.499947][T14676] free:1289296 free_pcp:1906 free_cma:0 [ 516.500172][T14676] Node 0 active_anon:1048kB inactive_anon:30804kB active_file:22516kB inactive_file:150724kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:162476kB dirty:1380kB writeback:0kB shmem:3924kB kernel_stack:14432kB pagetables:6132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 516.500332][T14676] Node 1 active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 516.500475][T14676] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 516.500664][T14676] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 516.500785][T14676] Node 0 DMA32 free:1207192kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1048kB inactive_anon:30804kB active_file:22516kB inactive_file:150724kB unevictable:1536kB writepending:1380kB zspages:0kB present:3129332kB managed:2564916kB mlocked:0kB bounce:0kB free_pcp:7624kB local_pcp:3656kB free_cma:0kB [ 516.500985][T14676] lowmem_reserve[]: 0 0 0 0 0 [ 516.501090][T14676] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 516.501315][T14676] lowmem_reserve[]: 0 0 0 0 0 [ 516.515124][T14676] Node 1 Normal free:3934632kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 516.515322][T14676] lowmem_reserve[]: 0 0 0 0 0 [ 516.515423][T14676] Node 0 DMA: [ 516.936154][T14247] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.289477][T14676] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 517.289581][T14676] Node 0 DMA32: 416*4kB (UME) 2311*8kB (UME) 1298*16kB (UME) 4*32kB (ME) 461*64kB (UME) 499*128kB (UM) 417*256kB (UME) 267*512kB (UME) 134*1024kB (UME) 56*2048kB (UME) 141*4096kB (M) = 1207320kB [ 517.289708][T14676] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 517.289788][T14676] Node 1 Normal: 2*4kB (UM) 4*8kB (UM) 6*16kB (UM) 9*32kB (UM) 4*64kB (UM) 2*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3934632kB [ 517.289912][T14676] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 517.289927][T14676] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 517.289941][T14676] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 517.289955][T14676] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 517.289968][T14676] 44723 total pagecache pages [ 517.289978][T14676] 0 pages in swap cache [ 517.289984][T14676] Free swap = 124996kB [ 517.289990][T14676] Total swap = 124996kB [ 517.289997][T14676] 2097051 pages RAM [ 517.290003][T14676] 0 pages HighMem/MovableOnly [ 517.290009][T14676] 424174 pages reserved [ 517.290016][T14676] 0 pages cma reserved [ 517.684132][ T6945] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.719238][ T6945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.937345][T14685] bond2: entered promiscuous mode [ 517.937935][T14685] 8021q: adding VLAN 0 to HW filter on device bond2 [ 518.065188][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.079359][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.180499][ T31] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 519.344969][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 519.373688][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.373720][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 519.379938][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 519.379973][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.379996][ T31] usb 4-1: Product: syz [ 519.380258][ T31] usb 4-1: Manufacturer: syz [ 519.380277][ T31] usb 4-1: SerialNumber: syz [ 519.406498][ T5833] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 519.574399][ T31] usb 4-1: 0:2 : does not exist [ 519.620208][ T5833] usb 7-1: Using ep0 maxpacket: 32 [ 519.671580][ T5833] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 519.671681][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.671705][ T5833] usb 7-1: Product: syz [ 519.671721][ T5833] usb 7-1: Manufacturer: syz [ 519.671738][ T5833] usb 7-1: SerialNumber: syz [ 519.853967][ T5833] usb 7-1: config 0 descriptor?? [ 520.123420][ T5833] snd-usb-6fire 7-1:0.0: unknown device firmware state received from device: [ 520.123452][ T5833] ab 43 1e 80 9b f8 7a f0 [ 520.123547][ T5833] snd-usb-6fire 7-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 520.134926][ T31] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 520.362267][ T10] usb 7-1: USB disconnect, device number 3 [ 520.796782][T14247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.915159][ T31] usb 4-1: USB disconnect, device number 54 [ 521.431671][T14753] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4119'. [ 521.778537][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 522.559526][ T1004] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 522.714826][ T1004] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 522.714865][ T1004] usb 4-1: config 0 has no interface number 0 [ 522.715051][ T1004] usb 4-1: config 0 interface 214 altsetting 0 has an endpoint descriptor with address 0xFA, changing to 0x8A [ 522.715088][ T1004] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 522.715118][ T1004] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 522.721176][ T1004] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 522.721217][ T1004] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 522.721241][ T1004] usb 4-1: Manufacturer: syz [ 522.721258][ T1004] usb 4-1: SerialNumber: syz [ 522.845933][ T1004] usb 4-1: config 0 descriptor?? [ 523.083829][ T1004] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71 [ 523.084136][ T1004] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 523.133396][ T1004] usb 4-1: USB disconnect, device number 55 [ 523.333961][T14247] veth0_vlan: entered promiscuous mode [ 523.334293][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 523.334309][ T37] audit: type=1326 audit(1776648316.425:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14788 comm="syz.6.4134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b3dac819 code=0x7ffc0000 [ 523.334360][ T37] audit: type=1326 audit(1776648316.425:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14788 comm="syz.6.4134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b3dac819 code=0x7ffc0000 [ 523.445181][ T37] audit: type=1326 audit(1776648316.535:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14788 comm="syz.6.4134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f76b3dac819 code=0x7ffc0000 [ 523.445244][ T37] audit: type=1326 audit(1776648316.535:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14788 comm="syz.6.4134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b3dac819 code=0x7ffc0000 [ 523.445292][ T37] audit: type=1326 audit(1776648316.535:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14788 comm="syz.6.4134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b3dac819 code=0x7ffc0000 [ 523.714272][T14247] veth1_vlan: entered promiscuous mode [ 523.904994][T14797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4139'. [ 524.086523][T14247] veth0_macvtap: entered promiscuous mode [ 524.245559][T14247] veth1_macvtap: entered promiscuous mode [ 524.465113][T14247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.937031][T14247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.423128][ T6947] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.424212][ T6947] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.424815][ T6947] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.424883][ T6947] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.894109][ T1230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.894136][ T1230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.601714][T14863] overlayfs: missing 'lowerdir' [ 532.477344][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.477478][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.800553][T14964] netlink: 'syz.6.4217': attribute type 2 has an invalid length. [ 537.490592][T14970] bridge1: entered promiscuous mode [ 537.490623][T14970] bridge1: entered allmulticast mode [ 538.991378][T14988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4229'. [ 539.038373][T15000] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4235'. [ 539.896106][T15014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 542.268463][T15066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4266'. [ 543.016153][T15080] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4274'. [ 543.718350][T15096] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4282'. [ 544.319240][T15111] netlink: 'syz.6.4290': attribute type 11 has an invalid length. [ 545.657221][T15137] netlink: zone id is out of range [ 547.022622][T15166] netlink: 'syz.7.4318': attribute type 1 has an invalid length. [ 547.526175][T15176] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.4324'. [ 548.593252][T15198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4332'. [ 548.659542][T15199] netlink: 'syz.6.4333': attribute type 15 has an invalid length. [ 549.459881][T15192] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 549.459922][T15192] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 549.459961][T15192] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 550.094126][T15192] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 550.241626][T15219] bridge7: entered allmulticast mode [ 550.731976][T15192] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 551.346533][ T5833] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 551.521012][ T5833] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 551.521051][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 551.521082][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 551.594473][ T5833] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 551.594509][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.594531][ T5833] usb 4-1: Product: syz [ 551.594546][ T5833] usb 4-1: Manufacturer: syz [ 551.594562][ T5833] usb 4-1: SerialNumber: syz [ 551.850865][ T5833] usb 4-1: config 0 descriptor?? [ 551.956796][ T5833] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 552.119117][ T5833] usb 4-1: USB disconnect, device number 56 [ 552.175026][ T5904] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 552.349135][ T5904] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.349164][ T5904] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 552.349205][ T5904] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 552.421526][ T5904] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 552.421561][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.421585][ T5904] usb 7-1: Product: syz [ 552.421601][ T5904] usb 7-1: Manufacturer: syz [ 552.421618][ T5904] usb 7-1: SerialNumber: syz [ 552.474888][ T5904] cdc_ncm 7-1:1.0: skipping garbage [ 552.474912][ T5904] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 552.474965][ T5904] cdc_ncm 7-1:1.0: bind() failure [ 552.699761][ T5904] usb 7-1: USB disconnect, device number 4 [ 553.218847][T15273] netlink: 268 bytes leftover after parsing attributes in process `syz.3.4370'. [ 554.787748][T15311] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4388'. [ 555.041302][T15314] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4389'. [ 555.041333][T15314] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4389'. [ 555.262764][ T37] audit: type=1326 audit(1776648348.371:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15317 comm="syz.3.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3c18c819 code=0x7ffc0000 [ 555.262834][ T37] audit: type=1326 audit(1776648348.371:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15317 comm="syz.3.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3c18c819 code=0x7ffc0000 [ 555.262882][ T37] audit: type=1326 audit(1776648348.371:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15317 comm="syz.3.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fae3c18c819 code=0x7ffc0000 [ 555.262933][ T37] audit: type=1326 audit(1776648348.371:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15317 comm="syz.3.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fae3c18c819 code=0x7ffc0000 [ 558.427161][T15380] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 558.957345][T15396] netlink: 'syz.3.4429': attribute type 11 has an invalid length. [ 560.334628][T15431] netlink: 'syz.3.4446': attribute type 10 has an invalid length. [ 560.334657][T15431] openvswitch: netlink: Flow key attr not present in new flow. [ 561.120612][T15447] netlink: 'syz.6.4454': attribute type 10 has an invalid length. [ 561.120643][T15447] netlink: 55 bytes leftover after parsing attributes in process `syz.6.4454'. [ 561.514166][T15447] team0: Port device virt_wifi0 added [ 561.639447][ T5833] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 561.806106][ T5833] usb 8-1: config 0 interface 0 has no altsetting 0 [ 561.806156][ T5833] usb 8-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 561.806182][ T5833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.854044][ T5833] usb 8-1: config 0 descriptor?? [ 562.364901][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 562.545979][ T5833] video4linux radio48: keene_cmd_main failed (-32) [ 562.546011][ T5833] radio-keene 8-1:0.0: V4L2 device registered as radio48 [ 562.603508][ T5833] usb 8-1: USB disconnect, device number 2 [ 564.314374][T15485] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 564.314419][T15485] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 564.314442][T15485] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 565.327935][T15493] Bluetooth: hci1: command 0x0406 tx timeout [ 568.367149][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.851033][T15594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 568.923903][T15602] netlink: 'syz.6.4523': attribute type 7 has an invalid length. [ 569.324065][T15615] netlink: 'syz.7.4527': attribute type 2 has an invalid length. [ 569.324095][T15615] netlink: 'syz.7.4527': attribute type 1 has an invalid length. [ 569.743448][T15628] tmpfs: Bad value for 'mpol' [ 570.049715][T15636] qrtr: Invalid version 0 [ 570.664658][ T5824] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 570.832937][ T5824] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 570.832974][ T5824] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.873251][ T5824] usb 8-1: config 0 descriptor?? [ 571.348905][ T5824] usb 8-1: Cannot set MAC address [ 571.349219][ T5824] MOSCHIP usb-ethernet driver 8-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 571.508305][ T5824] usb 8-1: USB disconnect, device number 3 [ 571.611581][T15670] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4549'. [ 572.381057][T15695] tmpfs: Bad value for 'mpol' [ 574.575372][T15766] netlink: 388 bytes leftover after parsing attributes in process `syz.7.4587'. [ 576.849691][T15836] ieee802154 phy0 wpan0: encryption failed: -22 [ 578.749723][T15899] siw: device registration error -23 [ 580.989736][T15983] geneve2: entered promiscuous mode [ 581.920801][T16018] bridge0: mtu less than device minimum [ 582.487315][T16044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4708'. [ 582.487342][T16044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4708'. [ 583.690822][T16081] netlink: 'syz.1.4727': attribute type 10 has an invalid length. [ 584.045983][T16095] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4732'. [ 585.401563][ T5904] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 585.587232][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 585.591338][ T5904] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 585.591385][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.591408][ T5904] usb 2-1: config 0 has no interface number 0 [ 585.596645][ T5904] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 585.596680][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.596703][ T5904] usb 2-1: Product: syz [ 585.596719][ T5904] usb 2-1: Manufacturer: syz [ 585.596736][ T5904] usb 2-1: SerialNumber: syz [ 585.703125][ T5904] usb 2-1: config 0 descriptor?? [ 585.807213][ T5904] uvcvideo 2-1:0.105: probe with driver uvcvideo failed with error -22 [ 585.955652][ T5904] usb 2-1: USB disconnect, device number 52 [ 586.070784][T16160] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4761'. [ 586.557242][T16164] FAT-fs (nbd6): unable to read boot sector [ 586.652556][T16172] netlink: 'syz.7.4770': attribute type 9 has an invalid length. [ 589.102852][T16256] netlink: 'syz.1.4811': attribute type 1 has an invalid length. [ 589.182624][T16248] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.183272][T16248] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.183473][T16248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.344952][ T6055] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 590.514631][ T6055] usb 7-1: Using ep0 maxpacket: 8 [ 590.520682][ T6055] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.520741][ T6055] usb 7-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 590.520771][ T6055] usb 7-1: config 0 interface 0 has no altsetting 0 [ 590.619251][ T6055] usb 7-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 590.619287][ T6055] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.619310][ T6055] usb 7-1: Product: syz [ 590.619327][ T6055] usb 7-1: Manufacturer: syz [ 590.619343][ T6055] usb 7-1: SerialNumber: syz [ 590.668959][ T6055] usb 7-1: config 0 descriptor?? [ 590.690770][ T6055] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 found [ 590.927112][ T6055] snd_usb_toneport 7-1:0.0: cannot get proper max packet size [ 590.927436][ T6055] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 now disconnected [ 590.941630][ T6055] snd_usb_toneport 7-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 591.131569][ T6055] usb 7-1: USB disconnect, device number 5 [ 591.497702][T16325] netlink: 'syz.1.4845': attribute type 1 has an invalid length. [ 591.497744][T16325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 592.962803][T16359] libceph: resolve '96.' (ret=-3): failed [ 593.035653][ T37] audit: type=1326 audit(1776648386.170:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16368 comm="syz.6.4866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b3dac819 code=0x7ffc0000 [ 593.037472][ T37] audit: type=1326 audit(1776648386.170:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16368 comm="syz.6.4866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b3dac819 code=0x7ffc0000 [ 593.038170][ T37] audit: type=1326 audit(1776648386.170:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16368 comm="syz.6.4866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f76b3dac819 code=0x7ffc0000 [ 593.691523][ T37] audit: type=1326 audit(1776648386.820:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16368 comm="syz.6.4866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b3dac819 code=0x7ffc0000 [ 595.875141][T16453] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4908'. [ 595.875165][T16453] tc_dump_action: action bad kind [ 597.512750][T16524] netlink: 'syz.1.4943': attribute type 8 has an invalid length. [ 597.546465][T16525] netlink: 276 bytes leftover after parsing attributes in process `syz.6.4944'. [ 598.196512][T16552] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4956'. [ 598.390705][ T5904] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 598.546424][ T5904] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 598.546456][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.546490][ T5904] usb 2-1: config 0 has no interface number 0 [ 598.546539][ T5904] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 598.546566][ T5904] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 598.546594][ T5904] usb 2-1: config 0 interface 52 has no altsetting 0 [ 598.548789][ T5904] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 598.548821][ T5904] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 598.548844][ T5904] usb 2-1: Manufacturer: syz [ 598.663413][ T5904] usb 2-1: config 0 descriptor?? [ 598.707222][ T5904] hub 2-1:0.52: bad descriptor, ignoring hub [ 598.707266][ T5904] hub 2-1:0.52: probe with driver hub failed with error -5 [ 599.271767][ T5824] usb 2-1: USB disconnect, device number 53 [ 599.585684][ T5133] Bluetooth: hci1: unexpected event 0x04 length: 13 > 10 [ 599.585829][ T5133] Bluetooth: hci1: connection err: -111 [ 600.327631][T16622] netlink: 'syz.7.4992': attribute type 15 has an invalid length. [ 600.849446][ T10] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 600.871402][T16642] netlink: 124 bytes leftover after parsing attributes in process `syz.7.5002'. [ 601.004860][ T10] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 601.004918][ T10] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 601.004964][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 601.004989][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.064159][ T10] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 601.122050][T16650] netlink: 100 bytes leftover after parsing attributes in process `syz.6.5006'. [ 601.122083][T16650] netlink: 100 bytes leftover after parsing attributes in process `syz.6.5006'. [ 601.225739][T16655] openvswitch: netlink: IPv6 tunnel dst address is zero [ 601.279388][ T6184] usb 2-1: USB disconnect, device number 54 [ 601.443177][T16664] netlink: 'syz.6.5014': attribute type 15 has an invalid length. [ 602.039941][ T6184] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 602.192263][ T6184] usb 8-1: Using ep0 maxpacket: 16 [ 602.197506][ T6184] usb 8-1: config index 0 descriptor too short (expected 52, got 36) [ 602.197539][ T6184] usb 8-1: config 0 has an invalid interface number: 251 but max is 0 [ 602.197562][ T6184] usb 8-1: config 0 has no interface number 0 [ 602.197609][ T6184] usb 8-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 602.197637][ T6184] usb 8-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 602.253026][ T6184] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 602.253059][ T6184] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.253081][ T6184] usb 8-1: Product: syz [ 602.253097][ T6184] usb 8-1: Manufacturer: syz [ 602.253112][ T6184] usb 8-1: SerialNumber: syz [ 602.299432][ T6184] usb 8-1: config 0 descriptor?? [ 602.313559][T16677] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 602.313808][T16677] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 602.559538][T16677] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 602.559685][T16677] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 602.764688][ T6184] asix 8-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 602.764721][ T6184] asix 8-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 602.765010][ T6184] asix 8-1:0.251: probe with driver asix failed with error -5 [ 602.829409][ T6184] usb 8-1: USB disconnect, device number 4 [ 603.748141][ T5904] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 603.912414][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 603.920841][ T5904] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 603.920958][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.921024][ T5904] usb 2-1: config 0 has no interface number 0 [ 603.952961][ T5904] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 603.952997][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.953019][ T5904] usb 2-1: Product: syz [ 603.953036][ T5904] usb 2-1: Manufacturer: syz [ 603.953052][ T5904] usb 2-1: SerialNumber: syz [ 603.985025][ T5824] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 604.053583][ T5904] usb 2-1: config 0 descriptor?? [ 604.102296][ T5904] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 604.102322][ T5904] cx231xx 2-1:0.1: Not found matching IAD interface [ 604.160932][ T5824] usb 7-1: Using ep0 maxpacket: 32 [ 604.164452][ T5824] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 604.164559][ T5824] usb 7-1: config 0 has no interface number 0 [ 604.164597][ T5824] usb 7-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 604.164615][ T5824] usb 7-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 604.232764][ T5824] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 604.232798][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.232820][ T5824] usb 7-1: Product: syz [ 604.232836][ T5824] usb 7-1: Manufacturer: syz [ 604.232852][ T5824] usb 7-1: SerialNumber: syz [ 604.340956][ T5824] usb 7-1: config 0 descriptor?? [ 604.370564][ T5824] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 604.412722][T16722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.413940][T16722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.463636][ T5833] usb 2-1: USB disconnect, device number 55 [ 604.572563][ T5824] usb 7-1: qt2_setup_urbs - submit read urb failed -90 [ 604.572978][ T5824] quatech2 7-1:0.51: probe with driver quatech2 failed with error -90 [ 604.796840][ T6184] usb 7-1: USB disconnect, device number 6 [ 604.850186][T16762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 604.850208][T16762] IPv6: NLM_F_CREATE should be set when creating new route [ 604.850292][T16762] IPv6: NLM_F_CREATE should be set when creating new route [ 604.850325][T16762] IPv6: NLM_F_CREATE should be set when creating new route [ 605.122514][T16770] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5064'. [ 605.457674][ T6184] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 605.612138][ T6184] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 605.612172][ T6184] usb 2-1: config 1 has no interface number 0 [ 605.612222][ T6184] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 605.612253][ T6184] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 605.612283][ T6184] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 605.674267][ T6184] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 605.674303][ T6184] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.674326][ T6184] usb 2-1: Product: syz [ 605.674377][ T6184] usb 2-1: Manufacturer: syz [ 605.674398][ T6184] usb 2-1: SerialNumber: syz [ 605.732676][T16776] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 605.987518][T16776] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 606.039364][ T6184] usb 2-1: No status endpoint found [ 606.240129][ T6055] usb 2-1: USB disconnect, device number 56 [ 607.314951][T16838] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 607.774906][T16859] tmpfs: Bad value for 'mpol' [ 607.932603][T16866] program syz.7.5113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 608.331589][T16882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5119'. [ 608.984851][T16915] bond0: option arp_validate: invalid value (55553) [ 608.990587][ T43] bond0: (slave bond_slave_0): interface is now down [ 608.990728][ T43] bond0: (slave bond_slave_1): interface is now down [ 609.460376][T12013] __kmem_cache_create_args(nfsd_file) failed with error -12 [ 609.460414][T12013] CPU: 1 UID: 0 PID: 12013 Comm: syz.4.2827 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 609.460448][T12013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 609.460464][T12013] Call Trace: [ 609.460475][T12013] [ 609.460485][T12013] dump_stack_lvl+0xe8/0x150 [ 609.460532][T12013] __kmem_cache_create_args+0x3ee/0x450 [ 609.460564][T12013] nfsd_file_cache_init+0x194/0x530 [ 609.460592][T12013] ? __pfx_nfsd_file_cache_init+0x10/0x10 [ 609.460623][T12013] ? net_generic+0x1e/0x240 [ 609.460660][T12013] ? net_generic+0x1e/0x240 [ 609.460689][T12013] ? net_generic+0x1e/0x240 [ 609.460720][T12013] ? net_generic+0x1f4/0x240 [ 609.460752][T12013] nfsd_svc+0x347/0x800 [ 609.460791][T12013] nfsd_nl_threads_set_doit+0x86d/0x9a0 [ 609.460837][T12013] genl_family_rcv_msg_doit+0x22a/0x330 [ 609.460879][T12013] ? __asan_memcpy+0x40/0x70 [ 609.460913][T12013] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 609.460959][T12013] ? bpf_lsm_capable+0x9/0x20 [ 609.460984][T12013] ? security_capable+0x7e/0x2c0 [ 609.461017][T12013] genl_rcv_msg+0x61c/0x7a0 [ 609.461057][T12013] ? __pfx_genl_rcv_msg+0x10/0x10 [ 609.461089][T12013] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 609.461244][T12013] netlink_rcv_skb+0x232/0x4b0 [ 609.461278][T12013] ? __pfx_genl_rcv_msg+0x10/0x10 [ 609.461414][T12013] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 609.461458][T12013] ? netlink_deliver_tap+0x2e/0x1b0 [ 609.461484][T12013] ? netlink_deliver_tap+0x2e/0x1b0 [ 609.461515][T12013] genl_rcv+0x28/0x40 [ 609.461546][T12013] netlink_unicast+0x780/0x920 [ 609.461595][T12013] netlink_sendmsg+0x813/0xb40 [ 609.461645][T12013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.461688][T12013] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 609.461727][T12013] ____sys_sendmsg+0x94c/0x9c0 [ 609.461764][T12013] ? __pfx_____sys_sendmsg+0x10/0x10 [ 609.461907][T12013] ? import_iovec+0x73/0xa0 [ 609.461956][T12013] ___sys_sendmsg+0x2a5/0x360 [ 609.461988][T12013] ? __lock_acquire+0x6b5/0x2cf0 [ 609.462022][T12013] ? __pfx____sys_sendmsg+0x10/0x10 [ 609.462061][T12013] ? futex_wait+0x2a2/0x390 [ 609.462129][T12013] ? __fget_files+0x2a/0x420 [ 609.462160][T12013] ? __fget_files+0x3a6/0x420 [ 609.462269][T12013] __x64_sys_sendmsg+0x1c3/0x2a0 [ 609.462304][T12013] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 609.462346][T12013] ? rcu_is_watching+0x15/0xb0 [ 609.462388][T12013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.462415][T12013] do_syscall_64+0x15f/0xf80 [ 609.462451][T12013] ? trace_irq_disable+0x3b/0x140 [ 609.462475][T12013] ? clear_bhb_loop+0x40/0x90 [ 609.462504][T12013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.462528][T12013] RIP: 0033:0x7f9705cfc819 [ 609.462552][T12013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.462572][T12013] RSP: 002b:00007f9703f4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 609.462598][T12013] RAX: ffffffffffffffda RBX: 00007f9705f75fa0 RCX: 00007f9705cfc819 [ 609.462615][T12013] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 609.462631][T12013] RBP: 00007f9705d92c91 R08: 0000000000000000 R09: 0000000000000000 [ 609.462646][T12013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.462660][T12013] R13: 00007f9705f76038 R14: 00007f9705f75fa0 R15: 00007ffc68e905b8 [ 609.462699][T12013] [ 609.520851][T12013] nfsd: unable to create nfsd_file_slab [ 610.141875][ T43] bond0: now running without any active interface! [ 610.648142][T16945] QAT: failed to copy from user cfg_data. [ 611.717451][ T37] audit: type=1326 audit(1776648404.859:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16985 comm="syz.1.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca792c819 code=0x7ffc0000 [ 611.719181][ T37] audit: type=1326 audit(1776648404.859:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16985 comm="syz.1.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca792c819 code=0x7ffc0000 [ 611.772775][ T37] audit: type=1326 audit(1776648404.910:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16985 comm="syz.1.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca792c819 code=0x7ffc0000 [ 611.772835][ T37] audit: type=1326 audit(1776648404.910:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16985 comm="syz.1.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca792c819 code=0x7ffc0000 [ 611.783361][ T37] audit: type=1326 audit(1776648404.920:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16985 comm="syz.1.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7faca792c819 code=0x7ffc0000 [ 611.783420][ T37] audit: type=1326 audit(1776648404.920:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16985 comm="syz.1.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca792c819 code=0x7ffc0000 [ 611.785401][ T37] audit: type=1326 audit(1776648404.930:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16985 comm="syz.1.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7faca792c819 code=0x7ffc0000 [ 611.785573][ T37] audit: type=1326 audit(1776648404.930:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16985 comm="syz.1.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7faca792c819 code=0x7ffc0000 [ 611.819486][ T37] audit: type=1326 audit(1776648404.960:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16985 comm="syz.1.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca792c819 code=0x7ffc0000 [ 612.608950][T17016] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5184'. [ 612.843526][ T5904] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 613.007855][ T5904] usb 8-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 613.007888][ T5904] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 613.017308][ T5904] usb 8-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 613.017343][ T5904] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.017365][ T5904] usb 8-1: Product: syz [ 613.017381][ T5904] usb 8-1: Manufacturer: syz [ 613.017395][ T5904] usb 8-1: SerialNumber: syz [ 613.130323][ T5904] usb 8-1: config 0 descriptor?? [ 613.210277][ T5904] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 613.589096][ T5904] gspca_sunplus: reg_r err -71 [ 613.589209][ T5904] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 613.611939][ T5904] usb 8-1: USB disconnect, device number 5 [ 614.063485][T17065] netlink: 'syz.6.5207': attribute type 1 has an invalid length. [ 615.496425][T17121] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5235'. [ 615.848756][T17134] xfrm0: entered promiscuous mode [ 615.848790][T17134] xfrm0: entered allmulticast mode [ 616.239674][T17148] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5249'. [ 616.239702][T17148] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5249'. [ 618.430687][T17235] netlink: 'syz.7.5291': attribute type 10 has an invalid length. [ 618.431214][T17235] veth1_macvtap: left promiscuous mode [ 618.504391][T17240] netlink: 'syz.1.5295': attribute type 2 has an invalid length. [ 618.504421][T17240] netlink: 'syz.1.5295': attribute type 1 has an invalid length. [ 620.160698][T17308] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 620.160726][T17308] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 621.472616][T17356] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 621.473387][T17356] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 621.619000][ T5133] Bluetooth: hci6: command 0x0406 tx timeout [ 622.460147][T17393] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5371'. [ 623.468992][ T5904] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 623.628065][ T5904] usb 7-1: Using ep0 maxpacket: 8 [ 623.643680][ T5904] usb 7-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 0.00 [ 623.643713][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.643736][ T5904] usb 7-1: Product: syz [ 623.643752][ T5904] usb 7-1: Manufacturer: syz [ 623.643769][ T5904] usb 7-1: SerialNumber: syz [ 623.971101][ T5904] kalmia 7-1:1.0 (unnamed net_device) (uninitialized): Error sending init packet. Status -71 [ 623.971417][ T5904] kalmia 7-1:1.0: probe with driver kalmia failed with error -71 [ 624.111944][ T5904] usb 7-1: USB disconnect, device number 7 [ 624.820495][T17469] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5408'. [ 625.697544][T17505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5425'. [ 626.367552][ T6055] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 626.519475][ T6055] usb 2-1: config 4 has an invalid interface number: 74 but max is 0 [ 626.519517][ T6055] usb 2-1: config 4 has no interface number 0 [ 626.519576][ T6055] usb 2-1: config 4 interface 74 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 626.519607][ T6055] usb 2-1: config 4 interface 74 has no altsetting 0 [ 626.525550][ T6055] usb 2-1: New USB device found, idVendor=e57b, idProduct=55c9, bcdDevice=46.bd [ 626.525585][ T6055] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.525610][ T6055] usb 2-1: Product: syz [ 626.525627][ T6055] usb 2-1: Manufacturer: syz [ 626.525645][ T6055] usb 2-1: SerialNumber: syz [ 626.930040][ T6055] usb 2-1: USB disconnect, device number 57 [ 628.486049][ T38] INFO: task syz.5.3678:13789 blocked for more than 143 seconds. [ 628.486093][ T38] Not tainted syzkaller #0 [ 628.486106][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 628.486116][ T38] task:syz.5.3678 state:D stack:27200 pid:13789 tgid:13786 ppid:6966 task_flags:0x400040 flags:0x00080002 [ 628.486195][ T38] Call Trace: [ 628.486204][ T38] [ 628.486218][ T38] __schedule+0x1681/0x54c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 628.486284][ T38] ? trace_irq_disable+0x3b/0x140 [ 628.486310][ T38] ? __pfx___schedule+0x10/0x10 [ 628.486339][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 628.486385][ T38] rt_mutex_schedule+0x76/0xf0 [ 628.486420][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 628.486461][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 628.486491][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 628.486520][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 628.486549][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 628.486595][ T38] ? nfsd_nl_version_get_doit+0x17c/0xc40 [ 628.486637][ T38] ? nfsd_nl_version_get_doit+0x17c/0xc40 [ 628.486684][ T38] ? nfsd_nl_version_get_doit+0x17c/0xc40 [ 628.486717][ T38] mutex_lock_nested+0x168/0x1d0 [ 628.486832][ T38] nfsd_nl_version_get_doit+0x17c/0xc40 [ 628.486892][ T38] ? __nla_parse+0x40/0x60 [ 628.486933][ T38] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 628.486964][ T38] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 628.487005][ T38] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 628.487047][ T38] genl_family_rcv_msg_doit+0x22a/0x330 [ 628.487083][ T38] ? __asan_memcpy+0x40/0x70 [ 628.487118][ T38] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 628.487215][ T38] genl_rcv_msg+0x61c/0x7a0 [ 628.487258][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 628.494476][ T38] ? ref_tracker_free+0x673/0x820 [ 628.494519][ T38] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 628.494556][ T38] ? __pfx_ref_tracker_free[ 628.494556][ T38] ? __pfx_ref_tracker_free+0x10/0x10 [ 628.494598][ T38] ? __asan_memcpy+0x40/0x70 [ 628.494629][ T38] ? __skb_clone+0x63/0x7a0 [ 628.494669][ T38] netlink_rcv_skb+0x232/0x4b0 [ 628.494721][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 628.494756][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 628.494795][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 628.494829][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 628.494860][ T38] genl_rcv+0x28/0x40 [ 628.494890][ T38] netlink_unicast+0x780/0x920 [ 628.494938][ T38] netlink_sendmsg+0x813/0xb40 [ 628.494976][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 628.495013][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 628.495054][ T38] ____sys_sendmsg+0x94c/0x9c0 [ 628.495091][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 628.495129][ T38] ? import_iovec+0x73/0xa0 [ 628.495164][ T38] ___sys_sendmsg+0x2a5/0x360 [ 628.495193][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 628.495225][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 628.495264][ T38] ? futex_wait+0x2a2/0x390 [ 628.495330][ T38] ? __fget_files+0x2a/0x420 [ 628.495363][ T38] ? __fget_files+0x3a6/0x420 [ 628.532793][ T38] __x64_sys_sendmsg+0x1c3/0x2a0 [ 628.532844][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 628.609147][ T38] ? rcu_is_watching+0x15/0xb0 [ 628.609306][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.609386][ T38] do_syscall_64+0x15f/0xf80 [ 628.609490][ T38] ? trace_irq_disable+0x3b/0x140 [ 628.609514][ T38] ? clear_bhb_loop+0x40/0x90 [ 628.609543][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.609608][ T38] RIP: 0033:0x7fe643c4c819 [ 628.609679][ T38] RSP: 002b:00007fe641e9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 628.609752][ T38] RAX: ffffffffffffffda RBX: 00007fe643ec5fa0 RCX: 00007fe643c4c819 [ 628.609806][ T38] RDX: 000000000000c040 RSI: 00002000000008c0 RDI: 0000000000000003 [ 628.609851][ T38] RBP: 00007fe643ce2c91 R08: 0000000000000000 R09: 0000000000000000 [ 628.609881][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.609924][ T38] R13: 00007fe643ec6038 R14: 00007fe643ec5fa0 R15: 00007ffd7a91fa08 [ 628.610023][ T38] [ 628.610101][ T38] [ 628.610101][ T38] Showing all locks held in the system: [ 628.610143][ T38] 4 locks held by pr/legacy/17: [ 628.610179][ T38] 3 locks held by rcuc/0/20: [ 628.610223][ T38] 1 lock held by khungtaskd/38: [ 628.610256][ T38] #0: ffffffff8dfc80c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 628.610460][ T38] 8 locks held by kworker/u8:2/43: [ 628.610495][ T38] #0: ffff88801a08c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 628.634872][ T38] #1: ffffc90000b57c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 628.635084][ T38] #2: ffffffff8de57c50 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 [ 628.635252][ T38] #3: ffffffff8e09b638 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x8d/0x1a0 [ 628.637218][ T38] #4: ffffffff8de6e258 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 628.637424][ T38] #5: ffffffff8dfc80c0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 628.637604][ T38] #6: ffff88801a081c58 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 628.655438][ T38] #7: ffffffff8dfc80c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 628.655610][ T38] 6 locks held by kworker/u8:4/67: [ 628.655661][ T38] 5 locks held by kworker/u8:7/1016: [ 628.655740][ T38] 1 lock held by klogd/5172: [ 628.655790][ T38] 2 locks held by udevd/5183: [ 628.655842][ T38] 2 locks held by getty/5570: [ 628.655868][ T38] #0: ffff88823bf160a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 628.656040][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 628.656205][ T38] 4 locks held by syz-executor/5801: [ 628.656285][ T38] 9 locks held by syz-executor/5820: [ 628.656329][ T38] 1 lock held by udevd/5871: [ 628.656371][ T38] 2 locks held by udevd/5872: [ 628.656416][ T38] 2 locks held by udevd/5998: [ 628.656449][ T38] #0: ffffffff8dfc80c0 (rcu_read_lock){....}-{1:3}, at: dput+0x37/0x1a0 [ 628.656609][ T38] #1: ffff88803ed34638 (&lockref->lock){+.+.}-{3:3}, at: fast_dput+0xdd/0x430 [ 628.656775][ T38] 2 locks held by udevd/5999: [ 628.656809][ T38] #0: ffffffff8dfc80c0 (rcu_read_lock){....}-{1:3}, at: __d_lookup+0x66/0x780 [ 628.676882][ T38] #1: ffff8880b89246c8 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x53/0x880 [ 628.677148][ T38] 2 locks held by udevd/6047: [ 628.677215][ T38] 2 locks held by syz.4.2827/12013: [ 628.677250][ T38] #0: ffffffff8f3d9480 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 628.677419][ T38] #1: ffffffff8e2e78d8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 [ 628.677599][ T38] 10 locks held by syz-executor/12528: [ 628.677643][ T38] 2 locks held by syz.5.3678/13789: [ 628.677677][ T38] #0: ffffffff8f3d9480 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 628.677842][ T38] #1: ffffffff8e2e78d8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 628.678035][ T38] 4 locks held by syz.7.5477/17607: [ 628.678078][ T38] 5 locks held by syz.0.5478/17608: [ 628.678121][ T38] 4 locks held by syz.3.5479/17612: [ 628.678164][ T38] [ 628.678184][ T38] ============================================= [ 628.678184][ T38] [ 628.678283][ T38] NMI backtrace for cpu 1 [ 628.678328][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 628.678400][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 628.678444][ T38] Call Trace: [ 628.678475][ T38] [ 628.678499][ T38] dump_stack_lvl+0xe8/0x150 [ 628.678566][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 628.678593][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 628.678724][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 628.678813][ T38] sys_info+0x135/0x170 [ 628.678863][ T38] watchdog+0xfd3/0x1030 [ 628.678937][ T38] ? watchdog+0x1c9/0x1030 [ 628.679015][ T38] kthread+0x388/0x470 [ 628.679092][ T38] ? __pfx_watchdog+0x10/0x10 [ 628.679157][ T38] ? __pfx_kthread+0x10/0x10 [ 628.679237][ T38] ret_from_fork+0x514/0xb70 [ 628.679304][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 628.679355][ T38] ? __switch_to+0xc79/0x1410 [ 628.679458][ T38] ? __pfx_kthread+0x10/0x10 [ 628.679536][ T38] ret_from_fork_asm+0x1a/0x30 [ 628.679648][ T38] [ 628.679726][ T38] Sending NMI from CPU 1 to CPUs 0: [ 628.679788][ C0] NMI backtrace for cpu 0 [ 628.679805][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 628.679827][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 628.679839][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 628.679859][ C0] Code: e8 de 27 91 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 6f 31 f8 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 da fb fb 05 cc 44 89 f9 80 e1 07 [ 628.679964][ C0] RSP: 0018:ffffc900001679d0 EFLAGS: 00000202 [ 628.679981][ C0] RAX: 1ffffffff3371800 RBX: 00000000000003fd RCX: 0000000000000000 [ 628.680000][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 628.680012][ C0] RBP: ffffffff99b8c7b0 R08: 0000000000000000 R09: 0000000000000000 [ 628.680024][ C0] R10: dffffc0000000000 R11: ffffffff85336c00 R12: dffffc0000000000 [ 628.680040][ C0] R13: 0000000000000000 R14: ffffffff99b8c520 R15: 0000000000000000 [ 628.680053][ C0] FS: 0000000000000000(0000) GS:ffff888126104000(0000) knlGS:0000000000000000 [ 628.680068][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 628.680082][ C0] CR2: 00007f81d6128690 CR3: 00000000349f2000 CR4: 00000000003526f0 [ 628.680099][ C0] Call Trace: [ 628.680107][ C0] [ 628.680117][ C0] wait_for_lsr+0x1aa/0x2f0 [ 628.680152][ C0] serial8250_console_write+0x120d/0x1b90 [ 628.680191][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 628.680221][ C0] ? console_flush_one_record+0xfa/0xb90 [ 628.680247][ C0] ? console_flush_one_record+0x48f/0xb90 [ 628.680271][ C0] console_flush_one_record+0x68b/0xb90 [ 628.680296][ C0] ? console_flush_one_record+0xfa/0xb90 [ 628.680320][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 628.680343][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 628.680377][ C0] legacy_kthread_func+0x1b6/0x250 [ 628.680401][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 628.680422][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 628.680445][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 628.680469][ C0] kthread+0x388/0x470 [ 628.680491][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 628.680511][ C0] ? __pfx_kthread+0x10/0x10 [ 628.680533][ C0] ret_from_fork+0x514/0xb70 [ 628.680552][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 628.680570][ C0] ? __switch_to+0xc79/0x1410 [ 628.680597][ C0] ? __pfx_kthread+0x10/0x10 [ 628.680624][ C0] ret_from_fork_asm+0x1a/0x30 [ 628.680654][ C0] [ 628.704421][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 628.704492][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 628.704574][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 628.704611][ T38] Call Trace: [ 628.704644][ T38] [ 628.704678][ T38] vpanic+0x56c/0xa60 [ 628.704819][ T38] ? __pfx___schedule+0x10/0x10 [ 628.704912][ T38] ? __pfx_vpanic+0x10/0x10 [ 628.705005][ T38] panic+0xc5/0xd0 [ 628.705074][ T38] ? __pfx_panic+0x10/0x10 [ 628.705144][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 628.705251][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 628.705289][ T38] watchdog+0x102c/0x1030 [ 628.705328][ T38] ? watchdog+0x1c9/0x1030 [ 628.705355][ T38] kthread+0x388/0x470 [ 628.705384][ T38] ? __pfx_watchdog+0x10/0x10 [ 628.705403][ T38] ? __pfx_kthread+0x10/0x10 [ 628.705431][ T38] ret_from_fork+0x514/0xb70 [ 628.705456][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 628.705479][ T38] ? __switch_to+0xc79/0x1410 [ 628.705513][ T38] ? __pfx_kthread+0x10/0x10 [ 628.705623][ T38] ret_from_fork_asm+0x1a/0x30 [ 628.705741][ T38] [ 628.706391][ T38] Kernel Offset: disabled