last executing test programs: 2m38.163524734s ago: executing program 0 (id=4524): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2m34.978490078s ago: executing program 0 (id=4580): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) 2m34.731124697s ago: executing program 0 (id=4584): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) 2m34.485959311s ago: executing program 0 (id=4588): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r0, 0x0, 0x2, 0x0, 0x0) 2m34.29350419s ago: executing program 0 (id=4590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xd2}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x19}]}}}]}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x8090) 2m34.080049566s ago: executing program 0 (id=4594): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x602) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x80, 0x6, 0x103, 0x8000, 0x0, 0x0, 0x0}) 2m18.997901407s ago: executing program 32 (id=4594): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x602) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x80, 0x6, 0x103, 0x8000, 0x0, 0x0, 0x0}) 3.487860446s ago: executing program 4 (id=7002): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x0, 0xa, 0x1, "18"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.978064542s ago: executing program 1 (id=7011): r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@t={0x81, 0x5, 0x0, 0x0, @generic}) 2.698289896s ago: executing program 1 (id=7015): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, &(0x7f0000000300)) 2.447697892s ago: executing program 1 (id=7019): r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) 2.351550641s ago: executing program 5 (id=7022): r0 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 2.260652023s ago: executing program 1 (id=7023): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000140)={0x40, 0xe, 0x4, "a0adea7a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.063692271s ago: executing program 5 (id=7026): futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc)=0x3, 0x5, 0x6, 0x0, &(0x7f0000000000)=0x3, 0x5000002) 1.258820102s ago: executing program 3 (id=7035): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x34, r1, 0x483, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x34}}, 0x0) 1.201513478s ago: executing program 2 (id=7036): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 1.174966948s ago: executing program 4 (id=7037): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @multicast1}}) 1.080852478s ago: executing program 5 (id=7038): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001dc0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001e00)={0x1, {0x1, 0x9, 0x200, 0xfff, 0x8001, 0x3}}) 988.718966ms ago: executing program 2 (id=7039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a80000000060a010400000000000000000a0004050900010073797a310000000054000480500001800a000100696e6e65720000004000028008000440000000171c000580090001006d657461000000000c00028018000240000000080800034000000002080002400000008408000140000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 958.99503ms ago: executing program 3 (id=7040): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r0, 0x3, 0x0) getdents64(r0, &(0x7f0000003440)=""/92, 0x5c) 957.916154ms ago: executing program 4 (id=7041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 801.56476ms ago: executing program 5 (id=7042): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000000500)="9d59a622d4e4adc9fe7b2b18270044fd78861a4297c271708ffb006f1d84d15a59326d28898845cbab0c3b3df2ebcea55ecdb7b5f17ad1a80c2422666138f4ca89b06fbb05557d7090320308396f729206ea51efa18ba220cc66fd85730d1518e886dfde22652dc868bf074f2c91f3a9786f281129eb5df4aa526ee4b7e4feca593b9e2b6f79e772c9f73eaa20baf6d0ea328eb910763e3923c5675ca87e5c54fbd6d992c46402", 0xa7}, {&(0x7f0000001ac0)="21b164408bed26889029010d7dad1423207447ff8d374cd889eeaf1c1f1b07fff04f9a02354c29eaaa402cc2075e14af75d7be9618df4f9f871667c2857360bf09f3a1109d8dfc9df76d685e19ba3c945610fe0dc4079ba69dfa3423f5c8d47aba59e7123ffecc6cf05e86d50c3a74cf899cd3d307cbc71f8f2a1284bd5bbacc9943b0a11318966a177a5178c4667a2da1285e64724021580aa9a6d43fa2bf74b9a03576ec04ce22cc0b56119e00d546b5097973200a27a6d1bcc8f45547dcf23fb7fcbd325da6a29963220bceb0e88a6e0edfe2906d5d859a1beaed267c2a3ca1f76217508b402af7dde7a80dd915e16477f6c5c500fe509a8802ef4639831679de8b6d7fd0d9d682d85f23468deb8a3898d7572802eb8268f3efb13233ccdad0a4e2903490630c67a06039f1a3ea534a2080a7e68edc1bdf7f4c8ef8a67ed2f51f17e50dc162d2af30ebfe08bf419951a3c5509e4c1a81955b8c7873aaba741090646db4ed0db1fcada5cdcd040e69fe3743bfb4696abb42b15dcc57ffae5882ace4837b743f6d2d54ec470b3e2907545b7f286376d893bdddeaf969d5d1d3a423c4654d46ac54a1fd48ed4fbffa809b8f5fc61e895d7444a0ef04da9c7c015edd0abe70999041e9697e3965e543dd615d3bcd178b8f13ca23ec68d679bd23c761f9ad88ee3a143b8b95bb9633a14da2032f56e1d93bb0e6fc3265199e0b18e99de76857cbea50403b13a50f139f819cedeca0866757b8b5a53e8decaf4cf3da642aca01a172149391df4ca6dd863abf8889e05b8ecc0138d71a48acbb9b28fe6bdb7677d1c06ad5f0f68ac81b6ce62e9d9e733a08973b657495edc06fc8624ab6e3503ec5d4aaaa9668092687cddae9578ff1a501c696a0abc9c4e9d504ffb89839790bdd5315fc6f73642a6baf23304042fc62cb14c783951672ba6cfe33fbf66c1cb66014cf00253c03b4a56a27e4a330886de8ed494fd6213eb6243ab4da82a19ec5eaf54ed3ca75fc3e4e6b069e31b0118a38b8206cfbee3b9520b2dc2112fe4fe6aef6a68e1c9bb0ce50a65e4b26c56beea94744bee160d45d56a85bedd7791c5baffb08bb3d0dd065efe4c022621007727e71bc0c083069edec05df3899aa1efd2c09f01bd8b00c3ed539ba01b947ba385f260c2f7e7f06c9d0192731219fda6b9bb8c3de1f802722c19dffa0f430a07776225af2d7df3dc34b32e5c5ba0a1d4413df1914c498db7aabf901fb220e0b5329483c9e99489b3cf2619e7fcce8c382080e2d3601e5bb68d4294f20383f2007e7f9339448fd6c0aa93ea442472650bdc49dc4f76f931f31fc054fd6c0460b68d0e1a92b8d9eafae6e1a7ab74810e5767a9ae9f7f4a4ee43c58d38ec1e4156082fa538ff3097ccfceca7edb282b42b85caa5e5745842f979be270638a03b61c5be41b384791504869f234b82108c12b29bfee94207cfb09458d643ea4d9e98a5b92440a8ab41e76ce2f0429e2c2180a003c05a268a42964e30c9673d7466c2a98d40d41408408685fcf8001cfb67d0a972746298c53915396b1ebc2b617880b3a74c9ebf11849ac62dda869c875d876c61c66296067def5063cdcfd3b15a90849bcc95be5252858ac79ed46625ed0fadc53ddcce7ee6ee79c32d202609ac43524e0a46055149917703fc27bafcafb7f2c751ce238bd2c68776906c41e0bb6059550002388c5c548efa5f5006ba1184d13d7b8c409496c4377b4904d24739b6e73c103b95c1b88ec447", 0x4de}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 751.919121ms ago: executing program 3 (id=7043): r0 = syz_open_dev$vbi(&(0x7f0000000200), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 694.007266ms ago: executing program 2 (id=7044): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast1=0x4d4, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x6, 0xfffffffc}, 0x70bd2a, 0x34ff, 0x2, 0x1, 0xf, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8, 0x16, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 611.808791ms ago: executing program 4 (id=7045): capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x375}) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/ipc\x00') setns(r0, 0x0) 552.471608ms ago: executing program 5 (id=7046): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000340)={'sit0\x00', 0x0}) 505.483322ms ago: executing program 2 (id=7047): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x198, 0x111, 0x4b4, 0x198, 0x700, 0x2d0, 0x278, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [], [], 'geneve1\x00', 'team_slave_0\x00', {}, {}, 0x88, 0x0, 0x0, 0x5}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x8, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x8, {0x9}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 472.036908ms ago: executing program 3 (id=7048): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0xa, @pix_mp={0x1ff, 0x0, 0x34324d59, 0x2, 0x2, [{0x9, 0x4}, {0x7, 0x2}, {0xe8c1, 0x9}, {0x7fffffff, 0x1}, {0x8, 0x3}, {0x6, 0x2}, {0x7fffffff, 0x74e5}, {0x28, 0x7}], 0x98, 0x1, 0x0, 0x1, 0x2}}) 443.525814ms ago: executing program 4 (id=7049): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x2, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xf, 0x8, 0x0, r0, &(0x7f0000000080)="9144d52177", 0x5, 0x1000000}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x7, r0, 0x0, 0x0, 0xbd}]) 412.029524ms ago: executing program 1 (id=7050): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x331, 0x2000, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) 276.948024ms ago: executing program 5 (id=7051): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000000206050000000000000000000700000005000400000000000900020073797a31000000001400078008000940000000060800134000000fff1500010006"], 0x44}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a300000000030000380"], 0xfc}}, 0x0) 267.501784ms ago: executing program 2 (id=7052): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffd5f, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x3f, 0x107, 0xfffffffe, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@generic="f9"]}]}, 0x24}, 0x1, 0x0, 0x0, 0x404c011}, 0xc000) 228.846326ms ago: executing program 3 (id=7053): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r0, 0x0, 0x0) 126.887451ms ago: executing program 1 (id=7054): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x23041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x2) 126.307262ms ago: executing program 4 (id=7055): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x6, 0x800, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x4, 0xef, 0x8d, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0xf, 0x2, '\x00', 0x5}, {0x0, 0x3, 0x5, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x5}, {0x9, 0xdb, 0x1, '\x00', 0xff}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0xff, 0x3, '\x00', 0x7}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x4}, {0x6e, 0x24, 0x1, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x9}, {0x13, 0x7}, {0x3, 0x9, 0x9, '\x00', 0x2}, {0x8, 0x6, 0x1, '\x00', 0x49}, {0xae, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x5, 0xe, 0x54, '\x00', 0x9}]}}) 22.49856ms ago: executing program 2 (id=7056): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001440)='/sys/power/pm_debug_messages', 0x1, 0x5) unshare(0x24060400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000039c000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) 0s ago: executing program 3 (id=7057): io_setup(0x5, &(0x7f0000000140)=0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x40441, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x4000, r1, 0x0, 0x0, 0x7, 0x0, 0x2}]) kernel console output (not intermixed with test programs): e="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a319cdd9 code=0x7ffc0000 [ 470.605615][ T29] audit: type=1326 audit(1777942703.851:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15181 comm="syz.0.4460" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a319cdd9 code=0x7ffc0000 [ 470.797476][ T29] audit: type=1326 audit(1777942703.921:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15181 comm="syz.0.4460" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f80a319cdd9 code=0x7ffc0000 [ 470.867442][ T29] audit: type=1326 audit(1777942704.111:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15181 comm="syz.0.4460" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a319cdd9 code=0x7ffc0000 [ 470.868607][ T29] audit: type=1326 audit(1777942704.121:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15181 comm="syz.0.4460" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a319cdd9 code=0x7ffc0000 [ 470.981280][T15194] [U] [ 470.981347][T15194] [U] [ 470.981381][T15194] [U] [ 470.981419][T15194] [U] [ 470.990280][T15194] [U] [ 470.990321][T15194] [U] [ 470.990356][T15194] [U] [ 470.990388][T15194] [U] [ 470.990544][T15194] [U] [ 470.990578][T15194] [U] [ 470.990614][T15194] [U] [ 470.990649][T15194] [U] [ 470.990771][T15194] [U] [ 470.990801][T15194] [U] [ 470.990830][T15194] [U] [ 470.990863][T15194] [U] [ 470.990993][T15194] [U] [ 470.991034][T15194] [U] [ 470.991066][T15194] [U] [ 470.991100][T15194] [U] [ 470.991228][T15194] [U] [ 470.991260][T15194] [U] [ 470.991287][T15194] [U] [ 470.991317][T15194] [U] [ 470.991456][T15194] [U] [ 470.991489][T15194] [U] [ 470.991519][T15194] [U] [ 470.991559][T15194] [U] [ 471.024997][T15194] [U] [ 471.025038][T15194] [U] [ 471.025068][T15194] [U] [ 471.025097][T15194] [U] [ 471.025239][T15194] [U] [ 471.025261][T15194] [U] [ 471.025284][T15194] [U] [ 471.025306][T15194] [U] [ 471.025397][T15194] [U] [ 471.025420][T15194] [U] [ 471.025445][T15194] [U] [ 471.025468][T15194] [U] [ 471.025592][T15194] [U] [ 471.025618][T15194] [U] [ 471.025642][T15194] [U] [ 471.025665][T15194] [U] [ 471.025758][T15194] [U] [ 471.025782][T15194] [U] [ 471.025806][T15194] [U] [ 471.025831][T15194] [U] [ 471.025942][T15194] [U] [ 471.025966][T15194] [U] [ 471.025989][T15194] [U] [ 471.026013][T15194] [U] [ 471.026103][T15194] [U] [ 471.026128][T15194] [U] [ 471.026152][T15194] [U] [ 471.026176][T15194] [U] [ 471.026285][T15194] [U] [ 471.026309][T15194] [U] [ 471.026332][T15194] [U] [ 471.026365][T15194] [U] [ 471.033764][T15194] [U] [ 471.033806][T15194] [U] [ 471.033838][T15194] [U] [ 471.033873][T15194] [U] [ 471.034021][T15194] [U] [ 471.034055][T15194] [U] [ 471.034088][T15194] [U] [ 471.034118][T15194] [U] [ 471.034236][T15194] [U] [ 471.034266][T15194] [U] [ 471.034294][T15194] [U] [ 471.034325][T15194] [U] [ 471.034456][T15194] [U] [ 471.034489][T15194] [U] [ 471.034530][T15194] [U] [ 471.034564][T15194] [U] [ 471.034692][T15194] [U] [ 471.034723][T15194] [U] [ 471.034753][T15194] [U] [ 471.034784][T15194] [U] [ 471.034910][T15194] [U] [ 471.034942][T15194] [U] [ 471.034972][T15194] [U] [ 471.035004][T15194] [U] [ 471.038976][T15194] [U] [ 471.039017][T15194] [U] [ 471.039046][T15194] [U] [ 471.039075][T15194] [U] [ 471.039256][T15194] [U] [ 471.039287][T15194] [U] [ 471.039317][T15194] [U] [ 471.039348][T15194] [U] [ 471.039467][T15194] [U] [ 471.039497][T15194] [U] [ 471.039534][T15194] [U] [ 471.039567][T15194] [U] [ 471.039703][T15194] [U] [ 471.039734][T15194] [U] [ 471.039763][T15194] [U] [ 471.039796][T15194] [U] [ 471.039912][T15194] [U] [ 471.039942][T15194] [U] [ 471.039972][T15194] [U] [ 471.040002][T15194] [U] [ 471.040130][T15194] [U] [ 471.040161][T15194] [U] [ 471.040188][T15194] [U] [ 471.040216][T15194] [U] [ 471.040334][T15194] [U] [ 471.040366][T15194] [U] [ 471.040400][T15194] [U] [ 471.040429][T15194] [U] [ 471.046597][T15194] [U] [ 471.046635][T15194] [U] [ 471.046668][T15194] [U] [ 471.046699][T15194] [U] [ 471.046815][T15194] [U] [ 471.046844][T15194] [U] [ 471.046873][T15194] [U] [ 471.046902][T15194] [U] [ 471.047041][T15194] [U] [ 471.047073][T15194] [U] [ 471.047108][T15194] [U] [ 471.047138][T15194] [U] [ 471.048242][T15194] [U] [ 471.048277][T15194] [U] [ 471.048310][T15194] [U] [ 471.130251][T15191] [U] [ 471.496420][T15208] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4473'. [ 471.496469][T15208] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4473'. [ 472.112189][T15233] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 473.148957][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 473.213658][T15264] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 473.384260][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 473.390766][T15277] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4507'. [ 473.458351][T15277] bond_slave_0: entered promiscuous mode [ 473.912927][T15293] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.951598][T15293] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 474.562418][T15322] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4529'. [ 475.088894][T15343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4540'. [ 475.134924][T15343] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4540'. [ 475.158124][T15343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4540'. [ 475.183643][T15343] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4540'. [ 475.525247][T15361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.102966][ T29] audit: type=1326 audit(1777942709.351:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15382 comm="syz.3.4560" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bfb59cdd9 code=0x7ffc0000 [ 476.176590][ T29] audit: type=1326 audit(1777942709.391:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15382 comm="syz.3.4560" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bfb59cdd9 code=0x7ffc0000 [ 476.258465][T15388] ip6gretap2: entered promiscuous mode [ 476.281044][T15388] ip6gretap2: entered allmulticast mode [ 476.284729][ T29] audit: type=1326 audit(1777942709.411:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15382 comm="syz.3.4560" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bfb59cdd9 code=0x7ffc0000 [ 476.374381][ T29] audit: type=1326 audit(1777942709.411:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15382 comm="syz.3.4560" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bfb59cdd9 code=0x7ffc0000 [ 476.459666][ T29] audit: type=1326 audit(1777942709.411:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15382 comm="syz.3.4560" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f4bfb59cdd9 code=0x7ffc0000 [ 476.551885][ T29] audit: type=1326 audit(1777942709.411:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15382 comm="syz.3.4560" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bfb59cdd9 code=0x7ffc0000 [ 476.630166][ T29] audit: type=1326 audit(1777942709.411:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15382 comm="syz.3.4560" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bfb59cdd9 code=0x7ffc0000 [ 476.727296][ T29] audit: type=1326 audit(1777942709.411:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15382 comm="syz.3.4560" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4bfb59cdd9 code=0x7ffc0000 [ 476.807371][ T29] audit: type=1326 audit(1777942709.411:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15382 comm="syz.3.4560" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4bfb59cdd9 code=0x7ffc0000 [ 476.837776][T10157] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 477.007537][T10157] usb 3-1: Using ep0 maxpacket: 32 [ 477.016218][T10157] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.034797][T10157] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 477.055532][T10157] usb 3-1: config 1 interface 1 has no altsetting 0 [ 477.092362][T10157] usb 3-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 477.114089][T10157] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.147378][T10157] usb 3-1: Product: syz [ 477.153893][T10157] usb 3-1: Manufacturer: syz [ 477.170151][T10157] usb 3-1: SerialNumber: syz [ 477.187017][T15417] netlink: 'syz.4.4577': attribute type 21 has an invalid length. [ 477.226226][T15417] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4577'. [ 477.292755][T15419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.407855][T10157] usb 3-1: unable to issue vendor read request (ret = -71) [ 477.452338][T10157] usb 3-1: unable to issue vendor read request (ret = -71) [ 477.490068][T10157] usb 3-1: unable to issue vendor read request (ret = -71) [ 477.526107][T10157] usb 3-1: unable to issue vendor read request (ret = -71) [ 477.557668][T10157] usb 3-1: unable to issue vendor read request (ret = -71) [ 477.597633][T10157] usb 3-1: unable to issue vendor read request (ret = -71) [ 477.627875][T10157] usb 3-1: unable to issue vendor read request (ret = -71) [ 477.665198][T10157] usb 3-1: unable to issue vendor read request (ret = -71) [ 477.708592][T15432] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 477.775957][T15435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4586'. [ 477.858089][T10157] usb 3-1: USB disconnect, device number 110 [ 478.039088][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 478.266582][T15451] netlink: 'syz.2.4592': attribute type 12 has an invalid length. [ 478.507596][T10176] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 478.678168][T10176] usb 4-1: Using ep0 maxpacket: 8 [ 478.741162][T10176] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 478.765131][T10176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.801850][T10176] usb 4-1: Product: syz [ 478.813873][T10176] usb 4-1: Manufacturer: syz [ 478.834160][T10176] usb 4-1: SerialNumber: syz [ 478.861533][T10176] usb 4-1: config 0 descriptor?? [ 478.911361][T10176] gspca_main: sq930x-2.14.0 probing 2770:930c [ 479.307469][T10176] gspca_sq930x: ucbus_write failed -71 [ 479.325990][T15482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4608'. [ 479.543172][T15487] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4611'. [ 479.554847][T10176] gspca_sq930x: Sensor ov9630 not yet treated [ 479.568716][T10176] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 479.604892][T10176] usb 4-1: USB disconnect, device number 114 [ 480.546317][ T29] audit: type=1326 audit(1777942713.791:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15520 comm="syz.2.4627" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9fc59cdd9 code=0x7ffc0000 [ 480.650932][T15525] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 480.718791][T15525] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 480.934531][T15535] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4634'. [ 481.037392][T15540] binder: 15538:15540 unknown command 1077961494 [ 481.059882][T15540] binder: 15538:15540 ioctl c0306201 200000000100 returned -22 [ 481.883097][T15575] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4653'. [ 482.909718][T15612] netlink: 'syz.2.4671': attribute type 8 has an invalid length. [ 482.935033][T15612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4671'. [ 483.028053][T15614] netlink: 'syz.3.4672': attribute type 10 has an invalid length. [ 483.061568][T15614] openvswitch: netlink: Flow key attr not present in new flow. [ 483.239934][T15624] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4676'. [ 483.264531][T15624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4676'. [ 483.982663][T15643] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4686'. [ 484.438767][T15657] kAFS: unparsable volume name [ 484.854648][T15673] netlink: 'syz.4.4700': attribute type 1 has an invalid length. [ 485.255539][T15689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4708'. [ 485.779518][T15708] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4717'. [ 485.822278][T15711] set match dimension is over the limit! [ 485.953241][T15714] ipip0: entered allmulticast mode [ 486.211978][T15725] xt_TPROXY: Can be used only with -p tcp or -p udp [ 486.245084][T15728] openvswitch: netlink: Key type 142 is out of range max 32 [ 486.670743][T15739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 487.313753][T15764] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4745'. [ 487.431323][T15767] xt_CT: You must specify a L4 protocol and not use inversions on it [ 488.404934][T15791] netlink: 'syz.3.4758': attribute type 23 has an invalid length. [ 488.888019][T15803] bond3: option lp_interval: invalid value (18446744073709551610) [ 488.922741][T15803] bond3: option lp_interval: allowed values 1 - 2147483647 [ 488.988356][T15803] bond3 (unregistering): Released all slaves [ 489.066072][T15812] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4768'. [ 489.793846][T15831] netlink: 'syz.1.4776': attribute type 7 has an invalid length. [ 489.836524][T15831] netlink: 'syz.1.4776': attribute type 8 has an invalid length. [ 490.315831][T15849] bridge4: entered promiscuous mode [ 490.620100][T15861] netlink: 'syz.1.4791': attribute type 309 has an invalid length. [ 491.207690][ T5725] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 491.264897][T15888] netlink: 'syz.3.4805': attribute type 1 has an invalid length. [ 491.275711][T15888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.420728][ T5725] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 491.447947][ T5725] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 491.479006][ T5725] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 491.520246][ T5725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.003371][ T5725] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 492.046777][ T5725] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input40 [ 492.067635][T15909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4816'. [ 492.088667][T15910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4815'. [ 492.113472][ T5725] input: failed to attach handler kbd to device input40, error: -5 [ 492.193741][ T5725] usb 5-1: USB disconnect, device number 114 [ 492.384542][T15914] 8021q: adding VLAN 0 to HW filter on device bond2 [ 492.712185][T15922] netlink: 'syz.3.4823': attribute type 275 has an invalid length. [ 493.821197][ T4945] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 493.836460][ T4945] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 493.847037][ T4945] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 493.858957][ T4945] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 493.867552][ T4945] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 493.943989][ T5635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 493.944417][ T5635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 493.944751][ T5635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 493.949915][ T5635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 493.951051][ T5635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 494.554887][T15974] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4847'. [ 494.627073][T15979] netlink: 'syz.4.4849': attribute type 1 has an invalid length. [ 495.514042][T16008] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4862'. [ 495.920177][T15964] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.959554][T15964] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.988435][ T5635] Bluetooth: hci5: command tx timeout [ 496.001020][T15964] bridge_slave_0: entered allmulticast mode [ 496.028883][T15964] bridge_slave_0: entered promiscuous mode [ 496.046478][T15964] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.057472][T15964] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.064927][T15964] bridge_slave_1: entered allmulticast mode [ 496.078967][T15964] bridge_slave_1: entered promiscuous mode [ 496.232633][T15964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.251293][T15964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.372066][T15964] team0: Port device team_slave_0 added [ 496.413168][T15964] team0: Port device team_slave_1 added [ 496.458463][ T5725] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 496.564241][T15964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.585122][T15964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.647613][T15964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.662592][ T5725] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 496.690981][ T5725] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 496.705814][T15964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.723727][T15964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.754376][ T5725] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 496.769787][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 496.793293][ T5725] usb 3-1: SerialNumber: syz [ 496.805453][T15964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.833346][ T5725] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 496.858475][ T5725] usb-storage 3-1:1.0: USB Mass Storage device detected [ 496.897827][ T5725] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 496.911480][ T5725] scsi host1: usb-storage 3-1:1.0 [ 497.093916][T16059] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 497.139156][T15964] hsr_slave_0: entered promiscuous mode [ 497.164019][T15964] hsr_slave_1: entered promiscuous mode [ 497.190548][T15964] debugfs: 'hsr0' already exists in 'hsr' [ 497.200358][T15964] Cannot create hsr debugfs directory [ 497.673220][T16072] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 498.067283][ T5635] Bluetooth: hci5: command tx timeout [ 498.179522][T15964] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 498.196352][T15964] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 498.211289][T10157] usb 3-1: USB disconnect, device number 111 [ 498.213700][T15964] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 498.321139][T15964] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 498.364233][T15964] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 498.445177][T15964] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 498.485746][T15964] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 498.541143][T15964] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 498.980482][T16113] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 499.103867][T16115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4909'. [ 499.141807][T15964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.148963][T16115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4909'. [ 499.169426][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 499.169447][ T29] audit: type=1326 audit(1777942732.411:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16116 comm="syz.4.4910" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 499.208893][T16115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4909'. [ 499.249051][T15964] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.300164][ T29] audit: type=1326 audit(1777942732.411:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16116 comm="syz.4.4910" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 499.335935][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.343182][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.390770][ T29] audit: type=1326 audit(1777942732.421:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16116 comm="syz.4.4910" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 499.455915][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.463166][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.509643][ T29] audit: type=1326 audit(1777942732.421:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16116 comm="syz.4.4910" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 499.622907][ T29] audit: type=1326 audit(1777942732.451:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16116 comm="syz.4.4910" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 499.743045][ T29] audit: type=1326 audit(1777942732.451:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16116 comm="syz.4.4910" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 499.885355][T15964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.893555][ T29] audit: type=1326 audit(1777942732.451:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16116 comm="syz.4.4910" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 500.005584][ T29] audit: type=1326 audit(1777942732.481:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16116 comm="syz.4.4910" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 500.126140][ T29] audit: type=1326 audit(1777942732.481:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16116 comm="syz.4.4910" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 500.157899][ T5635] Bluetooth: hci5: command tx timeout [ 500.169347][T15964] veth0_vlan: entered promiscuous mode [ 500.253725][T15964] veth1_vlan: entered promiscuous mode [ 500.293951][T16145] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 500.343393][T16145] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 500.401013][T15964] veth0_macvtap: entered promiscuous mode [ 500.432047][T15964] veth1_macvtap: entered promiscuous mode [ 500.468335][T10177] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 500.558929][T15964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.613721][T15964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.629402][T10177] usb 5-1: Using ep0 maxpacket: 16 [ 500.641911][T10177] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.662930][T10177] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 500.688664][ T62] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.711334][T10177] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 500.733770][ T62] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.757846][T10177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.776036][ T62] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.792299][T10177] usb 5-1: Product: syz [ 500.804655][T10177] usb 5-1: Manufacturer: syz [ 500.813150][ T62] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.828372][T10177] usb 5-1: SerialNumber: syz [ 500.871443][T10177] usb 5-1: 0:2 : does not exist [ 501.215645][ T1029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.253477][ T1029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.285283][T10177] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 501.485570][T10177] usb 5-1: USB disconnect, device number 115 [ 501.511647][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.560612][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.645495][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 502.237949][ T5635] Bluetooth: hci5: command tx timeout [ 502.582993][T16210] xt_l2tp: v2 doesn't support IP mode [ 503.137894][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4965'. [ 503.220657][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4965'. [ 503.593370][T16247] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4973'. [ 504.149638][T16268] netlink: 'syz.2.4985': attribute type 6 has an invalid length. [ 504.202036][T16268] IPv6: NLM_F_CREATE should be specified when creating new route [ 504.577384][T10157] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 504.759351][T10157] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 504.791899][T10157] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.829499][T10157] usb 2-1: config 0 descriptor?? [ 504.837540][T10161] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 504.864723][T10157] cp210x 2-1:0.0: cp210x converter detected [ 504.885207][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 504.896893][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.009919][T10161] usb 4-1: Using ep0 maxpacket: 16 [ 505.033692][T10161] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 505.059242][T10161] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 505.097275][T10161] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 55, changing to 9 [ 505.132390][T10161] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 8496, setting to 1024 [ 505.167203][T10161] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 505.220801][T10161] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 505.252091][T10161] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.290094][T10157] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 505.333608][T10161] usb 4-1: config 0 descriptor?? [ 505.346283][T10157] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 505.433949][T10161] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input41 [ 505.459240][T10157] usb 2-1: cp210x converter now attached to ttyUSB0 [ 505.540979][T10157] usb 2-1: USB disconnect, device number 114 [ 505.581053][T10157] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 505.622430][T10157] cp210x 2-1:0.0: device disconnected [ 505.753958][T10177] usb 4-1: USB disconnect, device number 115 [ 505.764826][ T4979] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 506.543641][T16335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5014'. [ 507.312833][ T29] audit: type=1326 audit(1777942740.561:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16362 comm="syz.1.5027" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40fb9cdd9 code=0x7ffc0000 [ 507.392799][ T29] audit: type=1326 audit(1777942740.561:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16362 comm="syz.1.5027" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40fb9cdd9 code=0x7ffc0000 [ 507.488520][ T29] audit: type=1326 audit(1777942740.601:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16362 comm="syz.1.5027" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40fb9cdd9 code=0x7ffc0000 [ 507.593798][ T29] audit: type=1326 audit(1777942740.601:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16362 comm="syz.1.5027" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40fb9cdd9 code=0x7ffc0000 [ 507.708041][ T29] audit: type=1326 audit(1777942740.601:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16362 comm="syz.1.5027" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7ff40fb9cdd9 code=0x7ffc0000 [ 507.844414][ T29] audit: type=1326 audit(1777942740.601:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16362 comm="syz.1.5027" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40fb9cdd9 code=0x7ffc0000 [ 507.952694][ T29] audit: type=1326 audit(1777942740.611:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16362 comm="syz.1.5027" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40fb9cdd9 code=0x7ffc0000 [ 508.072382][ T29] audit: type=1326 audit(1777942740.611:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16362 comm="syz.1.5027" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff40fb9cdd9 code=0x7ffc0000 [ 508.111343][T16393] openvswitch: netlink: Message has 8 unknown bytes. [ 508.181647][ T29] audit: type=1326 audit(1777942740.611:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16362 comm="syz.1.5027" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff40fb9cdd9 code=0x7ffc0000 [ 508.510206][T16411] x_tables: duplicate entry at hook 3 [ 509.505920][T16449] bond3: Unable to set up delay as MII monitoring is disabled [ 509.610251][T16449] bond3 (unregistering): Released all slaves [ 509.824073][T16455] netlink: 'syz.4.5072': attribute type 11 has an invalid length. [ 510.344607][T16479] x_tables: duplicate underflow at hook 4 [ 510.427531][T10158] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 510.611192][T10158] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 510.639970][T10158] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.672046][T10158] usb 2-1: Product: syz [ 510.686131][T10158] usb 2-1: Manufacturer: syz [ 510.704369][T10158] usb 2-1: SerialNumber: syz [ 510.776459][T10158] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 511.018063][T10157] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 511.243846][T16510] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 511.253758][T16510] IPv6: NLM_F_CREATE should be set when creating new route [ 511.261179][T16510] IPv6: NLM_F_CREATE should be set when creating new route [ 511.285058][T16513] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5100'. [ 511.549094][T10158] usb 2-1: USB disconnect, device number 115 [ 511.706466][T16524] netlink: 520 bytes leftover after parsing attributes in process `syz.2.5106'. [ 511.798311][T16524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5106'. [ 511.811348][T16529] x_tables: unsorted underflow at hook 4 [ 512.057321][T16536] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.151116][T10157] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 512.198584][T16540] program syz.4.5114 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 512.220689][T10157] ath9k_htc: Failed to initialize the device [ 512.262550][T10158] usb 2-1: ath9k_htc: USB layer deinitialized [ 512.517291][T10176] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 512.702868][T10176] usb 3-1: unable to get BOS descriptor or descriptor too short [ 512.755542][T10176] usb 3-1: config 3 has an invalid interface number: 19 but max is 0 [ 512.791631][T10176] usb 3-1: config 3 has an invalid interface number: 4 but max is 0 [ 512.827355][T10176] usb 3-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 512.852849][T10176] usb 3-1: config 3 has no interface number 0 [ 512.874716][T10176] usb 3-1: config 3 has no interface number 1 [ 512.904371][T10176] usb 3-1: config 3 interface 19 altsetting 9 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 512.971250][T10176] usb 3-1: too many endpoints for config 3 interface 4 altsetting 131: 175, using maximum allowed: 30 [ 513.008933][T10176] usb 3-1: config 3 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32 [ 513.040778][T10176] usb 3-1: config 3 interface 4 altsetting 131 endpoint 0xC has invalid wMaxPacketSize 0 [ 513.075851][T10176] usb 3-1: config 3 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 0 [ 513.123699][T10176] usb 3-1: config 3 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175 [ 513.198616][T10176] usb 3-1: config 3 interface 19 has no altsetting 0 [ 513.232313][T10176] usb 3-1: config 3 interface 4 has no altsetting 0 [ 513.256902][T10176] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=53.f5 [ 513.276167][T10176] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.297828][T10176] usb 3-1: Product: syz [ 513.320336][T10176] usb 3-1: Manufacturer: syz [ 513.332956][T10176] usb 3-1: SerialNumber: syz [ 513.614557][T10176] pl2303 3-1:3.19: required endpoints missing [ 513.698459][T10176] pl2303 3-1:3.4: required interrupt-in endpoint missing [ 513.759982][T10176] usb 3-1: USB disconnect, device number 112 [ 514.142371][T16608] netlink: 'syz.1.5148': attribute type 61 has an invalid length. [ 514.538085][T10176] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 514.738504][T10176] usb 6-1: Using ep0 maxpacket: 32 [ 514.754189][T10176] usb 6-1: unable to get BOS descriptor or descriptor too short [ 514.767733][T10176] usb 6-1: config 7 has an invalid interface number: 187 but max is 0 [ 514.792350][T10176] usb 6-1: config 7 has no interface number 0 [ 514.801804][T10176] usb 6-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 514.821350][T10176] usb 6-1: config 7 interface 187 has no altsetting 0 [ 514.852708][T10176] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 514.892976][T10176] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.932351][T10176] usb 6-1: Product: syz [ 514.961096][T10176] usb 6-1: Manufacturer: syz [ 514.976067][T10176] usb 6-1: SerialNumber: syz [ 515.269410][T10176] usb 6-1: Unknown endpoint type found, address 0x07 [ 515.303414][T10176] usb 6-1: Unknown endpoint type found, address 0x03 [ 515.332968][T10176] usb 6-1: Not enough endpoints found in device, aborting! [ 515.489411][T10176] usb 6-1: USB disconnect, device number 2 [ 516.727067][T16698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5192'. [ 517.348056][T16719] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 517.395796][T16719] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 517.433624][T16719] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 518.030545][T16743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5215'. [ 518.467892][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.509294][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.518103][T16759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.556187][T16763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.224594][T16790] xfrm0: entered allmulticast mode [ 519.245918][T16790] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 519.309233][T16794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5240'. [ 519.460076][T16794] : entered promiscuous mode [ 520.077054][T16812] "syz.5.5250" (16812) uses obsolete ecb(arc4) skcipher [ 521.386005][T16859] : entered promiscuous mode [ 522.231279][T16898] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5290'. [ 522.301339][T16903] Cannot find add_set index 0 as target [ 522.797921][T10161] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 522.894063][ T29] audit: type=1326 audit(1777942756.141:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16927 comm="syz.1.5305" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40fb9cdd9 code=0x7ffc0000 [ 522.972287][ T29] audit: type=1326 audit(1777942756.141:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16927 comm="syz.1.5305" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40fb9cdd9 code=0x7ffc0000 [ 523.017515][T10161] usb 6-1: unable to get BOS descriptor or descriptor too short [ 523.018560][ T29] audit: type=1326 audit(1777942756.181:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16927 comm="syz.1.5305" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7ff40fb9cdd9 code=0x7ffc0000 [ 523.067249][T10161] usb 6-1: not running at top speed; connect to a high speed hub [ 523.106370][T10161] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 523.125809][T10161] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.147396][T10161] usb 6-1: Product: syz [ 523.156395][ T29] audit: type=1326 audit(1777942756.181:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16927 comm="syz.1.5305" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40fb9cdd9 code=0x7ffc0000 [ 523.157447][T10161] usb 6-1: Manufacturer: syz [ 523.267430][T10161] usb 6-1: SerialNumber: syz [ 523.280880][ T29] audit: type=1326 audit(1777942756.181:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16927 comm="syz.1.5305" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40fb9cdd9 code=0x7ffc0000 [ 523.534608][T10161] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 523.803560][T10161] usb 6-1: USB disconnect, device number 3 [ 523.811296][T16952] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 524.013762][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 524.412283][T16973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.642456][T16980] netlink: 'syz.3.5329': attribute type 10 has an invalid length. [ 524.665424][T16982] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5331'. [ 524.761828][T16980] team0: Port device veth0_to_hsr added [ 524.795722][T16982] 0: renamed from hsr0 (while UP) [ 524.855223][T16982] 0: entered allmulticast mode [ 524.880232][T16982] hsr_slave_0: entered allmulticast mode [ 524.916806][T16982] hsr_slave_1: entered allmulticast mode [ 524.943441][T16982] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 525.336062][T17007] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5341'. [ 525.370660][T17007] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5341'. [ 525.404476][T17007] netlink: 'syz.3.5341': attribute type 5 has an invalid length. [ 525.441286][T17007] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5341'. [ 526.188872][T17041] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5361'. [ 526.238063][T17044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.263049][T17044] batadv_slave_0: entered promiscuous mode [ 526.285608][T17044] batadv_slave_0: entered allmulticast mode [ 526.315840][T17044] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 527.077480][T10161] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 527.273947][T10161] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 527.311868][T17085] mmap: syz.1.5382 (17085): VmData 37457920 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 527.337673][T10161] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 527.369640][T10161] usb 3-1: Product: syz [ 527.387732][T10161] usb 3-1: SerialNumber: syz [ 527.409053][T10161] usb 3-1: config 0 descriptor?? [ 527.671509][T10161] hso 3-1:0.0: Can't find BULK endpoints [ 527.907280][T10161] usb 3-1: USB disconnect, device number 113 [ 528.217460][T10163] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 528.387518][T10163] usb 2-1: Using ep0 maxpacket: 8 [ 528.408411][T10163] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 528.447278][T10163] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 528.479967][T10163] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 528.521842][T10163] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 528.567447][T10163] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 528.607329][T10163] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 528.642145][T10163] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.705632][T10163] usb 2-1: config 0 descriptor?? [ 528.722470][T17109] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 529.086761][T17133] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 529.087204][ C0] Bluetooth: hci6: Unexpected continuation: 1 bytes [ 529.097238][T17133] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 529.108045][T17133] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 529.116641][T17133] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 529.124203][T17133] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 529.131458][T17133] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 529.139177][T17133] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 529.146099][T17133] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 529.153430][T17133] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 529.160662][T17133] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 529.168299][T17133] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 529.175298][T17133] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 529.182580][T17133] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 529.190852][T17133] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 529.202425][T17133] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 529.209753][T17133] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 529.216706][T17133] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 529.225596][T17133] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 529.232604][T17133] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 529.239549][T17133] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 529.246402][T17133] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 529.253429][T17133] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 529.260383][T17133] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 529.268519][T17133] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 529.275401][T17133] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 529.282498][T17133] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 529.290196][T17133] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 529.297264][T17133] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 529.304117][T17133] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 529.365617][T10177] usb 2-1: USB disconnect, device number 116 [ 529.372327][ T5635] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 529.719446][T17150] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 530.007419][T17160] futex_wake_op: syz.5.5419 tries to shift op by 32; fix this program [ 530.697206][T10163] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 530.717412][T17188] dlm: plock device version mismatch: kernel (1.2.0), user (619199281.1581691892.1258375512) [ 530.889726][T10163] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 530.945520][T10163] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 530.964489][T10163] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 530.997323][T10163] usb 2-1: SerialNumber: syz [ 531.070345][ T29] audit: type=1326 audit(1777942764.321:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17199 comm="syz.4.5439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 531.164073][ T29] audit: type=1326 audit(1777942764.321:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17199 comm="syz.4.5439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 531.204380][T10177] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 531.288807][ T29] audit: type=1326 audit(1777942764.361:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17199 comm="syz.4.5439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 531.348385][ T29] audit: type=1326 audit(1777942764.361:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17199 comm="syz.4.5439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 531.414731][T10177] usb 4-1: unable to get BOS descriptor or descriptor too short [ 531.447179][T10177] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 531.460700][T10177] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 531.471409][T10163] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 531.503406][T10177] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 531.519515][T10163] usb 2-1: USB disconnect, device number 117 [ 531.567829][T10177] usb 4-1: string descriptor 0 read error: -22 [ 531.598371][T10177] usb 4-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 531.640467][T10177] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.701802][T10177] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 531.878645][T10177] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 531.946752][T10177] snd-usb-hiface 4-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 532.236692][T10177] usb 4-1: USB disconnect, device number 116 [ 532.725535][T17242] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5460'. [ 532.761805][T17242] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5460'. [ 533.421387][T17268] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5473'. [ 533.873864][T17279] vxcan3: entered promiscuous mode [ 533.909647][T17279] vxcan3: entered allmulticast mode [ 534.318420][T17298] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check. [ 534.375947][T17299] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 534.377765][T17301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5489'. [ 534.413741][T17299] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 534.891007][T17319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 535.501395][T17346] openvswitch: netlink: Key type 341 is out of range max 32 [ 535.608599][T17341] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 535.672902][T17341] bond2 (unregistering): Released all slaves [ 536.109690][T17357] 8021q: adding VLAN 0 to HW filter on device bond5 [ 536.279535][T17365] netlink: 'syz.3.5519': attribute type 3 has an invalid length. [ 536.344358][T17365] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5519'. [ 536.737491][T10163] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 536.927413][T10163] usb 5-1: Using ep0 maxpacket: 32 [ 536.955006][T10163] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.000045][T10163] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.037413][T10163] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 537.042149][T17391] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.050207][T10163] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 537.113851][T10163] usb 5-1: Product: syz [ 537.131068][T10163] usb 5-1: Manufacturer: syz [ 537.175960][T10163] hub 5-1:4.0: USB hub found [ 537.325895][T17404] macvtap0: entered allmulticast mode [ 537.340090][T17404] veth0_macvtap: entered allmulticast mode [ 537.378689][T10163] hub 5-1:4.0: 2 ports detected [ 537.591725][T10163] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 537.614211][T10163] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 537.698550][T10163] usb 5-1: USB disconnect, device number 116 [ 537.846344][T17419] openvswitch: netlink: Missing key (keys=40, expected=80) [ 538.541752][T17447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5558'. [ 538.613253][T17447] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 538.660966][ T29] audit: type=1326 audit(1777942771.911:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.4.5561" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 538.770119][ T29] audit: type=1326 audit(1777942771.951:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.4.5561" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 538.879592][ T29] audit: type=1326 audit(1777942771.951:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.4.5561" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 538.945891][T17460] IPVS: length: 255 != 24 [ 539.004857][ T29] audit: type=1326 audit(1777942771.951:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.4.5561" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 539.084292][ T29] audit: type=1326 audit(1777942771.951:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.4.5561" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 539.235903][ T29] audit: type=1326 audit(1777942771.951:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.4.5561" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 539.415102][ T29] audit: type=1326 audit(1777942771.951:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.4.5561" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 539.570434][ T29] audit: type=1326 audit(1777942771.951:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.4.5561" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 539.710622][ T29] audit: type=1326 audit(1777942772.641:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17471 comm="syz.1.5570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40fb9cdd9 code=0x7ffc0000 [ 539.827305][ T29] audit: type=1326 audit(1777942772.641:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17471 comm="syz.1.5570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40fb9cdd9 code=0x7ffc0000 [ 539.928033][T10163] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 540.101730][T10163] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 540.158326][T10163] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.208239][T10163] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 540.245567][T10163] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.299274][T10163] hub 4-1:4.0: USB hub found [ 540.393890][T10177] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 540.506837][T17508] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5588'. [ 540.509881][T10163] hub 4-1:4.0: 5 ports detected [ 540.544944][T10163] usb 4-1: selecting invalid altsetting 1 [ 540.561320][T10177] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 540.564296][T10163] hub 4-1:4.0: Using single TT (err -22) [ 540.589267][T10177] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.603773][T10163] hub 4-1:4.0: insufficient power available to use all downstream ports [ 540.622337][T10177] usb 2-1: Product: syz [ 540.634507][T10177] usb 2-1: Manufacturer: syz [ 540.656032][T10177] usb 2-1: SerialNumber: syz [ 540.693759][T10177] usb 2-1: config 0 descriptor?? [ 540.732657][T10163] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 540.735837][T10177] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 540.770328][T10163] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 540.834161][T10163] usb 4-1: USB disconnect, device number 117 [ 541.081124][T17524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5596'. [ 541.145709][T10177] gspca_sunplus: reg_w_riv err -71 [ 541.170056][T10177] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 541.209695][T10177] usb 2-1: USB disconnect, device number 118 [ 541.716737][T17544] xt_hashlimit: invalid interval [ 542.312798][T10174] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 542.518667][T10174] usb 3-1: unable to get BOS descriptor or descriptor too short [ 542.560675][T10174] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 542.601975][T10174] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 542.631563][T10174] usb 3-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 542.662522][T10174] usb 3-1: config 1 interface 0 has no altsetting 0 [ 542.671443][T10174] usb 3-1: config 1 interface 0 has no altsetting 1 [ 542.710163][T10174] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 542.737258][T10174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.770110][T10174] usb 3-1: Product: syz [ 542.783407][T10174] usb 3-1: Manufacturer: syz [ 542.801759][T10174] usb 3-1: SerialNumber: syz [ 542.853755][T17589] netlink: 88 bytes leftover after parsing attributes in process `syz.5.5628'. [ 542.878185][T10177] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 543.048132][T10174] smsusb:smsusb_probe: board id=8, interface number 0 [ 543.069026][T10177] usb 4-1: Using ep0 maxpacket: 8 [ 543.084798][T10174] usb 3-1: selecting invalid altsetting 0 [ 543.102447][T10177] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 543.125227][T10174] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 543.137045][T10177] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 543.152445][T10174] smsusb 3-1:1.0: probe with driver smsusb failed with error -22 [ 543.190940][T10177] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 543.202495][T10174] usb 3-1: USB disconnect, device number 114 [ 543.221529][T10177] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.254004][T10177] usb 4-1: Product: syz [ 543.274393][T10177] usb 4-1: Manufacturer: syz [ 543.293623][T17599] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5633'. [ 543.305178][T10177] usb 4-1: SerialNumber: syz [ 543.359766][T10177] usb 4-1: config 0 descriptor?? [ 543.769966][T17613] netlink: 'syz.1.5640': attribute type 1 has an invalid length. [ 543.815082][T10176] usb 4-1: USB disconnect, device number 118 [ 543.997651][T10177] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 544.185144][T10177] usb 5-1: Using ep0 maxpacket: 32 [ 544.203784][T10177] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 544.252245][T10177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7 [ 544.276758][T10177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024 [ 544.319987][T10177] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 544.351527][T10177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.380800][T10177] usb 5-1: Product: syz [ 544.397280][T10177] usb 5-1: Manufacturer: syz [ 544.412899][T10177] usb 5-1: SerialNumber: syz [ 544.454494][T10177] usb 5-1: config 0 descriptor?? [ 544.474413][T10177] usb 5-1: no audio or video endpoints found [ 544.531487][T17636] x_tables: duplicate underflow at hook 3 [ 544.649396][T17640] xt_CONNSECMARK: invalid mode: 66 [ 544.773378][T10177] usb 5-1: USB disconnect, device number 117 [ 545.078347][T17650] openvswitch: netlink: VXLAN extension message has 16 unknown bytes. [ 545.099447][T17652] syz.5.5658 (17652): drop_caches: 0 [ 545.328183][T17657] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.5660'. [ 546.534548][T17703] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5682'. [ 546.769410][T10177] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 546.804398][T17714] bond0: (slave bond_slave_1): Releasing backup interface [ 546.970629][T10177] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 547.016130][T17720] netlink: 'syz.2.5692': attribute type 2 has an invalid length. [ 547.025226][T10177] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 547.051496][T10177] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 547.084976][T10177] usb 4-1: New USB device found, idVendor=04b8, idProduct=02f9, bcdDevice= 0.40 [ 547.105726][T10177] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.132465][T10177] usb 4-1: Product: syz [ 547.151777][T10177] usb 4-1: Manufacturer: syz [ 547.176318][T10177] usb 4-1: SerialNumber: syz [ 547.241818][T17729] SET target dimension over the limit! [ 547.489829][T10177] usb 4-1: USB disconnect, device number 119 [ 547.660171][T17735] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5698'. [ 547.708660][T17735] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5698'. [ 547.874815][T17743] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000) [ 548.080915][T17749] netlink: 'syz.4.5704': attribute type 21 has an invalid length. [ 548.310596][T17759] m1Ie5n: entered promiscuous mode [ 549.261701][T17797] ALSA: mixer_oss: invalid OSS volume 'u' [ 550.041062][T17827] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 550.307935][T10177] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 550.492624][T10177] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 550.528285][T10177] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 550.566562][T10177] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 550.613861][T10177] usb 5-1: config 220 has no interface number 2 [ 550.638993][T10177] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 550.704620][T10177] usb 5-1: config 220 interface 0 has no altsetting 0 [ 550.741178][T10177] usb 5-1: config 220 interface 76 has no altsetting 0 [ 550.774799][T10177] usb 5-1: config 220 interface 1 has no altsetting 0 [ 550.809575][T10177] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 550.832687][T10177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.863321][T10177] usb 5-1: Product: syz [ 550.892187][T10177] usb 5-1: Manufacturer: syz [ 550.925543][T10177] usb 5-1: SerialNumber: syz [ 551.021478][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 551.021499][ T29] audit: type=1326 audit(1777942784.271:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17863 comm="syz.2.5761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9fc59cdd9 code=0x7ffc0000 [ 551.111702][ T29] audit: type=1326 audit(1777942784.271:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17863 comm="syz.2.5761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9fc59cdd9 code=0x7ffc0000 [ 551.212062][T10177] usb 5-1: selecting invalid altsetting 0 [ 551.221538][T17871] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5763'. [ 551.233167][ T29] audit: type=1326 audit(1777942784.271:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17863 comm="syz.2.5761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fe9fc59cdd9 code=0x7ffc0000 [ 551.264117][T10177] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 551.302401][T10177] uvcvideo 5-1:220.0: No valid video chain found. [ 551.344441][ T29] audit: type=1326 audit(1777942784.271:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17863 comm="syz.2.5761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9fc59cdd9 code=0x7ffc0000 [ 551.407707][T10177] usb 5-1: selecting invalid altsetting 0 [ 551.433175][T10177] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 551.464211][T10177] usb 5-1: USB disconnect, device number 118 [ 551.553889][T17880] xt_TPROXY: Can be used only with -p tcp or -p udp [ 551.932237][T17893] netlink: 'syz.3.5775': attribute type 10 has an invalid length. [ 552.025582][T17899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5778'. [ 552.505131][T17919] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 553.845008][T17974] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5814'. [ 554.063694][T17983] netlink: 'syz.1.5819': attribute type 32 has an invalid length. [ 554.393158][T17993] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5824'. [ 554.703721][T17977] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 554.728332][T17977] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 554.995517][T18016] netlink: 'syz.4.5835': attribute type 2 has an invalid length. [ 555.282841][T18024] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5839'. [ 555.292374][T18025] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5840'. [ 555.319936][T18025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5840'. [ 555.362045][T18027] netlink: 'syz.5.5841': attribute type 7 has an invalid length. [ 555.371552][T18025] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5840'. [ 556.092699][T18056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5854'. [ 556.524192][T18074] binder: 18072:18074 ioctl c0046209 0 returned -22 [ 556.555515][T18077] trusted_key: encrypted_key: master key parameter is missing [ 556.754584][T18085] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5870'. [ 556.775599][T18085] netlink: 'syz.5.5870': attribute type 1 has an invalid length. [ 556.927232][T10163] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 557.107740][T10163] usb 2-1: Using ep0 maxpacket: 8 [ 557.122062][T10163] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 557.157526][T10163] usb 2-1: config 0 has no interface number 0 [ 557.177379][T10163] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 557.216122][T10163] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 557.249625][T10163] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 557.287438][T10163] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 557.327311][T10163] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 557.377039][T18105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5880'. [ 557.379293][T10163] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 557.451549][T10163] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.499480][T10163] usb 2-1: config 0 descriptor?? [ 557.554055][T10163] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 557.852964][T18122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5889'. [ 557.856030][T18080] ldusb 2-1:0.55: Couldn't submit interrupt_in_urb -90 [ 557.999499][T10174] usb 2-1: USB disconnect, device number 119 [ 558.068003][T10174] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 559.226010][T18182] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5915'. [ 559.265402][T18182] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5915'. [ 559.525861][T18194] xt_TCPMSS: Only works on TCP SYN packets [ 559.991754][T18213] openvswitch: netlink: nsh attr 0 has unexpected len 3 expected 0 [ 560.001000][T18214] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5931'. [ 560.438141][T18231] netlink: 4975 bytes leftover after parsing attributes in process `syz.1.5940'. [ 560.479053][T18231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.500528][T18235] IPv6: Can't replace route, no match found [ 560.655890][T18239] binder: binder_mmap: 18236 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 560.941317][T18252] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 560.987467][T18252] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 561.022571][T18255] netlink: 'syz.4.5952': attribute type 2 has an invalid length. [ 561.046272][T18255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 561.900105][T18283] xt_CT: No such helper "syz1" [ 562.140216][T18300] netlink: 'syz.3.5971': attribute type 21 has an invalid length. [ 562.192984][T18300] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5971'. [ 562.537562][T10177] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 562.762160][T10177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.828727][T10177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.881804][T10177] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 562.932210][T10177] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 562.960940][T10177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.985665][T10177] usb 3-1: config 0 descriptor?? [ 563.009067][T10177] hub 3-1:0.0: USB hub found [ 563.092895][ T29] audit: type=1326 audit(1777942796.341:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18333 comm="syz.4.5986" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f585899cdd9 code=0x0 [ 563.215600][T10177] hub 3-1:0.0: 9 ports detected [ 563.233764][T10177] hub 3-1:0.0: insufficient power available to use all downstream ports [ 563.341751][T18343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5990'. [ 563.390172][T18343] gre0: Master is either lo or non-ether device [ 563.423832][T10177] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 563.450954][T10177] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 563.522960][T10177] usb 3-1: USB disconnect, device number 115 [ 563.653858][T18351] usb usb8: usbfs: process 18351 (syz.3.5993) did not claim interface 0 before use [ 564.312922][T18367] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 564.320258][T18367] IPv6: NLM_F_CREATE should be set when creating new route [ 564.327589][T18367] IPv6: NLM_F_CREATE should be set when creating new route [ 564.334875][T18367] IPv6: NLM_F_CREATE should be set when creating new route [ 564.859466][T18387] netlink: 'syz.3.6011': attribute type 46 has an invalid length. [ 565.497584][T10177] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 565.657387][T10163] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 565.668312][T10177] usb 5-1: Using ep0 maxpacket: 32 [ 565.689230][T10177] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 565.710215][T18421] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 565.717905][T10177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.755034][T10177] usb 5-1: Product: syz [ 565.771252][T10177] usb 5-1: Manufacturer: syz [ 565.785640][T10177] usb 5-1: SerialNumber: syz [ 565.818294][T10177] usb 5-1: config 0 descriptor?? [ 565.854050][T10163] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 565.879499][T10163] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.925871][T10163] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 565.967308][T10163] usb 2-1: config 1 has no interface number 1 [ 565.982333][T10163] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 566.030046][T10163] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 566.038382][T18430] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6032'. [ 566.047201][T10163] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.089507][T10163] usb 2-1: Product: syz [ 566.107263][T10163] usb 2-1: Manufacturer: syz [ 566.129427][T10163] usb 2-1: SerialNumber: syz [ 566.288079][T10177] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 566.312244][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.324746][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.340734][T10177] peak_usb 5-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 566.419138][T10163] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 566.448210][T10177] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 566.449198][T10163] usb 2-1: MIDIStreaming interface descriptor not found [ 566.495887][T10177] usb 5-1: USB disconnect, device number 119 [ 566.720573][T10163] usb 2-1: USB disconnect, device number 120 [ 566.842617][ T5945] udevd[5945]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 567.500369][T18463] i2c i2c-0: Invalid block read size 255 [ 567.748036][T18471] xt_TCPMSS: Only works on TCP SYN packets [ 567.949797][T18477] netlink: 'syz.1.6053': attribute type 3 has an invalid length. [ 569.051356][T18525] binder: 18524:18525 ioctl 400c620e 200000000000 returned -22 [ 569.879377][T18563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6095'. [ 569.884893][T18555] netlink: set zone limit has 4 unknown bytes [ 569.896480][ T29] audit: type=1326 audit(1777942803.121:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.6094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40fb9cdd9 code=0x7ffc0000 [ 570.000786][ T29] audit: type=1326 audit(1777942803.181:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.6094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7ff40fb9cdd9 code=0x7ffc0000 [ 570.081530][T18566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6096'. [ 570.135717][ T29] audit: type=1326 audit(1777942803.181:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.6094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40fb9cdd9 code=0x7ffc0000 [ 570.236189][ T29] audit: type=1326 audit(1777942803.181:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.6094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40fb9cdd9 code=0x7ffc0000 [ 571.112648][ T29] audit: type=1326 audit(1777942804.361:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18604 comm="syz.3.6114" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bfb59cdd9 code=0x7ffc0000 [ 571.195291][ T29] audit: type=1326 audit(1777942804.361:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18604 comm="syz.3.6114" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bfb59cdd9 code=0x7ffc0000 [ 571.237646][T18609] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6116'. [ 571.327395][ T29] audit: type=1326 audit(1777942804.371:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18604 comm="syz.3.6114" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f4bfb59cdd9 code=0x7ffc0000 [ 571.528246][ T29] audit: type=1326 audit(1777942804.371:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18604 comm="syz.3.6114" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bfb59cdd9 code=0x7ffc0000 [ 572.088071][T18633] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6127'. [ 572.147612][T18633] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6127'. [ 572.196102][T18633] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6127'. [ 573.807762][T18685] netlink: 'syz.5.6152': attribute type 10 has an invalid length. [ 573.878630][T18685] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 574.101527][T18694] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6157'. [ 574.561639][T18710] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6165'. [ 575.297437][ T29] audit: type=1326 audit(1777942808.551:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18733 comm="syz.4.6177" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 575.409052][ T29] audit: type=1326 audit(1777942808.551:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18733 comm="syz.4.6177" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 575.506185][ T29] audit: type=1326 audit(1777942808.591:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18733 comm="syz.4.6177" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 575.611191][ T29] audit: type=1326 audit(1777942808.591:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18733 comm="syz.4.6177" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 575.696855][ T29] audit: type=1326 audit(1777942808.591:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18733 comm="syz.4.6177" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 575.797143][T10163] usb 2-1: new low-speed USB device number 121 using dummy_hcd [ 575.990698][T10163] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 576.030820][T10163] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 576.067799][T10163] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 576.100955][T10163] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 576.141035][T10163] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 576.177180][T10163] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 576.213592][T10163] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 576.274836][T10163] usb 2-1: string descriptor 0 read error: -22 [ 576.276421][T18768] netlink: 'syz.3.6194': attribute type 46 has an invalid length. [ 576.288179][T10163] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 576.323483][T18768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6194'. [ 576.337169][T10163] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.380211][T10163] usb 2-1: config 0 descriptor?? [ 576.381767][T18772] netlink: 'syz.2.6196': attribute type 8 has an invalid length. [ 576.396180][T10163] hub 2-1:0.0: bad descriptor, ignoring hub [ 576.437243][T10163] hub 2-1:0.0: probe with driver hub failed with error -5 [ 576.493016][T10163] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input43 [ 576.600703][T18778] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 576.712653][T10163] usb 2-1: USB disconnect, device number 121 [ 577.702108][T18821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6219'. [ 577.737529][T18821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6219'. [ 579.205108][T18879] netlink: 'syz.2.6248': attribute type 10 has an invalid length. [ 580.007480][T10177] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 580.129026][T10158] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 580.199264][T10177] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 580.236378][T10177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.290341][T10177] usb 2-1: config 0 descriptor?? [ 580.308488][T10158] usb 4-1: Using ep0 maxpacket: 16 [ 580.325052][T10177] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 580.354820][T10158] usb 4-1: config 8 has an invalid interface number: 206 but max is 0 [ 580.390542][T10158] usb 4-1: config 8 has an invalid descriptor of length 64, skipping remainder of the config [ 580.433445][T10158] usb 4-1: config 8 has no interface number 0 [ 580.462136][T10158] usb 4-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 580.517306][T10158] usb 4-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 580.567308][T10158] usb 4-1: config 8 interface 206 altsetting 1 bulk endpoint 0xC has invalid maxpacket 1024 [ 580.607124][T10158] usb 4-1: config 8 interface 206 has no altsetting 0 [ 580.640062][T10158] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 580.677397][T10158] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.717562][T10158] usb 4-1: Product: syz [ 580.729647][T10158] usb 4-1: Manufacturer: syz [ 580.744265][T10177] gp8psk: usb out operation failed. [ 580.749174][T10158] usb 4-1: SerialNumber: syz [ 580.777262][T10177] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 580.798589][T18903] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 580.826750][T10177] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 580.874066][T10177] usb 2-1: USB disconnect, device number 122 [ 581.095848][T10158] garmin_gps 4-1:8.206: Garmin GPS usb/tty converter detected [ 581.152201][T10158] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 581.210981][T10158] usb 4-1: USB disconnect, device number 120 [ 581.258881][T10158] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 581.298123][T10158] garmin_gps 4-1:8.206: device disconnected [ 582.569969][T18979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6296'. [ 582.719471][T18985] kernel read not supported for file / 7âW)s!Qf (pid: 18985 comm: syz.3.6297) [ 582.822841][ T29] audit: type=1800 audit(1777942816.071:325): pid=18985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6297" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56604 dev="mqueue" ino=53804 res=0 errno=0 [ 583.342624][T19004] xt_limit: Overflow, try lower: 268435456/134217728 [ 583.603129][ T29] audit: type=1400 audit(1777942816.851:326): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=19010 comm="syz.4.6311" [ 583.628820][T19014] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 583.861120][T19020] macvtap0: entered promiscuous mode [ 583.911756][T19024] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6318'. [ 583.940523][T19024] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6318'. [ 584.303051][T19039] netlink: 'syz.3.6323': attribute type 21 has an invalid length. [ 584.357616][T19039] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6323'. [ 584.958902][T19066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.258718][T19077] netlink: 'syz.3.6342': attribute type 8 has an invalid length. [ 585.647646][T10174] usb 3-1: new low-speed USB device number 116 using dummy_hcd [ 585.833457][T10174] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 585.896653][T10174] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 585.954369][T10174] usb 3-1: config 1 interface 0 has no altsetting 0 [ 586.014088][T10174] usb 3-1: string descriptor 0 read error: -22 [ 586.020672][T10174] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 586.054487][T10174] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 586.120587][T10174] usb 3-1: 0:2 : does not exist [ 586.319789][T10174] usb-storage 3-1:1.1: USB Mass Storage device detected [ 586.360362][T19111] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 586.395278][T19115] netlink: 'syz.1.6363': attribute type 20 has an invalid length. [ 586.417919][T19111] bond0: (slave lo): Error: Device can not be enslaved while up [ 586.537918][T19118] mac80211_hwsim hwsim7 ..c: renamed from wlan1 [ 586.715770][T10174] usb 3-1: us122l: couldn't allocate write buffer [ 586.719690][T19124] xt_hashlimit: max too large, truncated to 1048576 [ 586.745313][T10174] snd-usb-us122l 3-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 586.806277][T10174] usb 3-1: USB disconnect, device number 116 [ 587.010916][T19131] netlink: 'syz.5.6371': attribute type 1 has an invalid length. [ 587.430104][T19145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 587.885145][T19163] netlink: 232 bytes leftover after parsing attributes in process `syz.5.6385'. [ 587.896515][T19161] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6382'. [ 587.920446][T19163] IPv6: NLM_F_CREATE should be specified when creating new route [ 587.938853][T19163] IPv6: Can't replace route, no match found [ 588.197301][T10177] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 588.393941][T10177] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 588.430466][T10177] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 588.496506][T10177] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 588.521957][T19181] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 588.581543][T10177] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 588.606237][T10177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.655325][T10177] usb 5-1: Product: syz [ 588.676154][T10177] usb 5-1: Manufacturer: syz [ 588.691143][T10177] usb 5-1: SerialNumber: syz [ 588.722587][T10177] usb 5-1: config 0 descriptor?? [ 588.754000][T19165] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 588.778676][T19165] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 588.840089][T10177] usb 5-1: ucan: probing device on interface #0 [ 589.043547][T10177] usb 5-1: ucan: device protocol version 771 is not supported [ 589.057864][T19195] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 589.076439][T10177] usb 5-1: ucan: probe failed; try to update the device firmware [ 589.089134][T19195] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 589.249824][T10161] usb 5-1: USB disconnect, device number 120 [ 589.838018][T10177] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 590.066568][T10177] usb 3-1: Using ep0 maxpacket: 32 [ 590.106316][T10177] usb 3-1: config 239 has an invalid descriptor of length 0, skipping remainder of the config [ 590.128551][T10177] usb 3-1: config 239 has 1 interface, different from the descriptor's value: 3 [ 590.174109][T10177] usb 3-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 590.257468][T10177] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.296698][T10177] usb 3-1: Product: syz [ 590.326025][T10177] usb 3-1: Manufacturer: syz [ 590.353247][T10177] usb 3-1: SerialNumber: syz [ 590.622972][T10177] usb 3-1: unit 2 not found! [ 590.680429][T19231] tc_dump_action: action bad kind [ 590.814706][T10177] usb 3-1: USB disconnect, device number 117 [ 590.949037][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:239.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 591.537653][T10158] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 591.710598][T10158] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 591.710638][T10158] usb 2-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 591.710658][T10158] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 591.710680][T10158] usb 2-1: config 220 has no interface number 2 [ 591.710742][T10158] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 591.710771][T10158] usb 2-1: config 220 interface 0 has no altsetting 0 [ 591.710789][T10158] usb 2-1: config 220 interface 76 has no altsetting 0 [ 591.710810][T10158] usb 2-1: config 220 interface 1 has no altsetting 0 [ 591.712927][T10158] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 591.712959][T10158] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.712981][T10158] usb 2-1: Product: syz [ 591.712997][T10158] usb 2-1: Manufacturer: syz [ 591.713013][T10158] usb 2-1: SerialNumber: syz [ 591.962810][T10158] usb 2-1: selecting invalid altsetting 0 [ 591.974902][T10158] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 591.974944][T10158] uvcvideo 2-1:220.0: No valid video chain found. [ 592.056397][T10158] usb 2-1: selecting invalid altsetting 0 [ 592.056435][T10158] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 592.069490][T10158] usb 2-1: USB disconnect, device number 123 [ 592.997747][T10163] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 593.179085][T10163] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 593.207354][T10163] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 593.237440][T10163] usb 6-1: config 1 has no interface number 0 [ 593.257529][T10163] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 593.319614][T10163] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 593.347837][T10163] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.381238][T10163] usb 6-1: Product: syz [ 593.397588][T10163] usb 6-1: Manufacturer: syz [ 593.418516][T10163] usb 6-1: SerialNumber: syz [ 593.452691][T10163] usb 6-1: selecting invalid altsetting 1 [ 593.870992][T10163] cdc_ncm 6-1:1.1: failed GET_NTB_PARAMETERS [ 593.897407][T10163] cdc_ncm 6-1:1.1: bind() failure [ 593.925988][T10163] usb 6-1: USB disconnect, device number 4 [ 594.685388][T19311] vti0: entered promiscuous mode [ 594.707592][T19311] vti0: entered allmulticast mode [ 594.956000][T19323] netlink: 'syz.2.6466': attribute type 5 has an invalid length. [ 595.005170][T19323] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.6466'. [ 595.993829][T19354] netlink: 'syz.5.6481': attribute type 2 has an invalid length. [ 596.031061][T19354] netlink: 'syz.5.6481': attribute type 8 has an invalid length. [ 596.058633][T19354] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6481'. [ 596.335783][T19367] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6487'. [ 596.587504][T19377] netlink: 'syz.4.6490': attribute type 2 has an invalid length. [ 597.040681][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 597.772582][T19409] libceph: resolve '400' (ret=-3): failed [ 597.877533][T10176] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 598.080367][T10176] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 598.127333][T10176] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 598.191254][T10176] usb 2-1: config 0 interface 0 has no altsetting 0 [ 598.229817][T10176] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 598.278441][T10176] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 598.327707][T10176] usb 2-1: Product: syz [ 598.348673][T10176] usb 2-1: Manufacturer: syz [ 598.366503][T10176] usb 2-1: SerialNumber: syz [ 598.402932][T10176] usb 2-1: config 0 descriptor?? [ 598.457004][T10176] hub 2-1:0.0: bad descriptor, ignoring hub [ 598.509415][T10176] hub 2-1:0.0: probe with driver hub failed with error -5 [ 598.546494][T19425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6514'. [ 598.569354][T10176] usb 2-1: selecting invalid altsetting 0 [ 598.839396][T19427] bond5: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 598.903657][T19434] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6518'. [ 598.949725][T10176] usb 2-1: USB disconnect, device number 124 [ 598.976209][T19427] bond5 (unregistering): Released all slaves [ 599.112485][ T7443] udevd[7443]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 599.769895][T19456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6529'. [ 599.845763][T19456] vlan0: entered promiscuous mode [ 600.635085][T19471] bridge_slave_0: left allmulticast mode [ 600.672936][T19471] bridge_slave_0: left promiscuous mode [ 600.691870][T19471] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.788211][T19471] bridge_slave_1: left allmulticast mode [ 600.841303][T19471] bridge_slave_1: left promiscuous mode [ 600.867654][T19471] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.932600][T19471] bond0: (slave veth0_to_bond): Releasing backup interface [ 600.994541][T19471] bond0: (slave bond_slave_0): Releasing backup interface [ 601.051666][T19471] bond0: (slave bond_slave_1): Releasing backup interface [ 601.094048][T19471] team0: Port device team_slave_0 removed [ 601.125111][T19471] team0: Port device team_slave_1 removed [ 601.156338][T19471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.198182][T19471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.278390][T19471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.309300][T19471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.341665][T19471] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 601.544225][T19487] bond2: option downdelay: invalid value (18446744073709551609) [ 601.601538][T19487] bond2: option downdelay: allowed values 0 - 2147483647 [ 601.694345][T19487] bond2 (unregistering): Released all slaves [ 602.119729][T19507] bond5: option xmit_hash_policy: invalid value (14) [ 602.253242][T19507] bond5 (unregistering): Released all slaves [ 602.596331][T19532] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6566'. [ 602.817223][T10158] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 602.987682][T10158] usb 4-1: Using ep0 maxpacket: 16 [ 603.021061][T10158] usb 4-1: unable to get BOS descriptor or descriptor too short [ 603.053609][T10158] usb 4-1: config 8 has an invalid interface number: 101 but max is 0 [ 603.055359][T19549] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 603.087186][T10158] usb 4-1: config 8 has no interface number 0 [ 603.107277][T10158] usb 4-1: too many endpoints for config 8 interface 101 altsetting 114: 112, using maximum allowed: 30 [ 603.145072][T10158] usb 4-1: config 8 interface 101 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 112 [ 603.197294][T10158] usb 4-1: config 8 interface 101 has no altsetting 0 [ 603.221820][T10158] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=ab.34 [ 603.251544][T10158] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.279789][T10158] usb 4-1: Product: syz [ 603.297503][T10158] usb 4-1: Manufacturer: syz [ 603.309974][T10158] usb 4-1: SerialNumber: syz [ 603.465569][T19558] hma(sha224): entered promiscuous mode [ 603.567660][T10158] usb 4-1: USB disconnect, device number 121 [ 604.017361][T10176] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 604.227761][T10176] usb 6-1: Using ep0 maxpacket: 16 [ 604.256014][T10176] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.293931][T10176] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 604.328280][T10176] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 604.387208][T10176] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 60930, setting to 1024 [ 604.420687][T10176] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 604.466238][T10176] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 604.523418][T10176] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 604.543554][T10176] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 604.563694][T19592] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6595'. [ 604.579332][T10176] usb 6-1: SerialNumber: syz [ 604.596472][T19568] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 604.627860][T19568] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 604.717444][T10158] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 604.883765][T10176] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 604.890353][T10158] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 604.920047][T10158] usb 4-1: config 0 has no interface number 0 [ 604.932074][T10176] usb 6-1: USB disconnect, device number 5 [ 604.940581][T10158] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 604.989680][T10158] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 605.022128][T10158] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 605.047842][T10158] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.086054][T10158] usb 4-1: Product: syz [ 605.110460][T10158] usb 4-1: Manufacturer: syz [ 605.129130][T10158] usb 4-1: SerialNumber: syz [ 605.166929][T10158] usb 4-1: config 0 descriptor?? [ 605.200793][T10158] cypress_m8 4-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 605.273049][T19613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6604'. [ 605.302546][T19612] nvme_fabrics: unknown parameter or missing value ']z' in ctrl creation request [ 605.433949][T10158] usb 4-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 605.487136][T10161] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 605.617682][T10158] usb 4-1: USB disconnect, device number 122 [ 605.649112][T10161] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 605.668389][T10158] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 605.687229][T10161] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 605.720212][T10158] cypress_m8 4-1:0.35: device disconnected [ 605.745226][T10161] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 605.774918][T10161] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 605.807198][T10161] usb 3-1: SerialNumber: syz [ 605.835459][T19611] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 606.065974][T19611] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 606.324064][T10161] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 606.405351][T10161] usb 3-1: USB disconnect, device number 118 [ 607.164100][T19671] trusted_key: encrypted_key: master key parameter '' is invalid [ 607.856396][T19699] openvswitch: netlink: EtherType 5a8 is less than min 600 [ 608.048747][T19706] xt_TCPMSS: Only works on TCP SYN packets [ 608.399438][T10176] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 608.527622][T19725] usb usb7: usbfs: process 19725 (syz.1.6660) did not claim interface 0 before use [ 608.610064][T10176] usb 4-1: Using ep0 maxpacket: 16 [ 608.639066][T10176] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.680898][T10176] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 608.737209][T10176] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 608.799288][T10176] usb 4-1: config 1 interface 2 has no altsetting 0 [ 608.840584][T10176] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 608.882810][T10176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.909925][T19736] geneve3: entered promiscuous mode [ 608.922429][T10176] usb 4-1: Product: syz [ 608.946409][T10176] usb 4-1: Manufacturer: syz [ 608.981834][T10176] usb 4-1: SerialNumber: syz [ 609.031622][T10176] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 609.059301][T10176] usb 4-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 609.097750][T10176] usb 4-1: found format II with max.bitrate = 3, frame size=7 [ 609.128793][T10176] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 609.165427][T10176] usb 4-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 609.205212][T10176] usb 4-1: found format II with max.bitrate = 3, frame size=7 [ 609.227994][T10176] usb 4-1: selecting invalid altsetting 0 [ 609.250590][T10176] usb 4-1: selecting invalid altsetting 0 [ 609.542454][T10176] usb 4-1: USB disconnect, device number 123 [ 609.814355][ T5945] udevd[5945]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 609.901616][T19768] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6682'. [ 609.921619][T19770] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 609.937405][T19768] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6682'. [ 609.970541][T19768] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6682'. [ 610.251090][T19782] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6689'. [ 610.459696][T19782] bond6 (unregistering): Released all slaves [ 610.580420][T19791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6692'. [ 610.856102][T19802] dummy0: entered allmulticast mode [ 610.924404][T19804] bond0: (slave syz_tun): Releasing backup interface [ 611.043288][T19804] bridge_slave_0: left allmulticast mode [ 611.052292][T19804] bridge_slave_0: left promiscuous mode [ 611.065191][T19804] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.119811][T19804] bridge_slave_1: left allmulticast mode [ 611.137134][T19804] bridge_slave_1: left promiscuous mode [ 611.156241][T19804] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.216609][T19804] bond0: (slave bond_slave_0): Releasing backup interface [ 611.308700][T19804] bond0: (slave bond_slave_1): Releasing backup interface [ 611.384234][T19804] team0: Port device team_slave_0 removed [ 611.408145][T19818] netlink: 'syz.4.6706': attribute type 11 has an invalid length. [ 611.432819][T19804] team0: Port device team_slave_1 removed [ 611.451907][T19804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.468643][T19804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.506171][T19804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.534295][T19804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.562574][T19804] team0: Port device veth0_to_hsr removed [ 611.580615][T19804] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 611.923023][T19834] openvswitch: netlink: Message has 1 unknown bytes. [ 611.963669][T19834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 612.388168][T10158] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 612.557279][T10158] usb 3-1: Using ep0 maxpacket: 16 [ 612.591959][T10158] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.643433][T10158] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 612.685826][T10158] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 6 [ 612.727591][T10158] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 612.777175][T10158] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 612.807472][T10158] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.844026][T19842] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 612.880343][T19842] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 612.926143][T19872] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6733'. [ 612.927001][T10158] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 612.987213][T19872] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6733'. [ 613.027312][T19872] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6733'. [ 613.169179][T10158] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 613.216954][T10158] usb 3-1: USB disconnect, device number 119 [ 613.587495][T10177] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 613.777435][T10177] usb 6-1: Using ep0 maxpacket: 8 [ 613.799588][T10177] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 613.835353][T10177] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 613.879364][T10177] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 613.925651][T10177] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 613.929790][T10177] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 613.929824][T10177] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.929844][T10177] usb 6-1: Product: syz [ 613.929859][T10177] usb 6-1: Manufacturer: syz [ 613.929875][T10177] usb 6-1: SerialNumber: syz [ 613.953845][T10177] usb 6-1: config 0 descriptor?? [ 613.958978][T10177] hub 6-1:0.0: bad descriptor, ignoring hub [ 613.959025][T10177] hub 6-1:0.0: probe with driver hub failed with error -5 [ 613.982324][T10177] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input46 [ 614.190488][T19909] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6751'. [ 614.232662][T10177] usb 6-1: USB disconnect, device number 6 [ 614.398502][T19914] autofs4:pid:19914:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 615.968637][T19972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6778'. [ 616.979679][T20016] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 617.202447][T20026] netlink: 'syz.5.6805': attribute type 61 has an invalid length. [ 617.239445][T20026] netlink: 'syz.5.6805': attribute type 62 has an invalid length. [ 617.457278][ T29] audit: type=1326 audit(1777942850.701:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20035 comm="syz.4.6810" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 617.546216][ T29] audit: type=1326 audit(1777942850.701:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20035 comm="syz.4.6810" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 617.643272][ T29] audit: type=1326 audit(1777942850.761:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20035 comm="syz.4.6810" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 617.753021][ T29] audit: type=1326 audit(1777942850.761:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20035 comm="syz.4.6810" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 617.772126][T20047] netlink: 'syz.1.6814': attribute type 3 has an invalid length. [ 617.860624][ T29] audit: type=1326 audit(1777942850.761:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20035 comm="syz.4.6810" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 617.965222][ T29] audit: type=1326 audit(1777942850.761:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20035 comm="syz.4.6810" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 618.058972][ T29] audit: type=1326 audit(1777942850.761:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20035 comm="syz.4.6810" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 618.169514][ T29] audit: type=1326 audit(1777942850.761:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20035 comm="syz.4.6810" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 618.271841][T20065] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6824'. [ 618.277744][ T29] audit: type=1326 audit(1777942850.761:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20035 comm="syz.4.6810" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f585899cdd9 code=0x7ffc0000 [ 618.305883][T20065] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6824'. [ 618.527314][T10177] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 618.575452][T20079] netlink: 1964 bytes leftover after parsing attributes in process `syz.4.6830'. [ 618.639847][T20072] bond2: entered promiscuous mode [ 618.646331][T20072] 8021q: adding VLAN 0 to HW filter on device bond2 [ 618.702136][T10177] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 618.740641][T10177] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 618.775470][T10177] usb 4-1: Product: syz [ 618.791043][T10177] usb 4-1: Manufacturer: syz [ 618.811380][T10177] usb 4-1: SerialNumber: syz [ 618.864641][T10177] usb 4-1: config 0 descriptor?? [ 619.108894][T10177] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v29 fw v73.0.0 (1 channels) [ 619.287373][T10176] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 619.310672][T10177] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 619.358367][T10177] peak_usb 4-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 619.497878][T10177] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 619.512039][T10176] usb 2-1: config 6 has an invalid interface number: 14 but max is 0 [ 619.543189][T10176] usb 2-1: config 6 has no interface number 0 [ 619.562790][T10177] usb 4-1: USB disconnect, device number 124 [ 619.583464][T10176] usb 2-1: config 6 interface 14 altsetting 218 endpoint 0x3 has invalid wMaxPacketSize 0 [ 619.640624][T10176] usb 2-1: config 6 interface 14 has no altsetting 0 [ 619.663937][T10176] usb 2-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 619.686897][T10176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.705567][T10176] usb 2-1: Product: syz [ 619.714768][T10176] usb 2-1: Manufacturer: syz [ 619.730895][T10176] usb 2-1: SerialNumber: syz [ 620.021372][T10176] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 620.053380][T10176] command write [95] error -8 [ 620.104557][T10176] usb 2-1: USB disconnect, device number 125 [ 620.146321][T20124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 620.563086][T20135] xt_cluster: node mask cannot exceed total number of nodes [ 621.517855][T20179] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 621.657608][T20181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6881'. [ 621.705003][T20187] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.6883'. [ 621.748249][T20187] openvswitch: netlink: Missing key (keys=40, expected=100) [ 622.182890][T20205] netlink: 'syz.2.6892': attribute type 11 has an invalid length. [ 622.208315][T20205] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6892'. [ 622.459109][T20218] netlink: 'syz.3.6899': attribute type 89 has an invalid length. [ 622.687124][T10157] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 622.857341][T10157] usb 5-1: Using ep0 maxpacket: 16 [ 622.878492][T10157] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.921387][T10157] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 622.954039][T10157] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 622.984704][T10157] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 623.049300][T10157] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 623.084424][T10157] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.101745][T20235] netlink: 'syz.5.6908': attribute type 21 has an invalid length. [ 623.117822][T10157] usb 5-1: Product: syz [ 623.128323][T20235] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6908'. [ 623.133371][T10157] usb 5-1: Manufacturer: syz [ 623.157904][T20237] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6909'. [ 623.168583][T10157] usb 5-1: SerialNumber: syz [ 623.206938][T10157] usb 5-1: config 0 descriptor?? [ 623.374973][T20242] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6911'. [ 623.530279][T10161] usb 5-1: USB disconnect, device number 121 [ 623.633757][T20249] SET target dimension over the limit! [ 624.060812][T20261] netlink: 'syz.5.6920': attribute type 13 has an invalid length. [ 624.398906][T20265] bond3: (slave gre0): Device is not bonding slave [ 624.417857][T20265] bond3: option active_slave: invalid value (gre0) [ 624.479837][T20265] bond3 (unregistering): Released all slaves [ 624.995519][ T29] audit: type=1326 audit(1777942858.241:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20298 comm="syz.2.6940" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9fc59cdd9 code=0x7ffc0000 [ 625.117530][ T29] audit: type=1326 audit(1777942858.241:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20298 comm="syz.2.6940" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9fc59cdd9 code=0x7ffc0000 [ 625.231297][ T29] audit: type=1326 audit(1777942858.291:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20298 comm="syz.2.6940" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9fc59cdd9 code=0x7ffc0000 [ 625.235908][T20307] netlink: 180 bytes leftover after parsing attributes in process `syz.3.6942'. [ 625.308863][ T29] audit: type=1326 audit(1777942858.291:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20298 comm="syz.2.6940" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9fc59cdd9 code=0x7ffc0000 [ 625.348087][T20307] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6942'. [ 625.410615][ T29] audit: type=1326 audit(1777942858.291:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20298 comm="syz.2.6940" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fe9fc59cdd9 code=0x7ffc0000 [ 625.527444][ T29] audit: type=1326 audit(1777942858.291:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20298 comm="syz.2.6940" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9fc59cdd9 code=0x7ffc0000 [ 625.628785][ T29] audit: type=1326 audit(1777942858.291:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20298 comm="syz.2.6940" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9fc59cdd9 code=0x7ffc0000 [ 625.746659][ T29] audit: type=1326 audit(1777942858.291:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20298 comm="syz.2.6940" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe9fc59cdd9 code=0x7ffc0000 [ 625.874505][ T29] audit: type=1326 audit(1777942858.291:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20298 comm="syz.2.6940" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe9fc59cdd9 code=0x7ffc0000 [ 627.117301][T10161] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 627.278043][T10157] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 627.307120][T10161] usb 5-1: Using ep0 maxpacket: 16 [ 627.323219][T10161] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 627.351252][T10161] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 627.382507][T10161] usb 5-1: config 1 has no interface number 1 [ 627.409370][T10161] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 627.442144][T10161] usb 5-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 627.477869][T10157] usb 6-1: unable to get BOS descriptor or descriptor too short [ 627.495955][T10161] usb 5-1: config 1 interface 105 has no altsetting 0 [ 627.513591][T10157] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 627.545235][T10161] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 627.557725][T10157] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 627.577167][T10161] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.605874][T10161] usb 5-1: Product: syz [ 627.615191][T10157] usb 6-1: string descriptor 0 read error: -22 [ 627.627248][T10161] usb 5-1: Manufacturer: syz [ 627.632145][T10157] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 627.657633][T10161] usb 5-1: SerialNumber: syz [ 627.665095][T10157] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.685540][T20369] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 627.768642][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.776387][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.795190][ T5709] kworker/0:5 (5709) used greatest stack depth: 14280 bytes left [ 627.930238][T10161] aqc111 5-1:1.105: probe with driver aqc111 failed with error -22 [ 628.023561][T20404] usb usb8: usbfs: process 20404 (syz.2.6991) did not claim interface 0 before use [ 628.129876][T10161] usb 5-1: USB disconnect, device number 122 [ 628.156587][T10157] usb 6-1: Can't set UAC3 power state to 1 for id 10 [ 628.195816][T10157] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 628.235882][T10157] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 628.262817][T10157] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 628.307325][T10157] usb 6-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 628.409597][T10157] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 628.525655][T10157] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 628.609089][T10157] usb 6-1: USB disconnect, device number 7 [ 628.638105][T20420] CIFS: VFS: UNC: missing share name [ 628.665454][T20420] CIFS: VFS: Malformed UNC in devname [ 629.178745][ T29] audit: type=1326 audit(1777942862.421:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20438 comm="syz.1.7008" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40fb9cdd9 code=0x7ffc0000 [ 629.214608][T10175] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 629.387641][T10175] usb 5-1: Using ep0 maxpacket: 32 [ 629.401656][T10175] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 629.434891][T10175] usb 5-1: config 0 has no interface number 0 [ 629.474923][T10175] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 629.503752][T10175] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.538081][T10175] usb 5-1: Product: syz [ 629.551892][T10175] usb 5-1: Manufacturer: syz [ 629.564556][T10175] usb 5-1: SerialNumber: syz [ 629.591533][T10175] usb 5-1: config 0 descriptor?? [ 629.637604][T10175] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 629.674271][T10175] usb 5-1: selecting invalid altsetting 1 [ 629.700781][T10175] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 629.749567][T10175] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 629.794830][T10175] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 629.839779][T10175] usb 5-1: media controller created [ 629.941439][T10175] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 630.197831][T10175] usb 5-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 630.266587][T10175] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 630.374366][T20480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7027'. [ 630.407765][T20408] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 630.428800][T10175] DVB: Unable to find symbol mxl5005s_attach() [ 630.539926][T10175] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 630.569544][T20408] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 630.614983][T20408] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 630.646637][T20408] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.676006][T20408] usb 2-1: Product: syz [ 630.686140][T20408] usb 2-1: Manufacturer: syz [ 630.699723][T20408] usb 2-1: SerialNumber: syz [ 630.726998][T20408] usb 2-1: config 0 descriptor?? [ 630.736434][T10175] usb 5-1: USB disconnect, device number 123 [ 630.753862][T20408] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 630.800278][T20408] usb 2-1: Detected FT232R [ 630.981574][T20493] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7034'. [ 631.163152][T20408] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 631.185841][T20408] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 631.235116][T20408] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 631.300104][T20408] usb 2-1: USB disconnect, device number 126 [ 631.341841][T20408] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 631.377812][T20408] ftdi_sio 2-1:0.0: device disconnected [ 631.467872][T20506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7039'. [ 631.687614][T20513] vivid-001: disconnect [ 631.708270][T20512] vivid-001: reconnect [ 632.090475][T20529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7051'. [ 632.129436][T20529] netlink: 'syz.5.7051': attribute type 1 has an invalid length. [ 632.138984][T20531] netlink: 'syz.2.7052': attribute type 1 has an invalid length. [ 632.147365][T20529] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7051'. [ 632.238698][ T30] INFO: task syz.0.4594:15455 blocked for more than 143 seconds. [ 632.268481][ T30] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 632.294357][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 632.351048][ T30] task:syz.0.4594 state:D stack:27776 pid:15455 tgid:15453 ppid:5644 task_flags:0x400040 flags:0x00080002 [ 632.415512][ T30] Call Trace: [ 632.445192][ T30] [ 632.462953][ T30] __schedule+0x17b4/0x5680 [ 632.489443][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 632.531662][ T30] ? __pfx_clockevents_program_event+0x10/0x10 [ 632.555053][ T30] ? __pfx___schedule+0x10/0x10 [ 632.574943][ T30] ? schedule+0x90/0x360 [ 632.587245][ T30] schedule+0x164/0x360 [ 632.591540][ T30] schedule_preempt_disabled+0x13/0x30 [ 632.600229][ T30] __mutex_lock+0x7f7/0x1550 [ 632.616203][ T30] ? __mutex_lock+0x608/0x1550 [ 632.621432][ T30] ? usbdev_open+0x182/0x770 [ 632.626505][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 632.638417][ T30] ? bus_find_device+0x27d/0x2d0 [ 632.643451][ T30] ? __pfx_bus_find_device+0x10/0x10 [ 632.653525][ T30] ? usbdev_open+0xa7/0x770 [ 632.659441][ T30] ? __kmalloc_cache_noprof+0x15b/0x660 [ 632.665344][ T30] usbdev_open+0x182/0x770 [ 632.670077][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 632.675165][ T30] ? __pfx_usbdev_open+0x10/0x10 [ 632.682912][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 632.689818][ T30] chrdev_open+0x4cd/0x5e0 [ 632.694627][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 632.700030][ T30] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 632.706428][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 632.712984][ T30] do_dentry_open+0x785/0x14e0 [ 632.719383][ T30] vfs_open+0x3b/0x340 [ 632.723507][ T30] ? path_openat+0x2df0/0x3860 [ 632.728749][ T30] path_openat+0x2e08/0x3860 [ 632.733429][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 632.740402][ T30] ? stack_depot_save_flags+0x33/0x810 [ 632.751495][ T30] ? __pfx_path_openat+0x10/0x10 [ 632.756496][ T30] ? __x64_sys_openat+0x138/0x170 [ 632.766699][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 632.772569][ T30] do_file_open+0x23e/0x4a0 [ 632.777531][ T30] ? __pfx_do_file_open+0x10/0x10 [ 632.782656][ T30] ? _raw_spin_unlock+0x28/0x50 [ 632.788530][ T30] ? alloc_fd+0x64b/0x6c0 [ 632.792934][ T30] do_sys_openat2+0x113/0x200 [ 632.798187][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 632.803452][ T30] ? exc_page_fault+0x6a/0xc0 [ 632.809093][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 632.814454][ T30] __x64_sys_openat+0x138/0x170 [ 632.820627][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.826745][ T30] do_syscall_64+0x15f/0xf80 [ 632.832904][ T30] ? trace_irq_disable+0x3b/0x140 [ 632.838374][ T30] ? clear_bhb_loop+0x40/0x90 [ 632.843106][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.850135][ T30] RIP: 0033:0x7f80a315d60e [ 632.855013][ T30] RSP: 002b:00007f80a411ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 632.864677][ T30] RAX: ffffffffffffffda RBX: 00007f80a411b6c0 RCX: 00007f80a315d60e [ 632.885284][ T30] RDX: 0000000000000602 RSI: 00007f80a411ac00 RDI: ffffffffffffff9c [ 632.893714][ T30] RBP: 00007f80a411ac00 R08: 0000000000000000 R09: 0000000000000000 [ 632.902600][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 632.910950][ T30] R13: 00007f80a3416038 R14: 00007f80a3415fa0 R15: 00007f80a353fa48 [ 632.920591][ T30] [ 632.924131][ T30] [ 632.924131][ T30] Showing all locks held in the system: [ 633.013293][ T30] 1 lock held by khungtaskd/30: [ 633.041115][ T30] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 633.081966][ T30] 2 locks held by getty/5383: [ 633.099665][ T30] #0: ffff88803673f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 633.114827][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 633.125988][ T30] 1 lock held by syz-executor/5643: [ 633.131674][ T30] 6 locks held by kworker/1:8/5721: [ 633.136923][ T30] 3 locks held by kworker/0:12/10175: [ 633.142806][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 633.155115][ T30] #1: ffffc90002ee7c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 633.166015][ T30] #2: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 633.187719][ T30] 1 lock held by syz.0.4594/15455: [ 633.201041][ T30] #0: ffff88802a71c1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 633.228235][ T30] 1 lock held by syz.4.7055/20535: [ 633.246472][ T30] #0: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 633.281463][ T30] 1 lock held by dhcpcd/20544: [ 633.296208][ T30] #0: ffff888025556260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 633.332741][ T30] [ 633.360267][ T30] ============================================= [ 633.360267][ T30] [ 633.402093][ T30] NMI backtrace for cpu 0 [ 633.402226][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 633.402249][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 633.402261][ T30] Call Trace: [ 633.402270][ T30] [ 633.402280][ T30] dump_stack_lvl+0xe8/0x150 [ 633.402312][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 633.402344][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 633.402368][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 633.402399][ T30] sys_info+0x135/0x170 [ 633.402426][ T30] watchdog+0xfd3/0x1030 [ 633.402460][ T30] ? watchdog+0x1c9/0x1030 [ 633.402491][ T30] kthread+0x388/0x470 [ 633.402517][ T30] ? __pfx_watchdog+0x10/0x10 [ 633.402540][ T30] ? __pfx_kthread+0x10/0x10 [ 633.402563][ T30] ret_from_fork+0x514/0xb70 [ 633.402589][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 633.402609][ T30] ? __switch_to+0xc79/0x1410 [ 633.402640][ T30] ? __pfx_kthread+0x10/0x10 [ 633.402665][ T30] ret_from_fork_asm+0x1a/0x30 [ 633.402701][ T30] [ 633.402710][ T30] Sending NMI from CPU 0 to CPUs 1: [ 633.514101][ C1] NMI backtrace for cpu 1 [ 633.514123][ C1] CPU: 1 UID: 0 PID: 20408 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 633.514144][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 633.514157][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 633.514190][ C1] RIP: 0010:__lock_acquire+0x460/0x2cf0 [ 633.514217][ C1] Code: 0f 44 ca 89 0c 24 45 8b a6 88 0b 00 00 41 8d 4c 24 ff 83 f9 ff 41 bd ff ff ff ff 44 0f 4c e9 41 ff c5 41 8d 5c 24 01 49 ff cc <89> d9 83 c1 fe 78 40 45 89 e7 41 81 e7 ff ff ff 7f 83 f9 31 73 1d [ 633.514242][ C1] RSP: 0018:ffffc90004c57150 EFLAGS: 00000046 [ 633.514256][ C1] RAX: 0000000000020007 RBX: 0000000000000004 RCX: 00000000000406eb [ 633.514268][ C1] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 633.514278][ C1] RBP: ffff88801d3b49d8 R08: ffffffff8176f256 R09: ffffffff8e95cd60 [ 633.514291][ C1] R10: ffffc90004c57458 R11: ffffffff81b0e840 R12: 0000000000000002 [ 633.514304][ C1] R13: 0000000000000000 R14: ffff88801d3b3d80 R15: 0000000000000003 [ 633.514315][ C1] FS: 0000000000000000(0000) GS:ffff888125390000(0000) knlGS:0000000000000000 [ 633.514330][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 633.514341][ C1] CR2: 000055b64db5a168 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 633.514357][ C1] Call Trace: [ 633.514364][ C1] [ 633.514374][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 633.514395][ C1] ? unwind_next_frame+0xa6/0x2550 [ 633.514417][ C1] ? lock_acquire+0x106/0x350 [ 633.514435][ C1] ? unwind_next_frame+0xa6/0x2550 [ 633.514453][ C1] lock_acquire+0x106/0x350 [ 633.514470][ C1] ? unwind_next_frame+0xa6/0x2550 [ 633.514493][ C1] ? unwind_next_frame+0xa6/0x2550 [ 633.514512][ C1] ? ret_from_fork+0x514/0xb70 [ 633.514537][ C1] ? unwind_next_frame+0xa6/0x2550 [ 633.514556][ C1] unwind_next_frame+0xc3/0x2550 [ 633.514575][ C1] ? unwind_next_frame+0xa6/0x2550 [ 633.514596][ C1] ? unwind_next_frame+0xa6/0x2550 [ 633.514616][ C1] ? kthread+0x388/0x470 [ 633.514637][ C1] ? ret_from_fork+0x514/0xb70 [ 633.514654][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 633.514684][ C1] arch_stack_walk+0x11b/0x150 [ 633.514706][ C1] ? ret_from_fork+0x514/0xb70 [ 633.514725][ C1] stack_trace_save+0xa9/0x100 [ 633.514749][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 633.514776][ C1] kasan_save_track+0x3e/0x80 [ 633.514800][ C1] ? kasan_save_track+0x3e/0x80 [ 633.514820][ C1] ? kasan_save_free_info+0x46/0x50 [ 633.514839][ C1] ? __kasan_slab_free+0x5c/0x80 [ 633.514861][ C1] ? kfree+0x1c5/0x640 [ 633.514880][ C1] ? skb_release_data+0x828/0xa60 [ 633.514903][ C1] ? __kfree_skb+0x5d/0x210 [ 633.514922][ C1] ? netlink_broadcast_filtered+0xdab/0xeb0 [ 633.514944][ C1] ? nlmsg_notify+0xf0/0x1a0 [ 633.514963][ C1] ? __neigh_notify+0x1ae/0x310 [ 633.514984][ C1] ? neigh_cleanup_and_release+0xae/0x2b0 [ 633.515001][ C1] ? neigh_periodic_work+0xb4f/0xe50 [ 633.515020][ C1] ? process_scheduled_works+0xb5d/0x1860 [ 633.515036][ C1] ? worker_thread+0xa53/0xfc0 [ 633.515053][ C1] ? kthread+0x388/0x470 [ 633.515072][ C1] ? ret_from_fork+0x514/0xb70 [ 633.515103][ C1] kasan_save_free_info+0x46/0x50 [ 633.515121][ C1] __kasan_slab_free+0x5c/0x80 [ 633.515144][ C1] kfree+0x1c5/0x640 [ 633.515162][ C1] ? skb_release_data+0x828/0xa60 [ 633.515186][ C1] skb_release_data+0x828/0xa60 [ 633.515211][ C1] __kfree_skb+0x5d/0x210 [ 633.515232][ C1] netlink_broadcast_filtered+0xdab/0xeb0 [ 633.515258][ C1] nlmsg_notify+0xf0/0x1a0 [ 633.515278][ C1] ? __neigh_notify+0x29/0x310 [ 633.515299][ C1] __neigh_notify+0x1ae/0x310 [ 633.515322][ C1] neigh_cleanup_and_release+0xae/0x2b0 [ 633.515340][ C1] neigh_periodic_work+0xb4f/0xe50 [ 633.515362][ C1] ? process_scheduled_works+0xa70/0x1860 [ 633.515379][ C1] process_scheduled_works+0xb5d/0x1860 [ 633.515407][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 633.515426][ C1] ? assign_work+0x3d5/0x5e0 [ 633.515444][ C1] worker_thread+0xa53/0xfc0 [ 633.515469][ C1] kthread+0x388/0x470 [ 633.515490][ C1] ? __pfx_worker_thread+0x10/0x10 [ 633.515506][ C1] ? __pfx_kthread+0x10/0x10 [ 633.515533][ C1] ret_from_fork+0x514/0xb70 [ 633.515551][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 633.515568][ C1] ? __switch_to+0xc79/0x1410 [ 633.515592][ C1] ? __pfx_kthread+0x10/0x10 [ 633.515613][ C1] ret_from_fork_asm+0x1a/0x30 [ 633.515638][ C1] [ 634.012810][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 634.019744][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 634.028869][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 634.038953][ T30] Call Trace: [ 634.042258][ T30] [ 634.045194][ T30] vpanic+0x56c/0xa60 [ 634.049215][ T30] ? __pfx___schedule+0x10/0x10 [ 634.054085][ T30] ? __pfx_vpanic+0x10/0x10 [ 634.058606][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 634.064796][ T30] panic+0xc5/0xd0 [ 634.068537][ T30] ? __pfx_panic+0x10/0x10 [ 634.072973][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 634.078367][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 634.084548][ T30] watchdog+0x102c/0x1030 [ 634.088909][ T30] ? watchdog+0x1c9/0x1030 [ 634.093347][ T30] kthread+0x388/0x470 [ 634.097440][ T30] ? __pfx_watchdog+0x10/0x10 [ 634.102141][ T30] ? __pfx_kthread+0x10/0x10 [ 634.106752][ T30] ret_from_fork+0x514/0xb70 [ 634.111355][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 634.116482][ T30] ? __switch_to+0xc79/0x1410 [ 634.121181][ T30] ? __pfx_kthread+0x10/0x10 [ 634.125790][ T30] ret_from_fork_asm+0x1a/0x30 [ 634.130580][ T30] [ 634.134158][ T30] Kernel Offset: disabled [ 634.138527][ T30] Rebooting in 86400 seconds..