last executing test programs: 3m11.426958003s ago: executing program 1 (id=4058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010200000000000000000a0000040700010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 3m11.194797362s ago: executing program 1 (id=4063): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0x0, 0xffffffffffffffff) 3m10.92348448s ago: executing program 1 (id=4067): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ffd2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d5503002800000000000000000000000000008000", 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x40800) 3m10.832765729s ago: executing program 1 (id=4069): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') openat(r0, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x60042, 0x1) 3m10.60790124s ago: executing program 1 (id=4073): r0 = socket(0x2b, 0x1, 0x1) accept$unix(r0, 0x0, 0x0) 3m10.342227853s ago: executing program 1 (id=4079): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd2a, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 2m58.671151806s ago: executing program 2 (id=4246): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000200)=0x1, 0x4) 2m58.479465959s ago: executing program 2 (id=4249): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000b80)={0x8000, [0x8, 0x5], 0x5}, 0x10) 2m53.734618172s ago: executing program 32 (id=4079): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd2a, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 2m53.725738145s ago: executing program 2 (id=4251): ioctl$XFS_IOC_FSGROWFSLOG(0xffffffffffffffff, 0x4008586f, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030908000009058d67c8002a000009050502000000000009058b6e"], 0x0) 2m51.970953133s ago: executing program 2 (id=4273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="58000000020601010000000000000000010000040c000300686173683a697000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d3050014"], 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8004) 2m51.643717161s ago: executing program 2 (id=4277): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r0, 0x0, 0x0) 2m51.388878415s ago: executing program 2 (id=4281): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2}]}, 0x1c}}, 0x4000880) 2m37.043285798s ago: executing program 3 (id=4457): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x10, 0x110, 0xc}], 0x10}, 0x0) 2m37.003119792s ago: executing program 3 (id=4459): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x3) 2m36.917651911s ago: executing program 3 (id=4461): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, 0x0) 2m36.685655092s ago: executing program 3 (id=4465): r0 = syz_open_dev$media(&(0x7f0000000000), 0xe, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x2b, 0x0, 0xfffffffffffffffe}) 2m36.486176948s ago: executing program 3 (id=4469): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x128}, 0x0) 2m36.269917202s ago: executing program 3 (id=4474): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m35.056622536s ago: executing program 33 (id=4281): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2}]}, 0x1c}}, 0x4000880) 2m19.848656713s ago: executing program 34 (id=4474): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m18.216250798s ago: executing program 0 (id=4641): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000001200000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) 2m17.930273681s ago: executing program 0 (id=4644): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) 2m17.714663655s ago: executing program 0 (id=4647): r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000340)={0x1ff, 0xa, 0x1, 0x0, 0x9}) 2m17.38703022s ago: executing program 0 (id=4651): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000004e000102"], 0x18}, 0x1, 0x0, 0x0, 0xc885}, 0x24048094) 2m17.192907655s ago: executing program 0 (id=4655): r0 = syz_io_uring_setup(0xaad, &(0x7f0000000300)={0x0, 0x4, 0x40, 0x22, 0x1b}, &(0x7f0000000100), &(0x7f0000000400), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, 0x0, 0x1) 2m16.968612678s ago: executing program 0 (id=4658): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) 2m0.565189407s ago: executing program 35 (id=4658): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) 43.880014636s ago: executing program 7 (id=5868): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c00)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe000]}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xd}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) 43.800884624s ago: executing program 7 (id=5869): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000015000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 43.207505919s ago: executing program 7 (id=5877): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x800000, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000280)={0x1b, 0x3, 0x2, 0x4000}) 43.022481374s ago: executing program 7 (id=5882): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500080002000000", 0x24) 42.744454447s ago: executing program 7 (id=5887): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, 0x0, 0x0) 42.338848019s ago: executing program 7 (id=5892): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700090099010000000000001200000008000100"], 0x1c}}, 0x4000080) 25.905511623s ago: executing program 36 (id=5892): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700090099010000000000001200000008000100"], 0x1c}}, 0x4000080) 3.506041976s ago: executing program 9 (id=6411): r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 3.366944632s ago: executing program 6 (id=6413): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000009709010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.120580987s ago: executing program 6 (id=6417): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18) 2.995433888s ago: executing program 5 (id=6418): r0 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) 2.846349302s ago: executing program 6 (id=6420): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x11) 2.785499395s ago: executing program 9 (id=6421): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11020}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x4, 0x4e9, 0x3}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 2.473805244s ago: executing program 5 (id=6423): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/cgroup\x00') ioctl$NS_GET_OWNER_UID(r0, 0x8004b709, 0x0) 2.334885219s ago: executing program 9 (id=6426): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1048}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xfffe}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) 2.260960088s ago: executing program 5 (id=6427): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8932, &(0x7f00000002c0)={'veth0\x00', @random="bc1a091f2845"}) 1.960326751s ago: executing program 4 (id=6429): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1.954510939s ago: executing program 8 (id=6430): syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x3c, &(0x7f0000000bc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2e, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x1a, 0x0, @opaque="dff98c8d6b02f029f30930cc593d79e16d2f"}}}}}, 0x0) 1.762118187s ago: executing program 4 (id=6431): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x4e22, @multicast1=0xac14141d}}) 1.529799093s ago: executing program 6 (id=6432): r0 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r0, 0x1269, &(0x7f00000000c0)={0x5, 0x0, 0x0, &(0x7f0000000040)}) 1.414778432s ago: executing program 8 (id=6433): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x53c, 0xc0b00) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000001bc0)) 1.306946143s ago: executing program 6 (id=6434): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x81, 0x200003, 0x803, 0x0, 0x7}) 1.142550597s ago: executing program 8 (id=6435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xa0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x5c, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xd236}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xe8}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) 1.108215663s ago: executing program 6 (id=6436): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00100c"], 0x0, 0x0, 0x0}, 0x0) 838.638772ms ago: executing program 8 (id=6437): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000100)=0x8) 726.045641ms ago: executing program 5 (id=6438): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) get_mempolicy(&(0x7f00000001c0), 0x0, 0x3, &(0x7f0000076000/0x2000)=nil, 0x4) 724.619205ms ago: executing program 4 (id=6439): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) 708.779166ms ago: executing program 9 (id=6440): r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x680) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000340)={0xd44, 0x8, 0x3, 0x0, 0x8}) 608.971289ms ago: executing program 8 (id=6441): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_GET_API_VERSION(r0, 0x3b64) 529.714712ms ago: executing program 4 (id=6442): setrlimit(0x7, &(0x7f0000000400)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) 402.759921ms ago: executing program 5 (id=6443): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x6, 0xf1, 0xfffff018}, {0x6, 0x10, 0xfe, 0x1057a}]}, 0x10) 354.615865ms ago: executing program 9 (id=6444): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 285.378671ms ago: executing program 4 (id=6445): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x2, 0x4}}, 0x10) 197.100273ms ago: executing program 8 (id=6446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4004}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 152.20055ms ago: executing program 5 (id=6447): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x18, 0x1, 0x0, 0x10, 0x0, 0x20000, 0x10, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @in6=@mcast1, @in6=@mcast2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x80}}, 0x20000000) 42.896055ms ago: executing program 4 (id=6448): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 0s ago: executing program 9 (id=6449): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) kernel console output (not intermixed with test programs): 39238][ T150] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.347891][T14612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.403397][T14612] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.430684][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.430914][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.469546][T14811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4339'. [ 479.469573][T14811] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4339'. [ 479.532839][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.532929][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.311698][ T37] audit: type=1326 audit(1785154369.518:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14832 comm="syz.4.4351" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58253de99 code=0x7ffc0000 [ 480.340337][ T37] audit: type=1326 audit(1785154369.518:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14832 comm="syz.4.4351" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58253de99 code=0x7ffc0000 [ 480.340402][ T37] audit: type=1326 audit(1785154369.527:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14832 comm="syz.4.4351" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd58253de99 code=0x7ffc0000 [ 480.340462][ T37] audit: type=1326 audit(1785154369.527:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14832 comm="syz.4.4351" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58253de99 code=0x7ffc0000 [ 480.340512][ T37] audit: type=1326 audit(1785154369.527:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14832 comm="syz.4.4351" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58253de99 code=0x7ffc0000 [ 481.381690][ T5616] Bluetooth: hci5: command tx timeout [ 481.447583][T14862] netlink: 'syz.4.4360': attribute type 7 has an invalid length. [ 481.447609][T14862] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4360'. [ 481.633985][T14612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.165072][T14895] netlink: 'syz.3.4373': attribute type 10 has an invalid length. [ 482.165099][T14895] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4373'. [ 482.197682][T14895] team0: entered promiscuous mode [ 482.197709][T14895] team_slave_0: entered promiscuous mode [ 482.199632][T14895] team_slave_1: entered promiscuous mode [ 482.208403][T14895] team0: entered allmulticast mode [ 482.208430][T14895] team_slave_0: entered allmulticast mode [ 482.208456][T14895] team_slave_1: entered allmulticast mode [ 482.256501][T14895] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.257611][T14895] bridge0: port 3(team0) entered blocking state [ 482.258578][T14895] bridge0: port 3(team0) entered disabled state [ 482.555066][T14612] veth0_vlan: entered promiscuous mode [ 482.686235][T14612] veth1_vlan: entered promiscuous mode [ 482.824928][T14612] veth0_macvtap: entered promiscuous mode [ 483.129263][T14927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4389'. [ 483.129296][T14927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4389'. [ 483.167899][T14612] veth1_macvtap: entered promiscuous mode [ 483.221084][T14612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.283314][T14612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.332502][ T150] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.335717][ T150] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.335983][ T150] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.336026][ T150] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.553258][T14939] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4395'. [ 484.622884][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.622909][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.072614][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.072640][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.202673][T14978] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4414'. [ 486.080965][T15010] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4428'. [ 486.314120][T15014] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4431'. [ 486.314647][T15014] unsupported nlmsg_type 40 [ 487.388847][T15041] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 487.389043][T15041] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 487.816679][T15060] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4453'. [ 487.931773][T15060] team0 (unregistering): Port device team_slave_0 removed [ 488.000347][T15060] team0 (unregistering): Port device team_slave_1 removed [ 488.116311][T15061] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4454'. [ 488.116343][T15061] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4454'. [ 488.116361][T15061] netlink: 22 bytes leftover after parsing attributes in process `syz.4.4454'. [ 488.851847][T15092] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4468'. [ 489.598735][T15123] netlink: 140 bytes leftover after parsing attributes in process `syz.5.4483'. [ 489.598881][T15123] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4483'. [ 490.278576][ T5741] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 490.448376][ T5741] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 490.448413][ T5741] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.448436][ T5741] usb 5-1: Product: syz [ 490.448453][ T5741] usb 5-1: Manufacturer: syz [ 490.448469][ T5741] usb 5-1: SerialNumber: syz [ 490.868494][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 490.964347][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 490.978161][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 490.994673][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 490.997245][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 491.387428][ T5738] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 491.926738][ T6985] usb 5-1: USB disconnect, device number 94 [ 492.573601][ T5803] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 492.712363][T15205] misc userio: Invalid payload size [ 492.739945][ T5803] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 492.739987][ T5803] usb 6-1: config 0 interface 0 has no altsetting 0 [ 492.740024][ T5803] usb 6-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 492.740050][ T5803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.764595][ T5803] usb 6-1: config 0 descriptor?? [ 492.792948][T15192] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 492.830237][ T5803] usbhid 6-1:0.0: can't add hid device: -22 [ 492.830354][ T5803] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 492.984774][ T5738] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 493.068245][ T5738] ath9k_htc: Failed to initialize the device [ 493.070880][ T5803] usb 6-1: USB disconnect, device number 2 [ 493.102954][ T6985] usb 5-1: ath9k_htc: USB layer deinitialized [ 493.229750][T15213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4518'. [ 493.419273][ T5616] Bluetooth: hci6: command tx timeout [ 493.497918][T15157] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.498243][T15157] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.498897][T15157] bridge_slave_0: entered allmulticast mode [ 493.502398][T15157] bridge_slave_0: entered promiscuous mode [ 493.512996][T15157] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.513227][T15157] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.513805][T15157] bridge_slave_1: entered allmulticast mode [ 493.517765][T15157] bridge_slave_1: entered promiscuous mode [ 493.597245][T15157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.620043][T15157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.833623][T15157] team0: Port device team_slave_0 added [ 493.910846][T15228] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 494.150111][T15157] team0: Port device team_slave_1 added [ 494.186398][T15230] lo speed is unknown, defaulting to 1000 [ 494.215457][T15230] lo speed is unknown, defaulting to 1000 [ 494.255003][T15157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.255023][T15157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.255053][T15157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.262940][T15157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.262957][T15157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.262983][T15157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.400742][T15230] lo speed is unknown, defaulting to 1000 [ 494.595982][T15157] hsr_slave_0: entered promiscuous mode [ 494.607744][T15157] hsr_slave_1: entered promiscuous mode [ 494.609110][T15157] debugfs: 'hsr0' already exists in 'hsr' [ 494.609145][T15157] Cannot create hsr debugfs directory [ 494.661070][T15230] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 494.661115][T15230] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 494.676858][T15230] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 494.948590][T15230] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 495.025341][T15230] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 495.672827][ T5616] Bluetooth: hci6: command tx timeout [ 495.794030][T15230] lo speed is unknown, defaulting to 1000 [ 495.844335][T15230] lo speed is unknown, defaulting to 1000 [ 495.942134][T15230] lo speed is unknown, defaulting to 1000 [ 495.949387][T15230] lo speed is unknown, defaulting to 1000 [ 495.967536][T15230] lo speed is unknown, defaulting to 1000 [ 495.970482][T15230] lo speed is unknown, defaulting to 1000 [ 495.974800][T15230] lo speed is unknown, defaulting to 1000 [ 497.065087][T15287] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4553'. [ 497.221814][T15157] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 497.410147][T15157] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 497.432421][T15157] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 497.698260][T15157] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 497.700677][T15157] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 497.831419][T15157] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 497.833964][T15157] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 497.923589][ T5616] Bluetooth: hci6: command tx timeout [ 497.960843][T15309] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 497.960862][T15309] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 497.960874][T15309] overlayfs: missing 'lowerdir' [ 497.976952][T15157] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 498.740888][T15157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.911706][T15157] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.963789][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.965142][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.019223][T15339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4575'. [ 499.019261][T15339] netlink: 580 bytes leftover after parsing attributes in process `syz.4.4575'. [ 499.050817][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.050969][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.199024][ T5624] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 499.243718][ T5803] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 499.361289][ T5624] usb 1-1: Using ep0 maxpacket: 32 [ 499.364222][ T5624] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 499.364253][ T5624] usb 1-1: config 0 has no interface number 0 [ 499.364305][ T5624] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 499.369904][ T5624] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 499.369938][ T5624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.369959][ T5624] usb 1-1: Product: syz [ 499.369974][ T5624] usb 1-1: Manufacturer: syz [ 499.369989][ T5624] usb 1-1: SerialNumber: syz [ 499.426184][ T5803] usb 6-1: Using ep0 maxpacket: 16 [ 499.443931][ T5803] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 133, changing to 7 [ 499.443990][ T5803] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 499.444019][ T5803] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 499.485990][ T5803] usb 6-1: string descriptor 0 read error: -22 [ 499.486172][ T5803] usb 6-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 499.486198][ T5803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.521856][ T5624] usb 1-1: config 0 descriptor?? [ 499.524493][T15335] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 499.575657][ T5803] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 499.763998][ T5624] asix 1-1:0.188: probe with driver asix failed with error -71 [ 499.794828][ T5624] usb 1-1: USB disconnect, device number 88 [ 499.824077][ T5738] usb 6-1: USB disconnect, device number 3 [ 500.051584][T15157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.173126][ T5616] Bluetooth: hci6: command tx timeout [ 500.432647][T15157] veth0_vlan: entered promiscuous mode [ 500.513733][T15157] veth1_vlan: entered promiscuous mode [ 500.655120][T15369] sg_write: data in/out 732/136 bytes for SCSI command 0x0-- guessing data in; [ 500.655120][T15369] program syz.4.4581 not setting count and/or reply_len properly [ 500.705105][T15370] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4583'. [ 500.705146][T15370] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4583'. [ 500.705163][T15370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4583'. [ 500.749193][T15157] veth0_macvtap: entered promiscuous mode [ 500.778110][T15157] veth1_macvtap: entered promiscuous mode [ 500.873486][T15157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.949984][T15157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.042658][ T150] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.054837][ T150] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.055949][ T1743] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.056355][ T1743] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.811612][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.811638][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.178157][T15414] netlink: del zone limit has 4 unknown bytes [ 503.413822][T15410] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.444343][T15410] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.874911][T15410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.914510][T15410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.019880][ T10] lo speed is unknown, defaulting to 1000 [ 505.019992][ T10] syz2: Port: 1 Link DOWN [ 505.033258][T15432] openvswitch: netlink: Flow key attr not present in new flow. [ 505.072855][ T66] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.130802][ T66] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.282058][ T66] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.294949][ T66] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.299599][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.299622][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.708462][T15451] netlink: 'syz.5.4621': attribute type 210 has an invalid length. [ 505.831207][T15455] netlink: 'syz.4.4622': attribute type 5 has an invalid length. [ 506.048795][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 506.102660][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 506.106330][ T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 506.158485][ T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 506.180221][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 506.825416][T15488] veth1_to_hsr: entered promiscuous mode [ 506.860656][T15488] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 507.093342][T15497] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4638'. [ 507.093368][T15497] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4638'. [ 507.228991][T15458] lo speed is unknown, defaulting to 1000 [ 507.468138][T15512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4645'. [ 508.098148][ T5706] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 508.111603][T15532] netlink: 'syz.5.4654': attribute type 20 has an invalid length. [ 508.111884][T15532] IPv6: Can't replace route, no match found [ 508.262240][ T5706] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 508.262275][ T5706] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 508.262298][ T5706] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 508.262311][ T5706] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 508.317640][ T5706] usb 7-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 508.317674][ T5706] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.317696][ T5706] usb 7-1: Product: syz [ 508.317711][ T5706] usb 7-1: Manufacturer: syz [ 508.317736][ T5706] usb 7-1: SerialNumber: syz [ 508.366793][ T5706] usb 7-1: config 0 descriptor?? [ 508.382521][ T5706] ums-isd200 7-1:0.0: USB Mass Storage device detected [ 508.401347][ T5616] Bluetooth: hci7: command tx timeout [ 508.711174][ T5706] ums-isd200 7-1:0.0: probe with driver ums-isd200 failed with error -22 [ 508.856307][ T6985] usb 7-1: USB disconnect, device number 2 [ 509.140731][T15458] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.140963][T15458] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.141206][T15458] bridge_slave_0: entered allmulticast mode [ 509.179128][T15458] bridge_slave_0: entered promiscuous mode [ 509.204685][T15458] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.204884][T15458] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.205148][T15458] bridge_slave_1: entered allmulticast mode [ 509.244787][T15458] bridge_slave_1: entered promiscuous mode [ 509.313130][T15458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.340387][T15458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.461956][ T5624] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 509.485142][T15458] team0: Port device team_slave_0 added [ 509.489137][T15458] team0: Port device team_slave_1 added [ 509.559656][T15458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.559677][T15458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.559706][T15458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.562486][T15458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.562502][T15458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.562527][T15458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.627790][ T5624] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.627848][ T5624] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 509.627871][ T5624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.648640][ T5624] usb 5-1: config 0 descriptor?? [ 509.784797][T15458] hsr_slave_0: entered promiscuous mode [ 509.792772][T15458] hsr_slave_1: entered promiscuous mode [ 509.794048][T15458] debugfs: 'hsr0' already exists in 'hsr' [ 509.794076][T15458] Cannot create hsr debugfs directory [ 510.126924][ T5624] ath6kl: Failed to read usb control message: -71 [ 510.126984][ T5624] ath6kl: Unable to read the bmi data from the device: -71 [ 510.127000][ T5624] ath6kl: Unable to recv target info: -71 [ 510.172250][ T5624] ath6kl: Failed to init ath6kl core: -71 [ 510.172790][ T5624] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 510.243405][ T5624] usb 5-1: USB disconnect, device number 95 [ 510.404456][T15578] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4671'. [ 510.656352][ T5616] Bluetooth: hci7: command tx timeout [ 511.621364][T15458] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 511.768385][T15458] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 511.792734][ T37] audit: type=1326 audit(1785154398.586:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15615 comm="syz.6.4691" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 511.792794][ T37] audit: type=1326 audit(1785154398.586:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15615 comm="syz.6.4691" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 511.792843][ T37] audit: type=1326 audit(1785154398.596:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15615 comm="syz.6.4691" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 511.792889][ T37] audit: type=1326 audit(1785154398.596:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15615 comm="syz.6.4691" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 511.792936][ T37] audit: type=1326 audit(1785154398.596:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15615 comm="syz.6.4691" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 511.792983][ T37] audit: type=1326 audit(1785154398.596:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15615 comm="syz.6.4691" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 511.793031][ T37] audit: type=1326 audit(1785154398.596:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15615 comm="syz.6.4691" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 511.793079][ T37] audit: type=1326 audit(1785154398.596:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15615 comm="syz.6.4691" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 512.013215][T15458] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 512.083415][T15458] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 512.167253][T15458] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 512.217451][T15626] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4696'. [ 512.217485][T15626] netlink: 'syz.5.4696': attribute type 1 has an invalid length. [ 512.217500][T15626] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4696'. [ 512.269513][T15458] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 512.319249][T15458] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 512.544475][T15458] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 512.907298][ T5616] Bluetooth: hci7: command tx timeout [ 513.228338][T15458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.332911][T15458] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.411015][ T1743] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.412821][ T1743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.476884][T15651] lo speed is unknown, defaulting to 1000 [ 513.647622][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.647840][ T4286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.316219][ T37] audit: type=1326 audit(1785154400.923:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15682 comm="syz.5.4718" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea6d3de99 code=0x7ffc0000 [ 514.369367][ T37] audit: type=1326 audit(1785154400.970:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15682 comm="syz.5.4718" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea6d3de99 code=0x7ffc0000 [ 514.985302][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 514.985369][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 515.170890][ T5616] Bluetooth: hci7: command tx timeout [ 515.889534][T15458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.341253][T15747] random: crng reseeded on system resumption [ 516.718213][T15760] netlink: 'syz.5.4749': attribute type 32 has an invalid length. [ 516.718238][T15760] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4749'. [ 516.726148][ T5803] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 516.780910][T15458] veth0_vlan: entered promiscuous mode [ 516.833952][T15458] veth1_vlan: entered promiscuous mode [ 516.918291][ T5803] usb 7-1: unable to get BOS descriptor or descriptor too short [ 516.939216][ T5803] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.939284][ T5803] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 516.939323][ T5803] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 516.939350][ T5803] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 516.984024][ T5803] usb 7-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 516.984059][ T5803] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.984080][ T5803] usb 7-1: Product: syz [ 516.984097][ T5803] usb 7-1: Manufacturer: syz [ 516.984113][ T5803] usb 7-1: SerialNumber: syz [ 517.007795][ T5803] usb 7-1: config 0 descriptor?? [ 517.019245][T15749] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 517.045301][ T5803] pn533_usb 7-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 517.134862][T15770] netlink: zone id is out of range [ 517.134880][T15770] netlink: zone id is out of range [ 517.134890][T15770] netlink: zone id is out of range [ 517.134899][T15770] netlink: zone id is out of range [ 517.134906][T15770] netlink: zone id is out of range [ 517.182100][T15458] veth0_macvtap: entered promiscuous mode [ 517.222780][T15770] netlink: set zone limit has 8 unknown bytes [ 517.239545][T15458] veth1_macvtap: entered promiscuous mode [ 517.307441][ T5624] usb 7-1: USB disconnect, device number 3 [ 517.399744][T15458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.500644][T15458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.578054][ T6544] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.579359][ T6544] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.671024][T15780] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 517.671049][T15780] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 517.710783][T15780] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 517.727462][ T6544] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.820856][ T4286] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.849525][T15784] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4760'. [ 517.849572][T15784] netlink: 'syz.4.4760': attribute type 2 has an invalid length. [ 517.930138][ T5624] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 518.111884][ T5624] usb 6-1: Using ep0 maxpacket: 8 [ 518.114672][ T5624] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 518.114706][ T5624] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x65, changing to 0x5 [ 518.114732][ T5624] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 25966, setting to 1024 [ 518.114759][ T5624] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 518.114783][ T5624] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 518.117411][ T5624] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 518.117440][ T5624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.117463][ T5624] usb 6-1: Product: syz [ 518.117478][ T5624] usb 6-1: Manufacturer: syz [ 518.117493][ T5624] usb 6-1: SerialNumber: syz [ 518.169122][T15782] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 518.182604][T15782] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 518.226996][ T5624] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 518.245164][ T5624] usbtest 6-1:1.0: Linux user mode ISO test driver [ 518.245186][ T5624] usbtest 6-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 518.458225][ T5706] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 518.547795][ T31] usb 6-1: USB disconnect, device number 4 [ 518.654171][ T5706] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 518.654202][ T5706] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 518.658461][ T5706] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 518.658493][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.658517][ T5706] usb 5-1: Product: syz [ 518.658533][ T5706] usb 5-1: Manufacturer: syz [ 518.658548][ T5706] usb 5-1: SerialNumber: syz [ 518.834953][ T5706] usb 5-1: 0:2 : does not exist [ 518.835047][ T5706] usb 5-1: unit 9 not found! [ 518.952258][T15793] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4764'. [ 518.952424][T15793] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4764'. [ 519.075585][ T5706] usb 5-1: 4:0: cannot get min/max values for control 6 (id 4) [ 519.082682][ T5706] usb 5-1: 4:0: cannot get min/max values for control 9 (id 4) [ 519.230561][ T5706] usb 5-1: USB disconnect, device number 96 [ 519.350561][T15141] udevd[15141]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 519.377814][T15797] syz.5.4766 uses obsolete (PF_INET,SOCK_PACKET) [ 519.532314][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.532338][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.742363][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.742386][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.959388][T15813] gre2: entered promiscuous mode [ 519.993832][T15813] gre2: entered allmulticast mode [ 520.061702][T15817] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4776'. [ 520.751469][T15841] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4786'. [ 520.751496][T15841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4786'. [ 520.915778][ T36] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 521.002457][ T5706] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 521.083949][ T36] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 521.083977][ T36] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 521.083990][ T36] usb 6-1: Product: syz [ 521.093193][ T36] usb 6-1: config 0 descriptor?? [ 521.123372][ T36] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 521.128944][ T36] usb 6-1: Detected FT232H [ 521.143567][ T5926] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 521.172074][ T5706] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 521.172111][ T5706] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 521.172133][ T5706] usb 7-1: Product: syz [ 521.172149][ T5706] usb 7-1: SerialNumber: syz [ 521.273153][ T5706] usb 7-1: config 0 descriptor?? [ 521.321399][ T5926] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 521.321436][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.367165][ T5926] usb 5-1: config 0 descriptor?? [ 521.420424][ T5926] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 521.635568][T15856] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4794'. [ 521.635588][T15856] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4794'. [ 521.675015][ T36] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 521.676731][ T36] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 521.684104][ T36] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 521.746163][ T36] usb 6-1: USB disconnect, device number 5 [ 521.822039][ T5706] usb 7-1: USB disconnect, device number 4 [ 521.844827][ T5926] gspca_sunplus: reg_w_riv err -71 [ 521.844936][ T5926] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 521.905442][ T5926] usb 5-1: USB disconnect, device number 97 [ 521.936341][ T36] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 521.937573][ T36] ftdi_sio 6-1:0.0: device disconnected [ 522.479334][T15872] RGB/YUV Input: ================= START STATUS ================= [ 522.479359][T15872] RGB/YUV Input: Test Pattern: 75% Colorbar [ 522.479447][T15872] RGB/YUV Input: Show Information: All [ 522.479466][T15872] RGB/YUV Input: Vertical Flip: false [ 522.479486][T15872] RGB/YUV Input: Horizontal Flip: false [ 522.479506][T15872] RGB/YUV Input: Brightness: 128 [ 522.479528][T15872] RGB/YUV Input: Contrast: 128 [ 522.479546][T15872] RGB/YUV Input: Hue: 0 [ 522.479564][T15872] RGB/YUV Input: Saturation: 128 [ 522.479583][T15872] RGB/YUV Input: Pixel Rate: 160000000 [ 522.479604][T15872] RGB/YUV Input: Horizontal Blanking: 800 [ 522.479623][T15872] RGB/YUV Input: Vertical Blanking: 3223 [ 522.479643][T15872] RGB/YUV Input: ================== END STATUS ================== [ 522.800399][ T5926] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 522.856543][T15890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.968360][ T5926] usb 8-1: Using ep0 maxpacket: 32 [ 522.975660][ T5926] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.975694][ T5926] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.975732][ T5926] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 522.975756][ T5926] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.000395][ T5926] usb 8-1: config 0 descriptor?? [ 523.020740][ T5926] hub 8-1:0.0: USB hub found [ 523.102666][ T5706] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 523.231457][ T5926] hub 8-1:0.0: 1 port detected [ 523.275824][ T5706] usb 6-1: Using ep0 maxpacket: 32 [ 523.296716][ T5706] usb 6-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 523.296752][ T5706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.296775][ T5706] usb 6-1: Product: syz [ 523.296792][ T5706] usb 6-1: Manufacturer: syz [ 523.296809][ T5706] usb 6-1: SerialNumber: syz [ 523.370583][ T5706] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 523.457786][ T5926] hub 8-1:0.0: hub_hub_status failed (err = -71) [ 523.457836][ T5926] hub 8-1:0.0: config failed, can't get hub status (err -71) [ 523.484162][ T5926] usbhid 8-1:0.0: can't add hid device: -71 [ 523.484316][ T5926] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 523.515070][ T5926] usb 8-1: USB disconnect, device number 2 [ 523.624869][ T5706] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 523.945310][T15914] tmpfs: Unknown parameter 'mp' [ 524.033973][ T5706] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 524.069373][ T5706] usb 6-1: USB disconnect, device number 6 [ 524.113805][T15141] udevd[15141]: setting mode of /dev/bus/usb/006/006 to 020664 failed: No such file or directory [ 524.113981][T15141] udevd[15141]: setting owner of /dev/bus/usb/006/006 to uid=0, gid=0 failed: No such file or directory [ 524.279449][T15141] udevd[15141]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 525.152082][T15908] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.523560][ T59] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 525.571874][ T59] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 525.596752][ T59] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 525.601942][ T59] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 525.614933][ T59] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 526.094901][ T5926] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 526.257139][ T5926] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 526.257173][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 526.257194][ T5926] usb 6-1: Product: syz [ 526.267293][ T5926] usb 6-1: config 0 descriptor?? [ 526.282459][ T5926] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 526.294663][ T5926] usb 6-1: Detected FT232H [ 526.419814][T15908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.508035][ T5926] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 526.508527][ T5926] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 526.510567][ T5926] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 526.528246][ T5926] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 526.529441][T15908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.602625][ T5926] usb 6-1: USB disconnect, device number 7 [ 526.641928][ T5926] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 526.653951][ T5926] ftdi_sio 6-1:0.0: device disconnected [ 527.901629][ T1126] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.910099][ T1126] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.910156][ T1126] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.910195][ T1126] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.974468][ T5616] Bluetooth: hci8: command tx timeout [ 528.850149][T15997] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4857'. [ 528.850197][T15997] vlan0: entered promiscuous mode [ 529.239054][T15938] lo speed is unknown, defaulting to 1000 [ 530.204558][ T31] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 530.227515][ T5616] Bluetooth: hci8: command tx timeout [ 530.366864][ T31] usb 8-1: Using ep0 maxpacket: 32 [ 530.369568][ T31] usb 8-1: config 0 has an invalid interface number: 119 but max is 0 [ 530.369599][ T31] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.369622][ T31] usb 8-1: config 0 has no interface number 0 [ 530.369670][ T31] usb 8-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 530.375510][T16042] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4876'. [ 530.382358][ T31] usb 8-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 530.382390][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.382409][ T31] usb 8-1: Product: syz [ 530.382423][ T31] usb 8-1: Manufacturer: syz [ 530.382437][ T31] usb 8-1: SerialNumber: syz [ 530.400700][ T31] usb 8-1: config 0 descriptor?? [ 530.496522][ T31] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.119/input/input34 [ 530.838015][ T5741] usb 8-1: USB disconnect, device number 3 [ 531.702082][T16076] binder: 16074:16076 ioctl c018620c 0 returned -14 [ 532.116986][T15938] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.117226][T15938] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.117497][T15938] bridge_slave_0: entered allmulticast mode [ 532.145199][T15938] bridge_slave_0: entered promiscuous mode [ 532.149325][T15938] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.149567][T15938] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.149814][T15938] bridge_slave_1: entered allmulticast mode [ 532.183910][T15938] bridge_slave_1: entered promiscuous mode [ 532.192442][T16077] syz.6.4889 (16077) used greatest stack depth: 19472 bytes left [ 532.426210][T15938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.463382][T15938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.490465][ T59] Bluetooth: hci8: command tx timeout [ 532.704874][T16105] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4902'. [ 532.752901][T15938] team0: Port device team_slave_0 added [ 532.757425][T15938] team0: Port device team_slave_1 added [ 532.832510][T15938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.832529][T15938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.832560][T15938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.880695][T15938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.880713][T15938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.880744][T15938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.072231][T16116] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4908'. [ 533.246894][ T5926] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 533.300795][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 533.300816][ T37] audit: type=1400 audit(1785154418.455:443): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz0" requested=w pid=16120 comm="syz.7.4911" dest=3618 [ 533.423595][ T5926] usb 5-1: unable to get BOS descriptor or descriptor too short [ 533.424358][ T5926] usb 5-1: not running at top speed; connect to a high speed hub [ 533.426005][ T5926] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 533.426032][ T5926] usb 5-1: config 0 has no interface number 0 [ 533.426083][ T5926] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 533.426113][ T5926] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 533.426137][ T5926] usb 5-1: config 0 interface 88 has no altsetting 0 [ 533.490835][ T5926] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 533.490869][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 533.490891][ T5926] usb 5-1: Product: syz [ 533.490908][ T5926] usb 5-1: Manufacturer: syz [ 533.490924][ T5926] usb 5-1: SerialNumber: syz [ 533.555670][ T5926] usb 5-1: config 0 descriptor?? [ 533.813615][T16132] netlink: 'syz.5.4916': attribute type 3 has an invalid length. [ 533.813639][T16132] netlink: 'syz.5.4916': attribute type 1 has an invalid length. [ 533.813654][T16132] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4916'. [ 533.813671][T16132] NCSI netlink: No device for ifindex 0 [ 533.817973][T15938] hsr_slave_0: entered promiscuous mode [ 533.855625][T15938] hsr_slave_1: entered promiscuous mode [ 533.860300][T15938] debugfs: 'hsr0' already exists in 'hsr' [ 533.860329][T15938] Cannot create hsr debugfs directory [ 533.888353][ T5926] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input35 [ 534.033768][T16134] Smack: duplicate mount options [ 534.071194][ T5926] usb 5-1: USB disconnect, device number 98 [ 534.292431][T16056] udevd[16056]: Error opening device "/dev/input/event4": No such file or directory [ 534.292573][T16056] udevd[16056]: Unable to EVIOCGABS device "/dev/input/event4" [ 534.292702][T16056] udevd[16056]: Unable to EVIOCGABS device "/dev/input/event4" [ 534.730100][ T59] Bluetooth: hci8: command tx timeout [ 535.097843][ T31] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 535.260716][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 535.269131][ T31] usb 6-1: config 251 has an invalid interface number: 202 but max is 0 [ 535.269163][ T31] usb 6-1: config 251 has no interface number 0 [ 535.269208][ T31] usb 6-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 535.269232][ T31] usb 6-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 535.269254][ T31] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 535.269280][ T31] usb 6-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 535.269305][ T31] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.269326][ T31] usb 6-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 0 [ 535.269350][ T31] usb 6-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 535.269385][ T31] usb 6-1: config 251 interface 202 has no altsetting 0 [ 535.361704][ T31] usb 6-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 535.361739][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.361762][ T31] usb 6-1: Product: syz [ 535.361779][ T31] usb 6-1: Manufacturer: syz [ 535.361793][ T31] usb 6-1: SerialNumber: syz [ 535.454841][T16153] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 535.557565][ T37] audit: type=1400 audit(1785154420.552:444): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz0" requested=w pid=16168 comm="syz.7.4935" daddr=::ffff:224.0.0.1 dest=20001 [ 535.709505][ T31] cxacru 6-1:251.202: submit of read urb for cm 0x90 failed (-90) [ 535.709546][ T31] cxacru 6-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 535.709773][ T31] cxacru 6-1:251.202: probe with driver cxacru failed with error -22 [ 535.768779][ T31] usb 6-1: USB disconnect, device number 8 [ 535.816528][T16176] netlink: 'syz.6.4938': attribute type 2 has an invalid length. [ 536.367150][T16191] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4946'. [ 536.367205][T16191] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4946'. [ 536.548720][ T31] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 536.581409][T16197] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 536.581448][T16197] CIFS mount error: No usable UNC path provided in device string! [ 536.581448][T16197] [ 536.583330][T16197] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 536.673837][T16191] bridge1: entered promiscuous mode [ 536.673859][T16191] bridge1: entered allmulticast mode [ 536.721773][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 536.741235][ T7168] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 536.751044][ T31] usb 7-1: unable to get BOS descriptor or descriptor too short [ 536.765298][ T31] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.765325][ T31] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 536.812027][ T31] usb 7-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 536.812060][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.812083][ T31] usb 7-1: Product: syz [ 536.812099][ T31] usb 7-1: Manufacturer: syz [ 536.812115][ T31] usb 7-1: SerialNumber: syz [ 536.939953][ T7168] usb 5-1: Using ep0 maxpacket: 16 [ 536.942632][ T7168] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.942660][ T7168] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 536.948457][ T7168] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 536.948501][ T7168] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.948525][ T7168] usb 5-1: Product: syz [ 536.948541][ T7168] usb 5-1: Manufacturer: syz [ 536.948570][ T7168] usb 5-1: SerialNumber: syz [ 537.018554][ T7168] usb 5-1: 0:2 : does not exist [ 537.261395][ T7168] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 537.365414][ T5741] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 537.410414][ T31] usb 7-1: unit 255 not found! [ 537.423862][ T7168] usb 5-1: USB disconnect, device number 99 [ 537.536195][ T31] usb 7-1: USB disconnect, device number 5 [ 537.556646][ T5741] usb 8-1: Using ep0 maxpacket: 16 [ 537.578851][ T5741] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.578911][ T5741] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 537.587227][ T5741] usb 8-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 537.587261][ T5741] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.587283][ T5741] usb 8-1: Product: syz [ 537.587297][ T5741] usb 8-1: Manufacturer: syz [ 537.587312][ T5741] usb 8-1: SerialNumber: syz [ 537.665759][T15938] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 537.681091][ T5741] usb 8-1: config 0 descriptor?? [ 537.698047][ T5741] appledisplay 8-1:0.0: Could not find int-in endpoint [ 537.707030][ T5741] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 537.773606][T15938] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 537.774908][T15938] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 537.891240][T15938] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 537.901395][T15938] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 538.003728][ T5741] usb 8-1: USB disconnect, device number 4 [ 538.029360][T16056] udevd[16056]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 538.075703][T15938] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 538.097616][T15938] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 538.266587][T15938] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 538.373367][T15193] udevd[15193]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 538.783687][T16238] mmap: syz.7.4965 (16238) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 538.832942][ T5713] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 538.976789][T15938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.999704][ T5713] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 538.999735][ T5713] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 538.999760][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 538.999787][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 538.999808][ T5713] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 539.004641][ T5713] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 539.004670][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.004690][ T5713] usb 5-1: Product: syz [ 539.004704][ T5713] usb 5-1: Manufacturer: syz [ 539.004717][ T5713] usb 5-1: SerialNumber: syz [ 539.052339][ T5713] usb 5-1: config 0 descriptor?? [ 539.083886][T15938] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.114046][ T5713] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input36 [ 539.134570][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.134782][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.159745][ T59] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 539.159918][ T59] Bluetooth: hci5: Injecting HCI hardware error event [ 539.164406][ T5616] Bluetooth: hci5: hardware error 0x00 [ 539.189530][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.189678][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.244592][ T5738] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 539.349805][T16251] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4971'. [ 539.349838][T16251] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4971'. [ 539.451467][ T5738] usb 8-1: Using ep0 maxpacket: 16 [ 539.454476][ T5738] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.454503][ T5738] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 539.485909][ T5738] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 539.485943][ T5738] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.485965][ T5738] usb 8-1: Product: syz [ 539.485980][ T5738] usb 8-1: Manufacturer: syz [ 539.485994][ T5738] usb 8-1: SerialNumber: syz [ 539.621304][ T5738] usb 8-1: 0:2 : does not exist [ 539.721401][ T5926] usb 5-1: USB disconnect, device number 100 [ 539.846308][ T5738] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 539.900669][T16258] netlink: 144 bytes leftover after parsing attributes in process `syz.6.4974'. [ 540.170828][ T5738] usb 8-1: USB disconnect, device number 5 [ 540.558519][T15141] udevd[15141]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 540.660520][ T37] audit: type=1326 audit(1785154425.254:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16272 comm="syz.6.4983" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 540.690700][ T37] audit: type=1326 audit(1785154425.291:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16272 comm="syz.6.4983" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 540.692181][ T37] audit: type=1326 audit(1785154425.291:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16272 comm="syz.6.4983" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 540.692608][ T37] audit: type=1326 audit(1785154425.291:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16272 comm="syz.6.4983" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 540.692904][ T37] audit: type=1326 audit(1785154425.291:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16272 comm="syz.6.4983" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 540.693210][ T37] audit: type=1326 audit(1785154425.291:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16272 comm="syz.6.4983" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 540.693536][ T37] audit: type=1326 audit(1785154425.291:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16272 comm="syz.6.4983" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 540.694115][ T37] audit: type=1326 audit(1785154425.291:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16272 comm="syz.6.4983" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 540.727484][ T37] audit: type=1326 audit(1785154425.318:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16272 comm="syz.6.4983" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 541.422097][T16291] netlink: 6024 bytes leftover after parsing attributes in process `syz.6.4988'. [ 541.674797][ T5616] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 542.175474][T16317] netlink: 'syz.5.4999': attribute type 1 has an invalid length. [ 542.226407][T16315] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 542.491090][T15938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.566856][T16330] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 543.259710][T16358] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5016'. [ 543.404546][T16361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 543.650812][T16372] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 543.775584][T15938] veth0_vlan: entered promiscuous mode [ 543.823102][T15938] veth1_vlan: entered promiscuous mode [ 544.085871][T15938] veth0_macvtap: entered promiscuous mode [ 544.188945][T15938] veth1_macvtap: entered promiscuous mode [ 544.486809][T15938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.567181][T15938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.771355][ T1743] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.772890][ T1743] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.775680][ T1743] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.778785][ T1743] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.796399][T16409] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 544.796434][T16409] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 546.480226][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.480252][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.842295][T16445] netlink: 'syz.4.5057': attribute type 10 has an invalid length. [ 547.098437][ T37] audit: type=1400 audit(1785154431.211:454): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz0" requested=w pid=16455 comm="syz.7.5063" dest=2 [ 547.175305][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.175328][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.177572][T16458] netlink: 2384 bytes leftover after parsing attributes in process `syz.6.5065'. [ 548.862733][T16507] comedi comedi1: 8255: I/O port conflict (0x3ffc0,4) [ 549.019560][ T37] audit: type=1326 audit(1785154432.976:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16513 comm="syz.4.5091" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58253de99 code=0x7ffc0000 [ 549.023550][ T37] audit: type=1326 audit(1785154432.985:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16513 comm="syz.4.5091" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58253de99 code=0x7ffc0000 [ 549.026155][ T37] audit: type=1326 audit(1785154432.985:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16513 comm="syz.4.5091" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58253de99 code=0x7ffc0000 [ 549.034613][ T37] audit: type=1326 audit(1785154432.994:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16513 comm="syz.4.5091" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fd58253de99 code=0x7ffc0000 [ 549.034666][ T37] audit: type=1326 audit(1785154432.994:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16513 comm="syz.4.5091" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58253de99 code=0x7ffc0000 [ 549.034717][ T37] audit: type=1326 audit(1785154432.994:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16513 comm="syz.4.5091" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58253de99 code=0x7ffc0000 [ 549.034777][ T37] audit: type=1326 audit(1785154432.994:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16513 comm="syz.4.5091" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58253de99 code=0x7ffc0000 [ 549.034820][ T37] audit: type=1326 audit(1785154432.994:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16513 comm="syz.4.5091" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd58253de99 code=0x7ffc0000 [ 549.034862][ T37] audit: type=1326 audit(1785154432.994:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16513 comm="syz.4.5091" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd58253de99 code=0x7ffc0000 [ 550.018614][T16545] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.5106'. [ 550.186857][T16554] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5110'. [ 550.769841][T16571] netlink: 'syz.7.5119': attribute type 8 has an invalid length. [ 552.692508][T16639] netlink: 160 bytes leftover after parsing attributes in process `syz.6.5152'. [ 553.823867][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 553.823889][ T37] audit: type=1326 audit(1785154437.419:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16680 comm="syz.8.5173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe873dcde99 code=0x7ffc0000 [ 553.823942][ T37] audit: type=1326 audit(1785154437.419:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16680 comm="syz.8.5173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe873dcde99 code=0x7ffc0000 [ 553.855067][ T37] audit: type=1326 audit(1785154437.446:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16680 comm="syz.8.5173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe873dcde99 code=0x7ffc0000 [ 553.861782][ T37] audit: type=1326 audit(1785154437.456:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16680 comm="syz.8.5173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe873dcde99 code=0x7ffc0000 [ 553.861838][ T37] audit: type=1326 audit(1785154437.456:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16680 comm="syz.8.5173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fe873dcde99 code=0x7ffc0000 [ 553.861882][ T37] audit: type=1326 audit(1785154437.456:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16680 comm="syz.8.5173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe873dcde99 code=0x7ffc0000 [ 553.868186][ T37] audit: type=1326 audit(1785154437.456:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16680 comm="syz.8.5173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe873dcde99 code=0x7ffc0000 [ 553.868241][ T37] audit: type=1326 audit(1785154437.456:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16680 comm="syz.8.5173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe873dcde99 code=0x7ffc0000 [ 553.868293][ T37] audit: type=1326 audit(1785154437.456:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16680 comm="syz.8.5173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe873dcde99 code=0x7ffc0000 [ 554.249979][T16694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5181'. [ 554.300996][T16699] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5182'. [ 554.301026][T16699] netlink: 'syz.8.5182': attribute type 1 has an invalid length. [ 554.508158][T16694] bond3: up delay (7) is not a multiple of miimon (10), value rounded to 0 ms [ 554.508193][T16694] bond3: down delay (2) is not a multiple of miimon (10), value rounded to 0 ms [ 554.576140][T16694] bond3 (unregistering): Released all slaves [ 554.817276][T16715] binder: 16714:16715 ioctl c0046209 100000000000000 returned -22 [ 554.958363][T16717] ip6gre1: entered allmulticast mode [ 555.176494][T16723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5196'. [ 555.767719][T16749] netlink: 172 bytes leftover after parsing attributes in process `syz.4.5206'. [ 556.143398][T16765] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5212'. [ 556.153400][T16765] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5212'. [ 556.538411][T16781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.983017][T16796] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5229'. [ 556.983060][T16796] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5229'. [ 556.985002][T16796] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5229'. [ 556.985036][T16796] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5229'. [ 556.986889][T16796] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5229'. [ 557.172856][ T5926] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 557.282190][T16796] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5229'. [ 557.282974][T16796] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5229'. [ 557.356147][ T5926] usb 7-1: Using ep0 maxpacket: 16 [ 557.358824][ T5926] usb 7-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 557.358886][ T5926] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 557.358914][ T5926] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 557.358943][ T5926] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 557.363544][ T5926] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 557.363576][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.363623][ T5926] usb 7-1: Product: syz [ 557.363639][ T5926] usb 7-1: Manufacturer: syz [ 557.363654][ T5926] usb 7-1: SerialNumber: syz [ 557.474186][ T5926] usb 7-1: config 0 descriptor?? [ 557.740051][ T5926] appledisplay 7-1:0.0: Error while getting initial brightness: -71 [ 557.772256][ T5926] appledisplay 7-1:0.0: probe with driver appledisplay failed with error -71 [ 557.829741][ T5926] usb 7-1: USB disconnect, device number 6 [ 558.138841][T16796] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 559.583344][T16866] team0: entered promiscuous mode [ 559.583371][T16866] team_slave_0: entered promiscuous mode [ 559.583673][T16866] team_slave_1: entered promiscuous mode [ 559.584090][T16866] team0: entered allmulticast mode [ 559.584107][T16866] team_slave_0: entered allmulticast mode [ 559.584130][T16866] team_slave_1: entered allmulticast mode [ 560.159506][ T37] audit: type=1400 audit(1785154443.266:483): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz0" requested=w pid=16887 comm="syz.4.5274" daddr=::ffff:172.20.20.255 [ 560.607457][T16906] netlink: 'syz.4.5284': attribute type 7 has an invalid length. [ 560.922353][T16919] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 562.650121][ T36] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 562.737615][T16983] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 562.825124][ T36] usb 9-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 562.825158][ T36] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 562.857085][ T36] usb 9-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 562.857120][ T36] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.857143][ T36] usb 9-1: Product: syz [ 562.857159][ T36] usb 9-1: Manufacturer: syz [ 562.857175][ T36] usb 9-1: SerialNumber: syz [ 562.901055][ T36] usb 9-1: config 0 descriptor?? [ 562.925859][ T36] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 563.372048][ T36] gspca_sunplus: reg_r err -71 [ 563.372142][ T36] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 563.507144][ T36] usb 9-1: USB disconnect, device number 2 [ 563.537929][ T5926] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 563.700245][ T5926] usb 6-1: Using ep0 maxpacket: 32 [ 563.702450][ T5926] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 563.705940][ T5926] usb 6-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 563.705971][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.705992][ T5926] usb 6-1: Product: syz [ 563.706008][ T5926] usb 6-1: Manufacturer: syz [ 563.706023][ T5926] usb 6-1: SerialNumber: syz [ 563.791124][ T5926] kobil_sct 6-1:2.0: required endpoints missing [ 564.367659][ T5803] usb 6-1: USB disconnect, device number 9 [ 564.382721][T17019] __nla_validate_parse: 142 callbacks suppressed [ 564.382743][T17019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5337'. [ 565.123614][T17040] netlink: 'syz.6.5347': attribute type 5 has an invalid length. [ 565.126429][T16988] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 565.126759][T16988] block device autoloading is deprecated and will be removed. [ 565.351480][T17047] tmpfs: Bad value for 'huge' [ 565.540140][T17053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5354'. [ 565.540187][T17053] netlink: 'syz.4.5354': attribute type 2 has an invalid length. [ 565.801628][T17063] Zero length message leads to an empty skb [ 566.098463][T17076] netlink: 'syz.6.5365': attribute type 21 has an invalid length. [ 566.098492][T17076] IPv6: NLM_F_CREATE should be specified when creating new route [ 566.098635][T17076] netlink: 'syz.6.5365': attribute type 1 has an invalid length. [ 566.535599][T17096] netlink: 'syz.8.5376': attribute type 21 has an invalid length. [ 566.535633][T17096] netlink: 128 bytes leftover after parsing attributes in process `syz.8.5376'. [ 566.535730][T17096] netlink: 'syz.8.5376': attribute type 5 has an invalid length. [ 566.535745][T17096] netlink: 'syz.8.5376': attribute type 6 has an invalid length. [ 566.535759][T17096] netlink: 3 bytes leftover after parsing attributes in process `syz.8.5376'. [ 566.874860][T17110] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5380'. [ 568.478396][T17163] netlink: 256 bytes leftover after parsing attributes in process `syz.8.5407'. [ 568.542964][T17165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 568.756067][ T5713] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 568.757638][T17158] bond2 (unregistering): Released all slaves [ 568.929249][ T5713] usb 5-1: Using ep0 maxpacket: 32 [ 568.931485][ T5713] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 568.931511][ T5713] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 568.931526][ T5713] usb 5-1: config 0 interface 0 has no altsetting 0 [ 568.933987][ T5713] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 568.934025][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.934044][ T5713] usb 5-1: Product: syz [ 568.934059][ T5713] usb 5-1: Manufacturer: syz [ 568.934068][ T5713] usb 5-1: SerialNumber: syz [ 568.970993][ T5713] usb 5-1: config 0 descriptor?? [ 569.483618][ T5713] gs_usb 5-1:0.0: Couldn't get device config: (err=-71) [ 569.483666][ T5713] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 569.523941][T17140] block device autoloading is deprecated and will be removed. [ 569.542409][ T5713] usb 5-1: USB disconnect, device number 101 [ 569.912823][T17191] netlink: 830 bytes leftover after parsing attributes in process `syz.5.5422'. [ 570.578847][T17207] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 571.142928][ T5616] Bluetooth: hci8: unexpected event 0x03 length: 13 > 11 [ 571.486662][T17248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 572.294715][T17280] syz.5.5465 (17280): /proc/17276/oom_adj is deprecated, please use /proc/17276/oom_score_adj instead. [ 572.350640][ T5926] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 572.528031][ T5926] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 572.528066][ T5926] usb 5-1: config 0 has no interface number 0 [ 572.528114][ T5926] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 572.528142][ T5926] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 572.532466][ T5926] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 572.532501][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.532523][ T5926] usb 5-1: Product: syz [ 572.532548][ T5926] usb 5-1: Manufacturer: syz [ 572.532564][ T5926] usb 5-1: SerialNumber: syz [ 572.567348][ T5926] usb 5-1: config 0 descriptor?? [ 572.570635][T17272] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 572.604192][ T5926] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 572.674490][ T5926] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 573.114570][ T5803] usb 5-1: USB disconnect, device number 102 [ 573.245892][T17304] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5475'. [ 573.245923][T17304] netlink: 43 bytes leftover after parsing attributes in process `syz.5.5475'. [ 573.245941][T17304] netlink: 'syz.5.5475': attribute type 5 has an invalid length. [ 573.245956][T17304] netlink: 43 bytes leftover after parsing attributes in process `syz.5.5475'. [ 573.247271][ T5803] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 573.273795][ T5803] cyberjack 5-1:0.69: device disconnected [ 573.840514][T17313] ip6tnl1: entered promiscuous mode [ 574.298319][T17335] overlay: Unknown parameter 'fsname' [ 575.174373][T17371] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5509'. [ 575.185767][T17370] netlink: 'syz.5.5510': attribute type 2 has an invalid length. [ 575.185792][T17370] netlink: 'syz.5.5510': attribute type 4 has an invalid length. [ 575.394339][T17377] netlink: 'syz.6.5513': attribute type 28 has an invalid length. [ 575.394364][T17377] netlink: 'syz.6.5513': attribute type 3 has an invalid length. [ 575.394379][T17377] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5513'. [ 576.304058][T17409] netlink: ct family unspecified [ 576.304095][T17409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 576.462221][ T37] audit: type=1400 audit(1785154458.331:484): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz0" requested=w pid=17410 comm="syz.4.5530" daddr=::ffff:127.0.0.1 dest=20003 [ 577.261341][T16245] Bluetooth: hci8: command 0x0405 tx timeout [ 578.376656][T17458] netlink: 'syz.8.5552': attribute type 4 has an invalid length. [ 578.376682][T17458] netlink: 152 bytes leftover after parsing attributes in process `syz.8.5552'. [ 578.815657][T17466] bond1 (unregistering): Released all slaves [ 579.084090][ T5926] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 579.088825][T17481] ieee802154 phy0 wpan0: encryption failed: -90 [ 579.280742][ T5926] usb 8-1: Using ep0 maxpacket: 32 [ 579.284025][ T5926] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 579.284056][ T5926] usb 8-1: config 0 has no interface number 0 [ 579.284109][ T5926] usb 8-1: config 0 interface 12 has no altsetting 0 [ 579.287924][ T5926] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 579.287957][ T5926] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.287980][ T5926] usb 8-1: Product: syz [ 579.287997][ T5926] usb 8-1: Manufacturer: syz [ 579.288012][ T5926] usb 8-1: SerialNumber: syz [ 579.298076][ T5926] usb 8-1: config 0 descriptor?? [ 579.571842][ T5926] f81534 8-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 579.571925][ T5926] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 579.571946][ T5926] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 579.572052][ T5926] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 579.605182][ T5926] usb 8-1: USB disconnect, device number 6 [ 579.615071][T15141] udevd[15141]: setting owner of /dev/bus/usb/008/006 to uid=0, gid=0 failed: No such file or directory [ 579.625946][T17489] netlink: 'syz.8.5567': attribute type 2 has an invalid length. [ 579.625971][T17489] netlink: 'syz.8.5567': attribute type 2 has an invalid length. [ 579.751542][T17479] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.768453][T17479] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.235375][T17479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.268863][T17479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.468885][T16253] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.472229][T16232] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.481998][T16232] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.482045][T16232] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.501989][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 581.502069][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 581.756408][T17517] netlink: 15678 bytes leftover after parsing attributes in process `syz.6.5581'. [ 582.536022][T17533] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5589'. [ 582.536051][T17533] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5589'. [ 582.993134][ T37] audit: type=1326 audit(1785154464.363:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17545 comm="syz.5.5595" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fcea6cfab91 code=0x7ffc0000 [ 582.993202][ T37] audit: type=1326 audit(1785154464.363:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17545 comm="syz.5.5595" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fcea6d3ec89 code=0x7ffc0000 [ 582.993243][ T37] audit: type=1326 audit(1785154464.363:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17545 comm="syz.5.5595" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fcea6cfabfb code=0x7ffc0000 [ 582.993283][ T37] audit: type=1326 audit(1785154464.363:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17545 comm="syz.5.5595" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea6d3de99 code=0x7ffc0000 [ 582.993324][ T37] audit: type=1326 audit(1785154464.363:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17545 comm="syz.5.5595" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea6d3de99 code=0x7ffc0000 [ 582.993364][ T37] audit: type=1326 audit(1785154464.363:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17545 comm="syz.5.5595" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fcea6cfa2ec code=0x7ffc0000 [ 582.993415][ T37] audit: type=1326 audit(1785154464.363:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17545 comm="syz.5.5595" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fcea6cfa34e code=0x7ffc0000 [ 582.993453][ T37] audit: type=1326 audit(1785154464.363:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17545 comm="syz.5.5595" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcea6d3db2b code=0x7ffc0000 [ 583.039405][ T37] audit: type=1326 audit(1785154464.409:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17545 comm="syz.5.5595" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea6d3de99 code=0x7ffc0000 [ 583.039712][ T37] audit: type=1326 audit(1785154464.409:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17545 comm="syz.5.5595" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea6d3de99 code=0x7ffc0000 [ 584.686576][T16245] Bluetooth: hci8: Unknown advertising packet type: 0x7f [ 584.686612][T16245] Bluetooth: hci8: Malformed LE Event: 0x0d [ 585.070981][T17611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5627'. [ 585.238635][T17615] xfrm0: entered promiscuous mode [ 585.238666][T17615] xfrm0: entered allmulticast mode [ 585.685742][T17625] ipip0: entered promiscuous mode [ 585.685773][T17625] ipip0: entered allmulticast mode [ 586.027932][T17638] netlink: 'syz.6.5640': attribute type 61 has an invalid length. [ 587.063172][ T5713] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 587.109261][T17669] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5655'. [ 587.242548][T17672] netlink: 'syz.6.5657': attribute type 2 has an invalid length. [ 587.242573][T17672] netlink: 'syz.6.5657': attribute type 1 has an invalid length. [ 587.264322][ T5713] usb 9-1: config 0 has an invalid interface number: 176 but max is 2 [ 587.264355][ T5713] usb 9-1: config 0 has no interface number 1 [ 587.264416][ T5713] usb 9-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 587.264459][ T5713] usb 9-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 587.264490][ T5713] usb 9-1: config 0 interface 0 has no altsetting 0 [ 587.264528][ T5713] usb 9-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 587.264553][ T5713] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.303118][ T5713] usb 9-1: config 0 descriptor?? [ 587.462169][T17675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.552002][ T5713] usb 9-1: Could not set interface, error -71 [ 587.628812][ T5713] qmi_wwan 9-1:0.0: probe with driver qmi_wwan failed with error -22 [ 587.677343][ T5713] usb 9-1: USB disconnect, device number 3 [ 588.355531][T17688] bridge_slave_0: left allmulticast mode [ 588.355573][T17688] bridge_slave_0: left promiscuous mode [ 588.355897][T17688] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.569480][T17688] bridge_slave_1: left allmulticast mode [ 588.569732][T17688] bridge_slave_1: left promiscuous mode [ 588.570047][T17688] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.915201][T17688] bond0: (slave bond_slave_0): Releasing backup interface [ 588.966274][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 588.966295][ T37] audit: type=1326 audit(1785154469.878:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17709 comm="syz.6.5674" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 588.967675][ T37] audit: type=1326 audit(1785154469.878:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17709 comm="syz.6.5674" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 588.991789][ T37] audit: type=1326 audit(1785154469.905:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17709 comm="syz.6.5674" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 588.996874][ T37] audit: type=1326 audit(1785154469.905:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17709 comm="syz.6.5674" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 588.997027][ T37] audit: type=1326 audit(1785154469.905:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17709 comm="syz.6.5674" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 588.997173][ T37] audit: type=1326 audit(1785154469.905:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17709 comm="syz.6.5674" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 588.997408][ T37] audit: type=1326 audit(1785154469.905:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17709 comm="syz.6.5674" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 588.997848][ T37] audit: type=1326 audit(1785154469.905:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17709 comm="syz.6.5674" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 588.997996][ T37] audit: type=1326 audit(1785154469.905:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17709 comm="syz.6.5674" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 589.051018][T17688] bond0: (slave bond_slave_1): Releasing backup interface [ 589.147200][T17688] team_slave_0: left promiscuous mode [ 589.147354][T17688] team_slave_0: left allmulticast mode [ 589.185908][T17688] team0: Port device team_slave_0 removed [ 589.186711][T17688] team_slave_1: left promiscuous mode [ 589.186974][T17688] team_slave_1: left allmulticast mode [ 589.243542][T17712] XFS (nullb0): Invalid superblock magic number [ 589.295229][T17688] team0: Port device team_slave_1 removed [ 589.295527][T17688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.373022][T17688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.445702][T17688] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 589.783129][ T37] audit: type=1400 audit(1785154470.635:526): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz0" requested=w pid=17725 comm="syz.5.5679" dest=16384 [ 589.963347][T17736] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5683'. [ 589.993735][T17737] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5684'. [ 590.635709][ T5741] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 590.753677][T17767] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5700'. [ 590.789298][T17758] bond1: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 590.799188][ T5741] usb 9-1: Using ep0 maxpacket: 16 [ 590.801782][ T5741] usb 9-1: unable to get BOS descriptor or descriptor too short [ 590.804771][T17758] bond1: entered allmulticast mode [ 590.826044][ T5741] usb 9-1: config 1 has an invalid interface number: 151 but max is 0 [ 590.826073][ T5741] usb 9-1: config 1 has no interface number 0 [ 590.826120][ T5741] usb 9-1: config 1 interface 151 has no altsetting 0 [ 590.843630][ T5741] usb 9-1: string descriptor 0 read error: -22 [ 590.843777][ T5741] usb 9-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 590.843808][ T5741] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.901491][T17758] 8021q: adding VLAN 0 to HW filter on device bond1 [ 591.035643][T17774] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5701'. [ 591.102641][ T5741] gspca_main: pac7311-2.14.0 probing 093a:260e [ 591.168287][T17778] openvswitch: netlink: IPv6 tunnel dst address is zero [ 591.394370][T17782] netlink: 'syz.6.5706': attribute type 6 has an invalid length. [ 591.496837][ T5741] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 591.496913][ T5741] pac7311 9-1:1.151: probe with driver pac7311 failed with error -71 [ 591.519667][ T5741] usb 9-1: USB disconnect, device number 4 [ 592.193450][T17809] bridge4: entered promiscuous mode [ 592.193479][T17809] bridge4: entered allmulticast mode [ 593.416762][T17848] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5739'. [ 593.416779][T17848] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5739'. [ 593.632956][T17857] Invalid option length (65058) for dns_resolver key [ 593.980884][T17872] tmpfs: Bad value for 'mpol' [ 594.300980][T17889] netlink: 'syz.5.5756': attribute type 5 has an invalid length. [ 594.701147][T17901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5762'. [ 595.126025][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 595.126048][ T37] audit: type=1326 audit(1785154475.568:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17916 comm="syz.8.5770" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe873dcde99 code=0x7ffc0000 [ 595.126107][ T37] audit: type=1326 audit(1785154475.568:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17916 comm="syz.8.5770" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe873dcde99 code=0x7ffc0000 [ 595.209844][ T37] audit: type=1326 audit(1785154475.651:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17916 comm="syz.8.5770" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fe873dcde99 code=0x7ffc0000 [ 595.210054][ T37] audit: type=1326 audit(1785154475.651:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17916 comm="syz.8.5770" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe873dcde99 code=0x7ffc0000 [ 595.484548][T17929] netlink: 'syz.6.5777': attribute type 12 has an invalid length. [ 595.514278][T17932] netlink: 'syz.8.5778': attribute type 1 has an invalid length. [ 595.514303][T17932] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5778'. [ 595.812058][T17942] openvswitch: netlink: IPv4 tunnel dst address is zero [ 596.396742][ T37] audit: type=1326 audit(1785154476.750:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17963 comm="syz.8.5793" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe873dcde99 code=0x7ffc0000 [ 596.396802][ T37] audit: type=1326 audit(1785154476.750:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17963 comm="syz.8.5793" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe873dcde99 code=0x7ffc0000 [ 596.492326][ T37] audit: type=1326 audit(1785154476.768:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17963 comm="syz.8.5793" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe873dcde99 code=0x7ffc0000 [ 596.492366][ T37] audit: type=1326 audit(1785154476.787:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17963 comm="syz.8.5793" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fe873dcde99 code=0x7ffc0000 [ 596.492394][ T37] audit: type=1326 audit(1785154476.787:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17963 comm="syz.8.5793" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe873dcde99 code=0x7ffc0000 [ 596.492420][ T37] audit: type=1326 audit(1785154476.787:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17963 comm="syz.8.5793" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe873dcde99 code=0x7ffc0000 [ 596.880889][T17979] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5802'. [ 596.880916][T17979] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5802'. [ 597.248901][T17994] netlink: 872 bytes leftover after parsing attributes in process `syz.7.5808'. [ 597.248933][T17994] netlink: 872 bytes leftover after parsing attributes in process `syz.7.5808'. [ 597.852311][T18014] kAFS: unable to lookup cell ' [ 597.852311][T18014] $)-.ײfYǝa2s [ 597.852311][T18014] ' [ 597.861195][T18013] netlink: 188 bytes leftover after parsing attributes in process `syz.5.5817'. [ 598.926939][T18049] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5835'. [ 599.057990][ T5741] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 599.132848][T18052] binfmt_misc: register: failed to install interpreter file ./file0 [ 599.158261][T18049] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 599.248561][ T5741] usb 6-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 599.248598][ T5741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.248620][ T5741] usb 6-1: Product: syz [ 599.248635][ T5741] usb 6-1: Manufacturer: syz [ 599.248651][ T5741] usb 6-1: SerialNumber: syz [ 599.278674][ T5741] usb 6-1: config 0 descriptor?? [ 599.315003][T18049] bond3 (unregistering): Released all slaves [ 599.515763][ T5741] usb 6-1: USB disconnect, device number 10 [ 599.649484][T18055] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 599.838990][T18055] bond2 (unregistering): Released all slaves [ 600.084076][T18073] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 600.618777][T18091] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 600.618829][T18091] CIFS: VFS: Malformed UNC in devname [ 600.809809][T18098] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5857'. [ 600.869146][ T5741] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 601.053072][ T5741] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 601.053108][ T5741] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 601.053134][ T5741] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 601.053159][ T5741] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 601.058903][ T5741] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 601.058939][ T5741] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.058961][ T5741] usb 5-1: Product: syz [ 601.058977][ T5741] usb 5-1: Manufacturer: syz [ 601.058994][ T5741] usb 5-1: SerialNumber: syz [ 601.082480][ T31] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 601.159650][ T5741] usb 5-1: config 0 descriptor?? [ 601.166620][ T5741] kvaser_usb 5-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 601.166647][ T5741] kvaser_usb 5-1:0.0: error -EMSGSIZE: Failed to initialize card [ 601.166742][ T5741] kvaser_usb 5-1:0.0: probe with driver kvaser_usb failed with error -90 [ 601.245167][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 601.258114][ T31] usb 7-1: unable to get BOS descriptor or descriptor too short [ 601.265224][ T31] usb 7-1: config 7 has an invalid interface number: 43 but max is 0 [ 601.265253][ T31] usb 7-1: config 7 has no interface number 0 [ 601.265301][ T31] usb 7-1: config 7 interface 43 has no altsetting 0 [ 601.291510][ T31] usb 7-1: New USB device found, idVendor=0421, idProduct=01d4, bcdDevice=d4.99 [ 601.291546][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.291568][ T31] usb 7-1: Product: syz [ 601.291584][ T31] usb 7-1: Manufacturer: syz [ 601.291601][ T31] usb 7-1: SerialNumber: syz [ 601.451003][ T5926] usb 5-1: USB disconnect, device number 103 [ 601.601188][ T31] rndis_host 7-1:7.43: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 601.605746][ T31] cdc_acm 7-1:7.43: Zero length descriptor references [ 601.605789][ T31] cdc_acm 7-1:7.43: probe with driver cdc_acm failed with error -22 [ 601.624740][ T31] usb 7-1: USB disconnect, device number 7 [ 601.965944][T18130] netlink: 340 bytes leftover after parsing attributes in process `syz.5.5875'. [ 601.966016][T18130] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5875'. [ 602.598542][T18153] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5885'. [ 602.769896][T18159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 605.668980][T18255] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5927'. [ 606.360973][T18276] bridge_slave_0: left allmulticast mode [ 606.361012][T18276] bridge_slave_0: left promiscuous mode [ 606.387147][T18276] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.563835][T18276] bridge_slave_1: left allmulticast mode [ 606.563873][T18276] bridge_slave_1: left promiscuous mode [ 606.564140][T18276] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.617319][T18288] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5945'. [ 606.824986][T18276] bond0: (slave bond_slave_0): Releasing backup interface [ 606.886359][T18276] bond0: (slave bond_slave_1): Releasing backup interface [ 606.955993][T18276] team0: Port device team_slave_0 removed [ 607.006491][T18276] team0: Port device team_slave_1 removed [ 607.007382][T18276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.007401][T18276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.065821][T18276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.065855][T18276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.104637][T18276] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 607.436461][T18298] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5950'. [ 607.489223][T18300] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5951'. [ 607.729375][T18310] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5955'. [ 607.915160][T18320] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 608.926145][T18350] netlink: 'syz.4.5974': attribute type 3 has an invalid length. [ 609.294900][T18363] netlink: 'syz.4.5982': attribute type 5 has an invalid length. [ 609.332291][T18366] kAFS: unable to lookup cell '@' [ 609.542009][T18376] bridge_slave_0: left allmulticast mode [ 609.542047][T18376] bridge_slave_0: left promiscuous mode [ 609.542332][T18376] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.795595][T18376] bridge_slave_1: left allmulticast mode [ 609.795632][T18376] bridge_slave_1: left promiscuous mode [ 609.809125][T18376] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.812161][T18385] netlink: 'syz.8.5991': attribute type 10 has an invalid length. [ 609.812186][T18385] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5991'. [ 610.026328][T18376] bond0: (slave bond_slave_0): Releasing backup interface [ 610.091115][T18376] bond0: (slave bond_slave_1): Releasing backup interface [ 610.155976][T18376] team0: Port device team_slave_0 removed [ 610.199794][T18376] team0: Port device team_slave_1 removed [ 610.200243][T18376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.223836][T18376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.243540][T18376] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 610.270000][T18385] bridge0: port 1(dummy0) entered blocking state [ 610.272739][T18385] bridge0: port 1(dummy0) entered disabled state [ 610.272960][T18385] dummy0: entered allmulticast mode [ 610.287256][T18385] dummy0: entered promiscuous mode [ 610.324969][T18385] bridge0: port 1(dummy0) entered blocking state [ 610.325132][T18385] bridge0: port 1(dummy0) entered forwarding state [ 611.186741][T18420] bridge_slave_0: left allmulticast mode [ 611.186776][T18420] bridge_slave_0: left promiscuous mode [ 611.187071][T18420] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.355223][T18420] bridge_slave_1: left allmulticast mode [ 611.355260][T18420] bridge_slave_1: left promiscuous mode [ 611.355546][T18420] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.617390][T18420] bond0: (slave bond_slave_0): Releasing backup interface [ 611.665664][T18438] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6019'. [ 611.728279][T18420] bond0: (slave bond_slave_1): Releasing backup interface [ 611.814749][T18420] team0: Port device team_slave_0 removed [ 611.855456][T18420] team0: Port device team_slave_1 removed [ 611.860733][T18420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.910199][T18420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.973167][T18420] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 612.128195][T18451] netlink: 'syz.6.6025': attribute type 8 has an invalid length. [ 612.143862][T18438] hsr_slave_0 (unregistering): left promiscuous mode [ 612.807202][ T31] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 612.969460][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 612.974257][ T31] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 612.974304][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 612.974333][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 612.974358][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 612.974387][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 612.978945][ T31] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 612.978980][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.979002][ T31] usb 5-1: Product: syz [ 612.979019][ T31] usb 5-1: Manufacturer: syz [ 612.979034][ T31] usb 5-1: SerialNumber: syz [ 613.021073][ T31] usb 5-1: config 0 descriptor?? [ 613.496487][ T31] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 613.498066][ T31] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 613.498693][ T31] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 613.499191][ T31] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 613.504276][ T31] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 613.504860][ T31] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 613.505330][ T31] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 613.505772][ T31] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 613.506216][ T31] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 613.506652][ T31] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 613.507087][ T31] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 613.507535][ T31] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 613.507996][ T31] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 613.508441][ T31] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 613.508882][ T31] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 613.509325][ T31] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 613.509764][ T31] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 613.510217][ T31] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 613.514078][ T31] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 613.514192][ T31] input input40: Timeout waiting for response from device. [ 613.585320][ T31] usb 5-1: USB disconnect, device number 104 [ 613.733559][T18493] geneve3: entered promiscuous mode [ 613.745355][ T4286] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.748365][ T4286] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.748416][ T4286] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.748455][ T4286] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.092267][T18509] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6053'. [ 614.462257][T18522] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6059'. [ 615.402835][T18552] netlink: 'syz.4.6074': attribute type 1 has an invalid length. [ 615.402859][T18552] netlink: 'syz.4.6074': attribute type 3 has an invalid length. [ 615.402872][T18552] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6074'. [ 615.985140][ T5741] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 616.193352][ T5741] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 616.193388][ T5741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.193409][ T5741] usb 6-1: Product: syz [ 616.193425][ T5741] usb 6-1: Manufacturer: syz [ 616.193441][ T5741] usb 6-1: SerialNumber: syz [ 616.717732][ T5741] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 616.717805][ T5741] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 616.720228][ T5741] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 616.720293][ T5741] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 616.732283][T18589] bridge5: entered promiscuous mode [ 616.732310][T18589] bridge5: entered allmulticast mode [ 616.789511][ T5741] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 616.817199][ T5741] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 616.853728][ T5741] usb 6-1: USB disconnect, device number 11 [ 616.939157][T18595] netlink: 'syz.4.6094': attribute type 1 has an invalid length. [ 618.415544][T18647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 619.037552][T18669] netlink: 'syz.4.6123': attribute type 6 has an invalid length. [ 619.751643][T16245] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 619.819702][T16245] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 619.830283][T16245] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 619.852655][T16245] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 619.859123][T16245] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 620.307117][T18704] misc userio: The device must be registered before sending interrupts [ 621.062726][T18731] ieee802154 phy0 wpan0: encryption failed: -22 [ 621.349399][T18684] lo speed is unknown, defaulting to 1000 [ 621.845898][T18758] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6161'. [ 621.845929][T18758] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6161'. [ 621.845964][T18758] netlink: 31 bytes leftover after parsing attributes in process `syz.6.6161'. [ 622.204211][ T5616] Bluetooth: hci9: command tx timeout [ 622.561299][ T5803] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 622.767009][ T5803] usb 9-1: Using ep0 maxpacket: 8 [ 622.769841][ T5803] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.769869][ T5803] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 622.769920][ T5803] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 622.769947][ T5803] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 622.769977][ T5803] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 622.770022][ T5803] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 622.770057][ T5803] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.901571][ T5803] hub 9-1:1.0: bad descriptor, ignoring hub [ 622.901634][ T5803] hub 9-1:1.0: probe with driver hub failed with error -5 [ 622.934537][ T5803] cdc_wdm 9-1:1.0: skipping garbage [ 622.934562][ T5803] cdc_wdm 9-1:1.0: skipping garbage [ 622.935378][ T5803] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 623.255041][ T5713] usb 9-1: USB disconnect, device number 5 [ 623.519173][T18684] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.519371][T18684] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.519682][T18684] bridge_slave_0: entered allmulticast mode [ 623.526784][T18684] bridge_slave_0: entered promiscuous mode [ 623.552439][T18684] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.557075][T18684] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.557588][T18684] bridge_slave_1: entered allmulticast mode [ 623.561040][T18684] bridge_slave_1: entered promiscuous mode [ 623.950892][T18684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.955780][T18684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.061127][T18684] team0: Port device team_slave_0 added [ 624.065336][T18684] team0: Port device team_slave_1 added [ 624.456085][ T5616] Bluetooth: hci9: command tx timeout [ 624.527237][T18807] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6182'. [ 624.752285][T18684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.752324][T18684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.752355][T18684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.756723][T18684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.756743][T18684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.756890][T18684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.108956][T18684] hsr_slave_0: entered promiscuous mode [ 625.110887][T18684] hsr_slave_1: entered promiscuous mode [ 625.112091][T18684] debugfs: 'hsr0' already exists in 'hsr' [ 625.112119][T18684] Cannot create hsr debugfs directory [ 626.453958][T18865] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6211'. [ 626.697415][T18873] PKCS8: Unsupported PKCS#8 version [ 626.708483][ T5616] Bluetooth: hci9: command tx timeout [ 627.573192][T18904] tmpfs: Bad value for 'mpol' [ 627.625375][T18684] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 627.652475][T18684] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 627.655391][T18684] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 627.829809][T18906] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6230'. [ 627.916666][T18684] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 628.089704][T18906] bond2: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 628.093532][ T5616] Bluetooth: hci6: command 0x0406 tx timeout [ 628.184152][T18906] bond2 (unregistering): Released all slaves [ 628.271033][T18919] netlink: 'syz.5.6235': attribute type 3 has an invalid length. [ 628.311282][T18684] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 628.454283][T18684] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 628.460774][T18684] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 628.545241][T18684] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 628.874369][T18932] ip6erspan0: entered allmulticast mode [ 628.959712][T16245] Bluetooth: hci9: command tx timeout [ 629.000575][T18945] netlink: 'syz.8.6244': attribute type 61 has an invalid length. [ 629.000603][T18945] netlink: 'syz.8.6244': attribute type 62 has an invalid length. [ 629.532840][T18684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.818972][T18684] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.829851][ T1743] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.829985][ T1743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.858778][ T1743] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.860884][ T1743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.554045][T18990] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 632.250006][T18684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.472936][T19059] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6295'. [ 632.472973][T19059] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6295'. [ 633.054638][T19083] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 633.844288][T18684] veth0_vlan: entered promiscuous mode [ 633.991609][T18684] veth1_vlan: entered promiscuous mode [ 634.047887][T18684] veth0_macvtap: entered promiscuous mode [ 634.102405][T18684] veth1_macvtap: entered promiscuous mode [ 634.148021][T18684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.170947][T18684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.221533][ T150] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.263133][ T150] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.279661][T16253] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.280159][T16253] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.065941][T19124] netlink: 'syz.6.6321': attribute type 33 has an invalid length. [ 635.065977][T19124] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6321'. [ 635.066011][T19124] `: renamed from team0 [ 635.849431][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.849456][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.091999][T19139] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 636.375837][T16232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.375862][T16232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.356192][T19181] netlink: ct family unspecified [ 637.356230][T19181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 637.619790][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 637.619814][ T37] audit: type=1326 audit(1785154514.797:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19182 comm="syz.8.6347" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe873dcde99 code=0x0 [ 638.064344][T19207] netlink: 'syz.9.6358': attribute type 4 has an invalid length. [ 638.465527][ T5803] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 638.627184][ T5803] usb 5-1: Using ep0 maxpacket: 16 [ 638.630015][ T5803] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 638.630049][ T5803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.683573][ T5803] usb 5-1: config 0 descriptor?? [ 638.700581][ T5803] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 638.817395][T19231] usb usb9: usbfs: process 19231 (syz.6.6369) did not claim interface 9 before use [ 638.940588][ T5803] usb 5-1: Detected FT232A [ 638.963021][ T5803] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 639.108109][T19240] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6375'. [ 639.180382][ T5803] usb 5-1: USB disconnect, device number 105 [ 639.182498][T16245] Bluetooth: hci7: command 0x0406 tx timeout [ 639.188577][ T5803] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 639.189355][ T5803] ftdi_sio 5-1:0.0: device disconnected [ 639.271000][ T37] audit: type=1326 audit(1785154516.349:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19243 comm="syz.6.6377" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 639.272315][ T37] audit: type=1326 audit(1785154516.349:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19243 comm="syz.6.6377" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 639.275325][ T37] audit: type=1326 audit(1785154516.349:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19243 comm="syz.6.6377" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 639.275488][ T37] audit: type=1326 audit(1785154516.349:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19243 comm="syz.6.6377" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 639.275767][ T37] audit: type=1326 audit(1785154516.349:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19243 comm="syz.6.6377" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 639.275963][ T37] audit: type=1326 audit(1785154516.349:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19243 comm="syz.6.6377" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 639.300610][ T37] audit: type=1326 audit(1785154516.377:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19243 comm="syz.6.6377" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 639.300667][ T37] audit: type=1326 audit(1785154516.377:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19243 comm="syz.6.6377" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 639.300711][ T37] audit: type=1326 audit(1785154516.377:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19243 comm="syz.6.6377" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f98b8f9de99 code=0x7ffc0000 [ 639.729826][T19250] openvswitch: netlink: IPv4 tun info is not correct [ 639.761978][T19251] tmpfs: Bad value for 'mpol' [ 640.353069][T19260] ALSA: mixer_oss: invalid OSS volume '' [ 640.353089][T19260] ALSA: mixer_oss: invalid OSS volume '' [ 640.610308][T19278] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 640.874213][T19288] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6397'. [ 641.597687][T19306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6406'. [ 641.717750][T19310] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6407'. [ 641.717782][T19310] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6407'. [ 643.406941][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 643.406962][ T37] audit: type=1326 audit(1785154520.164:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19352 comm="syz.4.6429" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58253de99 code=0x7ffc0000 [ 643.432483][ T37] audit: type=1326 audit(1785154520.164:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19352 comm="syz.4.6429" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58253de99 code=0x7ffc0000 [ 643.432541][ T37] audit: type=1326 audit(1785154520.191:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19352 comm="syz.4.6429" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58253de99 code=0x7ffc0000 [ 643.432620][ T37] audit: type=1326 audit(1785154520.191:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19352 comm="syz.4.6429" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd58253de99 code=0x7ffc0000 [ 643.437708][ T37] audit: type=1326 audit(1785154520.201:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19352 comm="syz.4.6429" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58253de99 code=0x7ffc0000 [ 643.437764][ T37] audit: type=1326 audit(1785154520.201:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19352 comm="syz.4.6429" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58253de99 code=0x7ffc0000 [ 643.443912][ T37] audit: type=1326 audit(1785154520.201:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19352 comm="syz.4.6429" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58253de99 code=0x7ffc0000 [ 643.454501][ T37] audit: type=1326 audit(1785154520.210:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19352 comm="syz.4.6429" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd58253de99 code=0x7ffc0000 [ 643.454558][ T37] audit: type=1326 audit(1785154520.210:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19352 comm="syz.4.6429" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd58253de99 code=0x7ffc0000 [ 644.527329][ T31] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 644.689692][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 644.692172][ T31] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.692208][ T31] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.698080][ T31] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 644.698117][ T31] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 644.698141][ T31] usb 7-1: Product: syz [ 644.698157][ T31] usb 7-1: Manufacturer: syz [ 644.796211][ T31] hub 7-1:4.0: USB hub found [ 645.052946][ T31] hub 7-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 645.245719][ T38] INFO: task syz.2.4281:14675 blocked for more than 143 seconds. [ 645.245748][ T38] Not tainted syzkaller #0 [ 645.245760][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 645.245771][ T38] task:syz.2.4281 state:D stack:26248 pid:14675 tgid:14674 ppid:5609 task_flags:0x400140 flags:0x00080002 [ 645.246518][ T38] Call Trace: [ 645.246529][ T38] [ 645.246544][ T38] __schedu[ 645.246544][ T38] __schedule+0x16dc/0x5500 [ 645.246718][ T38] ? __pfx___schedule+0x10/0x10 [ 645.246770][ T38] ? irqentry_exit+0x218/0x8f0 [ 645.246816][ T38] ? trace_irq_disable+0x3b/0x140 [ 645.246882][ T38] ? __pfx___schedule+0x10/0x10 [ 645.246903][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 645.246978][ T38] rt_mutex_schedule+0x76/0xf0 [ 645.247055][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 645.247100][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 645.247138][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 645.247176][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 645.247212][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 645.247259][ T38] ? nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 645.247381][ T38] ? nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 645.247418][ T38] mutex_lock_nested+0x168/0x1d0 [ 645.247460][ T38] nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 645.247495][ T38] genl_family_rcv_msg_doit+0x233/0x340 [ 645.247641][ T38] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 645.247693][ T38] ? bpf_lsm_capable+0x9/0x20 [ 645.247753][ T38] ? security_capable+0x7e/0x2c0 [ 645.252644][ T38] genl_rcv_msg+0x614/0x7a0 [ 645.252691][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 645.252719][ T38] ? ref_tracker_free+0x668/0x820 [ 645.252814][ T38] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 645.252845][ T38] ? __pfx_ref_tracker_free+0x10/0x10 [ 645.252865][ T38] ? __asan_memcpy+0x40/0x70 [ 645.252963][ T38] ? __skb_clone+0x5c/0x6c0 [ 645.253034][ T38] netlink_rcv_skb+0x226/0x4a0 [ 645.253061][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 645.253092][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 645.253131][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 645.253156][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 645.253185][ T38] genl_rcv+0x28/0x40 [ 645.253212][ T38] netlink_unicast+0x7f5/0x990 [ 645.253246][ T38] netlink_sendmsg+0x813/0xb40 [ 645.253281][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.253309][ T38] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 645.253371][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.253395][ T38] sock_sendmsg_nosec+0x13a/0x180 [ 645.253498][ T38] ____sys_sendmsg+0x565/0x870 [ 645.253523][ T38] ? __might_fault+0xaf/0x130 [ 645.253584][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 645.253619][ T38] ? import_iovec+0x73/0xa0 [ 645.253680][ T38] ___sys_sendmsg+0x2a5/0x360 [ 645.253704][ T38] ? __lock_acquire+0x683/0x2ce0 [ 645.253753][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 645.253782][ T38] ? futex_wait+0x2a2/0x390 [ 645.253842][ T38] ? __fget_files+0x2a/0x420 [ 645.253913][ T38] ? __fget_files+0x3a8/0x420 [ 645.253945][ T38] __x64_sys_sendmsg+0x1b7/0x290 [ 645.253973][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 645.254016][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.254070][ T38] do_syscall_64+0x174/0x580 [ 645.254118][ T38] ? trace_irq_disable+0x3b/0x140 [ 645.254139][ T38] ? clear_bhb_loop+0x40/0x90 [ 645.254165][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.254201][ T38] RIP: 0033:0x7f57049ede99 [ 645.254222][ T38] RSP: 002b:00007f5702c46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.254245][ T38] RAX: ffffffffffffffda RBX: 00007f5704c75fa0 RCX: 00007f57049ede99 [ 645.254261][ T38] RDX: 0000000004000880 RSI: 0000200000000100 RDI: 0000000000000003 [ 645.254276][ T38] RBP: 00007f5704a83eaf R08: 0000000000000000 R09: 0000000000000000 [ 645.254291][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.264887][ T38] R13: 00007f5704c76038 R14: 00007f5704c75fa0 R15: 00007ffca34a0948 [ 645.264931][ T38] [ 645.264949][ T38] INFO: task syz.3.4474:15105 blocked for more than 143 seconds. [ 645.264966][ T38] Not tainted syzkaller #0 [ 645.264977][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 645.264986][ T38] task:syz.3.4474 state:D stack:26568 pid:15105 tgid:15102 ppid:5610 task_flags:0x400140 flags:0x00080002 [ 645.265047][ T38] Call Trace: [ 645.265054][ T38] [ 645.265067][ T38] __schedule+0x16dc/0x5500 [ 645.265124][ T38] ? __pfx___schedule+0x10/0x10 [ 645.265163][ T38] rt_mutex_schedule+0x76/0xf0 [ 645.265187][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 645.265233][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 645.265264][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 645.265294][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 645.265334][ T38] ? nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 645.265434][ T38] ? nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 645.265468][ T38] ? nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 645.265493][ T38] mutex_lock_nested+0x168/0x1d0 [ 645.265530][ T38] nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 645.265561][ T38] ? __schedule+0x16f2/0x5500 [ 645.265587][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.265611][ T38] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 645.265651][ T38] ? __pfx___nla_validate_parse+0x10/0x10 [ 645.265710][ T38] ? __pfx___schedule+0x10/0x10 [ 645.265746][ T38] ? irqentry_exit+0x218/0x8f0 [ 645.265769][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 645.265793][ T38] ? irqentry_exit+0x218/0x8f0 [ 645.265815][ T38] ? trace_irq_disable+0x3b/0x140 [ 645.265848][ T38] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 645.265886][ T38] genl_family_rcv_msg_doit+0x233/0x340 [ 645.265926][ T38] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 645.265968][ T38] ? bpf_lsm_capable+0x9/0x20 [ 645.265989][ T38] ? security_capable+0x7e/0x2c0 [ 645.266022][ T38] genl_rcv_msg+0x614/0x7a0 [ 645.266058][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 645.266087][ T38] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 645.266129][ T38] netlink_rcv_skb+0x226/0x4a0 [ 645.266155][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 645.266186][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 645.266224][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 645.266248][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 645.266276][ T38] genl_rcv+0x28/0x40 [ 645.266303][ T38] netlink_unicast+0x7f5/0x990 [ 645.266338][ T38] netlink_sendmsg+0x813/0xb40 [ 645.266373][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.266400][ T38] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 645.266459][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.266483][ T38] sock_sendmsg_nosec+0x13a/0x180 [ 645.266516][ T38] ____sys_sendmsg+0x565/0x870 [ 645.271087][ T38] ? __might_fault+0xaf/0x130 [ 645.271125][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 645.271162][ T38] ? import_iovec+0x73/0xa0 [ 645.271191][ T38] ___sys_sendmsg+0x2a5/0x360 [ 645.271215][ T38] ? __lock_acquire+0x683/0x2ce0 [ 645.271241][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 645.271286][ T38] ? futex_wait+0x2a2/0x390 [ 645.271346][ T38] ? __fget_files+0x2a/0x420 [ 645.271368][ T38] ? __fget_files+0x3a8/0x420 [ 645.271400][ T38] __x64_sys_sendmsg+0x1b7/0x290 [ 645.271436][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 645.271480][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.271503][ T38] do_syscall_64+0x174/0x580 [ 645.271527][ T38] ? trace_irq_disable+0x3b/0x140 [ 645.271548][ T38] ? clear_bhb_loop+0x40/0x90 [ 645.271574][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.271594][ T38] RIP: 0033:0x7fea6e93de99 [ 645.271613][ T38] RSP: 002b:00007fea6cb96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.271636][ T38] RAX: ffffffffffffffda RBX: 00007fea6ebc5fa0 RCX: 00007fea6e93de99 [ 645.271652][ T38] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 645.271666][ T38] RBP: 00007fea6e9d3eaf R08: 0000000000000000 R09: 0000000000000000 [ 645.271680][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.271693][ T38] R13: 00007fea6ebc6038 R14: 00007fea6ebc5fa0 R15: 00007ffd7b483498 [ 645.271726][ T38] [ 645.271766][ T38] [ 645.271766][ T38] Showing all locks held in the system: [ 645.271776][ T38] 5 locks held by pr/legacy/17: [ 645.271792][ T38] 1 lock held by khungtaskd/38: [ 645.271803][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 645.271896][ T38] 2 locks held by kworker/u8:4/66: [ 645.271908][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 645.272009][ T38] #1: ffffc9000151fc40 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 645.272084][ T38] 2 locks held by getty/5351: [ 645.272096][ T38] #0: ffff88803633e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 645.272212][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 645.272287][ T38] 1 lock held by syz-executor/5611: [ 645.272309][ T38] 2 locks held by syz.1.4079/14238: [ 645.272320][ T38] #0: ffffffff8f6230a0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 645.272372][ T38] #1: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x136/0x16e0 [ 645.272432][ T38] 2 locks held by syz.2.4281/14675: [ 645.272444][ T38] #0: ffffffff8f6230a0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 645.272495][ T38] #1: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 645.272549][ T38] 2 locks held by syz.3.4474/15105: [ 645.272560][ T38] #0: ffffffff8f6230a0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 645.272626][ T38] #1: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 645.272682][ T38] 2 locks held by syz.0.4658/15544: [ 645.272693][ T38] #0: ffffffff8f6230a0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 645.279028][ T38] #1: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 645.279087][ T38] 4 locks held by syz-executor/15938: [ 645.279102][ T38] 2 locks held by kworker/u8:7/16253: [ 645.279114][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 645.279164][ T38] #1: ffffc90005c5fc40 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 645.279214][ T38] 2 locks held by syz.7.5892/18172: [ 645.279226][ T38] #0: ffffffff8f6230a0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 645.279277][ T38] #1: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_export_doit+0x2cf/0x530 [ 645.279328][ T38] 2 locks held by syz-executor/18684: [ 645.279343][ T38] 7 locks held by syz.8.6347/19192: [ 645.279355][ T38] 4 locks held by syz.5.6447/19387: [ 645.279368][ T38] [ 645.279374][ T38] ============================================= [ 645.279374][ T38] [ 645.279382][ T38] NMI backtrace for cpu 0 [ 645.279397][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 645.279427][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 645.279438][ T38] Call Trace: [ 645.279447][ T38] [ 645.279455][ T38] dump_stack_lvl+0xe8/0x150 [ 645.279568][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 645.279612][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 645.279693][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 645.279746][ T38] sys_info+0x135/0x170 [ 645.279772][ T38] watchdog+0xfd7/0x1030 [ 645.279819][ T38] ? watchdog+0x1c7/0x1030 [ 645.279844][ T38] kthread+0x388/0x470 [ 645.279892][ T38] ? __pfx_watchdog+0x10/0x10 [ 645.279909][ T38] ? __pfx_kthread+0x10/0x10 [ 645.279937][ T38] ret_from_fork+0x514/0xb70 [ 645.280016][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 645.280045][ T38] ? __switch_to+0xc89/0x1420 [ 645.280118][ T38] ? __pfx_kthread+0x10/0x10 [ 645.280148][ T38] ret_from_fork_asm+0x1a/0x30 [ 645.280202][ T38] [ 645.280210][ T38] Sending NMI from CPU 0 to CPUs 1: [ 645.280235][ C1] NMI backtrace for cpu 1 [ 645.280251][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 645.280271][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 645.280282][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 645.280373][ C1] Code: e8 ae bd 6f fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ff 2f d9 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 645.280388][ C1] RSP: 0018:ffffc90000167a28 EFLAGS: 00000202 [ 645.280405][ C1] RAX: 1ffffffff33c9500 RBX: 00000000000003fd RCX: 0000000000000000 [ 645.280418][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 645.280431][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 645.280443][ C1] R10: dffffc0000000000 R11: ffffffff85560cf0 R12: dffffc0000000000 [ 645.280457][ C1] R13: 0000000000000000 R14: ffffffff99e4ad40 R15: 0000000000000000 [ 645.280468][ C1] FS: 0000000000000000(0000) GS:ffff888125d41000(0000) knlGS:0000000000000000 [ 645.280483][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 645.280496][ C1] CR2: 00007fff8fcfadb0 CR3: 000000003b7ea000 CR4: 00000000003526f0 [ 645.280513][ C1] Call Trace: [ 645.280520][ C1] [ 645.280530][ C1] wait_for_lsr+0x190/0x300 [ 645.280555][ C1] serial8250_console_write+0x113a/0x1b40 [ 645.280585][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 645.280610][ C1] ? console_flush_one_record+0xfa/0xb50 [ 645.280669][ C1] ? console_flush_one_record+0x472/0xb50 [ 645.280689][ C1] console_flush_one_record+0x642/0xb50 [ 645.280708][ C1] ? console_flush_one_record+0xfa/0xb50 [ 645.280727][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 645.280745][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 645.280768][ C1] legacy_kthread_func+0x1b6/0x250 [ 645.280787][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 645.280805][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 645.280865][ C1] ? __kthread_parkme+0x71/0x1f0 [ 645.280887][ C1] ? __kthread_parkme+0x196/0x1f0 [ 645.280960][ C1] kthread+0x388/0x470 [ 645.280985][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 645.281000][ C1] ? __pfx_kthread+0x10/0x10 [ 645.281025][ C1] ret_from_fork+0x514/0xb70 [ 645.281051][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 645.281076][ C1] ? __switch_to+0xc89/0x1420 [ 645.281098][ C1] ? __pfx_kthread+0x10/0x10 [ 645.281122][ C1] ret_from_fork_asm+0x1a/0x30 [ 645.281146][ C1] [ 645.294670][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 645.294691][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 645.294715][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 645.294727][ T38] Call Trace: [ 645.294736][ T38] [ 645.294745][ T38] vpanic+0x56c/0xa60 [ 645.294772][ T38] ? __pfx___schedule+0x10/0x10 [ 645.294796][ T38] ? __pfx_vpanic+0x10/0x10 [ 645.294825][ T38] panic+0xc5/0xd0 [ 645.294844][ T38] ? __pfx_panic+0x10/0x10 [ 645.294862][ T38] ? preempt_schedule_common+0x82/0xd0 [ 645.294884][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 645.294911][ T38] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 645.294945][ T38] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 645.294981][ T38] watchdog+0x1030/0x1030 [ 645.295010][ T38] ? watchdog+0x1c7/0x1030 [ 645.295036][ T38] kthread+0x388/0x470 [ 645.295068][ T38] ? __pfx_watchdog+0x10/0x10 [ 645.295086][ T38] ? __pfx_kthread+0x10/0x10 [ 645.295116][ T38] ret_from_fork+0x514/0xb70 [ 645.295149][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 645.295178][ T38] ? __switch_to+0xc89/0x1420 [ 645.295207][ T38] ? __pfx_kthread+0x10/0x10 [ 645.295236][ T38] ret_from_fork_asm+0x1a/0x30 [ 645.295271][ T38] [ 645.295594][ T38] Kernel Offset: disabled