last executing test programs: 10m29.457870762s ago: executing program 2 (id=146): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null', 0x800, 0x0) 10m29.405202449s ago: executing program 2 (id=148): syz_open_dev$sndhw(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sndhw(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$sndhw(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$sndhw(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$sndhw(&(0x7f0000000140), 0xa, 0x0) syz_open_dev$sndhw(&(0x7f0000000180), 0xa, 0x1) syz_open_dev$sndhw(&(0x7f00000001c0), 0xa, 0x2) syz_open_dev$sndhw(&(0x7f0000000200), 0xa, 0x800) syz_open_dev$sndhw(&(0x7f0000000240), 0x14, 0x0) syz_open_dev$sndhw(&(0x7f0000000280), 0x14, 0x1) syz_open_dev$sndhw(&(0x7f00000002c0), 0x14, 0x2) syz_open_dev$sndhw(&(0x7f0000000300), 0x14, 0x800) syz_open_dev$sndhw(&(0x7f0000000340), 0x1e, 0x0) syz_open_dev$sndhw(&(0x7f0000000380), 0x1e, 0x1) syz_open_dev$sndhw(&(0x7f00000003c0), 0x1e, 0x2) syz_open_dev$sndhw(&(0x7f0000000400), 0x1e, 0x800) syz_open_dev$sndhw(&(0x7f0000000440), 0x28, 0x0) syz_open_dev$sndhw(&(0x7f0000000480), 0x28, 0x1) syz_open_dev$sndhw(&(0x7f00000004c0), 0x28, 0x2) syz_open_dev$sndhw(&(0x7f0000000500), 0x28, 0x800) 10m29.317824085s ago: executing program 2 (id=153): set_thread_area(&(0x7f0000000000)) 10m29.287714933s ago: executing program 2 (id=154): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/xen/evtchn', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/xen/evtchn', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/xen/evtchn', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/xen/evtchn', 0x800, 0x0) 10m29.214134561s ago: executing program 2 (id=157): rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000000), 0x0) 10m27.675222939s ago: executing program 2 (id=160): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 3.539852979s ago: executing program 4 (id=8301): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x8001af85, &(0x7f000011fec0)) 3.33869457s ago: executing program 4 (id=8304): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0xa, &(0x7f0000000440)=""/27, &(0x7f0000000500)=0x1b) 3.20641912s ago: executing program 4 (id=8308): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r0, 0xb4f6}, {r0, 0x686}], 0x2, 0x0, 0x0, 0x0) 3.025716459s ago: executing program 4 (id=8314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) 2.802197096s ago: executing program 4 (id=8320): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904000001c5b3e30009058b"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.384383359s ago: executing program 5 (id=8346): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r0, 0x0, 0xf, 0x0, &(0x7f0000000240)) 1.252555843s ago: executing program 0 (id=8347): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, r0}, 0x38) 1.229248339s ago: executing program 5 (id=8348): r0 = syz_usbip_server_init(0x5) write$usbip_server(r0, &(0x7f0000000140)=@ret_unlink={{0x4, 0x8, 0x0, 0x0, 0x5}, {0x2}}, 0x30) 1.037931211s ago: executing program 4 (id=8351): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.037775647s ago: executing program 0 (id=8352): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x48, 0x5, 0x0, 0x8, 0x3, 0x6, 0xb, 0x6, 0x29, 0x1, 0x9, 0x4, 0x8, 0x9, 0x4, 0x0, [0xcd, 0xfff]}}) 1.037541582s ago: executing program 1 (id=8353): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f00000012c0)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0801"], 0x108}}], 0x2, 0xc040) 970.550087ms ago: executing program 1 (id=8355): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_USE_CARRIER={0x5, 0x1e, 0x5}]}}}]}, 0x44}}, 0x0) 909.865975ms ago: executing program 0 (id=8356): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 707.128674ms ago: executing program 3 (id=8359): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) 624.614367ms ago: executing program 3 (id=8360): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x42, 0x107, 0xfffffffe, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x146}]}, 0x18}, 0x1, 0x0, 0x0, 0x24048808}, 0xc000) 580.007038ms ago: executing program 5 (id=8361): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000010100080400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002800400338008000900", @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 572.358793ms ago: executing program 1 (id=8362): r0 = io_uring_setup(0x3ca9, &(0x7f00000000c0)={0x0, 0xd4ea, 0x2, 0x0, 0x3}) io_uring_enter(r0, 0x6d3, 0xffefffff, 0x21, &(0x7f0000000000)={[0xffff, 0xfffffffe]}, 0x8) 551.666084ms ago: executing program 0 (id=8363): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x29, &(0x7f0000000040)=""/255, &(0x7f0000000140)=0xff) 446.190036ms ago: executing program 3 (id=8364): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xfffffd, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0x980914, 0x1001}) 396.406602ms ago: executing program 5 (id=8365): r0 = syz_open_dev$dri(&(0x7f0000000740), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) 329.508491ms ago: executing program 3 (id=8366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) 304.817337ms ago: executing program 0 (id=8367): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback={0xffffffffffff0000}}, 0x1c) 304.108469ms ago: executing program 1 (id=8368): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigpending(0x0, 0x1000000) 143.993766ms ago: executing program 0 (id=8369): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) 143.86524ms ago: executing program 5 (id=8370): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x411, 0x2602) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x9, 0x97, 0xf8a0fc229cfc6439, 0x6, 0x7, 0xc, 0x0, 0x7}}) 143.760814ms ago: executing program 3 (id=8371): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180), 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000300)}, 0x10) 126.513885ms ago: executing program 1 (id=8372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x58, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x6}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) 29.458706ms ago: executing program 3 (id=8373): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x10000007) 23.081189ms ago: executing program 5 (id=8374): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002680)="568fb1ce0f27271fd1ef8366a5f6833f642ff6f2eb031a44e602ac66b361a2145f915b2d8aa39abfeace90f4ad7e042073991d605210aecd1efd9b973e24bda44b79821e2b73950959890bba599a0b23572b53bb3a694ddb9e17442fc501df02d77572d34bdc347b3a3d67900f3f4f86cc9c30e8430f9bdab4a7c01c66eb9ac63fb7a475b1392309829cef8ccff4ea88f9ad68577bf4df48ae8df3fbcd6652e627407d2b22bf4d64af1c48dcf98a3cbeac1ae49bfd8651f7fac949be51335d0cf4206dd64cc47d0849c3f257164158d0d94765b577653573ec34fe65731565e9fa26b3a9ce8909808f463a66c431585256c7325ad74dbc8cef386ad372ae86f5c8dcc394ffa9f522e4487bf7ee57e1a62b2588a2225f6c5a9d421992d761cf79880649d4b57e946d2a476862f095bfd22f4ab26f6e34fc63216c58e4084f1d1c9d97297ec07a95", 0xff57, 0x2) 0s ago: executing program 1 (id=8375): r0 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0xffff, 0x6}, {0x10007, 0x30000080}]}}) kernel console output (not intermixed with test programs): 56][ T6109] usb-storage 5-1:0.0: USB Mass Storage device detected [ 592.947587][ T6108] usb 5-1: USB disconnect, device number 3 [ 593.494502][T18242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5833'. [ 594.061855][T18270] batadv0: entered promiscuous mode [ 594.113830][T18272] Zero length message leads to an empty skb [ 594.300365][T18284] bond0: entered promiscuous mode [ 594.345185][T18284] bond_slave_0: entered promiscuous mode [ 594.368210][T18284] bond_slave_1: entered promiscuous mode [ 594.617569][T18295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5847'. [ 595.045705][T18313] Cannot find add_set index 2 as target [ 595.157466][ T30] audit: type=1326 audit(1770341362.283:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18314 comm="syz.0.5859" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 595.208463][ T30] audit: type=1326 audit(1770341362.283:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18314 comm="syz.0.5859" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 595.277775][ T30] audit: type=1326 audit(1770341362.343:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18314 comm="syz.0.5859" exe="/root/syz-executor" sig=0 arch=40000003 syscall=315 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 595.334390][ T30] audit: type=1326 audit(1770341362.343:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18314 comm="syz.0.5859" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 595.421404][ T30] audit: type=1326 audit(1770341362.343:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18314 comm="syz.0.5859" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 595.661051][T18338] bond1: entered promiscuous mode [ 595.670147][T18338] 8021q: adding VLAN 0 to HW filter on device bond1 [ 595.882553][T18397] usb usb7: usbfs: process 18397 (syz.4.5874) did not claim interface 0 before use [ 596.112617][T18411] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 596.377908][T11830] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 596.537948][T11830] usb 6-1: Using ep0 maxpacket: 16 [ 596.553325][T11830] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 596.577830][T11830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.595208][T11830] usb 6-1: Product: syz [ 596.606729][T11830] usb 6-1: Manufacturer: syz [ 596.611932][T11830] usb 6-1: SerialNumber: syz [ 596.631287][T11830] usb 6-1: config 0 descriptor?? [ 596.777799][ T6109] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 596.854368][T11830] speedtch 6-1:0.0: speedtch_bind: data interface not found! [ 596.876762][T11830] speedtch 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 596.947812][ T6109] usb 5-1: Using ep0 maxpacket: 16 [ 596.965586][ T6109] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 596.987839][ T6109] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.994873][T18479] netlink: 'syz.0.5895': attribute type 7 has an invalid length. [ 596.995984][ T6109] usb 5-1: Product: syz [ 596.996007][ T6109] usb 5-1: Manufacturer: syz [ 597.016176][ T6109] usb 5-1: SerialNumber: syz [ 597.025751][ T6109] usb 5-1: config 0 descriptor?? [ 597.035606][ T6109] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 597.095130][T11830] usb 6-1: USB disconnect, device number 125 [ 597.349731][T18495] program syz.3.5899 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 597.464855][ T6109] usb 5-1: clie_3_5_startup: get interface number failed: -71 [ 597.487883][ T6109] visor 5-1:0.0: probe with driver visor failed with error -71 [ 597.523714][ T6109] usb 5-1: USB disconnect, device number 4 [ 597.555337][T18509] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 598.101731][ T30] audit: type=1326 audit(1770341365.233:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18541 comm="syz.0.5918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 598.148649][ T30] audit: type=1326 audit(1770341365.233:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18541 comm="syz.0.5918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 598.202849][ T30] audit: type=1326 audit(1770341365.233:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18541 comm="syz.0.5918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=306 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 598.277594][ T30] audit: type=1326 audit(1770341365.233:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18541 comm="syz.0.5918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 598.487195][T18558] Cannot find del_set index 2 as target [ 598.495918][T18562] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5928'. [ 598.973045][T18588] veth2: entered allmulticast mode [ 599.632571][T18630] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5957'. [ 599.648043][T18633] netlink: 'syz.1.5958': attribute type 21 has an invalid length. [ 600.293269][T18668] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5973'. [ 600.692920][T18696] libceph: resolve '0' (ret=-3): failed [ 601.190402][T18724] netlink: 'syz.3.5998': attribute type 1 has an invalid length. [ 601.217974][T18724] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5998'. [ 602.035740][T18767] veth2: entered allmulticast mode [ 602.231092][T18793] netlink: 'syz.1.6017': attribute type 2 has an invalid length. [ 602.358159][T11830] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 602.538399][T11830] usb 5-1: Using ep0 maxpacket: 8 [ 602.553112][T11830] usb 5-1: config 0 has an invalid interface number: 191 but max is 0 [ 602.565113][T11830] usb 5-1: config 0 has no interface number 0 [ 602.572926][T11830] usb 5-1: config 0 interface 191 has no altsetting 0 [ 602.583262][T11830] usb 5-1: New USB device found, idVendor=0547, idProduct=2235, bcdDevice=a2.64 [ 602.593105][T11830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.617864][T11830] usb 5-1: Product: syz [ 602.622103][T11830] usb 5-1: Manufacturer: syz [ 602.626752][T11830] usb 5-1: SerialNumber: syz [ 602.628322][ T6108] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 602.652530][T11830] usb 5-1: config 0 descriptor?? [ 602.670826][T11830] usbtest 5-1:0.191: EZ-USB device [ 602.678183][T11830] usbtest 5-1:0.191: high-speed {control bulk-in bulk-out} tests (+alt) [ 602.694532][T18821] netlink: 'syz.5.6028': attribute type 21 has an invalid length. [ 602.715179][T18821] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6028'. [ 602.777842][ T797] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 602.799579][ T6108] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 602.813201][ T6108] usb 4-1: config 0 has no interface number 0 [ 602.837898][ T6108] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 602.851205][ T6108] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 602.871431][ T6108] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 602.898103][ T6108] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 602.906367][ T6108] usb 4-1: Product: syz [ 602.915233][T18833] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6033'. [ 602.944067][ T6108] usb 4-1: SerialNumber: syz [ 602.955567][ T6108] usb 4-1: config 0 descriptor?? [ 602.957874][ T797] usb 1-1: Using ep0 maxpacket: 32 [ 602.970799][ T6108] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input116 [ 602.995254][ T797] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 603.006402][ T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.040056][ T797] usb 1-1: Product: syz [ 603.044288][ T797] usb 1-1: Manufacturer: syz [ 603.067979][ T797] usb 1-1: SerialNumber: syz [ 603.090652][ T797] usb 1-1: config 0 descriptor?? [ 603.184063][ C0] cm109_urb_ctl_callback: 113 callbacks suppressed [ 603.184094][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 603.198104][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 603.205654][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 603.213279][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 603.220714][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 603.228884][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 603.236645][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 603.244214][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 603.252685][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 603.261179][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 603.270352][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 603.286199][ T6108] usb 4-1: USB disconnect, device number 125 [ 603.316499][ T6108] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 603.477378][T18868] openvswitch: netlink: IP tunnel dst address not specified [ 603.537479][ T797] airspy 1-1:0.0: usb_control_msg() failed -71 request 0a [ 603.550842][ T797] airspy 1-1:0.0: Could not detect board [ 603.556670][ T797] airspy 1-1:0.0: probe with driver airspy failed with error -71 [ 603.571509][ T797] usb 1-1: USB disconnect, device number 7 [ 603.628020][ T6149] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 603.639510][T18879] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 603.776849][T18885] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6045'. [ 603.789625][ T6149] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 603.799574][ T6149] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 603.818113][ T6149] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 603.847832][ T6149] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 603.867786][ T6149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 603.885670][ T6149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 603.906233][ T6149] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 603.952238][ T6149] usb 2-1: string descriptor 0 read error: -22 [ 603.970721][ T6149] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 603.987758][ T6149] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.001823][ T6149] usb 2-1: config 0 descriptor?? [ 604.022695][ T6149] hub 2-1:0.0: bad descriptor, ignoring hub [ 604.029270][ T6149] hub 2-1:0.0: probe with driver hub failed with error -5 [ 604.048614][ T6149] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input117 [ 604.309755][ T6149] usb 2-1: USB disconnect, device number 3 [ 604.473093][T18926] netlink: 'syz.5.6057': attribute type 1 has an invalid length. [ 604.482080][T18926] netlink: 5 bytes leftover after parsing attributes in process `syz.5.6057'. [ 604.848891][ T30] audit: type=1326 audit(1770341371.983:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.0.6066" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 604.907853][ T30] audit: type=1326 audit(1770341371.983:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.0.6066" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 604.957242][ T30] audit: type=1326 audit(1770341371.983:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.0.6066" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 605.012668][ T30] audit: type=1326 audit(1770341371.983:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.0.6066" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 605.075701][T18953] kAFS: unable to lookup cell 'ŒÉúZ°ÿ-ñn$vï(,bÅÌñ©ih¾Ì' [ 605.077770][ T30] audit: type=1326 audit(1770341371.983:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.0.6066" exe="/root/syz-executor" sig=0 arch=40000003 syscall=398 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 605.143389][T11830] usb 5-1: USB disconnect, device number 5 [ 605.211195][ T30] audit: type=1326 audit(1770341371.983:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.0.6066" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 605.251033][T18967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6073'. [ 605.287955][ T30] audit: type=1326 audit(1770341371.993:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.0.6066" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 605.379455][ T30] audit: type=1326 audit(1770341371.993:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.0.6066" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 605.447980][ T30] audit: type=1326 audit(1770341371.993:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.0.6066" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 605.958130][T11830] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 606.108020][T11830] usb 2-1: Using ep0 maxpacket: 16 [ 606.123111][T11830] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 606.137257][T11830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.162082][T11830] usb 2-1: Product: syz [ 606.166315][T11830] usb 2-1: Manufacturer: syz [ 606.189362][T11830] usb 2-1: SerialNumber: syz [ 606.210041][T11830] r8152-cfgselector 2-1: Unknown version 0x0000 [ 606.216476][T11830] r8152-cfgselector 2-1: config 0 descriptor?? [ 606.682404][T11830] r8152-cfgselector 2-1: USB disconnect, device number 4 [ 606.724332][T19049] netlink: 'syz.4.6107': attribute type 1 has an invalid length. [ 606.889866][ T30] audit: type=1400 audit(1770341374.023:95): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3AF6EFF374925873ECE44CF3460B0BA260624F2A08BDBB6D3C92592016EA4E0F401876B1958B3F9AA5153386EED838C49D3A pid=19057 comm="syz.5.6112" [ 606.930727][T19062] netlink: 'syz.3.6111': attribute type 1 has an invalid length. [ 607.410367][T19088] trusted_key: encrypted_key: keyword 'tpdate' not recognized [ 607.575876][T19098] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6132'. [ 607.609103][T19098] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 607.708280][T19106] netlink: 'syz.5.6136': attribute type 61 has an invalid length. [ 607.716508][T19106] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6136'. [ 607.928107][T19118] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6141'. [ 608.198874][ T6149] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 608.368704][ T6149] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 608.376855][ T6149] usb 5-1: config 1 has no interface number 0 [ 608.419941][ T6149] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 608.448998][ T6149] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 608.470031][ T6149] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.491635][ T6149] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 608.510893][ T6149] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.519526][ T6149] usb 5-1: Product: syz [ 608.523819][ T6149] usb 5-1: Manufacturer: syz [ 608.528889][ T6149] usb 5-1: SerialNumber: syz [ 608.543876][T19123] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 608.632400][T19155] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 608.685881][T19155] bond2 (unregistering): Released all slaves [ 608.760225][T19123] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 608.979743][ T6149] usb 5-1: Incompatible driver and firmware versions [ 608.994290][ T6149] usb 5-1: USB disconnect, device number 6 [ 609.424363][T19276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6177'. [ 609.457908][ T6149] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 609.600972][T19280] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 609.617842][ T6149] usb 2-1: Using ep0 maxpacket: 8 [ 609.627531][ T6149] usb 2-1: config 0 has an invalid interface number: 185 but max is 0 [ 609.636553][T19280] bond2 (unregistering): Released all slaves [ 609.643877][ T6149] usb 2-1: config 0 has no interface number 0 [ 609.676234][ T6149] usb 2-1: config 0 interface 185 has no altsetting 0 [ 609.690429][ T6149] usb 2-1: New USB device found, idVendor=1435, idProduct=0828, bcdDevice=e1.b0 [ 609.700252][ T6149] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.708520][ T6149] usb 2-1: Product: syz [ 609.712965][ T6149] usb 2-1: Manufacturer: syz [ 609.721787][ T6149] usb 2-1: SerialNumber: syz [ 609.730114][ T6149] usb 2-1: config 0 descriptor?? [ 609.966181][ T6149] usb 2-1: Could not find all expected endpoints [ 610.007434][ T6149] usb 2-1: USB disconnect, device number 5 [ 610.088849][ T30] audit: type=1326 audit(1770341377.223:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19373 comm="syz.3.6190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 610.091058][T19376] IPv6: NLM_F_CREATE should be specified when creating new route [ 610.147870][ T30] audit: type=1326 audit(1770341377.223:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19373 comm="syz.3.6190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 610.183778][ T30] audit: type=1326 audit(1770341377.223:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19373 comm="syz.3.6190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 610.215386][ T30] audit: type=1326 audit(1770341377.223:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19373 comm="syz.3.6190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 610.250391][ T30] audit: type=1326 audit(1770341377.263:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19373 comm="syz.3.6190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=460 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 610.296902][ T30] audit: type=1326 audit(1770341377.263:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19373 comm="syz.3.6190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 610.326875][ T30] audit: type=1326 audit(1770341377.263:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19373 comm="syz.3.6190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 610.417760][ T30] audit: type=1326 audit(1770341377.263:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19373 comm="syz.3.6190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 610.448957][ T30] audit: type=1326 audit(1770341377.263:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19373 comm="syz.3.6190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 610.509861][ T30] audit: type=1326 audit(1770341377.263:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19373 comm="syz.3.6190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 610.586110][T19394] xt_CT: You must specify a L4 protocol and not use inversions on it [ 611.014523][T19417] netlink: 'syz.5.6210': attribute type 2 has an invalid length. [ 611.165062][T19423] misc userio: Invalid payload size [ 611.392542][T19435] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 611.426194][T19438] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6220'. [ 611.803037][T19454] netlink: 'syz.1.6228': attribute type 5 has an invalid length. [ 611.851918][T19454] ip6erspan0: entered promiscuous mode [ 611.998122][T19469] netlink: 'syz.5.6235': attribute type 32 has an invalid length. [ 612.000236][T19470] xt_CT: You must specify a L4 protocol and not use inversions on it [ 612.006185][T19469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6235'. [ 612.006241][T19469] netlink: 'syz.5.6235': attribute type 32 has an invalid length. [ 612.783791][T19505] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 612.791791][T19505] IPv6: NLM_F_CREATE should be set when creating new route [ 612.799215][T19505] IPv6: NLM_F_CREATE should be set when creating new route [ 612.806477][T19505] IPv6: NLM_F_CREATE should be set when creating new route [ 613.210561][T19521] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 613.240186][T19521] bond2 (unregistering): Released all slaves [ 613.278368][T19564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6258'. [ 613.305788][T19564] netlink: 31 bytes leftover after parsing attributes in process `syz.4.6258'. [ 613.318910][T19564] netlink: 'syz.4.6258': attribute type 3 has an invalid length. [ 613.338845][T19564] netlink: 'syz.4.6258': attribute type 2 has an invalid length. [ 613.360632][T19564] netlink: 31 bytes leftover after parsing attributes in process `syz.4.6258'. [ 613.555367][T19606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6263'. [ 613.958446][T19628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6273'. [ 614.151770][T19632] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 614.182642][T19632] bond1 (unregistering): Released all slaves [ 614.309232][T19715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6280'. [ 614.327899][ T39] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 614.508436][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 614.530590][ T39] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 614.547840][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.564119][ T39] usb 4-1: Product: syz [ 614.569094][ T39] usb 4-1: Manufacturer: syz [ 614.573733][ T39] usb 4-1: SerialNumber: syz [ 614.626755][ T39] usb 4-1: config 0 descriptor?? [ 614.697029][T19733] bridge0: port 3(netdevsim0) entered blocking state [ 614.734526][T19733] bridge0: port 3(netdevsim0) entered disabled state [ 614.778563][T19733] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 614.809127][T19733] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 614.821710][T19733] bridge0: port 3(netdevsim0) entered blocking state [ 614.828920][T19733] bridge0: port 3(netdevsim0) entered forwarding state [ 614.892881][ T39] speedtch 4-1:0.0: speedtch_bind: wrong device class 68 [ 614.911554][ T39] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 614.990346][T19751] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 615.132726][ T6149] usb 4-1: USB disconnect, device number 126 [ 615.208808][ T39] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 615.419953][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 615.436122][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 615.470132][ T39] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 615.488086][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.506826][ T39] usb 5-1: Product: syz [ 615.514838][ T39] usb 5-1: Manufacturer: syz [ 615.526971][ T39] usb 5-1: SerialNumber: syz [ 615.539154][ T39] usb 5-1: config 0 descriptor?? [ 615.565917][ T39] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 615.817930][T11830] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 615.984523][T11830] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 615.993911][T11830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.002619][T11830] usb 6-1: Product: syz [ 616.004411][ T6109] usb 5-1: USB disconnect, device number 7 [ 616.006817][T11830] usb 6-1: Manufacturer: syz [ 616.020493][T11830] usb 6-1: SerialNumber: syz [ 616.045070][T11830] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 616.075485][ T39] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 616.180588][ T6149] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 616.337933][ T6149] usb 2-1: Using ep0 maxpacket: 16 [ 616.345313][ T6149] usb 2-1: config 0 has an invalid interface number: 60 but max is 0 [ 616.353906][ T6149] usb 2-1: config 0 has no interface number 0 [ 616.362988][ T6149] usb 2-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a [ 616.372344][ T6149] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.380417][ T6149] usb 2-1: Product: syz [ 616.384704][ T6149] usb 2-1: Manufacturer: syz [ 616.389696][ T6149] usb 2-1: SerialNumber: syz [ 616.397023][ T6149] usb 2-1: config 0 descriptor?? [ 616.408335][ T6149] gspca_main: spca500-2.14.0 probing 046d:0900 [ 616.523462][ T6109] usb 6-1: USB disconnect, device number 126 [ 616.609241][ T6149] gspca_spca500: reg write: error -71 [ 616.616442][ T6149] gspca_spca500: reg write: error -71 [ 616.623539][ T6149] gspca_spca500: reg write: error -71 [ 616.629512][ T6149] gspca_spca500: reg write: error -71 [ 616.635219][ T6149] gspca_spca500: reg write: error -71 [ 616.642718][ T6149] gspca_spca500: reg write: error -71 [ 616.648648][ T6149] gspca_spca500: reg write: error -71 [ 616.654316][ T6149] gspca_spca500: reg write: error -71 [ 616.661459][ T6149] gspca_spca500: reg write: error -71 [ 616.667260][ T6149] gspca_spca500: reg write: error -71 [ 616.673321][ T6149] gspca_spca500: reg write: error -71 [ 616.679120][ T6149] gspca_spca500: reg write: error -71 [ 616.685768][ T6149] gspca_spca500: reg write: error -71 [ 616.691933][ T6149] gspca_spca500: reg write: error -71 [ 616.706969][ T6149] usb 2-1: USB disconnect, device number 6 [ 617.093935][T19862] netlink: 'syz.4.6317': attribute type 11 has an invalid length. [ 617.109890][T19864] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 617.117288][T19864] IPv6: NLM_F_CREATE should be set when creating new route [ 617.124785][T19864] IPv6: NLM_F_CREATE should be set when creating new route [ 617.132511][T19864] IPv6: NLM_F_CREATE should be set when creating new route [ 617.139937][ T39] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 617.190896][ T39] ath9k_htc: Failed to initialize the device [ 617.231827][ T6109] usb 6-1: ath9k_htc: USB layer deinitialized [ 617.310706][T19866] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 617.350087][T19866] bond1 (unregistering): Released all slaves [ 617.373339][T19908] netlink: 280 bytes leftover after parsing attributes in process `syz.3.6319'. [ 617.494973][T19947] openvswitch: netlink: Missing key (keys=40, expected=80) [ 617.535463][T19949] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 617.695102][T19960] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6330'. [ 617.837798][ T6109] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 617.997779][ T6109] usb 1-1: Using ep0 maxpacket: 32 [ 618.005789][ T6109] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 618.020510][ T6109] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.024427][ T6069] cgroup: fork rejected by pids controller in [ 618.047785][ T6109] usb 1-1: config 0 has no interface number 0 [ 618.058418][ T6069] /syz3 [ 618.077841][ T6109] usb 1-1: config 0 interface 219 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 618.121601][ T6109] usb 1-1: New USB device found, idVendor=257a, idProduct=261f, bcdDevice= 8.ee [ 618.139268][ T6109] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.158077][ T6109] usb 1-1: Product: syz [ 618.172629][ T6109] usb 1-1: Manufacturer: syz [ 618.182751][ T6109] usb 1-1: SerialNumber: syz [ 618.197118][ T6109] usb 1-1: config 0 descriptor?? [ 618.460875][ T6109] hub 1-1:0.219: bad descriptor, ignoring hub [ 618.485594][ T6109] hub 1-1:0.219: probe with driver hub failed with error -5 [ 618.509966][ T6109] option 1-1:0.219: GSM modem (1-port) converter detected [ 618.578968][ T6109] usb 1-1: USB disconnect, device number 8 [ 618.607250][ T6109] option 1-1:0.219: device disconnected [ 618.680400][T15982] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.830191][T15982] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.948520][T15982] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.164333][T15982] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.250805][T20043] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6357'. [ 619.322226][T20047] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 619.339780][T20047] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 619.364896][T20047] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 619.398110][T20047] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 619.414610][T20047] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 619.635166][T15982] bridge_slave_1: left allmulticast mode [ 619.642975][T15982] bridge_slave_1: left promiscuous mode [ 619.650993][T15982] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.699238][T15982] bridge_slave_0: left allmulticast mode [ 619.704946][T15982] bridge_slave_0: left promiscuous mode [ 619.729317][T15982] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.580701][T15982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.592043][T15982] bond_slave_0: left promiscuous mode [ 620.605302][T15982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.616083][T15982] bond_slave_1: left promiscuous mode [ 620.623574][T15982] bond0 (unregistering): Released all slaves [ 620.634595][T20116] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6376'. [ 620.641060][T15982] bond1 (unregistering): Released all slaves [ 620.670746][T20085] netlink: 'syz.0.6367': attribute type 13 has an invalid length. [ 621.363338][T20177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6388'. [ 621.405175][T20183] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6389'. [ 621.457793][T20047] Bluetooth: hci4: command tx timeout [ 621.791619][T20061] chnl_net:caif_netlink_parms(): no params data found [ 622.268592][T11830] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 622.463531][T15982] hsr_slave_0: left promiscuous mode [ 622.471184][T11830] usb 2-1: Using ep0 maxpacket: 32 [ 622.479650][T15982] hsr_slave_1: left promiscuous mode [ 622.485909][T15982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.498050][T15982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.505784][T11830] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 622.515397][T11830] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.525953][T11830] usb 2-1: config 0 has no interface number 0 [ 622.528172][T15982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.542108][T11830] usb 2-1: config 0 interface 219 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 622.567281][T15982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.574049][T11830] usb 2-1: New USB device found, idVendor=257a, idProduct=261f, bcdDevice= 8.ee [ 622.594407][T11830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.617777][T11830] usb 2-1: Product: syz [ 622.619380][T15982] veth1_macvtap: left promiscuous mode [ 622.622299][T11830] usb 2-1: Manufacturer: syz [ 622.636795][T11830] usb 2-1: SerialNumber: syz [ 622.637908][T15982] veth0_macvtap: left promiscuous mode [ 622.650255][T15982] veth1_vlan: left promiscuous mode [ 622.651386][T11830] usb 2-1: config 0 descriptor?? [ 622.689490][ T6150] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 622.858188][ T6150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 622.868738][ T6150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 622.883100][ T6150] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 622.895158][ T6150] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.907040][ T6150] usb 1-1: Product: syz [ 622.912776][ T6150] usb 1-1: Manufacturer: syz [ 622.920342][T11830] hub 2-1:0.219: bad descriptor, ignoring hub [ 622.932688][T11830] hub 2-1:0.219: probe with driver hub failed with error -5 [ 622.941908][ T6150] usb 1-1: SerialNumber: syz [ 622.956593][T11830] option 2-1:0.219: GSM modem (1-port) converter detected [ 622.966066][ T6150] usb 1-1: config 0 descriptor?? [ 622.998636][ T6150] usb 1-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 623.041995][T11830] usb 2-1: USB disconnect, device number 7 [ 623.050317][T11830] option 2-1:0.219: device disconnected [ 623.430842][ T6109] usb 1-1: USB disconnect, device number 9 [ 623.548142][T20047] Bluetooth: hci4: command tx timeout [ 623.560415][T15982] team0 (unregistering): Port device team_slave_1 removed [ 623.636718][T15982] team0 (unregistering): Port device team_slave_0 removed [ 624.272777][T20381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6416'. [ 624.389162][T20061] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.396876][T20061] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.422629][T20061] bridge_slave_0: entered allmulticast mode [ 624.449633][T20061] bridge_slave_0: entered promiscuous mode [ 624.513449][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.520072][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.544403][T20381] 8021q: adding VLAN 0 to HW filter on device bond2 [ 624.631024][T20431] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6420'. [ 624.641766][T20061] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.677302][T20061] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.718397][T20061] bridge_slave_1: entered allmulticast mode [ 624.726809][T20061] bridge_slave_1: entered promiscuous mode [ 624.869875][T20061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.910965][T20061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.258960][T20493] program syz.0.6430 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 625.261037][T20061] team0: Port device team_slave_0 added [ 625.302337][T20061] team0: Port device team_slave_1 added [ 625.451547][T20061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.478539][T20061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.576909][T20518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6435'. [ 625.586480][T20061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.617440][T20518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6435'. [ 625.627838][T20047] Bluetooth: hci4: command tx timeout [ 625.637582][T15982] IPVS: stop unused estimator thread 0... [ 625.687354][T20061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.722604][T20061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.786219][T20061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.010599][T20061] hsr_slave_0: entered promiscuous mode [ 626.032567][T20061] hsr_slave_1: entered promiscuous mode [ 626.050795][T20061] debugfs: 'hsr0' already exists in 'hsr' [ 626.077052][T20061] Cannot create hsr debugfs directory [ 626.625473][T20639] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 626.639180][T20639] bond3 (unregistering): Released all slaves [ 626.936038][T20733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6456'. [ 627.298336][T20757] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 627.538775][ T30] audit: type=1326 audit(1770341394.653:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20774 comm="syz.0.6468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 627.605050][ T30] audit: type=1326 audit(1770341394.653:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20774 comm="syz.0.6468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 627.627521][T20777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6469'. [ 627.665096][ T30] audit: type=1326 audit(1770341394.653:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20774 comm="syz.0.6468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=324 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 627.698816][T20047] Bluetooth: hci4: command tx timeout [ 627.784642][ T30] audit: type=1326 audit(1770341394.653:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20774 comm="syz.0.6468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 627.863649][ T30] audit: type=1326 audit(1770341394.653:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20774 comm="syz.0.6468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 627.907835][ T39] usb 6-1: new full-speed USB device number 127 using dummy_hcd [ 627.953644][T20061] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 628.015773][T20061] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 628.069387][T20061] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 628.079884][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 628.128374][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 628.133489][T20061] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 628.179537][ T39] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 628.194129][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.232751][ T39] usb 6-1: Product: syz [ 628.247732][ T39] usb 6-1: Manufacturer: syz [ 628.252541][ T39] usb 6-1: SerialNumber: syz [ 628.278912][ T39] usb 6-1: config 0 descriptor?? [ 628.302789][ T39] usb 6-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 628.348218][T20829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6479'. [ 628.376575][T20831] netlink: 'syz.0.6481': attribute type 27 has an invalid length. [ 628.472426][T20061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.556961][T20061] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.616125][T14072] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.623448][T14072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.712238][T14072] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.719577][T14072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.788043][T20852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6485'. [ 628.840138][ T39] usb 6-1: USB disconnect, device number 127 [ 628.951927][T20061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 629.004776][T20873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6488'. [ 629.038370][T20873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 629.095264][T20061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.239339][T20880] dlm: plock device version mismatch: kernel (1.2.0), user (1.33554432.4294901762) [ 629.252294][T20061] veth0_vlan: entered promiscuous mode [ 629.276275][T20061] veth1_vlan: entered promiscuous mode [ 629.357291][T20061] veth0_macvtap: entered promiscuous mode [ 629.410773][T20061] veth1_macvtap: entered promiscuous mode [ 629.492774][T20061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.536051][T20061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.600113][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.613859][T20893] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 629.658762][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.696249][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.729109][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.978528][T14072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.996871][T14072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.111593][ T2927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.125590][ T2927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.538486][T20945] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.6508'. [ 630.567431][T20945] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 630.602142][T20949] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6511'. [ 630.619652][ T6149] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 630.806926][ T6149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 630.835686][ T6149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 630.885004][T20963] xt_hashlimit: overflow, try lower: 60585/0 [ 630.896069][ T6149] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 630.920555][ T6149] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.977807][ T6149] usb 2-1: Product: syz [ 630.992300][ T6149] usb 2-1: Manufacturer: syz [ 630.997034][ T6149] usb 2-1: SerialNumber: syz [ 631.050928][ T6149] usb 2-1: config 0 descriptor?? [ 631.091338][ T6149] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 631.640955][ T6149] usb 2-1: USB disconnect, device number 8 [ 631.730755][T21017] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6527'. [ 632.218099][T21049] program syz.3.6533 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 632.241695][ T30] audit: type=1326 audit(1770341399.363:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21050 comm="syz.5.6534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 632.357891][ T30] audit: type=1326 audit(1770341399.363:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21050 comm="syz.5.6534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 632.411611][ T6109] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 632.420115][ T30] audit: type=1326 audit(1770341399.363:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21050 comm="syz.5.6534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 632.520130][ T30] audit: type=1326 audit(1770341399.363:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21050 comm="syz.5.6534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 632.547128][T21066] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6540'. [ 632.580810][T21066] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6540'. [ 632.592149][ T30] audit: type=1326 audit(1770341399.493:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21053 comm="syz.5.6535" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x0 [ 632.601677][T21066] unsupported nlmsg_type 40 [ 632.623216][ T6109] usb 1-1: Using ep0 maxpacket: 16 [ 632.636371][ T6109] usb 1-1: config 254 has an invalid interface number: 235 but max is 0 [ 632.657984][ T6109] usb 1-1: config 254 has no interface number 0 [ 632.697390][ T6109] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x6 has an invalid bInterval 237, changing to 7 [ 632.723824][ T6109] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x6 has invalid maxpacket 42803, setting to 1024 [ 632.774293][ T6109] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 632.804124][ T6109] usb 1-1: config 254 interface 235 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 632.847720][ T6109] usb 1-1: config 254 interface 235 has no altsetting 0 [ 632.857846][ T6109] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 632.867749][ T6109] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.876220][ T6109] usb 1-1: Product: syz [ 632.891287][ T6109] usb 1-1: Manufacturer: syz [ 632.896040][ T6109] usb 1-1: SerialNumber: syz [ 633.156905][ T6109] usbtest 1-1:254.235: Linux gadget zero [ 633.184024][ T6109] usbtest 1-1:254.235: high-speed {control in/out bulk-in iso-out} tests (+alt) [ 633.416150][ T6109] usb 1-1: USB disconnect, device number 10 [ 633.478241][ T39] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 633.658758][T21127] libceph: resolve '400' (ret=-3): failed [ 633.680813][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 633.700762][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 633.730951][ T39] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 633.743924][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.767849][ T39] usb 4-1: Product: syz [ 633.779551][ T39] usb 4-1: Manufacturer: syz [ 633.786190][ T39] usb 4-1: SerialNumber: syz [ 633.802407][ T39] usb 4-1: config 0 descriptor?? [ 633.832831][ T39] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 634.166317][T21155] netlink: 'syz.0.6564': attribute type 4 has an invalid length. [ 634.207820][T21155] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6564'. [ 634.241695][T21155] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 634.392650][ T6149] usb 4-1: USB disconnect, device number 127 [ 635.559733][T21238] netlink: 'syz.0.6589': attribute type 2 has an invalid length. [ 636.293203][T21273] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 636.327928][T21275] netlink: 'syz.3.6609': attribute type 3 has an invalid length. [ 636.409764][T21279] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 636.460332][T21283] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 636.564367][T21285] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 636.592752][T21285] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 637.000224][T21311] IPv6: sit2: Disabled Multicast RS [ 637.007048][T21311] sit2: entered allmulticast mode [ 637.485785][T21373] hfs: unable to load iocharset "I†#hÆIarsÌ8ÒÎŽ wÑ·}+Ô[S‚“š_. ô,ƒs$n¡FÿBlÿbÆSR,Ð.R]^kŽR¥“Lý/­ J}&Æìo9b6˜Ž\wÜm¨$xšÙçųñCdeOé«jocÚ…`1Ò†Ÿ‚m‰#C”X^ݾOø;;ï©ï¦󣫭Xp­!°ì³+ÿ¥Æ‡ÇK=ÊA ‡­Øa2H‹îKAµ² Š»r·‹pæ" [ 637.789149][T21386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6646'. [ 637.929828][ T30] audit: type=1326 audit(1770341405.063:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21391 comm="syz.0.6649" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x0 [ 638.331249][T21414] xt_bpf: check failed: parse error [ 638.411569][T21420] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 638.978214][T21440] "syz.4.6672" (21440) uses obsolete ecb(arc4) skcipher [ 639.592874][T21489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6692'. [ 639.607115][T21491] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6693'. [ 640.267853][T21552] delete_channel: no stack [ 640.347398][T21556] xt_TCPMSS: Only works on TCP SYN packets [ 640.604415][T21570] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 641.320958][T21611] netlink: 'syz.4.6733': attribute type 6 has an invalid length. [ 641.338911][T21611] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6733'. [ 641.575722][T21619] netlink: 'syz.1.6738': attribute type 16 has an invalid length. [ 641.748000][T21627] program syz.5.6742 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 641.771077][T21629] netlink: 'syz.0.6743': attribute type 21 has an invalid length. [ 641.817961][T21629] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6743'. [ 641.831582][T21629] netlink: 'syz.0.6743': attribute type 5 has an invalid length. [ 641.841939][T21629] netlink: 'syz.0.6743': attribute type 6 has an invalid length. [ 641.872714][T21629] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6743'. [ 642.384175][T21662] netlink: 'syz.1.6760': attribute type 1 has an invalid length. [ 642.393524][T21664] netlink: 'syz.4.6759': attribute type 4 has an invalid length. [ 642.689728][T21679] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6768'. [ 642.714061][T21679] 0ªX¹¦À: renamed from caif0 [ 642.768805][T21679] 0ªX¹¦À: entered allmulticast mode [ 642.801905][T21679] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 643.079143][T21711] ip6gre1: entered allmulticast mode [ 644.312655][T21818] netlink: 'syz.3.6814': attribute type 7 has an invalid length. [ 644.321139][T21818] netlink: 'syz.3.6814': attribute type 8 has an invalid length. [ 644.689913][T21840] netlink: 'syz.0.6824': attribute type 5 has an invalid length. [ 644.706387][T21838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6823'. [ 644.717956][T21840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6824'. [ 644.934962][T21850] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6829'. [ 645.287790][T11830] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 645.466190][T11830] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 645.482964][T11830] usb 2-1: config 0 has no interface number 0 [ 645.498771][T11830] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 645.512972][T21886] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.554611][T11830] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 645.580589][T11830] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 645.600989][T11830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.625729][T11830] usb 2-1: Product: syz [ 645.635665][T11830] usb 2-1: Manufacturer: syz [ 645.640946][T11830] usb 2-1: SerialNumber: syz [ 645.658888][T11830] usb 2-1: config 0 descriptor?? [ 645.670949][T11830] cypress_m8 2-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 645.857523][ T30] audit: type=1326 audit(1770341412.983:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21904 comm="syz.5.6854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 645.858106][ T30] audit: type=1326 audit(1770341412.983:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21904 comm="syz.5.6854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 645.860859][ T30] audit: type=1326 audit(1770341412.993:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21904 comm="syz.5.6854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=176 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 645.861007][ T30] audit: type=1326 audit(1770341412.993:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21904 comm="syz.5.6854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 645.861160][ T30] audit: type=1326 audit(1770341412.993:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21904 comm="syz.5.6854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 645.941282][T11830] usb 2-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 646.104342][T11830] usb 2-1: USB disconnect, device number 9 [ 646.124555][T11830] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 646.165922][T11830] cypress_m8 2-1:0.35: device disconnected [ 646.446847][T21938] netlink: 'syz.0.6862': attribute type 19 has an invalid length. [ 646.480540][T21938] netlink: 'syz.0.6862': attribute type 28 has an invalid length. [ 646.497456][T21938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6862'. [ 646.530239][T21944] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 646.928285][ T6150] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 647.104277][ T6150] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 647.122906][ T6150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.147841][ T6150] usb 5-1: Product: syz [ 647.152064][ T6150] usb 5-1: Manufacturer: syz [ 647.169203][ T6150] usb 5-1: SerialNumber: syz [ 647.183764][ T6150] usb 5-1: config 0 descriptor?? [ 647.330918][T21989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6885'. [ 647.347440][T21989] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6885'. [ 647.422127][ T6150] hso 5-1:0.0: Can't find BULK IN endpoint [ 647.431817][ T6150] usb-storage 5-1:0.0: USB Mass Storage device detected [ 647.536168][T22004] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6889'. [ 647.676119][ T6149] usb 5-1: USB disconnect, device number 8 [ 647.689180][T22009] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.262843][T22047] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 648.796729][T22078] mmap: syz.5.6921 (22078): VmData 45756416 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 649.521785][T22117] trusted_key: encrypted_key: master key parameter is missing [ 650.016119][T22150] vivid-007: ================= START STATUS ================= [ 650.056670][T22139] bond2: option fail_over_mac: invalid value (10) [ 650.076613][T22150] vivid-007: Generate PTS: true [ 650.096871][T22150] vivid-007: Generate SCR: true [ 650.126536][T22150] tpg source WxH: 320x240 (Y'CbCr) [ 650.135847][T22139] bond2 (unregistering): Released all slaves [ 650.160099][T22150] tpg field: 1 [ 650.163877][T22150] tpg crop: (0,0)/320x240 [ 650.173808][T22150] tpg compose: (0,0)/320x240 [ 650.201240][T22150] tpg colorspace: 8 [ 650.209105][T22150] tpg transfer function: 0/0 [ 650.235156][T22150] tpg Y'CbCr encoding: 0/0 [ 650.244025][T22150] tpg quantization: 0/0 [ 650.248668][T22150] tpg RGB range: 0/2 [ 650.252718][T22150] vivid-007: ================== END STATUS ================== [ 650.511147][T22228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6963'. [ 650.754922][T22242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6970'. [ 651.088201][T22263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6978'. [ 651.252168][T22270] dlm: non-version read from control device 0 [ 651.949603][T22313] ipt_ECN: cannot use operation on non-tcp rule [ 652.528120][ T6149] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 652.701618][T22363] batadv0: entered promiscuous mode [ 652.702108][ T6149] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 652.718234][T22363] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 652.734130][ T6149] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 652.746342][ T6149] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 652.757411][ T6149] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.789870][T22337] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 652.807034][ T6149] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 653.246736][ T39] usb 4-1: USB disconnect, device number 2 [ 653.304981][T22401] binder: 22397:22401 ioctl 400c620e ffffffff returned -14 [ 653.421054][T22415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7035'. [ 653.556868][T22425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7039'. [ 654.076405][T22455] sctp: [Deprecated]: syz.0.7052 (pid 22455) Use of struct sctp_assoc_value in delayed_ack socket option. [ 654.076405][T22455] Use struct sctp_sack_info instead [ 654.745131][T22493] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 654.874059][T22502] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7071'. [ 655.233228][T22519] netlink: 'syz.0.7079': attribute type 1 has an invalid length. [ 655.258487][T22519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7079'. [ 655.295509][T22521] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 656.401359][ T30] audit: type=1326 audit(1770341423.533:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22580 comm="syz.1.7111" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 656.433064][T22584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7114'. [ 656.462426][ T30] audit: type=1326 audit(1770341423.533:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22580 comm="syz.1.7111" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 656.541992][ T30] audit: type=1326 audit(1770341423.563:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22580 comm="syz.1.7111" exe="/root/syz-executor" sig=0 arch=40000003 syscall=241 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 656.598363][ T30] audit: type=1326 audit(1770341423.563:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22580 comm="syz.1.7111" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 656.659367][ T30] audit: type=1326 audit(1770341423.563:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22580 comm="syz.1.7111" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 656.683993][T22599] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7120'. [ 657.462153][ T6150] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 657.630583][ T6150] usb 1-1: Using ep0 maxpacket: 16 [ 657.634450][T22655] netlink: 45 bytes leftover after parsing attributes in process `syz.3.7144'. [ 657.650856][ T6150] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 657.678829][ T6150] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.686883][ T6150] usb 1-1: Product: syz [ 657.710771][ T6150] usb 1-1: Manufacturer: syz [ 657.715446][ T6150] usb 1-1: SerialNumber: syz [ 657.748368][ T6150] r8152-cfgselector 1-1: Unknown version 0x0000 [ 657.754775][ T6150] r8152-cfgselector 1-1: config 0 descriptor?? [ 657.766054][ T6150] hub 1-1:0.0: bad descriptor, ignoring hub [ 657.782865][ T6150] hub 1-1:0.0: probe with driver hub failed with error -5 [ 657.936075][ T30] audit: type=1400 audit(1770341425.063:127): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=22669 comm="syz.4.7150" [ 657.977909][ T6150] r8152-cfgselector 1-1: Unknown version 0x0000 [ 657.996841][ T6150] r8152-cfgselector 1-1: bad CDC descriptors [ 658.086589][T22678] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7153'. [ 658.290316][ T6150] r8152-cfgselector 1-1: USB disconnect, device number 11 [ 658.590747][T22710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7166'. [ 658.626782][T22713] netlink: 'syz.1.7168': attribute type 13 has an invalid length. [ 658.653973][T22713] gretap0: refused to change device tx_queue_len [ 658.676923][T22713] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 658.791397][T22719] program syz.5.7170 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 659.120714][T22742] PM: Enabling pm_trace changes system date and time during resume. [ 659.120714][T22742] PM: Correct system time has to be restored manually after resume. [ 659.459136][T22760] netlink: 200 bytes leftover after parsing attributes in process `syz.3.7190'. [ 659.469936][T22761] kAFS: unable to lookup cell '' [ 659.667951][T22776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7196'. [ 659.927864][T22790] netlink: 'syz.1.7202': attribute type 1 has an invalid length. [ 660.418526][T22816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7215'. [ 660.468102][T22816] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7215'. [ 660.477031][T22816] tc_dump_action: action bad kind [ 660.699869][ T30] audit: type=1326 audit(1770341427.833:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22833 comm="syz.4.7223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 660.765449][ T30] audit: type=1326 audit(1770341427.863:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22833 comm="syz.4.7223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 660.856291][ T30] audit: type=1326 audit(1770341427.863:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22833 comm="syz.4.7223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 660.904365][ T30] audit: type=1326 audit(1770341427.863:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22833 comm="syz.4.7223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 661.028616][T22850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.381728][T22873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7241'. [ 661.585892][T22885] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7248'. [ 661.598399][T22885] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7248'. [ 661.608561][ T6109] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 661.626763][T22885] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7248'. [ 661.657114][T22887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7249'. [ 661.675080][T22885] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7248'. [ 661.718198][T22885] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7248'. [ 661.727553][T22885] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7248'. [ 661.737940][T22885] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7248'. [ 661.747435][T22885] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7248'. [ 661.760393][T22885] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7248'. [ 661.809931][ T6109] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 661.821334][ T6109] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 661.853608][ T6109] usb 4-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 661.864340][ T6109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.881848][ T6109] usb 4-1: Product: syz [ 661.886253][ T6109] usb 4-1: Manufacturer: syz [ 661.891410][ T6109] usb 4-1: SerialNumber: syz [ 661.919953][ T6109] usb 4-1: config 0 descriptor?? [ 662.141183][ T6109] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 662.218221][ T6149] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 662.239761][ T6150] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 662.368532][ T6149] usb 2-1: Using ep0 maxpacket: 32 [ 662.389504][T11830] usb 4-1: USB disconnect, device number 3 [ 662.397342][ T6149] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 662.414168][ T6149] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.427056][ T6149] usb 2-1: config 0 has no interface number 0 [ 662.448332][ T6150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 662.451617][ T6149] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 662.469995][ T6150] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 662.474357][ T6149] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.496434][ T6149] usb 2-1: Product: syz [ 662.503703][ T6149] usb 2-1: Manufacturer: syz [ 662.509006][ T6149] usb 2-1: SerialNumber: syz [ 662.521772][ T6150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 662.532328][ T6149] usb 2-1: config 0 descriptor?? [ 662.549794][ T6150] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 662.574484][ T6150] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 662.602413][ T6150] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.612527][ T6150] usb 1-1: Product: syz [ 662.620477][ T6150] usb 1-1: Manufacturer: syz [ 662.625378][ T6150] usb 1-1: SerialNumber: syz [ 662.636898][ T6150] usb 1-1: config 0 descriptor?? [ 662.661297][ T6150] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 662.768258][ T6149] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 662.822943][ T6149] snd-usb-audio 2-1:0.2: probe with driver snd-usb-audio failed with error -2 [ 662.893169][T21688] udevd[21688]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 662.939798][ T6150] ums-isd200 1-1:0.0: probe with driver ums-isd200 failed with error -22 [ 663.104201][ T6149] usb 1-1: USB disconnect, device number 12 [ 663.145338][ T6109] usb 2-1: USB disconnect, device number 10 [ 663.192257][T23005] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 663.286108][T23008] netlink: 'syz.5.7274': attribute type 2 has an invalid length. [ 663.310827][T23011] netlink: 'syz.4.7275': attribute type 1 has an invalid length. [ 663.627934][T11830] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 663.648107][T23034] libceph: resolve '0' (ret=-3): failed [ 663.750839][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 663.750859][ T30] audit: type=1326 audit(1770341430.883:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23036 comm="syz.0.7287" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 663.798084][ T30] audit: type=1326 audit(1770341430.883:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23036 comm="syz.0.7287" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 663.822324][T11830] usb 4-1: Using ep0 maxpacket: 16 [ 663.840139][T23040] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 663.850986][T11830] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.868618][T23040] [U] J"—e:ÀÆ" [ 663.872437][T23042] netlink: 'syz.1.7289': attribute type 21 has an invalid length. [ 663.873741][T11830] usb 4-1: New USB device found, idVendor=1803, idProduct=5510, bcdDevice=7d.bf [ 663.891861][T11830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.900502][ T30] audit: type=1326 audit(1770341430.923:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23036 comm="syz.0.7287" exe="/root/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 663.923232][T11830] usb 4-1: Product: syz [ 663.933186][T11830] usb 4-1: Manufacturer: syz [ 663.941742][T11830] usb 4-1: SerialNumber: syz [ 663.956660][ T30] audit: type=1326 audit(1770341430.923:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23036 comm="syz.0.7287" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 663.988888][T11830] usb 4-1: config 0 descriptor?? [ 664.018942][ T30] audit: type=1326 audit(1770341430.923:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23036 comm="syz.0.7287" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 664.210395][T11830] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 664.493459][ T6149] usb 4-1: USB disconnect, device number 4 [ 665.774082][ T30] audit: type=1326 audit(1770341432.903:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23149 comm="syz.0.7338" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 665.836399][ T30] audit: type=1326 audit(1770341432.903:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23149 comm="syz.0.7338" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 665.922228][ T30] audit: type=1326 audit(1770341432.943:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23149 comm="syz.0.7338" exe="/root/syz-executor" sig=0 arch=40000003 syscall=70 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 665.956701][ T30] audit: type=1326 audit(1770341432.943:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23149 comm="syz.0.7338" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 665.982435][ T30] audit: type=1326 audit(1770341432.943:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23149 comm="syz.0.7338" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 666.008305][T23160] xt_ecn: cannot match TCP bits for non-tcp packets [ 666.052264][T23165] batadv2: entered allmulticast mode [ 666.859927][T23210] __nla_validate_parse: 169 callbacks suppressed [ 666.859948][T23210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7368'. [ 667.163194][T23237] ipt_REJECT: TCP_RESET invalid for non-tcp [ 667.203661][T23239] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7379'. [ 667.237836][ T6150] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 667.270802][ T6108] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 667.338567][T23245] netlink: 'syz.3.7382': attribute type 10 has an invalid length. [ 667.358282][T23245] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7382'. [ 667.383485][T23245] batman_adv: batadv0: Adding interface: virt_wifi0 [ 667.391331][T23245] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.405142][T23249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7384'. [ 667.442032][ T6150] usb 2-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 667.451889][ T6150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.460316][T23245] batman_adv: batadv0: Interface activated: virt_wifi0 [ 667.461721][ T6108] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 667.467368][ T6150] usb 2-1: Product: syz [ 667.487797][ T6108] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 667.506335][ T6108] usb 1-1: Product: syz [ 667.506635][ T6150] usb 2-1: Manufacturer: syz [ 667.515459][ T6108] usb 1-1: Manufacturer: syz [ 667.525121][ T6108] usb 1-1: SerialNumber: syz [ 667.538425][ T6150] usb 2-1: SerialNumber: syz [ 667.550120][ T6150] usb 2-1: config 0 descriptor?? [ 667.552663][ T6108] usb 1-1: config 0 descriptor?? [ 667.575106][ T6108] ch341 1-1:0.0: ch341-uart converter detected [ 667.658087][T23260] netlink: 100 bytes leftover after parsing attributes in process `syz.5.7386'. [ 667.668390][T23260] netlink: 100 bytes leftover after parsing attributes in process `syz.5.7386'. [ 667.779053][ T6150] int51x1 2-1:0.0: probe with driver int51x1 failed with error -22 [ 667.932001][T23271] bond2: option arp_interval: invalid value (18446744073709551615) [ 667.943072][T23271] bond2: option arp_interval: allowed values 0 - 2147483647 [ 667.956767][T23271] bond2 (unregistering): Released all slaves [ 668.007380][ T6108] usb 1-1: failed to send control message: -71 [ 668.022011][ T6149] usb 2-1: USB disconnect, device number 11 [ 668.029362][ T6108] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 668.079644][ T6108] usb 1-1: USB disconnect, device number 13 [ 668.106139][ T6108] ch341 1-1:0.0: device disconnected [ 668.127904][ T6150] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 668.277779][ T6150] usb 4-1: Using ep0 maxpacket: 8 [ 668.284344][ T6150] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 668.296692][ T6150] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 668.305863][ T6150] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 668.314327][ T6150] usb 4-1: Product: syz [ 668.318776][ T6150] usb 4-1: Manufacturer: syz [ 668.323374][ T6150] usb 4-1: SerialNumber: syz [ 668.568081][ T6150] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 668.591031][ T6150] usb 4-1: Handspring Visor / Palm OS: port 76, is for unknown use [ 668.594630][T23363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7393'. [ 668.610871][ T6150] usb 4-1: Handspring Visor / Palm OS: port 111, is for HotSync use [ 668.613727][T23363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7393'. [ 668.629585][ T6150] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 668.647355][T23363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7393'. [ 668.665186][T23363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7393'. [ 668.770088][ T6150] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 668.790094][ T6150] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 668.828317][ T6150] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 668.848734][ T6150] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 668.878985][ T6150] usb 4-1: USB disconnect, device number 5 [ 668.900254][ T6150] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 668.922562][ T6150] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 668.945501][ T6150] visor 4-1:1.0: device disconnected [ 669.157726][T23408] netlink: 'syz.4.7404': attribute type 11 has an invalid length. [ 669.258110][ T6108] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 669.430274][ T6108] usb 6-1: Using ep0 maxpacket: 8 [ 669.442359][ T6108] usb 6-1: unable to get BOS descriptor or descriptor too short [ 669.469614][ T6108] usb 6-1: config 8 has an invalid interface number: 255 but max is 0 [ 669.490988][ T6108] usb 6-1: config 8 has no interface number 0 [ 669.497247][ T6108] usb 6-1: config 8 interface 255 has no altsetting 0 [ 669.539399][ T6108] usb 6-1: string descriptor 0 read error: -22 [ 669.547896][ T6108] usb 6-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice= 0.00 [ 669.577943][ T6108] usb 6-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 669.650730][T23429] bond1: option arp_interval: invalid value (18446744073709551615) [ 669.659493][T23429] bond1: option arp_interval: allowed values 0 - 2147483647 [ 669.672722][T23429] bond1 (unregistering): Released all slaves [ 670.053062][ T6108] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.5-1, 00:00:00:00:00:00. [ 670.156347][ T6108] usb 6-1: USB disconnect, device number 2 [ 670.646915][T23562] netlink: 'syz.3.7437': attribute type 61 has an invalid length. [ 670.684235][T23562] netlink: 'syz.3.7437': attribute type 62 has an invalid length. [ 670.693717][T23559] ALSA: mixer_oss: invalid OSS volume 'u' [ 671.360953][T23594] ALSA: mixer_oss: invalid OSS volume 'u' [ 671.482275][T23604] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 671.574630][T23611] netlink: 'syz.4.7457': attribute type 10 has an invalid length. [ 671.650546][T23611] team0: Device veth1_macvtap failed to register rx_handler [ 671.692715][T23613] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 672.173738][ T30] audit: type=1400 audit(1770341439.303:143): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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nla_validate_parse: 84 callbacks suppressed [ 672.366452][T23650] netlink: 830 bytes leftover after parsing attributes in process `syz.5.7474'. [ 672.394825][T23656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7476'. [ 672.864754][T23673] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7480'. [ 672.961095][T23675] bond2: entered allmulticast mode [ 672.966891][T23675] 8021q: adding VLAN 0 to HW filter on device bond2 [ 673.384478][T23729] netlink: 'syz.1.7492': attribute type 1 has an invalid length. [ 673.572016][T23738] xt_ecn: cannot match TCP bits for non-tcp packets [ 673.629178][ T30] audit: type=1326 audit(1770341440.753:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23742 comm="syz.5.7500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 673.697189][ T30] audit: type=1326 audit(1770341440.753:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23742 comm="syz.5.7500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 673.783445][ T30] audit: type=1326 audit(1770341440.813:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23742 comm="syz.5.7500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=313 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 673.861324][ T30] audit: type=1326 audit(1770341440.813:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23742 comm="syz.5.7500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 673.908322][ T30] audit: type=1326 audit(1770341440.813:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23742 comm="syz.5.7500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 674.086399][T23767] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7509'. [ 674.243979][T23777] netlink: 'syz.3.7516': attribute type 1 has an invalid length. [ 674.533835][T23795] --map-set only usable from mangle table [ 674.670245][T23801] netlink: 536 bytes leftover after parsing attributes in process `syz.4.7528'. [ 674.687913][T23801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7528'. [ 674.697395][T23801] netlink: 153 bytes leftover after parsing attributes in process `syz.4.7528'. [ 674.739419][T23801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7528'. [ 674.758118][T23801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7528'. [ 674.798092][T23801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7528'. [ 674.908781][T23816] netlink: 'syz.3.7534': attribute type 11 has an invalid length. [ 675.076372][ T30] audit: type=1400 audit(1770341442.203:149): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=23822 comm="syz.0.7539" [ 675.101281][T23825] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 675.693592][T23859] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 675.911377][T23875] netlink: 'syz.3.7563': attribute type 21 has an invalid length. [ 675.934988][T23875] netlink: 'syz.3.7563': attribute type 6 has an invalid length. [ 676.538182][T23913] ebtables: wrong size: *len 168, entries_size 48, replsz 48 [ 676.927884][ T6149] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 677.104688][T23944] bond1: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 677.109650][ T6149] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 677.131739][ T6149] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 677.141350][ T6149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.164439][ T6149] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 677.667190][T24010] m1Ie5nè‹Ò: entered promiscuous mode [ 677.858334][T24024] __nla_validate_parse: 9 callbacks suppressed [ 677.858357][T24024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7612'. [ 677.985502][T24031] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 678.007888][T24031] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 678.033841][T24031] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 678.089549][T24036] bond0: Unable to set up delay as MII monitoring is disabled [ 678.192186][T24042] netlink: 'syz.3.7620': attribute type 10 has an invalid length. [ 678.200672][T24042] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7620'. [ 678.211241][T24042] dummy0: entered promiscuous mode [ 678.228819][T24042] bridge0: port 3(dummy0) entered blocking state [ 678.236158][T24042] bridge0: port 3(dummy0) entered disabled state [ 678.248829][T24042] dummy0: entered allmulticast mode [ 678.254331][T24045] openvswitch: netlink: IP tunnel dst address not specified [ 678.263407][ T6149] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 678.269262][T24042] bridge0: port 3(dummy0) entered blocking state [ 678.276821][T24042] bridge0: port 3(dummy0) entered forwarding state [ 678.478142][ T6149] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 678.500408][ T6149] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 678.537406][ T6149] usb 2-1: USB disconnect, device number 12 [ 678.625398][T24069] netlink: 'syz.3.7631': attribute type 1 has an invalid length. [ 678.764985][T24071] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 679.379589][T24101] netlink: 'syz.0.7645': attribute type 8 has an invalid length. [ 679.395864][T24104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7647'. [ 679.542411][T24110] m1Ie5nè‹Ò: entered promiscuous mode [ 679.745990][T24126] netlink: 'syz.0.7655': attribute type 5 has an invalid length. [ 680.188472][T24151] program syz.4.7668 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 680.190003][T24150] m1Ie5nè‹Ò: entered promiscuous mode [ 680.318361][T24156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7670'. [ 680.807533][T24194] netlink: 'syz.5.7696': attribute type 10 has an invalid length. [ 680.815708][T24194] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7696'. [ 680.831701][T24193] m1Ie5nè‹Ò: entered promiscuous mode [ 680.838794][T24194] dummy0: entered promiscuous mode [ 680.846869][T24194] bridge0: port 4(dummy0) entered blocking state [ 680.858352][T24194] bridge0: port 4(dummy0) entered disabled state [ 680.878127][T24194] dummy0: entered allmulticast mode [ 680.885973][T24194] bridge0: port 4(dummy0) entered blocking state [ 680.892611][T24194] bridge0: port 4(dummy0) entered forwarding state [ 680.907751][ T6109] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 681.048756][ T6108] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 681.077855][ T6109] usb 1-1: Using ep0 maxpacket: 8 [ 681.085146][ T6109] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 681.106342][ T6109] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 681.128215][ T6109] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 681.136480][ T6109] usb 1-1: Product: syz [ 681.147743][ T6109] usb 1-1: Manufacturer: syz [ 681.157963][ T6109] usb 1-1: SerialNumber: syz [ 681.233311][ T6108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 681.248515][ T6108] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 681.265030][ T6108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 681.307867][ T6108] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 681.340600][ T6108] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 681.357236][ T6108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.386595][ T6109] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 681.394201][T24221] netlink: 'syz.3.7698': attribute type 10 has an invalid length. [ 681.404061][ T6108] usb 2-1: config 0 descriptor?? [ 681.436476][ T6109] usb 1-1: Handspring Visor / Palm OS: port 76, is for unknown use [ 681.460819][ T6109] usb 1-1: Handspring Visor / Palm OS: port 111, is for HotSync use [ 681.469218][ T6109] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 681.592841][ T6109] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 681.627939][ T6109] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 681.645949][ T6108] hdpvr 2-1:0.0: firmware version 0x8 dated [ 681.668632][ T6109] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 681.700716][ T6109] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 681.728842][ T6109] usb 1-1: USB disconnect, device number 14 [ 681.750304][ T6109] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 681.789051][ T6109] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 681.809342][ T6109] visor 1-1:1.0: device disconnected [ 681.844357][ T6108] hdpvr 2-1:0.0: device init failed [ 681.871441][ T6108] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 681.905141][ T6108] usb 2-1: USB disconnect, device number 13 [ 682.345429][T24297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7719'. [ 682.927912][T24326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7732'. [ 683.308459][T24344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7742'. [ 683.339963][T24344] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7742'. [ 683.548317][ T6033] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 683.698205][ T6033] usb 4-1: Using ep0 maxpacket: 32 [ 683.712399][ T6033] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 683.747263][ T6033] usb 4-1: config 0 has no interface number 0 [ 683.768649][ T6033] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 683.797940][ T6033] usb 4-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 683.827571][ T6033] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 683.850949][ T6033] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.862055][ T6033] usb 4-1: Product: syz [ 683.866268][ T6033] usb 4-1: Manufacturer: syz [ 683.874154][ T6033] usb 4-1: SerialNumber: syz [ 683.888648][ T6033] usb 4-1: config 0 descriptor?? [ 683.898585][ T6033] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 683.970458][T24384] gre1: entered promiscuous mode [ 683.975825][T24384] gre1: entered allmulticast mode [ 684.105172][ T6033] usb 4-1: qt2_setup_urbs - submit read urb failed -90 [ 684.113354][ T6033] quatech2 4-1:0.51: probe with driver quatech2 failed with error -90 [ 684.321608][ T6033] usb 4-1: USB disconnect, device number 6 [ 684.379227][T24417] netlink: 'syz.1.7770': attribute type 1 has an invalid length. [ 684.678063][ T6109] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 684.850185][ T6109] usb 1-1: Using ep0 maxpacket: 8 [ 684.863881][ T6109] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 684.876073][ T6109] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 684.886658][ T6109] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 684.897229][ T6109] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 684.916107][ T6109] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 684.927467][ T6109] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 684.937744][ T6109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.960458][T24458] netlink: 830 bytes leftover after parsing attributes in process `syz.3.7785'. [ 684.977089][ T6109] usb 1-1: config 0 descriptor?? [ 684.982603][ T6108] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 684.994464][T24421] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 685.077730][ T798] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 685.138804][ T6108] usb 2-1: Using ep0 maxpacket: 32 [ 685.150870][ T6108] usb 2-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 685.165147][ T6108] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 685.184937][ T6108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.197808][ T6108] usb 2-1: Product: syz [ 685.202114][ T6108] usb 2-1: Manufacturer: syz [ 685.227138][ T6108] usb 2-1: SerialNumber: syz [ 685.233927][ T798] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 685.269301][ T6108] usb 2-1: config 0 descriptor?? [ 685.274658][ T798] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 685.307386][ T6108] usb 2-1: bad CDC descriptors [ 685.316445][ T798] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 685.329381][ T6108] usb 2-1: unsupported MDLM descriptors [ 685.330917][ C1] Bluetooth: hci5: Unexpected continuation: 1 bytes [ 685.343463][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 685.346583][ T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 685.351990][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 685.369089][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 685.375979][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 685.384565][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 685.392191][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 685.393348][ T798] usb 5-1: SerialNumber: syz [ 685.399694][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 685.411729][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 685.419016][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 685.426487][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 685.433952][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 685.441360][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 685.448708][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 685.457149][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 685.465464][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 685.471993][T24480] gre1: entered promiscuous mode [ 685.473038][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 685.484879][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 685.492189][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 685.499796][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 685.507479][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 685.509903][T24480] gre1: entered allmulticast mode [ 685.517804][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 685.526901][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 685.534209][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 685.541261][ T6108] usb 1-1: USB disconnect, device number 15 [ 685.541860][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 685.555467][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 685.563727][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 685.571764][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 685.579042][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 685.585974][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 685.594639][T20047] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 685.617116][ T6033] usb 2-1: USB disconnect, device number 14 [ 685.716180][ T798] usb 5-1: 0:2 : does not exist [ 685.775113][ T798] usb 5-1: USB disconnect, device number 9 [ 685.775201][T24515] nft_compat: unsupported protocol 5 [ 685.925188][T24526] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 685.944512][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.951120][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.296714][T24534] bond3: up delay (7) is not a multiple of miimon (10), value rounded to 0 ms [ 686.324130][T24534] bond3: down delay (2) is not a multiple of miimon (10), value rounded to 0 ms [ 686.351338][T24579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7806'. [ 686.358881][T24534] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 686.411237][T24534] bond3 (unregistering): Released all slaves [ 686.887992][ T6109] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 687.048982][ T6109] usb 1-1: Using ep0 maxpacket: 32 [ 687.082357][ T6109] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 687.098239][ T6109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.128895][ T6109] usb 1-1: config 0 descriptor?? [ 687.153577][ T6109] gspca_main: sq930x-2.14.0 probing 041e:403c [ 687.474942][T24701] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7832'. [ 687.557471][ T6109] gspca_sq930x: ucbus_write failed -71 [ 687.571999][ T6109] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 687.587240][ T6109] usb 1-1: USB disconnect, device number 16 [ 688.094112][T24742] fuse: Invalid rootmode [ 688.270920][T24752] batadv0: entered promiscuous mode [ 688.286310][T24752] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 688.732126][T24768] bond2: option arp_all_targets: invalid value (1073741825) [ 688.764790][T24768] bond2 (unregistering): Released all slaves [ 688.988091][ T6108] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 689.158156][ T6108] usb 4-1: Using ep0 maxpacket: 32 [ 689.187119][ T6108] usb 4-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 689.229666][ T6108] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 689.249565][ T6108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.266002][T24866] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7876'. [ 689.277616][ T6108] usb 4-1: Product: syz [ 689.282241][ T6108] usb 4-1: Manufacturer: syz [ 689.289663][ T6108] usb 4-1: SerialNumber: syz [ 689.296955][T24866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7876'. [ 689.310166][ T6108] usb 4-1: config 0 descriptor?? [ 689.323473][ T6108] usb 4-1: bad CDC descriptors [ 689.332612][ T6108] usb 4-1: unsupported MDLM descriptors [ 689.381575][T24876] netlink: 'syz.0.7879': attribute type 33 has an invalid length. [ 689.405418][T24876] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7879'. [ 689.594178][ T6033] usb 4-1: USB disconnect, device number 7 [ 689.733127][T24901] netlink: 'syz.4.7888': attribute type 58 has an invalid length. [ 689.745613][T24901] netlink: 468 bytes leftover after parsing attributes in process `syz.4.7888'. [ 689.934675][T24908] openvswitch: netlink: EtherType 0 is less than min 600 [ 690.024064][T24913] xt_TCPMSS: Only works on TCP SYN packets [ 690.334858][T24923] bond1: option miimon: invalid value (18446744073709551615) [ 690.343276][T24923] bond1: option miimon: allowed values 0 - 2147483647 [ 690.390244][T24923] bond1 (unregistering): Released all slaves [ 690.662893][T25002] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7906'. [ 690.812340][T25008] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7909'. [ 691.425503][T25044] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7927'. [ 691.454176][T25044] netlink: 260 bytes leftover after parsing attributes in process `syz.4.7927'. [ 691.999901][T25080] netlink: 'syz.1.7944': attribute type 1 has an invalid length. [ 692.123163][T25088] netlink: 'syz.4.7949': attribute type 10 has an invalid length. [ 692.148241][T25088] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.183748][T25088] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.191231][T25088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.206659][T25088] team0: Port device bridge0 added [ 692.285619][T25092] bond5: option miimon: invalid value (18446744073709551615) [ 692.293727][T25092] bond5: option miimon: allowed values 0 - 2147483647 [ 692.330100][T25092] bond5 (unregistering): Released all slaves [ 692.616068][T25173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7958'. [ 693.088366][ T6108] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 693.108304][T25205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7969'. [ 693.207983][ T6033] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 693.247930][ T6108] usb 6-1: Using ep0 maxpacket: 32 [ 693.272673][ T6108] usb 6-1: config 0 has an invalid interface number: 191 but max is 0 [ 693.304888][ T6108] usb 6-1: config 0 has no interface number 0 [ 693.317903][ T6108] usb 6-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 693.350718][ T6108] usb 6-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 693.370045][ T6033] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 693.376322][ T6108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.392193][ T6033] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 693.400061][ T6108] usb 6-1: Product: syz [ 693.406946][ T6108] usb 6-1: Manufacturer: syz [ 693.422805][ T6108] usb 6-1: SerialNumber: syz [ 693.431139][ T6033] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 693.445937][ T6033] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.455605][ T6108] usb 6-1: config 0 descriptor?? [ 693.456043][ T6033] usb 2-1: Product: syz [ 693.467892][ T6033] usb 2-1: Manufacturer: syz [ 693.472529][ T6033] usb 2-1: SerialNumber: syz [ 693.480265][T25182] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 693.500903][ T6033] usb 2-1: config 0 descriptor?? [ 693.506706][T25192] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 693.514899][T25192] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 693.703090][T25182] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 693.742725][T25192] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 693.771898][T25192] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 693.944849][ T6108] asix 6-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 693.978880][ T6108] asix 6-1:0.191: probe with driver asix failed with error -71 [ 694.006700][ T6033] Error reading MAC address [ 694.033119][ T6033] usb 2-1: USB disconnect, device number 15 [ 694.039092][ T6108] usb 6-1: USB disconnect, device number 3 [ 694.051054][T25249] bridge0: port 3(dummy0) entered disabled state [ 694.362960][T25270] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 694.701100][T25285] __nla_validate_parse: 1 callbacks suppressed [ 694.701123][T25285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7996'. [ 694.838377][T25295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8003'. [ 695.002859][T25299] bond2 (unregistering): Released all slaves [ 695.292649][ T6033] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 695.352308][T25389] netlink: 'syz.1.8014': attribute type 13 has an invalid length. [ 695.387568][T25389] netlink: 'syz.1.8014': attribute type 27 has an invalid length. [ 695.461164][ T6033] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 57343, setting to 64 [ 695.498372][ T6033] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 695.530733][ T6033] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 695.562759][ T6033] usb 6-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 695.597921][ T6033] usb 6-1: Product: syz [ 695.602157][ T6033] usb 6-1: Manufacturer: syz [ 695.628007][ T6033] usb 6-1: SerialNumber: syz [ 695.650007][ T6033] usb 6-1: config 0 descriptor?? [ 695.657916][T25336] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 695.780718][T25402] netlink: 88 bytes leftover after parsing attributes in process `syz.0.8020'. [ 695.977174][ T6108] usb 6-1: USB disconnect, device number 4 [ 696.150990][T25423] netlink: 'syz.4.8028': attribute type 21 has an invalid length. [ 697.049405][ T6033] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 697.071948][T25471] program syz.1.8049 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 697.218628][ T6033] usb 1-1: Using ep0 maxpacket: 16 [ 697.236436][ T6033] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 697.251821][ T6033] usb 1-1: config 0 has no interface number 0 [ 697.259987][ T6033] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 697.284263][ T6033] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 697.303992][ T6033] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 697.324242][ T6033] usb 1-1: Product: syz [ 697.332893][ T6033] usb 1-1: SerialNumber: syz [ 697.354229][ T6033] usb 1-1: config 0 descriptor?? [ 697.376865][ T6033] cm109 1-1:0.8: invalid payload size 208, expected 4 [ 697.386537][T25488] program syz.5.8057 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 697.399666][ T6033] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input122 [ 697.486809][ T30] audit: type=1326 audit(1770341464.613:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25495 comm="syz.4.8059" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 697.575248][ T30] audit: type=1326 audit(1770341464.613:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25495 comm="syz.4.8059" exe="/root/syz-executor" sig=0 arch=40000003 syscall=292 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 697.610415][ T30] audit: type=1326 audit(1770341464.613:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25495 comm="syz.4.8059" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 697.715269][ T30] audit: type=1326 audit(1770341464.613:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25495 comm="syz.4.8059" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 697.765061][T25507] netlink: 88 bytes leftover after parsing attributes in process `syz.4.8062'. [ 697.817421][T25510] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8065'. [ 697.839060][T25510] netlink: 1 bytes leftover after parsing attributes in process `syz.5.8065'. [ 697.919371][ C1] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 697.926586][ C1] cm109_urb_ctl_callback: 3 callbacks suppressed [ 697.926608][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 697.940951][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 697.949352][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 697.952300][T25514] program syz.3.8067 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 697.957354][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 697.973479][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 697.981103][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 697.988330][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 697.995956][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 698.004806][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 698.012141][T11830] usb 1-1: USB disconnect, device number 17 [ 698.018707][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 698.018737][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 698.052026][T11830] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 698.358810][ T6109] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 698.390566][T25547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8077'. [ 698.517734][ T6109] usb 2-1: Using ep0 maxpacket: 8 [ 698.541109][ T6109] usb 2-1: unable to get BOS descriptor or descriptor too short [ 698.568044][ T6109] usb 2-1: config 7 has an invalid interface number: 58 but max is 0 [ 698.597689][ T6109] usb 2-1: config 7 has no interface number 0 [ 698.617219][ T6109] usb 2-1: config 7 interface 58 altsetting 3 has an endpoint descriptor with address 0x98, changing to 0x88 [ 698.648425][ T6109] usb 2-1: config 7 interface 58 altsetting 3 bulk endpoint 0x88 has invalid maxpacket 0 [ 698.664837][ T6109] usb 2-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 698.678728][ T6109] usb 2-1: config 7 interface 58 has no altsetting 0 [ 698.719352][ T6109] usb 2-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 698.728934][ T6109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.737094][ T6109] usb 2-1: Product: syz [ 698.756490][ T6109] usb 2-1: Manufacturer: syz [ 698.766459][ T6109] usb 2-1: SerialNumber: syz [ 698.812720][T25568] netlink: 6 bytes leftover after parsing attributes in process `syz.5.8086'. [ 698.840552][T25568] netlink: 6 bytes leftover after parsing attributes in process `syz.5.8086'. [ 698.981059][T25576] syz.3.8090 (25576): drop_caches: 0 [ 699.011292][ T6109] usb 2-1: USB disconnect, device number 16 [ 699.387791][T11830] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 699.550301][T11830] usb 4-1: Using ep0 maxpacket: 32 [ 699.565897][T11830] usb 4-1: unable to get BOS descriptor or descriptor too short [ 699.575260][T11830] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 699.586726][T11830] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 699.597380][T11830] usb 4-1: config 7 has no interface number 0 [ 699.603720][T11830] usb 4-1: config 7 interface 187 altsetting 6 endpoint 0x7 has invalid wMaxPacketSize 0 [ 699.614016][T11830] usb 4-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 699.629953][T11830] usb 4-1: config 7 interface 187 has no altsetting 0 [ 699.640075][T11830] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 699.667707][T11830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.676536][T11830] usb 4-1: Product: syz [ 699.687743][ T39] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 699.698806][T11830] usb 4-1: Manufacturer: syz [ 699.703467][T11830] usb 4-1: SerialNumber: syz [ 699.858593][ T39] usb 6-1: Using ep0 maxpacket: 16 [ 699.866407][ T39] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 699.877677][ T39] usb 6-1: config 0 has no interface number 0 [ 699.884306][ T39] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 699.909552][ T39] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 699.938860][ T39] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 699.948953][ T39] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 699.965705][T11830] usb 4-1: Unknown endpoint type found, address 0x07 [ 699.972545][ T39] usb 6-1: Product: syz [ 699.977000][ T39] usb 6-1: SerialNumber: syz [ 699.985441][T11830] usb 4-1: Not enough endpoints found in device, aborting! [ 699.998064][ T39] usb 6-1: config 0 descriptor?? [ 700.019878][ T39] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input123 [ 700.106098][T25650] SET target dimension over the limit! [ 700.208330][ T6109] usb 4-1: USB disconnect, device number 8 [ 700.235503][T11830] usb 6-1: USB disconnect, device number 5 [ 700.241684][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 700.340442][T11830] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 700.506798][T25679] IPv6: sit2: Disabled Multicast RS [ 700.672888][T25693] geneve2: entered promiscuous mode [ 700.850031][T25701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8128'. [ 701.195110][T25719] netlink: 'syz.3.8138': attribute type 10 has an invalid length. [ 701.224603][T25719] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 701.257220][T25719] batman_adv: batadv0: Adding interface: netdevsim0 [ 701.273635][T25719] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.312538][T25719] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 701.481341][T25729] bond3: option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5) [ 701.514637][T25729] bond3 (unregistering): Released all slaves [ 701.646607][T25796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8149'. [ 702.471001][T25847] netlink: 'syz.3.8167': attribute type 5 has an invalid length. [ 702.914801][T25871] program syz.4.8178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 703.070403][T25877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 703.695288][T25914] netlink: 'syz.4.8203': attribute type 3 has an invalid length. [ 703.704350][T25914] netlink: 766 bytes leftover after parsing attributes in process `syz.4.8203'. [ 704.179807][ T6108] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 704.337995][ T6109] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 704.345814][ T6108] usb 2-1: Using ep0 maxpacket: 16 [ 704.378414][ T6108] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 704.394168][ T6108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 704.406752][ T6108] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 704.430614][ T6108] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.32 [ 704.467706][ T6108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.471287][T25961] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-xor(2) [ 704.486571][ T6108] usb 2-1: Product: syz [ 704.507550][T25961] bond1 (unregistering): Released all slaves [ 704.515612][ T6108] usb 2-1: Manufacturer: syz [ 704.520480][ T6109] usb 6-1: Using ep0 maxpacket: 16 [ 704.545124][ T6109] usb 6-1: config index 0 descriptor too short (expected 65, got 36) [ 704.563719][ T6108] usb 2-1: SerialNumber: syz [ 704.581773][ T6109] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.615103][ T6108] usb 2-1: config 0 descriptor?? [ 704.623173][ T6109] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.640168][T25929] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 704.663687][ T6108] mceusb 2-1:0.0: mceusb_dev_probe: device setup failed! [ 704.678036][ T6109] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 704.704531][ T6108] mceusb 2-1:0.0: probe with driver mceusb failed with error -12 [ 704.724757][ T6109] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 704.745025][ T6109] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.785288][ T6109] usb 6-1: config 0 descriptor?? [ 704.812055][ T6109] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input124 [ 704.853867][ T5181] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 704.869915][ T5181] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 704.901083][ T39] usb 2-1: USB disconnect, device number 17 [ 704.901752][ T5181] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 704.981651][T25189] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 705.014795][ T5181] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 705.039125][T25942] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 705.060984][ T5181] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 705.070257][ T6108] usb 6-1: USB disconnect, device number 6 [ 705.270210][T26076] geneve2: entered promiscuous mode [ 705.638422][T26097] dlm: no locking on control device [ 705.648119][T26099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8243'. [ 705.684647][T26101] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8244'. [ 706.134014][T26127] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8256'. [ 706.221330][T26131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8257'. [ 706.335497][T26137] netlink: zone id is out of range [ 706.355470][T26137] netlink: zone id is out of range [ 706.361379][T26137] netlink: get zone limit has 4 unknown bytes [ 706.458023][T26142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8264'. [ 706.564105][T26153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8277'. [ 706.757812][ T39] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 706.768561][T26164] C: renamed from team_slave_0 (while UP) [ 706.794987][T26164] netlink: 'syz.3.8269': attribute type 1 has an invalid length. [ 706.815411][T26164] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8269'. [ 706.836400][T26164] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 706.921022][ T39] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 706.943875][ T39] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 706.970659][ T39] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 706.987252][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 707.008326][T26175] debugfs: '!' already exists in 'ieee80211' [ 707.009538][ T39] usb 5-1: SerialNumber: syz [ 707.098203][T11830] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 707.249020][T11830] usb 1-1: Using ep0 maxpacket: 32 [ 707.283386][ T39] usb 5-1: 0:2 : does not exist [ 707.292806][T11830] usb 1-1: unable to get BOS descriptor or descriptor too short [ 707.305275][T11830] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 707.323905][T11830] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 707.348905][ T39] usb 5-1: USB disconnect, device number 10 [ 707.369800][T11830] usb 1-1: config 7 has no interface number 0 [ 707.375980][T11830] usb 1-1: config 7 interface 187 altsetting 6 endpoint 0x7 has invalid wMaxPacketSize 0 [ 707.413926][T26200] netlink: 180 bytes leftover after parsing attributes in process `syz.5.8278'. [ 707.420453][T11830] usb 1-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 707.448146][T26200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8278'. [ 707.454099][T11830] usb 1-1: config 7 interface 187 has no altsetting 0 [ 707.472893][T25184] udevd[25184]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 707.480679][T11830] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 707.517963][T11830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.528151][T11830] usb 1-1: Product: syz [ 707.535977][T11830] usb 1-1: Manufacturer: syz [ 707.543797][T11830] usb 1-1: SerialNumber: syz [ 707.617242][T26212] raw_sendmsg: syz.1.8280 forgot to set AF_INET. Fix it! [ 707.768620][T11830] usb 1-1: Unknown endpoint type found, address 0x07 [ 707.784783][T11830] usb 1-1: Not enough endpoints found in device, aborting! [ 707.952461][T26228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8288'. [ 708.127772][ T6108] usb 1-1: USB disconnect, device number 18 [ 708.165277][T26244] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8292'. [ 708.165972][T26245] xfrm0: entered promiscuous mode [ 708.202994][T26245] xfrm0: entered allmulticast mode [ 708.334493][T26251] netlink: 'syz.4.8297': attribute type 3 has an invalid length. [ 708.357767][T26251] netlink: 'syz.4.8297': attribute type 3 has an invalid length. [ 708.378414][T26251] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8297'. [ 708.385122][T26253] netlink: 'syz.3.8298': attribute type 10 has an invalid length. [ 708.404113][T26253] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.412016][T26253] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.425125][T26253] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.433684][T26253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.433996][T26253] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.434123][T26253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.439415][T26253] team0: Port device bridge0 added [ 709.562729][T26315] bond2: option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5) [ 709.577898][ T6108] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 709.588318][T26315] bond2 (unregistering): Released all slaves [ 709.760229][ T6108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 709.780557][ T6108] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 709.800604][ T6108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.820911][ T6108] usb 5-1: Product: syz [ 709.833548][ T6108] usb 5-1: Manufacturer: syz [ 709.843633][ T6108] usb 5-1: SerialNumber: syz [ 709.862573][ T6108] usb 5-1: config 0 descriptor?? [ 709.890083][ T6108] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 709.914205][T26395] debugfs: '!' already exists in 'ieee80211' [ 710.046880][T26407] netlink: 'syz.3.8335': attribute type 1 has an invalid length. [ 710.148010][ T6108] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 710.203492][T25184] udevd[25184]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 710.239132][T26418] netlink: 'syz.5.8338': attribute type 10 has an invalid length. [ 710.239860][T26418] bridge0: port 4(dummy0) entered disabled state [ 710.240082][T26418] bridge0: port 3(netdevsim0) entered disabled state [ 710.240270][T26418] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.245166][T26418] bridge0: port 4(dummy0) entered blocking state [ 710.245313][T26418] bridge0: port 4(dummy0) entered forwarding state [ 710.245638][T26418] bridge0: port 3(netdevsim0) entered blocking state [ 710.245804][T26418] bridge0: port 3(netdevsim0) entered forwarding state [ 710.246107][T26418] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.246269][T26418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.252144][T26418] team0: Port device bridge0 added [ 710.343702][ T39] usb 5-1: USB disconnect, device number 11 [ 710.504423][T26430] bond3 (unregistering): Released all slaves [ 710.834713][T26505] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 710.841476][T26505] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 710.858415][T26505] vhci_hcd vhci_hcd.0: Device attached [ 710.880938][T26506] vhci_hcd: cannot find the pending unlink 8 [ 710.887582][T26506] vhci_hcd: connection closed [ 710.891727][T14072] vhci_hcd vhci_hcd.5: stop threads [ 710.911148][T14072] vhci_hcd vhci_hcd.5: release socket [ 710.926903][T14072] vhci_hcd vhci_hcd.5: disconnect device [ 711.152684][T26526] bond5: option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5) [ 711.174375][T26526] bond5 (unregistering): Released all slaves [ 711.207930][ T6033] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 711.378784][ T6033] usb 5-1: Using ep0 maxpacket: 16 [ 711.386913][ T6033] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 711.395561][ T6033] usb 5-1: config 0 has no interface number 0 [ 711.407745][ T6033] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 711.447832][ T6033] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 711.468102][ T6033] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 711.476760][ T6033] usb 5-1: Product: syz [ 711.487721][ T6033] usb 5-1: SerialNumber: syz [ 711.503726][ T6033] usb 5-1: config 0 descriptor?? [ 711.521796][ T6033] cm109 5-1:0.8: invalid payload size 208, expected 4 [ 711.551929][ T6033] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input125 [ 712.014826][ C1] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 712.014873][ C1] ------------[ cut here ]------------ [ 712.014884][ C1] URB ffff8880305a8300 submitted while active [ 712.014899][ C1] WARNING: drivers/usb/core/urb.c:380 at usb_submit_urb+0x7b/0x18b0, CPU#1: syz.4.8351/26514 [ 712.014940][ C1] Modules linked in: [ 712.015003][ C1] CPU: 1 UID: 0 PID: 26514 Comm: syz.4.8351 Not tainted syzkaller #0 PREEMPT(full) [ 712.015029][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 712.015044][ C1] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 712.015070][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 17 1e 07 fb 49 83 3e 00 74 40 e8 4c ce 9e fa 48 8d 3d 65 86 d6 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 31 ce 9e fa eb 05 e8 2a ce [ 712.015090][ C1] RSP: 0018:ffffc90000a08960 EFLAGS: 00010087 [ 712.015112][ C1] RAX: ffffffff8725a904 RBX: ffff8880305a8300 RCX: 0000000000040000 [ 712.015131][ C1] RDX: ffffc900023a2000 RSI: ffff8880305a8300 RDI: ffffffff8ffc2f70 [ 712.015149][ C1] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 712.015165][ C1] R10: dffffc0000000000 R11: fffff5200014112c R12: 0000000000000820 [ 712.015182][ C1] R13: ffff88802f989830 R14: ffff8880305a8308 R15: dffffc0000000000 [ 712.015201][ C1] FS: 0000000000000000(0000) GS:ffff8881257f5000(0063) knlGS:0000000057ef4480 [ 712.015222][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 712.015239][ C1] CR2: 000000002f610ff8 CR3: 0000000079e98000 CR4: 00000000003526f0 [ 712.015262][ C1] Call Trace: [ 712.015272][ C1] [ 712.015286][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 712.015312][ C1] ? ___ratelimit+0x58c/0x8d0 [ 712.015341][ C1] cm109_urb_irq_callback+0x6e2/0xcb0 [ 712.015382][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 712.015430][ C1] dummy_timer+0xbbd/0x45d0 [ 712.015470][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 712.015506][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 712.015580][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 712.015616][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 712.015638][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 712.015666][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 712.015698][ C1] __hrtimer_run_queues+0x527/0xc30 [ 712.015744][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 712.015766][ C1] ? read_tsc+0x9/0x20 [ 712.015808][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 712.015842][ C1] handle_softirqs+0x22a/0x7c0 [ 712.015868][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 712.015899][ C1] __irq_exit_rcu+0x5f/0x150 [ 712.015920][ C1] irq_exit_rcu+0x9/0x30 [ 712.015940][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 712.015964][ C1] [ 712.015973][ C1] [ 712.015984][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 712.016008][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 712.016031][ C1] Code: f7 e8 dd 47 07 f6 f7 c3 00 02 00 00 74 05 e8 e0 a5 32 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 64 13 f9 f5 65 8b 05 cd 05 59 07 85 c0 74 18 5b 41 5e c3 cc cc [ 712.016051][ C1] RSP: 0018:ffffc90013fa7b20 EFLAGS: 00000206 [ 712.016071][ C1] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 0000000080000001 [ 712.016087][ C1] RDX: 0000000000000006 RSI: ffffffff8dcc98c4 RDI: 0000000000000001 [ 712.016103][ C1] RBP: 0000000000000000 R08: ffffffff8fef1b77 R09: 1ffffffff1fde36e [ 712.016120][ C1] R10: dffffc0000000000 R11: fffffbfff1fde36f R12: 0000000000000246 [ 712.016137][ C1] R13: 1ffff1100512197f R14: ffff88802890c000 R15: ffff888028b15408 [ 712.016174][ C1] dummy_pullup+0x18c/0x200 [ 712.016203][ C1] ? __pfx_dummy_pullup+0x10/0x10 [ 712.016233][ C1] usb_gadget_disconnect_locked+0x143/0x480 [ 712.016271][ C1] gadget_unbind_driver+0xc7/0x450 [ 712.016296][ C1] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 712.016321][ C1] device_release_driver_internal+0x46f/0x860 [ 712.016355][ C1] driver_detach+0x1f3/0x2d0 [ 712.016383][ C1] bus_remove_driver+0x226/0x320 [ 712.016433][ C1] usb_gadget_unregister_driver+0x4e/0x70 [ 712.016469][ C1] raw_release+0xd7/0x260 [ 712.016497][ C1] ? __pfx_raw_release+0x10/0x10 [ 712.016525][ C1] __fput+0x44f/0xa70 [ 712.016565][ C1] task_work_run+0x1d9/0x270 [ 712.016603][ C1] ? __pfx_task_work_run+0x10/0x10 [ 712.016643][ C1] exit_to_user_mode_loop+0xed/0x480 [ 712.016673][ C1] ? rcu_is_watching+0x15/0xb0 [ 712.016700][ C1] __do_fast_syscall_32+0x38e/0x540 [ 712.016726][ C1] ? do_fast_syscall_32+0x33/0x70 [ 712.016751][ C1] ? irqentry_exit+0x10e/0x620 [ 712.016781][ C1] do_fast_syscall_32+0x33/0x70 [ 712.016808][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 712.016834][ C1] RIP: 0023:0xf739d539 [ 712.016854][ C1] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 712.016873][ C1] RSP: 002b:00000000f74efb1c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 712.016898][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 712.016912][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 712.016926][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 712.016940][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 712.016954][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 712.016988][ C1] [ 712.017001][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 712.017017][ C1] CPU: 1 UID: 0 PID: 26514 Comm: syz.4.8351 Not tainted syzkaller #0 PREEMPT(full) [ 712.017040][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 712.017054][ C1] Call Trace: [ 712.017064][ C1] [ 712.017073][ C1] vpanic+0x1e0/0x670 [ 712.017105][ C1] panic+0xc5/0xd0 [ 712.017132][ C1] ? __pfx_panic+0x10/0x10 [ 712.017176][ C1] __warn+0x315/0x4a0 [ 712.017201][ C1] ? usb_submit_urb+0x7b/0x18b0 [ 712.017226][ C1] ? usb_submit_urb+0x7b/0x18b0 [ 712.017250][ C1] __report_bug+0x29a/0x540 [ 712.017274][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 712.017305][ C1] ? usb_submit_urb+0x7b/0x18b0 [ 712.017327][ C1] ? __pfx___report_bug+0x10/0x10 [ 712.017354][ C1] ? dev_printk_emit+0xee/0x140 [ 712.017380][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 712.017421][ C1] report_bug_entry+0x19a/0x290 [ 712.017443][ C1] ? usb_submit_urb+0x7e/0x18b0 [ 712.017462][ C1] ? usb_submit_urb+0x83/0x18b0 [ 712.017482][ C1] handle_bug+0xca/0x200 [ 712.017505][ C1] exc_invalid_op+0x1a/0x50 [ 712.017531][ C1] asm_exc_invalid_op+0x1a/0x20 [ 712.017552][ C1] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 712.017576][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 17 1e 07 fb 49 83 3e 00 74 40 e8 4c ce 9e fa 48 8d 3d 65 86 d6 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 31 ce 9e fa eb 05 e8 2a ce [ 712.017594][ C1] RSP: 0018:ffffc90000a08960 EFLAGS: 00010087 [ 712.017614][ C1] RAX: ffffffff8725a904 RBX: ffff8880305a8300 RCX: 0000000000040000 [ 712.017628][ C1] RDX: ffffc900023a2000 RSI: ffff8880305a8300 RDI: ffffffff8ffc2f70 [ 712.017643][ C1] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 712.017656][ C1] R10: dffffc0000000000 R11: fffff5200014112c R12: 0000000000000820 [ 712.017669][ C1] R13: ffff88802f989830 R14: ffff8880305a8308 R15: dffffc0000000000 [ 712.017694][ C1] ? usb_submit_urb+0x74/0x18b0 [ 712.017727][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 712.017749][ C1] ? ___ratelimit+0x58c/0x8d0 [ 712.017778][ C1] cm109_urb_irq_callback+0x6e2/0xcb0 [ 712.017818][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 712.017856][ C1] dummy_timer+0xbbd/0x45d0 [ 712.017896][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 712.017931][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 712.018003][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 712.018039][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 712.018061][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 712.018092][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 712.018122][ C1] __hrtimer_run_queues+0x527/0xc30 [ 712.018165][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 712.018187][ C1] ? read_tsc+0x9/0x20 [ 712.018227][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 712.018261][ C1] handle_softirqs+0x22a/0x7c0 [ 712.018308][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 712.018339][ C1] __irq_exit_rcu+0x5f/0x150 [ 712.018361][ C1] irq_exit_rcu+0x9/0x30 [ 712.018380][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 712.018412][ C1] [ 712.018421][ C1] [ 712.018432][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 712.018456][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 712.018479][ C1] Code: f7 e8 dd 47 07 f6 f7 c3 00 02 00 00 74 05 e8 e0 a5 32 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 64 13 f9 f5 65 8b 05 cd 05 59 07 85 c0 74 18 5b 41 5e c3 cc cc [ 712.018498][ C1] RSP: 0018:ffffc90013fa7b20 EFLAGS: 00000206 [ 712.018518][ C1] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 0000000080000001 [ 712.018533][ C1] RDX: 0000000000000006 RSI: ffffffff8dcc98c4 RDI: 0000000000000001 [ 712.018549][ C1] RBP: 0000000000000000 R08: ffffffff8fef1b77 R09: 1ffffffff1fde36e [ 712.018565][ C1] R10: dffffc0000000000 R11: fffffbfff1fde36f R12: 0000000000000246 [ 712.018582][ C1] R13: 1ffff1100512197f R14: ffff88802890c000 R15: ffff888028b15408 [ 712.018620][ C1] dummy_pullup+0x18c/0x200 [ 712.018649][ C1] ? __pfx_dummy_pullup+0x10/0x10 [ 712.018679][ C1] usb_gadget_disconnect_locked+0x143/0x480 [ 712.018716][ C1] gadget_unbind_driver+0xc7/0x450 [ 712.018741][ C1] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 712.018766][ C1] device_release_driver_internal+0x46f/0x860 [ 712.018800][ C1] driver_detach+0x1f3/0x2d0 [ 712.018828][ C1] bus_remove_driver+0x226/0x320 [ 712.018863][ C1] usb_gadget_unregister_driver+0x4e/0x70 [ 712.018897][ C1] raw_release+0xd7/0x260 [ 712.018924][ C1] ? __pfx_raw_release+0x10/0x10 [ 712.018951][ C1] __fput+0x44f/0xa70 [ 712.018990][ C1] task_work_run+0x1d9/0x270 [ 712.019022][ C1] ? __pfx_task_work_run+0x10/0x10 [ 712.019061][ C1] exit_to_user_mode_loop+0xed/0x480 [ 712.019092][ C1] ? rcu_is_watching+0x15/0xb0 [ 712.019118][ C1] __do_fast_syscall_32+0x38e/0x540 [ 712.019144][ C1] ? do_fast_syscall_32+0x33/0x70 [ 712.019169][ C1] ? irqentry_exit+0x10e/0x620 [ 712.019198][ C1] do_fast_syscall_32+0x33/0x70 [ 712.019225][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 712.019251][ C1] RIP: 0023:0xf739d539 [ 712.019270][ C1] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 712.019289][ C1] RSP: 002b:00000000f74efb1c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 712.019312][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 712.019327][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 712.019341][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 712.019356][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 712.019370][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 712.019413][ C1] [ 712.019962][ C1] Kernel Offset: disabled