last executing test programs: 6m49.250266105s ago: executing program 2 (id=649): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) ppoll(&(0x7f00000001c0)=[{r0, 0x8000}], 0x1, 0x0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = epoll_create1(0x80000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000200)={"a0b9a3c5c7a448ffe1a844474858e05a", 0x0, 0x0, {0x81, 0xc9}, {0x8, 0x9}, 0x2, [0x7fffffff, 0x69, 0xfffffffffffffff7, 0x100, 0x3, 0x5664, 0x1, 0xc, 0x3, 0x4, 0x3, 0xffff, 0x6, 0x610, 0x80, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000300)=r3) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) openat$cgroup_subtree(r5, 0x0, 0x2, 0x0) ioctl$KVM_TDX_CAPABILITIES(r5, 0xc008aeba, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0xa, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, 0x0, 0x0) 6m44.397390467s ago: executing program 2 (id=654): r0 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xebdf4000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) sendto(r0, &(0x7f0000000000)="4400000030000504010000000000000000000000300001802c0001800900010067617465000000001c0002801800020000000022e27ff515919cff2867fa540000000000", 0x44, 0x0, 0x0, 0x0) 6m40.496761621s ago: executing program 2 (id=661): ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) chroot(0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) getdents64(r3, &(0x7f0000002600)=""/4113, 0x1011) socket$unix(0x1, 0x1, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getresuid(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000300)={{{@in=@private=0xa010102, @in=@remote, 0x4e22, 0x9, 0x4e20, 0x2, 0x2, 0x0, 0x20, 0x15}, {0x7, 0x1, 0x7e, 0x6, 0x8, 0x1, 0x200, 0x200000000000}, {0x0, 0x3, 0x7fffffff, 0x6}, 0x7, 0x6e6bb7, 0x1, 0x0, 0x3}, {{@in6=@private1, 0x4d3, 0x33}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3507, 0x5, 0x3, 0xa4, 0x7, 0x3, 0xc55a}}, 0xe8) stat(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 6m36.669253222s ago: executing program 2 (id=663): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) connect$unix(r1, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x12) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x12d) write(r2, &(0x7f0000000300), 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x81, 0x800001000891}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, 0x0) 6m32.938859835s ago: executing program 2 (id=668): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9", 0x29) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007"], 0x84}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 6m28.939464073s ago: executing program 2 (id=670): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x4, &(0x7f0000000140)=[{0x7, 0x0, 0xb4, 0x7da4}, {0x3, 0x5, 0x0, 0x5}, {0xb0f, 0x5, 0xf8, 0x7}, {0x0, 0x4, 0x9, 0x9}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000101010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c0002800500010000000000470002800500010001"], 0xe4}}, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000280)={0x5, @vbi={0x0, 0xfff, 0x9, 0x3432564e, [0x2e, 0x4], [0x4, 0x5], 0x1}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000240)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5002abd7000ffffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB], 0x38}}, 0xc4c4) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000400)=""/117) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="8800000010000d040400fdf20000000000000000", @ANYRES32=0x0, @ANYBLOB="0010000019500000540012800c0001006d6163766c616e0044000280080009000800000008000700d1ae0000080001000200000008000300020000000800010002000000080007000600000008000700060000000600020001000000140035006d6163766c616e30"], 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='vegas', 0x5) syz_usb_connect(0x2, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d2f6010000400009046a00067af4190009050f080000050801060c8b631b7507250102020700090501"], 0x0) 6m11.263131837s ago: executing program 32 (id=670): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x4, &(0x7f0000000140)=[{0x7, 0x0, 0xb4, 0x7da4}, {0x3, 0x5, 0x0, 0x5}, {0xb0f, 0x5, 0xf8, 0x7}, {0x0, 0x4, 0x9, 0x9}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000101010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c0002800500010000000000470002800500010001"], 0xe4}}, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000280)={0x5, @vbi={0x0, 0xfff, 0x9, 0x3432564e, [0x2e, 0x4], [0x4, 0x5], 0x1}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000240)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5002abd7000ffffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB], 0x38}}, 0xc4c4) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000400)=""/117) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="8800000010000d040400fdf20000000000000000", @ANYRES32=0x0, @ANYBLOB="0010000019500000540012800c0001006d6163766c616e0044000280080009000800000008000700d1ae0000080001000200000008000300020000000800010002000000080007000600000008000700060000000600020001000000140035006d6163766c616e30"], 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='vegas', 0x5) syz_usb_connect(0x2, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d2f6010000400009046a00067af4190009050f080000050801060c8b631b7507250102020700090501"], 0x0) 5m12.74000305s ago: executing program 3 (id=767): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r2, 0x5606, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f00000005c0)) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x240080c4) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) getrandom(0xfffffffffffffffe, 0x0, 0x3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r9, 0x0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x2090}, 0x4008044) mount$afs(&(0x7f0000000540)=@cell={0x25, '', 'syz0', '.backup'}, &(0x7f0000000580)='./file0\x00', &(0x7f0000000380), 0x50001, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x400c0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) 5m10.25827183s ago: executing program 3 (id=770): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r6 = openat$autofs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, 0x0) preadv(r5, &(0x7f0000000640), 0x0, 0x4f, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000000c0)=0x200, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r8, 0x80045700, &(0x7f0000000100)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000020681010000000000000000030000060900020073797a30000000000500050001810000050001000700000010000300686173683a69702c6d616300fe0004"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000180)="0000000000000002ff69000000000001000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e07000000000000002c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67", 0xce, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) 5m7.522017841s ago: executing program 3 (id=773): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) fspick(0xffffffffffffffff, 0x0, 0x1) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x40]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0xfffffffc, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) 5m6.571709281s ago: executing program 3 (id=776): add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000580)={'syz', 0x0}, &(0x7f0000000200)="308201d430", 0x5, 0xfffffffffffffffe) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r1, r2, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) close(r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc048aeca, &(0x7f0000000500)={0x3, 0x0, [{0x3f8, 0x0, 0x4}, {0x40000001, 0x0, 0x4}, {0xada, 0x0, 0xd363}]}) keyctl$get_security(0x11, 0x0, 0x0, 0x0) accept$alg(r4, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) mknod(&(0x7f00000001c0)='./sys/bus/pnp/devices/00:04/resources\x00', 0x400, 0xa) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pnp/drivers/serial/unbind\x00', 0x1, 0x0) write(r7, &(0x7f0000000240)='00:04\n', 0x6) 5m3.878345523s ago: executing program 3 (id=780): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r8, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000000c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) close(r4) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e22, @private=0xa010102}}}, 0x90) 5m1.223062213s ago: executing program 3 (id=784): r0 = userfaultfd(0x80001) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) accept(r1, &(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, &(0x7f0000000300)=0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000003c0)={0x80002000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0) 4m45.999767476s ago: executing program 33 (id=784): r0 = userfaultfd(0x80001) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) accept(r1, &(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, &(0x7f0000000300)=0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000003c0)={0x80002000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0) 13.314310429s ago: executing program 4 (id=1771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900640000000008000440000000000900010073797a3000000000080003"], 0x64}}, 0x0) 12.90384016s ago: executing program 4 (id=1776): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/'], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/\x00'], 0x20) 12.57261596s ago: executing program 4 (id=1779): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) 12.406394698s ago: executing program 4 (id=1782): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x1080}, 0x0) 12.07576742s ago: executing program 4 (id=1786): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x44e, 0x120c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x22, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x4, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a10109"], 0x0}, 0x0) 10.414676668s ago: executing program 4 (id=1795): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802", @ANYRES32=0x0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000100)="c1dfb061cdee7a1f3fc89771a773", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.078430699s ago: executing program 5 (id=1852): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_names='ip6_vti0\x00'}) ioctl$sock_proto_private(r0, 0x8b2c, &(0x7f0000000080)) 2.310105424s ago: executing program 6 (id=1858): r0 = getpid() r1 = socket$xdp(0x2c, 0x3, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x6}) 2.057786099s ago: executing program 6 (id=1861): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) 1.893258828s ago: executing program 5 (id=1862): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x10) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) 1.892047611s ago: executing program 0 (id=1863): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000006800010000000000fddbdf25020002000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4044c02}, 0x0) 1.666819622s ago: executing program 6 (id=1865): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f0000000cc0)=""/226, 0xe2}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/44, 0x2c}, {&(0x7f0000001e00)=""/72, 0x48}, {&(0x7f0000001f00)=""/204, 0xcc}, {&(0x7f0000002100)=""/225, 0xe1}], 0x7}, 0xa2a}], 0x1, 0x0, 0x0) 1.563792849s ago: executing program 5 (id=1866): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0xa002a0, 0x1, 0x0, &(0x7f0000000000)='Z', 0x0, 0x6414, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fb, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) 1.393644649s ago: executing program 0 (id=1868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xb6}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 1.393428655s ago: executing program 6 (id=1869): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f00000007c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_rs}}}}}, 0x0) 1.197926002s ago: executing program 6 (id=1870): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) 1.109133444s ago: executing program 5 (id=1871): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x20000) 969.9505ms ago: executing program 0 (id=1872): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x9d5, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) 845.658517ms ago: executing program 5 (id=1874): r0 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}, 0x20) 722.270804ms ago: executing program 6 (id=1875): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 675.352802ms ago: executing program 0 (id=1876): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000300)={0x1, &(0x7f0000000500)=[{0x28, 0x5, 0x0, 0xfffff034}]}, 0x10) 614.009683ms ago: executing program 1 (id=1877): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) msync(&(0x7f000018d000/0x2000)=nil, 0x2000, 0x6) 577.50336ms ago: executing program 1 (id=1878): capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000080)={0x6, 0x4000006, 0x0, 0x8066, 0xfffffbff, 0x2}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000000)) 553.025924ms ago: executing program 5 (id=1879): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)={0x18, 0x1a, 0x601, 0x70bd2b, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3a}}]}, 0x18}], 0x1, 0x0, 0x0, 0xc25f86718fa98117}, 0x0) 433.097214ms ago: executing program 1 (id=1880): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xff}, 0x1c) bind$l2tp6(r0, &(0x7f0000001540)={0xa, 0x0, 0xc2da, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8001, 0x4}, 0x20) 432.895695ms ago: executing program 0 (id=1881): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xd2000000}, 0x4) 370.550306ms ago: executing program 0 (id=1882): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000580aa833966a198320a4bcc2c8d688d5fb"], 0x0}, 0x0) 364.150071ms ago: executing program 1 (id=1883): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000000a050003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) 106.585234ms ago: executing program 1 (id=1884): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) 0s ago: executing program 1 (id=1885): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) kernel console output (not intermixed with test programs): syscall=436 compat=0 ip=0x7fe384bce0d9 code=0x7ffc0000 [ 158.439461][ T38] audit: type=1326 audit(1787327500.835:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6222 comm="syz.2.116" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe384bce0d9 code=0x7ffc0000 [ 159.227050][ T6240] fuse: fd is not a fuse device [ 162.829139][ T6264] lo speed is unknown, defaulting to 1000 [ 162.829251][ T6264] lo speed is unknown, defaulting to 1000 [ 162.834003][ T6264] lo speed is unknown, defaulting to 1000 [ 162.837336][ T6264] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 162.837373][ T6264] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 162.837415][ T6264] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 162.843603][ T6264] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 162.859817][ T6264] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 162.978991][ T6264] lo speed is unknown, defaulting to 1000 [ 162.982943][ T6264] lo speed is unknown, defaulting to 1000 [ 162.985863][ T6264] lo speed is unknown, defaulting to 1000 [ 162.988868][ T6264] lo speed is unknown, defaulting to 1000 [ 162.992812][ T6264] lo speed is unknown, defaulting to 1000 [ 168.963338][ T6319] netlink: 1 bytes leftover after parsing attributes in process `syz.3.142'. [ 168.963714][ T6319] openvswitch: netlink: Flow key attr not present in new flow. [ 173.830931][ T6335] uprobe: syz.1.147:6335 failed to unregister, leaking uprobe [ 174.180865][ T37] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 175.950604][ T37] usb 1-1: New USB device found, idVendor=05ac, idProduct=020e, bcdDevice= 0.40 [ 176.274163][ T37] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 145, changing to 11 [ 176.274201][ T37] usb 1-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.274230][ T37] usb 1-1: config 1 interface 0 has no altsetting 0 [ 177.089625][ T37] usb 1-1: string descriptor 0 read error: -71 [ 177.089785][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.109627][ T6335] uprobe: syz.1.147:6335 failed to unregister, leaking uprobe [ 177.341271][ T37] usb 1-1: can't set config #1, error -71 [ 177.380823][ T37] usb 1-1: USB disconnect, device number 3 [ 179.690853][ T198] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 181.477628][ T6389] ip6gretap0: entered promiscuous mode [ 181.614864][ T6389] bridge0: port 3(macvlan2) entered blocking state [ 181.615737][ T6389] bridge0: port 3(macvlan2) entered disabled state [ 181.615965][ T6389] macvlan2: entered allmulticast mode [ 181.615985][ T6389] ip6gretap0: entered allmulticast mode [ 181.780330][ T6389] macvlan2: entered promiscuous mode [ 181.957635][ T6389] bridge0: port 3(macvlan2) entered blocking state [ 181.957847][ T6389] bridge0: port 3(macvlan2) entered forwarding state [ 182.039213][ T6389] Zero length message leads to an empty skb [ 182.674237][ T198] usb 5-1: unable to get BOS descriptor or descriptor too short [ 182.674305][ T198] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 182.677495][ T198] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 182.677537][ T198] usb 5-1: can't read configurations, error -71 [ 185.641779][ T6415] capability: warning: `syz.4.168' uses 32-bit capabilities (legacy support in use) [ 185.810335][ T6419] 9p: Bad value for 'wfdno' [ 186.757991][ T6428] netlink: 'syz.4.171': attribute type 13 has an invalid length. [ 190.650800][ T37] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 191.053886][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.181'. [ 191.094462][ T37] usb 1-1: not running at top speed; connect to a high speed hub [ 191.094493][ T37] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 191.131471][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.131491][ T37] usb 1-1: Product: syz [ 191.131501][ T37] usb 1-1: Manufacturer: syz [ 191.131511][ T37] usb 1-1: SerialNumber: syz [ 191.349682][ T37] keyspan 1-1:1.0: Keyspan 4 port adapter converter detected [ 192.381230][ T37] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 193.612970][ T37] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 194.075011][ T37] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 194.144191][ T37] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 194.300155][ T37] usb 1-1: USB disconnect, device number 4 [ 194.435531][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.435603][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.711781][ T37] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 194.810436][ T37] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 194.944665][ T37] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 194.991651][ T37] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 195.031542][ T37] keyspan 1-1:1.0: device disconnected [ 195.174116][ T6495] ªªªªªª: renamed from vlan0 (while UP) [ 198.056510][ T6524] cgroup: none used incorrectly [ 198.295276][ T6521] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 203.437774][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'. [ 203.437933][ T6594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.616600][ T6594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.035740][ T6610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.218'. [ 210.816593][ T6643] vlan2: entered promiscuous mode [ 210.816617][ T6643] hsr0: entered promiscuous mode [ 210.817105][ T6643] vlan2: entered allmulticast mode [ 210.817130][ T6643] hsr0: entered allmulticast mode [ 210.817143][ T6643] hsr_slave_0: entered allmulticast mode [ 210.817167][ T6643] hsr_slave_1: entered allmulticast mode [ 211.445927][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.230'. [ 215.902097][ T6667] netlink: 24 bytes leftover after parsing attributes in process `syz.0.236'. [ 219.216851][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 219.216896][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 220.227769][ T6708] syzkaller0: entered promiscuous mode [ 220.227797][ T6708] syzkaller0: entered allmulticast mode [ 220.301118][ T6708] tipc: Started in network mode [ 220.301152][ T6708] tipc: Node identity 2e428ac54b64, cluster identity 4711 [ 220.301573][ T6708] tipc: Enabled bearer , priority 0 [ 220.521181][ T6719] IPv6: NLM_F_REPLACE set, but no existing node found! [ 220.560938][ T6707] tipc: Resetting bearer [ 223.730760][ T5600] Bluetooth: hci4: command 0x0406 tx timeout [ 223.738023][ T5592] Bluetooth: hci2: command 0x0406 tx timeout [ 223.981093][ T5600] Bluetooth: hci0: command 0x0406 tx timeout [ 223.981137][ T5598] Bluetooth: hci3: command 0x0406 tx timeout [ 225.298163][ T6707] tipc: Disabling bearer [ 225.656967][ T5597] tipc: Node number set to 1697024709 [ 225.749921][ T6746] use of bytesused == 0 is deprecated and will be removed in the future, [ 225.749938][ T6746] use the actual size instead. [ 226.094917][ T6753] Driver unsupported XDP return value 0 on prog (id 36) dev N/A, expect packet loss! [ 227.019052][ T6772] 9pnet_fd: p9_fd_create_unix (6772): problem connecting socket: ./file0: -111 [ 227.518431][ T6781] fuse: fd is not a fuse device [ 227.544409][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.269'. [ 232.018840][ T6810] jffs2: notice: (6810) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 232.758510][ T6820] netlink: 'syz.2.282': attribute type 1 has an invalid length. [ 232.759975][ T6820] netlink: 'syz.2.282': attribute type 1 has an invalid length. [ 238.732200][ T5597] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 239.959864][ T5597] usb 3-1: Using ep0 maxpacket: 32 [ 239.960846][ T5597] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 239.971147][ T5597] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 239.971222][ T5597] usb 3-1: config 0 has no interface number 0 [ 239.971280][ T5597] usb 3-1: config 0 interface 184 has no altsetting 0 [ 239.991862][ T5597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.991891][ T5597] usb 3-1: Product: syz [ 239.991904][ T5597] usb 3-1: Manufacturer: syz [ 239.991918][ T5597] usb 3-1: SerialNumber: syz [ 240.758781][ T5597] usb 3-1: config 0 descriptor?? [ 241.553241][ T5597] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 241.553272][ T5597] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 243.813840][ T6904] vlan2: left promiscuous mode [ 243.813864][ T6904] hsr0: left promiscuous mode [ 243.814212][ T6904] vlan2: left allmulticast mode [ 243.814224][ T6904] hsr0: left allmulticast mode [ 243.814233][ T6904] hsr_slave_0: left allmulticast mode [ 243.814249][ T6904] hsr_slave_1: left allmulticast mode [ 244.750397][ T5597] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71 [ 244.750430][ T5597] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71 [ 244.750453][ T5597] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 244.750660][ T5597] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 244.767922][ T5597] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 244.874021][ T5597] usb 3-1: USB disconnect, device number 2 [ 246.505008][ T6918] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 251.704797][ T6952] netlink: 68 bytes leftover after parsing attributes in process `syz.4.317'. [ 253.682631][ T6972] syz.3.322 uses obsolete (PF_INET,SOCK_PACKET) [ 254.135093][ T6982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.134663][ T6983] tipc: Started in network mode [ 255.134689][ T6983] tipc: Node identity 2000004, cluster identity 4711 [ 255.134704][ T6983] tipc: Node number set to 33554436 [ 255.371153][ T6978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.466681][ T38] audit: type=1326 audit(1787327599.904:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6991 comm="syz.3.327" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f173e0d9 code=0x7ffc0000 [ 255.466741][ T38] audit: type=1326 audit(1787327599.904:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6991 comm="syz.3.327" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f173e0d9 code=0x7ffc0000 [ 255.561906][ T38] audit: type=1326 audit(1787327599.944:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6991 comm="syz.3.327" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f57f173e0d9 code=0x7ffc0000 [ 255.561979][ T38] audit: type=1326 audit(1787327600.004:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6991 comm="syz.3.327" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f173e0d9 code=0x7ffc0000 [ 255.562026][ T38] audit: type=1326 audit(1787327600.004:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6991 comm="syz.3.327" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f173e0d9 code=0x7ffc0000 [ 255.562760][ T38] audit: type=1326 audit(1787327600.004:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6991 comm="syz.3.327" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57f173e0d9 code=0x7ffc0000 [ 255.568732][ T38] audit: type=1326 audit(1787327600.004:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6991 comm="syz.3.327" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f173e0d9 code=0x7ffc0000 [ 255.569384][ T38] audit: type=1326 audit(1787327600.004:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6991 comm="syz.3.327" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f57f173e0d9 code=0x7ffc0000 [ 255.573454][ T38] audit: type=1326 audit(1787327600.004:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6991 comm="syz.3.327" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f173e0d9 code=0x7ffc0000 [ 255.580077][ T38] audit: type=1326 audit(1787327600.014:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6991 comm="syz.3.327" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f173e0d9 code=0x7ffc0000 [ 255.861316][ T7001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.326'. [ 255.910659][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.910715][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.028074][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.331'. [ 261.382103][ T7042] tipc: Started in network mode [ 261.382136][ T7042] tipc: Node identity 328bb516095c, cluster identity 4711 [ 261.382448][ T7042] tipc: Enabled bearer , priority 0 [ 261.393158][ T7042] syzkaller0: entered promiscuous mode [ 261.393230][ T7042] syzkaller0: entered allmulticast mode [ 261.563037][ T7050] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 261.719043][ T6823] udevd[6823]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 262.004748][ T7042] tipc: Resetting bearer [ 262.163637][ T7040] tipc: Resetting bearer [ 266.026528][ T7071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.345'. [ 266.388244][ T7072] smbdirect: ib_dev[syz2] removed [ 267.446550][ T7040] tipc: Disabling bearer [ 267.856132][ T7086] unsupported nlmsg_type 40 [ 268.866022][ T5696] tipc: Node number set to 1003992342 [ 268.869360][ T7068] warning: `syz.4.343' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 273.979154][ T7109] random: crng reseeded on system resumption [ 278.414736][ T7141] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 282.990689][ T38] kauditd_printk_skb: 11 callbacks suppressed [ 282.990709][ T38] audit: type=1326 audit(1787327627.424:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7176 comm="syz.3.372" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57f173e0d9 code=0x0 [ 283.133799][ T7182] loop7: detected capacity change from 0 to 16384 [ 283.410412][ T7183] loop7: detected capacity change from 16384 to 16320 [ 283.491121][ C0] I/O error, dev loop7, sector 16376 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 284.323599][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'. [ 295.534574][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.393'. [ 299.938987][ T7255] Set syz1 is full, maxelem 65536 reached [ 303.630503][ T7283] netlink: 'syz.3.403': attribute type 2 has an invalid length. [ 307.281548][ T5696] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 309.417955][ T7316] Invalid option length (64949) for dns_resolver key [ 315.047583][ T7344] kvm: kvm [7341]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x9b8 [ 316.371094][ T7370] netlink: 164 bytes leftover after parsing attributes in process `syz.0.423'. [ 316.420578][ T6073] IPVS: starting estimator thread 0... [ 316.513329][ T7373] IPVS: using max 10 ests per chain, 24000 per kthread [ 316.959783][ T7389] device-mapper: ioctl: Unable to rename non-existent device,  to uuid § [ 317.329237][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.329312][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.262047][ T5590] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 326.053581][ T7454] tmpfs: Unsupported parameter 'huge' [ 328.969646][ T7465] netlink: 'syz.0.447': attribute type 21 has an invalid length. [ 328.970125][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'. [ 328.996752][ T7465] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 341.064283][ T7526] trusted_key: encrypted_key: insufficient parameters specified [ 341.557147][ T7552] overlayfs: failed to clone lowerpath [ 345.422720][ T5590] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 346.950867][ T5590] usb 2-1: Using ep0 maxpacket: 16 [ 347.119842][ T5590] usb 2-1: device descriptor read/all, error -71 [ 350.072878][ T2256] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 350.500470][ T7600] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 350.500572][ T7600] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 350.501008][ T7600] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 351.769543][ T2256] usb 3-1: device descriptor read/all, error -71 [ 358.409292][ T7641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.488'. [ 359.467513][ T7659] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 366.277493][ T7678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.539977][ T7691] syzkaller0: entered promiscuous mode [ 369.540007][ T7691] syzkaller0: entered allmulticast mode [ 378.360592][ T5703] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 378.691062][ T7735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.694903][ T7744] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 378.697498][ T7735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.795182][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.795333][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.317328][ T5703] usb 3-1: unable to get BOS descriptor or descriptor too short [ 382.348221][ T5703] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 382.349275][ T5703] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 382.349311][ T5703] usb 3-1: can't read configurations, error -71 [ 384.516941][ T5703] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 385.947238][ T5703] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 385.948511][ T5703] usb 2-1: config 0 has an invalid descriptor of length 157, skipping remainder of the config [ 385.948536][ T5703] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 385.948572][ T5703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.078257][ T5703] usb 2-1: config 0 descriptor?? [ 386.776514][ T7790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.788078][ T7790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.849341][ T5703] usb 2-1: string descriptor 0 read error: -71 [ 389.350622][ T5703] usb 2-1: USB disconnect, device number 5 [ 390.475003][ T7820] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 394.365312][ T7836] syz.1.533 (7836): /proc/7833/oom_adj is deprecated, please use /proc/7833/oom_score_adj instead. [ 401.812565][ T7893] /dev/nullb0: Can't open blockdev [ 401.836810][ T7892] gfs2: not a GFS2 filesystem [ 405.277619][ T7895] Bluetooth: ISO socket layer initialized [ 434.913335][ T8022] usb usb8: usbfs: process 8022 (syz.0.579) did not claim interface 0 before use [ 438.257044][ T8040] Config c/1 of g1 needs at least one function. [ 438.285302][ T8040] udc dummy_udc.0: failed to start g1: -22 [ 438.285335][ T8040] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 438.656569][ T8040] UDC core: g1: couldn't find an available UDC or it's busy [ 440.822338][ T8061] syz.4.587 (8061) used greatest stack depth: 18464 bytes left [ 441.130013][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.130089][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.094588][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.592'. [ 446.094614][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.592'. [ 447.279893][ T8081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.593'. [ 449.999285][ T6056] IPVS: starting estimator thread 0... [ 453.445051][ T8121] IPVS: using max 7 ests per chain, 16800 per kthread [ 455.719948][ T8143] netlink: 40 bytes leftover after parsing attributes in process `syz.1.606'. [ 457.472421][ T8155] dummy0: left promiscuous mode [ 458.491312][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.610'. [ 458.491337][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.610'. [ 459.774537][ T5695] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 460.014072][ T5695] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 460.015350][ T5695] usb 5-1: config 0 has an invalid descriptor of length 157, skipping remainder of the config [ 460.015376][ T5695] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 460.015414][ T5695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.426897][ T5695] usb 5-1: config 0 descriptor?? [ 462.133051][ T8180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.133699][ T8180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.098978][ T5695] usb 5-1: string descriptor 0 read error: -71 [ 466.214712][ T5695] usb 5-1: USB disconnect, device number 4 [ 472.274704][ T6064] IPVS: starting estimator thread 0... [ 472.360604][ T8225] IPVS: using max 11 ests per chain, 26400 per kthread [ 472.617379][ T8231] netlink: 44 bytes leftover after parsing attributes in process `syz.4.629'. [ 475.108210][ T8245] Bluetooth: MGMT ver 1.23 [ 481.654759][ T8258] syz.4.638 (8258): drop_caches: 2 [ 483.301552][ T8280] netlink: 44 bytes leftover after parsing attributes in process `syz.3.645'. [ 485.320960][ T2256] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 485.470539][ T2256] usb 1-1: Using ep0 maxpacket: 16 [ 485.471631][ T2256] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 485.473572][ T2256] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.473602][ T2256] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 485.473631][ T2256] usb 1-1: config 0 interface 0 has no altsetting 0 [ 485.473666][ T2256] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.563621][ T2256] usb 1-1: config 0 descriptor?? [ 488.246740][ T2256] usb 1-1: can't set config #0, error -71 [ 488.282380][ T2256] usb 1-1: USB disconnect, device number 6 [ 491.068280][ T5914] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 493.555479][ T8339] netlink: 'syz.4.656': attribute type 10 has an invalid length. [ 494.384155][ T8343] sctp: [Deprecated]: syz.0.657 (pid 8343) Use of struct sctp_assoc_value in delayed_ack socket option. [ 494.384155][ T8343] Use struct sctp_sack_info instead [ 494.385534][ T8343] sctp: [Deprecated]: syz.0.657 (pid 8343) Use of struct sctp_assoc_value in delayed_ack socket option. [ 494.385534][ T8343] Use struct sctp_sack_info instead [ 496.310692][ T2256] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 501.717686][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.717761][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.767111][ T8334] netlink: 32 bytes leftover after parsing attributes in process `syz.4.656'. [ 501.930544][ T2256] usb 5-1: device descriptor read/64, error -110 [ 504.426659][ T8339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.431304][ T8339] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 504.609857][ T8380] netlink: 32 bytes leftover after parsing attributes in process `syz.2.668'. [ 506.137463][ T2256] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 506.340590][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 506.491123][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 506.510174][ T10] usb 1-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=63.0c [ 506.569565][ T10] usb 1-1: config index 0 descriptor too short (expected 8192, got 27) [ 506.569597][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.569618][ T10] usb 1-1: config 0 has no interfaces? [ 506.606859][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.606890][ T10] usb 1-1: Product: syz [ 506.606905][ T10] usb 1-1: Manufacturer: syz [ 506.606920][ T10] usb 1-1: SerialNumber: syz [ 508.001539][ T8388] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 508.331976][ T10] usb 1-1: config 0 descriptor?? [ 508.333881][ T10] usb 1-1: can't set config #0, error -71 [ 508.449447][ T10] usb 1-1: USB disconnect, device number 7 [ 508.505062][ T8393] dummy0: entered promiscuous mode [ 508.505080][ T8393] dummy0: entered allmulticast mode [ 514.824346][ T8433] 9pnet_fd: p9_fd_create_tcp (8433): problem connecting socket to 127.0.0.1 [ 517.547631][ T8446] netlink: 44 bytes leftover after parsing attributes in process `syz.2.670'. [ 517.547658][ T8446] netlink: 59 bytes leftover after parsing attributes in process `syz.2.670'. [ 517.547675][ T8446] netlink: 59 bytes leftover after parsing attributes in process `syz.2.670'. [ 517.597597][ T8446] netlink: 'syz.2.670': attribute type 10 has an invalid length. [ 517.705604][ T8446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.725469][ T8446] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 518.692664][ T8455] netlink: 20 bytes leftover after parsing attributes in process `syz.0.684'. [ 519.412659][ T2256] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 519.561420][ T2256] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 519.563038][ T2256] usb 3-1: config index 0 descriptor too short (expected 63186, got 210) [ 519.563066][ T2256] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 519.563088][ T2256] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.563108][ T2256] usb 3-1: config 0 has no interface number 0 [ 519.563155][ T2256] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 519.563181][ T2256] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 519.563208][ T2256] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 12398, setting to 1023 [ 519.563236][ T2256] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 519.563280][ T2256] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.946130][ T2256] usb 3-1: config 0 descriptor?? [ 521.637368][ T8495] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in; [ 521.637368][ T8495] program syz.4.689 not setting count and/or reply_len properly [ 522.351327][ T2256] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 523.618296][ T2256] usb 3-1: USB disconnect, device number 8 [ 523.642980][ T6057] usb 3-1: Failed to submit usb control message: -71 [ 523.643022][ T6057] usb 3-1: unable to send the bmi data to the device: -71 [ 523.643042][ T6057] usb 3-1: unable to get target info from device [ 523.643073][ T6057] usb 3-1: could not get target info (-71) [ 523.643484][ T6057] usb 3-1: could not probe fw (-71) [ 525.446960][ T8514] overlayfs: missing 'lowerdir' [ 527.665818][ T8377] udevd[8377]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 529.878028][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 529.947193][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 529.960437][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 529.978083][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 529.980257][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 530.245043][ T8535] openvswitch: netlink: Message has 5920 unknown bytes. [ 530.245093][ T8535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.676159][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.699'. [ 532.256157][ T60] Bluetooth: hci5: command tx timeout [ 533.244541][ T8559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.259726][ T8559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.827203][ T60] Bluetooth: hci5: command tx timeout [ 535.372211][ T8576] netlink: 'syz.4.706': attribute type 2 has an invalid length. [ 536.830984][ T60] Bluetooth: hci5: command tx timeout [ 538.912070][ T60] Bluetooth: hci5: command tx timeout [ 539.837301][ T8528] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.837662][ T8528] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.838277][ T8528] bridge_slave_0: entered allmulticast mode [ 539.876612][ T8528] bridge_slave_0: entered promiscuous mode [ 539.890787][ T8528] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.891257][ T8528] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.891888][ T8528] bridge_slave_1: entered allmulticast mode [ 539.950084][ T8528] bridge_slave_1: entered promiscuous mode [ 540.071087][ T8528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.075513][ T8528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.143908][ T8528] team0: Port device team_slave_0 added [ 540.147808][ T8528] team0: Port device team_slave_1 added [ 540.209090][ T8528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.209107][ T8528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.209136][ T8528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.256929][ T8528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.256947][ T8528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.256976][ T8528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.536176][ T8603] tmpfs: Unknown parameter 'grpquota [ 540.536176][ T8603] ' [ 541.040479][ T5916] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 541.231239][ T5916] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 541.232881][ T5916] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 541.232909][ T5916] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.232929][ T5916] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 541.232990][ T5916] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.236202][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 541.236246][ T5916] usb 5-1: Product: syz [ 541.236262][ T5916] usb 5-1: Manufacturer: syz [ 541.572746][ T5916] cdc_wdm 5-1:1.0: skipping garbage [ 541.572768][ T5916] cdc_wdm 5-1:1.0: skipping garbage [ 541.590111][ T5916] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 541.590251][ T5916] cdc_wdm 5-1:1.0: Unknown control protocol [ 541.903555][ T8528] hsr_slave_0: entered promiscuous mode [ 541.920032][ T8528] hsr_slave_1: entered promiscuous mode [ 541.937796][ T8528] debugfs: 'hsr0' already exists in 'hsr' [ 541.937831][ T8528] Cannot create hsr debugfs directory [ 543.565173][ T5914] usb 5-1: USB disconnect, device number 7 [ 549.032595][ T8658] netlink: 'syz.1.724': attribute type 2 has an invalid length. [ 550.320818][ T8664] futex_wake_op: syz.4.725 tries to shift op by 144; fix this program [ 555.268107][ T8528] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 556.280746][ T8528] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 556.282140][ T8528] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 556.579572][ T8528] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 556.603243][ T8528] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 556.985361][ T8528] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 556.987281][ T8528] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 557.151945][ T8706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.152601][ T8706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.796293][ T8528] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 559.068795][ T60] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 562.793772][ T8528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.063824][ T8528] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.074879][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.074951][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.014783][ T8747] jffs2: notice: (8747) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 564.084296][ T6062] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.084390][ T6062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.171153][ T6072] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.171245][ T6072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.617365][ T8756] netlink: 24 bytes leftover after parsing attributes in process `syz.0.745'. [ 565.156331][ T8757] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 565.164553][ T8757] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 565.275030][ T8757] vhci_hcd vhci_hcd.0: Device attached [ 565.694929][ T8760] vhci_hcd: connection closed [ 566.176381][ T3876] vhci_hcd vhci_hcd.0: stop threads [ 566.211566][ T3876] vhci_hcd vhci_hcd.0: release socket [ 566.447390][ T3876] vhci_hcd vhci_hcd.0: disconnect device [ 569.094801][ T8775] netlink: 16 bytes leftover after parsing attributes in process `syz.3.749'. [ 569.094827][ T8775] netlink: 16 bytes leftover after parsing attributes in process `syz.3.749'. [ 569.094841][ T8775] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 569.094857][ T8775] iwpm_hello_cb: Unable to parse nlmsg [ 572.544884][ T60] Bluetooth: hci0: unexpected subevent 0x1a length: 30 > 6 [ 573.634550][ T8813] Can't find a SQUASHFS superblock on nullb0 [ 575.968153][ T8528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.515119][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.760'. [ 577.515632][ T8836] netlink: 16 bytes leftover after parsing attributes in process `syz.4.760'. [ 580.612887][ T8848] misc userio: Invalid payload size [ 581.019447][ T8528] veth0_vlan: entered promiscuous mode [ 581.046405][ T8528] veth1_vlan: entered promiscuous mode [ 581.108601][ T8528] veth0_macvtap: entered promiscuous mode [ 581.133998][ T8528] veth1_macvtap: entered promiscuous mode [ 584.281425][ T8528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.437014][ T8528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.570739][ T6048] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.570789][ T6048] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.570828][ T6048] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.570867][ T6048] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.727959][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'. [ 587.229746][ T5589] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 587.289350][ T5589] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 587.301245][ T5589] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 587.355209][ T5589] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 587.398894][ T5589] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 589.470574][ T60] Bluetooth: hci2: command tx timeout [ 591.607283][ T60] Bluetooth: hci2: command tx timeout [ 593.713841][ T60] Bluetooth: hci2: command tx timeout [ 595.798801][ T60] Bluetooth: hci2: command tx timeout [ 605.673704][ T9005] tmpfs: Unknown parameter 'grpquota [ 605.673704][ T9005] ' [ 608.780153][ T9012] netlink: 'syz.1.795': attribute type 2 has an invalid length. [ 608.780171][ T9012] netlink: 'syz.1.795': attribute type 1 has an invalid length. [ 609.028355][ T92] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.091346][ T9028] input: syz0 as /devices/virtual/input/input10 [ 613.196581][ T5589] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 613.296347][ T5589] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 613.300919][ T5589] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 613.312671][ T5589] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 613.316207][ T5589] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 614.002110][ T92] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.339674][ T9038] syz_tun: entered allmulticast mode [ 616.047787][ T60] Bluetooth: hci5: command tx timeout [ 616.638156][ T9039] pimreg: entered allmulticast mode [ 618.175783][ T60] Bluetooth: hci5: command tx timeout [ 622.090402][ T60] Bluetooth: hci5: command tx timeout [ 622.739147][ T9039] syz_tun: left allmulticast mode [ 622.739534][ T9039] pimreg: left allmulticast mode [ 623.178493][ T9075] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 623.195280][ T9067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.459289][ T9067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.108623][ T92] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.113016][ T60] Bluetooth: hci5: command tx timeout [ 624.522253][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.522330][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.278791][ T9097] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 629.887908][ T9103] cgroup: Name too long [ 631.833961][ T92] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.554801][ T9117] netlink: 24 bytes leftover after parsing attributes in process `syz.0.813'. [ 635.193511][ T9128] syz.1.814 (9128): drop_caches: 2 [ 635.407362][ T9130] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 637.968169][ T38] audit: type=1800 audit(1787327982.384:34): pid=9141 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.819" name="idVendor" dev="configfs" ino=21332 res=0 errno=0 [ 637.975527][ T38] audit: type=1800 audit(1787327982.414:35): pid=9141 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.819" name="configuration" dev="configfs" ino=21335 res=0 errno=0 [ 638.777978][ T8887] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.778175][ T8887] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.778367][ T8887] bridge_slave_0: entered allmulticast mode [ 638.816962][ T8887] bridge_slave_0: entered promiscuous mode [ 638.987202][ T9153] PKCS7: Unknown OID: [4] 0.0 [ 638.987312][ T9153] PKCS7: Only support pkcs7_signedData type [ 639.502278][ T9155] ieee802154 phy0 wpan0: encryption failed: -22 [ 639.612003][ T9159] bridge_slave_0: left allmulticast mode [ 639.612041][ T9159] bridge_slave_0: left promiscuous mode [ 639.615924][ T9159] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.835968][ T9159] bridge_slave_1: left allmulticast mode [ 639.835992][ T9159] bridge_slave_1: left promiscuous mode [ 639.836214][ T9159] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.874910][ T9165] netlink: 277 bytes leftover after parsing attributes in process `syz.4.822'. [ 640.463511][ T9159] bond0: (slave bond_slave_0): Releasing backup interface [ 640.713528][ T9159] bond0: (slave bond_slave_1): Releasing backup interface [ 640.887831][ T9159] team0: Port device team_slave_0 removed [ 640.954612][ T9159] team0: Port device team_slave_1 removed [ 640.955783][ T9159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.955810][ T9159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.003365][ T9159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 641.003394][ T9159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.034614][ T9159] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 641.034886][ T8887] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.035023][ T8887] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.035249][ T8887] bridge_slave_1: entered allmulticast mode [ 641.038554][ T8887] bridge_slave_1: entered promiscuous mode [ 641.102968][ T5590] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 642.490498][ T5590] usb 2-1: Using ep0 maxpacket: 8 [ 642.491581][ T5590] usb 2-1: New USB device found, idVendor=04e8, idProduct=0030, bcdDevice= 0.00 [ 642.491640][ T5590] usb 2-1: no configurations [ 642.491654][ T5590] usb 2-1: can't read configurations, error -22 [ 642.760610][ T9177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.826'. [ 648.460054][ T5589] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 648.571012][ T5589] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 648.573898][ T5589] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 648.605506][ T5589] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 648.621218][ T5589] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 650.003871][ T92] bridge_slave_1: left allmulticast mode [ 650.003937][ T92] bridge_slave_1: left promiscuous mode [ 650.040166][ T92] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.710637][ T5589] Bluetooth: hci1: command tx timeout [ 651.958220][ T92] bridge_slave_0: left allmulticast mode [ 651.958268][ T92] bridge_slave_0: left promiscuous mode [ 651.958995][ T92] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.790681][ T5589] Bluetooth: hci1: command tx timeout [ 655.811612][ T92] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.870970][ T5589] Bluetooth: hci1: command tx timeout [ 655.982578][ T92] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.102825][ T92] bond0 (unregistering): Released all slaves [ 657.377315][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.834'. [ 657.964980][ T5589] Bluetooth: hci1: command tx timeout [ 657.974580][ T9237] netlink: 16 bytes leftover after parsing attributes in process `syz.4.838'. [ 657.975059][ T9237] netlink: 16 bytes leftover after parsing attributes in process `syz.4.838'. [ 664.669919][ T92] hsr_slave_0: left promiscuous mode [ 664.721756][ T92] hsr_slave_1: left promiscuous mode [ 664.761853][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.762045][ T92] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.895390][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.895420][ T92] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.724476][ T9281] PKCS7: Unknown OID: [4] 0.0 [ 667.724519][ T9281] PKCS7: Only support pkcs7_signedData type [ 668.417613][ T92] veth1_macvtap: left promiscuous mode [ 668.509126][ T92] veth0_macvtap: left promiscuous mode [ 668.577822][ T92] veth1_vlan: left promiscuous mode [ 668.588793][ T92] veth0_vlan: left promiscuous mode [ 668.774367][ T9290] No source specified [ 670.409511][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 670.457061][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 670.470850][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 670.479991][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 670.481895][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 673.129822][ T60] Bluetooth: hci2: command tx timeout [ 674.366986][ T8671] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 674.585938][ T8671] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 674.587534][ T8671] usb 2-1: config 0 has an invalid descriptor of length 80, skipping remainder of the config [ 674.587588][ T8671] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 674.587617][ T8671] usb 2-1: config 0 interface 0 has no altsetting 0 [ 674.644911][ T8671] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 674.644939][ T8671] usb 2-1: Product: syz [ 674.644955][ T8671] usb 2-1: Manufacturer: syz [ 674.644970][ T8671] usb 2-1: SerialNumber: syz [ 674.758411][ T8671] usb 2-1: config 0 descriptor?? [ 674.810039][ T8671] usb 2-1: can't set config #0, error -71 [ 674.913947][ T8671] usb 2-1: USB disconnect, device number 9 [ 675.198241][ T9325] netlink: 68 bytes leftover after parsing attributes in process `syz.0.851'. [ 675.242215][ T60] Bluetooth: hci2: command tx timeout [ 676.912729][ T38] audit: type=1326 audit(1787328021.354:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9332 comm="syz.1.854" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa0fea9e0d9 code=0x0 [ 677.878721][ T60] Bluetooth: hci2: command tx timeout [ 678.395137][ T9353] netlink: 68 bytes leftover after parsing attributes in process `syz.0.857'. [ 679.490591][ T92] team0 (unregistering): Port device team_slave_1 removed [ 679.545149][ T92] team0 (unregistering): Port device team_slave_0 removed [ 679.721067][ T9353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.857'. [ 679.875534][ T5244] 8021q: adding VLAN 0 to HW filter on device eth1 [ 679.951629][ T5589] Bluetooth: hci2: command tx timeout [ 682.280883][ T9378] syz.4.859 (9378) used greatest stack depth: 18016 bytes left [ 684.300477][ T10] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 685.914111][ T9388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.932141][ T9388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.244349][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.244432][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.040387][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 689.051922][ T10] usb 5-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 689.055251][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 689.055321][ T10] usb 5-1: can't read configurations, error -71 [ 694.249317][ T5244] 8021q: adding VLAN 0 to HW filter on device eth2 [ 697.692495][ T92] bridge_slave_1: left allmulticast mode [ 697.692523][ T92] bridge_slave_1: left promiscuous mode [ 697.692727][ T92] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.058418][ T92] bridge_slave_0: left allmulticast mode [ 699.058454][ T92] bridge_slave_0: left promiscuous mode [ 699.058730][ T92] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.030535][ T9470] netlink: 68 bytes leftover after parsing attributes in process `syz.1.878'. [ 704.961038][ T92] bond0 (unregistering): Released all slaves [ 705.288712][ T92] bond0 (unregistering): Released all slaves [ 706.152075][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 706.308626][ T31] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 706.310198][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.310223][ T31] usb 2-1: config 0 has no interfaces? [ 706.367187][ T31] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 706.367218][ T31] usb 2-1: Product: syz [ 706.367235][ T31] usb 2-1: Manufacturer: syz [ 706.423298][ T31] usb 2-1: config 0 descriptor?? [ 706.753236][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 706.964986][ T10] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 706.975304][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 706.975333][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 706.975375][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.923975][ T9479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.030116][ T31] usb 2-1: USB disconnect, device number 10 [ 711.608615][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 711.633732][ T10] gud 5-1:1.0: probe with driver gud failed with error -71 [ 711.662491][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 711.664272][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 711.713837][ T9514] ./file0: Can't open blockdev [ 711.728766][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 711.747126][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 711.816307][ T38] audit: type=1326 audit(1787328056.254:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9507 comm="syz.1.883" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa0fea9e0d9 code=0x0 [ 713.950577][ T5589] Bluetooth: hci5: command tx timeout [ 716.078032][ T5589] Bluetooth: hci5: command tx timeout [ 718.293709][ T5589] Bluetooth: hci5: command tx timeout [ 718.428790][ T10] usb 5-1: USB disconnect, device number 10 [ 718.526857][ T9542] capability: warning: `syz.4.887' uses deprecated v2 capabilities in a way that may be insecure [ 719.348951][ T9548] overlayfs: missing 'lowerdir' [ 720.350477][ T5589] Bluetooth: hci5: command tx timeout [ 720.605273][ T9551] binder: BC_ACQUIRE_RESULT not supported [ 720.605421][ T9551] binder: 9550:9551 ioctl c0306201 200000004a40 returned -22 [ 720.731709][ T5244] 8021q: adding VLAN 0 to HW filter on device eth3 [ 724.274209][ T9564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.892'. [ 727.366829][ T9587] netlink: 232 bytes leftover after parsing attributes in process `syz.0.898'. [ 727.703167][ T9571] netlink: 20 bytes leftover after parsing attributes in process `syz.4.894'. [ 727.703191][ T9571] netlink: 64 bytes leftover after parsing attributes in process `syz.4.894'. [ 728.696919][ T9303] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.697140][ T9303] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.697355][ T9303] bridge_slave_0: entered allmulticast mode [ 728.757930][ T9303] bridge_slave_0: entered promiscuous mode [ 728.884427][ T9303] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.884557][ T9303] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.884767][ T9303] bridge_slave_1: entered allmulticast mode [ 729.163420][ T9303] bridge_slave_1: entered promiscuous mode [ 731.677698][ T9616] overlayfs: failed to clone upperpath [ 732.037683][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 732.096026][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 732.129221][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 732.135592][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 732.139300][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 734.357268][ T5589] Bluetooth: hci1: command tx timeout [ 735.607717][ T38] audit: type=1326 audit(1787328080.044:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9663 comm="syz.4.909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa79ae0d9 code=0x7ffc0000 [ 735.607775][ T38] audit: type=1326 audit(1787328080.044:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9663 comm="syz.4.909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa79ae0d9 code=0x7ffc0000 [ 735.607820][ T38] audit: type=1326 audit(1787328080.044:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9663 comm="syz.4.909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa79ae0d9 code=0x7ffc0000 [ 735.609154][ T38] audit: type=1326 audit(1787328080.044:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9663 comm="syz.4.909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2fa79ae0d9 code=0x7ffc0000 [ 735.609206][ T38] audit: type=1326 audit(1787328080.044:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9663 comm="syz.4.909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa79ae0d9 code=0x7ffc0000 [ 735.609254][ T38] audit: type=1326 audit(1787328080.044:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9663 comm="syz.4.909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa79ae0d9 code=0x7ffc0000 [ 735.609300][ T38] audit: type=1326 audit(1787328080.044:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9663 comm="syz.4.909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa79ae0d9 code=0x7ffc0000 [ 735.609571][ T38] audit: type=1326 audit(1787328080.044:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9663 comm="syz.4.909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f2fa79ae0d9 code=0x7ffc0000 [ 735.619809][ T38] audit: type=1326 audit(1787328080.054:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9663 comm="syz.4.909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa79ae0d9 code=0x7ffc0000 [ 735.619873][ T38] audit: type=1326 audit(1787328080.054:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9663 comm="syz.4.909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa79ae0d9 code=0x7ffc0000 [ 737.047507][ T5589] Bluetooth: hci1: command tx timeout [ 737.920417][ T8671] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 738.179155][ T5244] 8021q: adding VLAN 0 to HW filter on device eth4 [ 738.321172][ T8671] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 738.333233][ T8671] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 738.333342][ T8671] usb 5-1: config 0 has no interface number 0 [ 738.375802][ T8671] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.375831][ T8671] usb 5-1: Product: syz [ 738.375847][ T8671] usb 5-1: Manufacturer: syz [ 738.375863][ T8671] usb 5-1: SerialNumber: syz [ 738.434838][ T8671] usb 5-1: config 0 descriptor?? [ 738.544213][ T92] bridge_slave_1: left allmulticast mode [ 738.544258][ T92] bridge_slave_1: left promiscuous mode [ 738.565916][ T92] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.754520][ T92] bridge_slave_0: left allmulticast mode [ 738.754667][ T92] bridge_slave_0: left promiscuous mode [ 738.755227][ T92] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.894178][ T9685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.896328][ T9685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.210045][ T5589] Bluetooth: hci1: command tx timeout [ 740.394669][ T8671] gspca_main: spca508-2.14.0 probing 041e:4018 [ 740.399605][ T8671] gspca_spca508: reg_read err -71 [ 740.408423][ T8671] gspca_spca508: reg_read err -71 [ 740.409396][ T8671] gspca_spca508: reg_read err -71 [ 740.410812][ T8671] gspca_spca508: reg_read err -71 [ 740.420840][ T8671] gspca_spca508: reg_read err -71 [ 740.421823][ T8671] gspca_spca508: reg write: error -71 [ 740.422170][ T8671] spca508 5-1:0.3: probe with driver spca508 failed with error -71 [ 740.516171][ T8671] usb 5-1: USB disconnect, device number 11 [ 741.705139][ T5589] Bluetooth: hci1: command tx timeout [ 741.705951][ T38] kauditd_printk_skb: 116 callbacks suppressed [ 741.705967][ T38] audit: type=1800 audit(1787328086.144:164): pid=9706 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.917" name="p_chmask" dev="configfs" ino=23391 res=0 errno=0 [ 741.999334][ T92] bond0 (unregistering): Released all slaves [ 743.136731][ T92] bond0 (unregistering): Released all slaves [ 743.270415][ T9718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 743.970481][ T9510] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.970587][ T9510] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.970762][ T9510] bridge_slave_0: entered allmulticast mode [ 744.002848][ T9510] bridge_slave_0: entered promiscuous mode [ 744.056292][ T9510] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.058069][ T9510] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.064026][ T9510] bridge_slave_1: entered allmulticast mode [ 744.086555][ T9510] bridge_slave_1: entered promiscuous mode [ 745.408809][ T5589] Bluetooth: hci4: command 0x0406 tx timeout [ 747.066251][ T9510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 747.203855][ T9510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.409794][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.409847][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.518641][ T9759] binder: BC_ACQUIRE_RESULT not supported [ 747.518657][ T9759] binder: 9755:9759 ioctl c0306201 200000004a40 returned -22 [ 747.555454][ T5589] Bluetooth: hci4: command 0x0406 tx timeout [ 747.680223][ T9510] team0: Port device team_slave_0 added [ 747.686920][ T9510] team0: Port device team_slave_1 added [ 748.727263][ T9510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.727280][ T9510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.727317][ T9510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.770410][ T31] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 748.831959][ T9510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.831978][ T9510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.832007][ T9510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.940429][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 748.941112][ T31] usb 5-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 748.946066][ T31] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 748.946090][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 748.946108][ T31] usb 5-1: config 0 has no interface number 0 [ 748.946146][ T31] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 748.946169][ T31] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 748.946204][ T31] usb 5-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 748.946229][ T31] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 748.946253][ T31] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 748.946276][ T31] usb 5-1: config 0 interface 239 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 748.946303][ T31] usb 5-1: config 0 interface 239 has no altsetting 0 [ 749.016809][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.016838][ T31] usb 5-1: Product: syz [ 749.016853][ T31] usb 5-1: Manufacturer: syz [ 749.016868][ T31] usb 5-1: SerialNumber: syz [ 749.152137][ T31] usb 5-1: config 0 descriptor?? [ 749.208095][ T9785] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 749.208590][ T9785] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 749.447664][ T9510] hsr_slave_0: entered promiscuous mode [ 749.449060][ T9510] hsr_slave_1: entered promiscuous mode [ 749.450133][ T9510] debugfs: 'hsr0' already exists in 'hsr' [ 749.450159][ T9510] Cannot create hsr debugfs directory [ 749.506419][ T10] usb 5-1: USB disconnect, device number 12 [ 751.018964][ T9815] kAFS: No cell specified [ 752.000545][ T10] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 752.161589][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 752.161627][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 752.162933][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 752.162992][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.274041][ T38] audit: type=1326 audit(1787328096.694:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9846 comm="syz.4.958" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fa79ae0d9 code=0x0 [ 752.484838][ T10] uvcvideo 2-1:1.0: Found UVC 1.00 device (046d:0825) [ 752.485138][ T10] uvcvideo 2-1:1.0: No streaming interface found for terminal 32770. [ 752.804893][ T10] usb 2-1: USB disconnect, device number 11 [ 754.398165][ T9621] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.409219][ T9621] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.409454][ T9621] bridge_slave_0: entered allmulticast mode [ 754.429575][ T9621] bridge_slave_0: entered promiscuous mode [ 754.462436][ T9621] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.462568][ T9621] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.464048][ T9621] bridge_slave_1: entered allmulticast mode [ 754.499491][ T9621] bridge_slave_1: entered promiscuous mode [ 754.566881][ T60] Bluetooth: hci0: unexpected cc 0x204b length: 34 > 3 [ 754.593700][ T60] Bluetooth: hci4: unexpected event for opcode 0x0c12 [ 755.590794][ T9621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.617918][ T9621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.689299][ T9911] tmpfs: Bad value for 'mpol' [ 756.646967][ T9621] team0: Port device team_slave_0 added [ 756.688454][ T9621] team0: Port device team_slave_1 added [ 756.763364][ T9939] binder: BC_ACQUIRE_RESULT not supported [ 756.763380][ T9939] binder: 9938:9939 ioctl c0306201 200000004a40 returned -22 [ 756.946542][ T9621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.946561][ T9621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.946589][ T9621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.054361][ T9621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.054379][ T9621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.054409][ T9621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 757.167564][ T9947] binder: Binderfs stats mode cannot be changed during a remount [ 757.617766][ T9621] hsr_slave_0: entered promiscuous mode [ 757.631414][ T9621] hsr_slave_1: entered promiscuous mode [ 757.632370][ T9621] debugfs: 'hsr0' already exists in 'hsr' [ 757.632391][ T9621] Cannot create hsr debugfs directory [ 758.591034][ T60] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 758.591411][ T60] Bluetooth: hci0: Injecting HCI hardware error event [ 758.593009][ T5589] Bluetooth: hci0: hardware error 0x00 [ 758.624338][ T9980] kAFS: No cell specified [ 759.175240][ T9996] binder: BC_ACQUIRE_RESULT not supported [ 759.175256][ T9996] binder: 9991:9996 ioctl c0306201 200000004a40 returned -22 [ 760.820100][T10020] binder: BC_ACQUIRE_RESULT not supported [ 760.820115][T10020] binder: 10016:10020 ioctl c0306201 200000004a40 returned -22 [ 760.830404][ T5589] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 760.959080][T10024] kAFS: No cell specified [ 761.643800][ T9621] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 761.998611][ T9621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 762.017536][ T9621] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 762.065794][T10053] 9pnet_virtio: no channels available for device 127.0.0.1 [ 762.118514][ T9621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 762.138977][ T9621] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 762.403024][ T9621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 762.429119][ T9621] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 762.636047][ T9621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 762.950069][ T5589] Bluetooth: hci4: unexpected event for opcode 0x0404 [ 763.642142][ T5916] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 763.926383][ T5916] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice= 1.00 [ 763.954167][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.954199][ T5916] usb 5-1: Product: syz [ 763.954215][ T5916] usb 5-1: Manufacturer: syz [ 763.954231][ T5916] usb 5-1: SerialNumber: syz [ 764.167601][ T5916] usbsevseg 5-1:1.0: USB 7 Segment device now attached [ 764.204505][ T9510] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 764.392651][ T9510] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 764.407675][ T9510] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 764.433738][ T5914] usb 5-1: USB disconnect, device number 13 [ 764.454561][ T5914] usbsevseg 5-1:1.0: USB 7 Segment now disconnected [ 764.658665][ T9510] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 764.715749][ T9510] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 764.927556][ T9510] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 764.950112][ T9510] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 766.019401][ T9510] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 766.253471][ T9621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.478957][ T9621] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.637639][ T8472] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.637937][ T8472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.779372][ T8472] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.806748][ T8472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.257139][T10178] binder: 10175:10178 ioctl c00c620f 0 returned -14 [ 767.791342][T10195] netlink: 464 bytes leftover after parsing attributes in process `syz.4.1055'. [ 767.791372][T10195] netlink: 464 bytes leftover after parsing attributes in process `syz.4.1055'. [ 767.966740][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 768.063375][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 768.071689][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 768.115260][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 768.119026][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 768.546180][T10205] netlink: 'syz.1.1057': attribute type 2 has an invalid length. [ 768.546203][T10205] netlink: 'syz.1.1057': attribute type 2 has an invalid length. [ 769.100598][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 769.261932][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 769.262717][ T10] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 769.272106][ T10] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 769.272257][ T10] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 769.272333][ T10] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 769.272367][ T10] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 769.272391][ T10] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 769.380688][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.380716][ T10] usb 5-1: Product: syz [ 769.380732][ T10] usb 5-1: Manufacturer: syz [ 769.380748][ T10] usb 5-1: SerialNumber: syz [ 769.646331][ T10] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 769.646469][ T10] imon 5-1:155.0: unable to initialize intf0, err -90 [ 769.646508][ T10] imon:imon_probe: failed to initialize context! [ 769.646521][ T10] imon 5-1:155.0: unable to register, err -19 [ 769.812159][ T5916] usb 5-1: USB disconnect, device number 14 [ 770.371905][T10245] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1065'. [ 770.371958][T10245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1065'. [ 770.430904][ T5589] Bluetooth: hci2: command tx timeout [ 770.608101][T10251] netlink: 'syz.4.1066': attribute type 11 has an invalid length. [ 770.988778][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1070'. [ 771.140493][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 771.291451][ T9] usb 5-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 771.293100][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 771.293173][ T9] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 771.293199][ T9] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 771.296879][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.296905][ T9] usb 5-1: Product: syz [ 771.296921][ T9] usb 5-1: Manufacturer: syz [ 771.296937][ T9] usb 5-1: SerialNumber: syz [ 772.373768][ T9] usb-storage 5-1:1.0: USB Mass Storage device detected [ 772.510179][ T9] scsi host1: usb-storage 5-1:1.0 [ 772.519940][ T5589] Bluetooth: hci2: command tx timeout [ 772.593635][ T9] usb 5-1: USB disconnect, device number 15 [ 774.432742][ T9621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 774.530546][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 774.598963][ T5589] Bluetooth: hci2: command tx timeout [ 774.730973][ T9] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 774.734727][ T9] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 774.734755][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.734775][ T9] usb 5-1: config 0 has no interfaces? [ 774.734807][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.787760][ T9] usb 5-1: config 0 descriptor?? [ 775.043621][ T5914] usb 5-1: USB disconnect, device number 16 [ 775.621819][T10341] program syz.1.1094 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 776.670431][ T5589] Bluetooth: hci2: command tx timeout [ 776.837160][T10376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 777.166721][T10197] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.166808][T10197] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.166995][T10197] bridge_slave_0: entered allmulticast mode [ 777.172702][T10197] bridge_slave_0: entered promiscuous mode [ 777.241935][T10197] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.242065][T10197] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.242262][T10197] bridge_slave_1: entered allmulticast mode [ 777.247076][T10197] bridge_slave_1: entered promiscuous mode [ 777.697145][T10197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.296631][T10197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.761424][ T6066] bridge_slave_1: left allmulticast mode [ 778.761459][ T6066] bridge_slave_1: left promiscuous mode [ 778.761718][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.658688][ T6066] bridge_slave_0: left allmulticast mode [ 779.658721][ T6066] bridge_slave_0: left promiscuous mode [ 779.658964][ T6066] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.233291][T10424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1128'. [ 780.925333][ T6066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 781.062667][ T6066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 781.163111][ T6066] bond0 (unregistering): Released all slaves [ 781.913707][T10197] team0: Port device team_slave_0 added [ 781.934987][ T38] audit: type=1326 audit(1787328126.374:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10449 comm="syz.4.1141" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa79ae0d9 code=0x7ffc0000 [ 781.935163][ T38] audit: type=1326 audit(1787328126.374:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10449 comm="syz.4.1141" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa79ae0d9 code=0x7ffc0000 [ 782.013459][ T38] audit: type=1326 audit(1787328126.374:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10449 comm="syz.4.1141" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f2fa79ae0d9 code=0x7ffc0000 [ 782.013549][ T38] audit: type=1326 audit(1787328126.384:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10449 comm="syz.4.1141" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa79ae0d9 code=0x7ffc0000 [ 782.014014][ T38] audit: type=1326 audit(1787328126.454:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10449 comm="syz.4.1141" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa79ae0d9 code=0x7ffc0000 [ 782.094932][ T9621] veth0_vlan: entered promiscuous mode [ 782.117063][T10197] team0: Port device team_slave_1 added [ 782.858357][ T38] audit: type=1326 audit(1787328127.294:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10458 comm="syz.4.1145" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa79ae0d9 code=0x7ffc0000 [ 782.887094][ T38] audit: type=1326 audit(1787328127.294:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10458 comm="syz.4.1145" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa79ae0d9 code=0x7ffc0000 [ 782.937316][ T38] audit: type=1326 audit(1787328127.374:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10458 comm="syz.4.1145" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa79ae0d9 code=0x7ffc0000 [ 782.937980][ T38] audit: type=1326 audit(1787328127.374:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10458 comm="syz.4.1145" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa79ae0d9 code=0x7ffc0000 [ 782.938036][ T38] audit: type=1326 audit(1787328127.374:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10458 comm="syz.4.1145" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f2fa79ae0d9 code=0x7ffc0000 [ 783.570507][ T6066] hsr_slave_0: left promiscuous mode [ 783.590999][ T6066] hsr_slave_1: left promiscuous mode [ 783.592533][ T6066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.643338][ T6066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.192853][T10464] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1147'. [ 784.192881][T10464] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1147'. [ 784.192898][T10464] netlink: 'syz.1.1147': attribute type 5 has an invalid length. [ 784.192911][T10464] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1147'. [ 784.525363][ T6066] team0 (unregistering): Port device team_slave_1 removed [ 784.530347][T10468] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.1.1148: No space for directory leaf checksum. Please run e2fsck -D. [ 784.530491][T10468] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.1.1148: checksumming directory block 0 [ 784.602948][T10468] netdevsim netdevsim1: loading /lib/firmware/updates/syzkaller/.. failed with error -74 [ 784.603148][T10468] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.1.1148: No space for directory leaf checksum. Please run e2fsck -D. [ 784.603177][T10468] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.1.1148: checksumming directory block 0 [ 784.603724][T10468] netdevsim netdevsim1: loading /lib/firmware/updates/.. failed with error -74 [ 784.603884][T10468] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.1.1148: No space for directory leaf checksum. Please run e2fsck -D. [ 784.603912][T10468] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.1.1148: checksumming directory block 0 [ 784.604313][T10468] netdevsim netdevsim1: loading /lib/firmware/syzkaller/.. failed with error -74 [ 784.604569][T10468] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.1.1148: No space for directory leaf checksum. Please run e2fsck -D. [ 784.604600][T10468] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.1.1148: checksumming directory block 0 [ 784.604999][T10468] netdevsim netdevsim1: loading /lib/firmware/.. failed with error -74 [ 784.605036][T10468] netdevsim netdevsim1: Direct firmware load for .. failed with error -74 [ 784.605090][T10468] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 784.764281][ T6066] team0 (unregistering): Port device team_slave_0 removed [ 785.122036][T10197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.122054][T10197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.122082][T10197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.272296][T10197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.272314][T10197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.272349][T10197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.304271][ T9621] veth1_vlan: entered promiscuous mode [ 786.039228][T10197] hsr_slave_0: entered promiscuous mode [ 786.047158][T10197] hsr_slave_1: entered promiscuous mode [ 786.048391][T10197] debugfs: 'hsr0' already exists in 'hsr' [ 786.048417][T10197] Cannot create hsr debugfs directory [ 786.146348][T10496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1160'. [ 786.146372][T10496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1160'. [ 786.368996][T10504] overlayfs: conflicting options: nfs_export=on,index=off [ 786.499078][T10507] netlink: 'syz.0.1164': attribute type 13 has an invalid length. [ 786.698084][T10507] gretap0: refused to change device tx_queue_len [ 786.698663][T10507] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 786.759437][T10512] tmpfs: Bad value for 'mpol' [ 786.936337][T10514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1166'. [ 787.230192][ T9621] veth0_macvtap: entered promiscuous mode [ 787.587476][ T9621] veth1_macvtap: entered promiscuous mode [ 787.816729][T10545] binder: BC_ACQUIRE_RESULT not supported [ 787.816745][T10545] binder: 10537:10545 ioctl c0306201 200000004a40 returned -22 [ 787.995768][ T5244] 8021q: adding VLAN 0 to HW filter on device eth1 [ 788.108361][ T9621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 788.303341][ T9621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.764122][ T6072] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.780799][ T6072] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.184151][T10601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1194'. [ 791.625635][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 791.659930][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 791.672482][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 791.751820][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 791.774353][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 792.168116][ T5244] 8021q: adding VLAN 0 to HW filter on device eth2 [ 792.689688][ T60] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 792.689744][ T60] CPU: 0 UID: 0 PID: 60 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 792.689777][ T60] Tainted: [L]=SOFTLOCKUP [ 792.689785][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 792.689799][ T60] Workqueue: hci4 hci_rx_work [ 792.690005][ T60] Call Trace: [ 792.690014][ T60] [ 792.690025][ T60] dump_stack_lvl+0xe8/0x150 [ 792.690137][ T60] sysfs_create_dir_ns+0x271/0x2a0 [ 792.690199][ T60] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 792.690240][ T60] ? rt_spin_unlock+0x165/0x200 [ 792.690329][ T60] kobject_add_internal+0x62c/0xce0 [ 792.690425][ T60] kobject_add+0x163/0x240 [ 792.690456][ T60] ? rt_spin_unlock+0x159/0x200 [ 792.690485][ T60] ? __pfx_kobject_add+0x10/0x10 [ 792.690526][ T60] ? get_device_parent+0x370/0x3a0 [ 792.690659][ T60] device_add+0x3fa/0xb80 [ 792.690715][ T60] hci_conn_add_sysfs+0xd5/0x210 [ 792.690768][ T60] le_conn_complete_evt+0xfb7/0x1690 [ 792.690854][ T60] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 792.690890][ T60] ? rt_mutex_slowunlock+0x219/0x460 [ 792.690914][ T60] ? skb_pull_data+0xf0/0x200 [ 792.690994][ T60] hci_le_enh_conn_complete_evt+0x189/0x490 [ 792.691027][ T60] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 792.691061][ T60] hci_event_packet+0x67a/0xf10 [ 792.691093][ T60] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 792.691127][ T60] ? __pfx_hci_event_packet+0x10/0x10 [ 792.691149][ T60] ? rt_spin_unlock+0x159/0x200 [ 792.691182][ T60] ? hci_send_to_monitor+0xe2/0x590 [ 792.691248][ T60] hci_rx_work+0x3ee/0x1020 [ 792.691281][ T60] ? process_scheduled_works+0x97a/0x1630 [ 792.691332][ T60] process_scheduled_works+0xc3d/0x1630 [ 792.691394][ T60] ? __pfx_process_scheduled_works+0x10/0x10 [ 792.691428][ T60] ? assign_work+0x3cf/0x5d0 [ 792.691460][ T60] worker_thread+0xa47/0xfb0 [ 792.691520][ T60] kthread+0x38b/0x470 [ 792.691561][ T60] ? __pfx_worker_thread+0x10/0x10 [ 792.691587][ T60] ? __pfx_kthread+0x10/0x10 [ 792.691623][ T60] ret_from_fork+0x514/0xb70 [ 792.691673][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 792.691707][ T60] ? __switch_to+0xc89/0x1420 [ 792.691739][ T60] ? __pfx_kthread+0x10/0x10 [ 792.691774][ T60] ret_from_fork_asm+0x1a/0x30 [ 792.691829][ T60] [ 792.692327][ T60] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 792.692448][ T60] Bluetooth: hci4: failed to register connection device [ 794.086358][ T5589] Bluetooth: hci5: command tx timeout [ 794.390739][ T6073] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.392419][ T6073] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.455187][T10650] tmpfs: Bad value for 'mpol' [ 794.589968][T10654] tmpfs: Unknown parameter 'grpquota [ 794.589968][T10654] ' [ 795.810655][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'. [ 796.115169][T10697] nvme_fabrics: unknown parameter or missing value 'ctrl_loss_tmo=' in ctrl creation request [ 796.194133][ T60] Bluetooth: hci5: command tx timeout [ 798.168003][ T6063] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.270392][ T60] Bluetooth: hci5: command tx timeout [ 799.219741][T10776] binder: BC_ACQUIRE_RESULT not supported [ 799.219756][T10776] binder: 10775:10776 ioctl c0306201 200000004a40 returned -22 [ 799.368093][ T6063] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.958526][ T6063] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.014683][T10613] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.014812][T10613] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.015036][T10613] bridge_slave_0: entered allmulticast mode [ 800.047051][T10613] bridge_slave_0: entered promiscuous mode [ 800.073082][T10613] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.073307][T10613] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.073512][T10613] bridge_slave_1: entered allmulticast mode [ 800.079220][T10613] bridge_slave_1: entered promiscuous mode [ 800.219229][T10811] ALSA: mixer_oss: invalid OSS volume '' [ 800.282575][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1261'. [ 800.360092][ T60] Bluetooth: hci5: command tx timeout [ 800.446630][T10613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.467437][T10613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.634603][T10197] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 801.618921][T10197] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 802.232906][ T6063] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.278867][T10613] team0: Port device team_slave_0 added [ 802.286436][T10197] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 802.349588][T10197] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 802.362356][T10613] team0: Port device team_slave_1 added [ 802.368839][T10197] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 802.468822][T10197] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 802.527768][T10197] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 802.590782][T10197] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 802.725928][T10613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.725946][T10613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.725976][T10613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.984087][T10613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.984105][T10613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.984134][T10613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.003174][T10613] hsr_slave_0: entered promiscuous mode [ 804.006279][T10613] hsr_slave_1: entered promiscuous mode [ 804.008102][T10613] debugfs: 'hsr0' already exists in 'hsr' [ 804.008128][T10613] Cannot create hsr debugfs directory [ 804.158525][T10872] netlink: 'syz.0.1284': attribute type 61 has an invalid length. [ 804.810888][ T6063] bridge_slave_1: left allmulticast mode [ 804.810924][ T6063] bridge_slave_1: left promiscuous mode [ 804.811205][ T6063] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.002186][ T6063] bridge_slave_0: left allmulticast mode [ 805.002225][ T6063] bridge_slave_0: left promiscuous mode [ 805.002469][ T6063] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.509592][T10897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1294'. [ 807.521816][ T6063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 807.581372][ T6063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 807.604357][ T6063] bond0 (unregistering): Released all slaves [ 807.813386][T10897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1294'. [ 808.480498][ T6063] hsr_slave_0: left promiscuous mode [ 808.500718][ T6063] hsr_slave_1: left promiscuous mode [ 808.501824][ T6063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.501844][ T6063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.541734][ T6063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.541779][ T6063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.763625][ T6063] veth1_macvtap: left promiscuous mode [ 808.763737][ T6063] veth0_macvtap: left promiscuous mode [ 808.764692][ T6063] veth1_vlan: left promiscuous mode [ 808.764900][ T6063] veth0_vlan: left promiscuous mode [ 808.847741][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.847830][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.215312][T10938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1313'. [ 809.215402][T10938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1313'. [ 810.421227][ T6063] team0 (unregistering): Port device team_slave_1 removed [ 810.461937][ T6063] team0 (unregistering): Port device team_slave_0 removed [ 810.881631][T10965] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1326'. [ 810.881661][T10965] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1326'. [ 812.560598][T10988] binder: BC_ACQUIRE_RESULT not supported [ 812.560615][T10988] binder: 10983:10988 ioctl c0306201 200000004a40 returned -22 [ 813.030830][T10197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.207174][T10197] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.255897][ T8476] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.256203][ T8476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.458208][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.458353][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.676984][T11004] netlink: 'syz.1.1336': attribute type 1 has an invalid length. [ 813.677011][T11004] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.1336'. [ 814.616707][ T5244] 8021q: adding VLAN 0 to HW filter on device eth1 [ 815.019075][T11040] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1348'. [ 815.019111][T11040] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 819.743118][T10197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 819.814417][T10613] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 819.848289][T11115] netlink: 'syz.0.1368': attribute type 30 has an invalid length. [ 819.875994][T10613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 819.922201][T11115] bond1: option arp_missed_max: invalid value (0) [ 819.922228][T11115] bond1: option arp_missed_max: allowed values 1 - 255 [ 820.006181][T11115] bond1 (unregistering): Released all slaves [ 820.081116][T10613] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 820.151245][T10613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 820.178913][T10613] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 820.212658][T10613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 820.253501][T10613] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 820.366985][T10613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 820.534009][T11125] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 820.595170][T11125] CIFS: Attempting to mount //127.0.0.1/test [ 820.753227][T11125] CIFS: VFS: Error connecting to socket. Aborting operation. [ 820.753933][T11125] CIFS: VFS: cifs_mount failed w/return code = -111 [ 821.395322][T11149] openvswitch: netlink: Tunnel attr 4 has unexpected len 0 expected 1 [ 821.396146][T10197] veth0_vlan: entered promiscuous mode [ 821.436610][T10613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.488724][T10197] veth1_vlan: entered promiscuous mode [ 821.519962][T10613] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.578380][ T8476] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.578619][ T8476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 821.793443][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.793759][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.129962][T10197] veth0_macvtap: entered promiscuous mode [ 823.235761][T10197] veth1_macvtap: entered promiscuous mode [ 823.505657][T11173] netlink: 'syz.4.1389': attribute type 21 has an invalid length. [ 823.509750][T11173] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1389'. [ 823.594924][T10197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 824.086485][T10197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.913603][ T8476] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.130500][ T3876] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.179636][T11215] binder: BC_ACQUIRE_RESULT not supported [ 828.179651][T11215] binder: 11212:11215 ioctl c0306201 200000004a40 returned -22 [ 828.962705][ T6056] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.004547][T11220] openvswitch: netlink: Message has 2 unknown bytes. [ 829.004594][T11220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 829.131771][ T6056] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.718476][ T5589] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 829.767029][ T5589] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 829.788821][ T5589] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 829.825695][T10613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.839579][ T5589] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 829.873437][ T5589] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 831.036051][T11263] wlan0 speed is unknown, defaulting to 1000 [ 831.036266][T11263] wlan0 speed is unknown, defaulting to 1000 [ 831.097217][T11263] wlan0 speed is unknown, defaulting to 1000 [ 831.099130][T11263] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 831.099168][T11263] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 831.099213][T11263] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 831.217229][T11263] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 831.269706][T11263] wlan0 speed is unknown, defaulting to 1000 [ 831.297583][T11263] wlan0 speed is unknown, defaulting to 1000 [ 831.312499][T11263] wlan0 speed is unknown, defaulting to 1000 [ 831.316943][T11263] wlan0 speed is unknown, defaulting to 1000 [ 831.339881][T11263] wlan0 speed is unknown, defaulting to 1000 [ 831.352734][T11263] wlan0 speed is unknown, defaulting to 1000 [ 831.355574][T11263] wlan0 speed is unknown, defaulting to 1000 [ 831.703854][T10613] veth0_vlan: entered promiscuous mode [ 831.716586][T10613] veth1_vlan: entered promiscuous mode [ 832.220644][ T60] Bluetooth: hci1: command tx timeout [ 832.629878][T10613] veth0_macvtap: entered promiscuous mode [ 832.647676][T10613] veth1_macvtap: entered promiscuous mode [ 833.538586][ T8479] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.728944][T11306] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1430'. [ 833.967856][T10613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 834.035148][T10613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 834.271312][ T60] Bluetooth: hci1: command tx timeout [ 834.867380][T11330] binder: BC_ACQUIRE_RESULT not supported [ 834.867395][T11330] binder: 11323:11330 ioctl c0306201 200000004a40 returned -22 [ 835.034044][ T8479] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.157550][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 835.157568][ T38] audit: type=1326 audit(1787328179.594:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11335 comm="syz.4.1443" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa79ae0d9 code=0x7ffc0000 [ 835.159438][ T38] audit: type=1326 audit(1787328179.594:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11335 comm="syz.4.1443" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa79ae0d9 code=0x7ffc0000 [ 835.220409][ T38] audit: type=1326 audit(1787328179.654:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11335 comm="syz.4.1443" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa79ae0d9 code=0x7ffc0000 [ 835.220803][ T38] audit: type=1326 audit(1787328179.664:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11335 comm="syz.4.1443" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f2fa79ae0d9 code=0x7ffc0000 [ 835.221202][ T38] audit: type=1326 audit(1787328179.664:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11335 comm="syz.4.1443" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa79ae0d9 code=0x7ffc0000 [ 835.221651][ T38] audit: type=1326 audit(1787328179.664:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11335 comm="syz.4.1443" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa79ae0d9 code=0x7ffc0000 [ 835.221700][ T38] audit: type=1326 audit(1787328179.664:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11335 comm="syz.4.1443" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa79ae0d9 code=0x7ffc0000 [ 835.222989][ T38] audit: type=1326 audit(1787328179.664:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11335 comm="syz.4.1443" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2fa79ae0d9 code=0x7ffc0000 [ 835.223392][ T38] audit: type=1326 audit(1787328179.664:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11335 comm="syz.4.1443" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2fa79ae0d9 code=0x7ffc0000 [ 835.359262][T11234] wlan0 speed is unknown, defaulting to 1000 [ 836.355280][ T60] Bluetooth: hci1: command tx timeout [ 837.076715][T11357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1453'. [ 837.076751][T11357] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 837.101241][ T8479] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.213247][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1455'. [ 837.406965][T11368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 838.022740][ T8479] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.389940][T11390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1467'. [ 838.431238][ T60] Bluetooth: hci1: command tx timeout [ 838.467650][ T6062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.467673][ T6062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.008663][ T6063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.008687][ T6063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.492002][ T38] audit: type=1326 audit(1787328183.934:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11413 comm="syz.0.1478" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fccf4e0d9 code=0x7ffc0000 [ 840.247697][ T6056] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.249248][ T6063] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.249510][ T6063] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.599063][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 840.599082][ T38] audit: type=1326 audit(1787328185.034:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11438 comm="syz.1.1489" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0fea9e0d9 code=0x7ffc0000 [ 840.599134][ T38] audit: type=1326 audit(1787328185.034:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11438 comm="syz.1.1489" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0fea9e0d9 code=0x7ffc0000 [ 840.603388][ T38] audit: type=1326 audit(1787328185.044:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11430 comm="syz.6.796" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f093b57e0d9 code=0x0 [ 840.639016][ T38] audit: type=1326 audit(1787328185.074:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11438 comm="syz.1.1489" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0fea9e0d9 code=0x7ffc0000 [ 840.639210][ T38] audit: type=1326 audit(1787328185.074:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11438 comm="syz.1.1489" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0fea9e0d9 code=0x7ffc0000 [ 840.644168][ T38] audit: type=1326 audit(1787328185.084:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11438 comm="syz.1.1489" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fa0fea9e0d9 code=0x7ffc0000 [ 840.644386][ T38] audit: type=1326 audit(1787328185.084:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11438 comm="syz.1.1489" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0fea9e0d9 code=0x7ffc0000 [ 840.644525][ T38] audit: type=1326 audit(1787328185.084:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11438 comm="syz.1.1489" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0fea9e0d9 code=0x7ffc0000 [ 840.646257][ T38] audit: type=1326 audit(1787328185.084:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11438 comm="syz.1.1489" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa0fea9e0d9 code=0x7ffc0000 [ 840.646374][ T38] audit: type=1326 audit(1787328185.084:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11438 comm="syz.1.1489" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa0fea9e0d9 code=0x7ffc0000 [ 841.015186][T11446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 841.088976][T11448] netlink: 'syz.0.1492': attribute type 10 has an invalid length. [ 841.733144][T11448] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 841.736663][T11448] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 841.838440][T11467] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1501'. [ 842.164876][T11479] binder: BC_ACQUIRE_RESULT not supported [ 842.164894][T11479] binder: 11473:11479 ioctl c0306201 200000004a40 returned -22 [ 842.283801][ T8479] bridge_slave_1: left allmulticast mode [ 842.283841][ T8479] bridge_slave_1: left promiscuous mode [ 842.284110][ T8479] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.442827][ T8479] bridge_slave_0: left allmulticast mode [ 842.442879][ T8479] bridge_slave_0: left promiscuous mode [ 842.443202][ T8479] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.131146][ T8479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 844.211379][ T8479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 844.254599][ T8479] bond0 (unregistering): Released all slaves [ 844.861280][T11493] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 844.946052][T11234] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.946214][T11234] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.946445][T11234] bridge_slave_0: entered allmulticast mode [ 844.982880][T11234] bridge_slave_0: entered promiscuous mode [ 845.020739][ T6052] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.044850][T11234] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.044995][T11234] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.045221][T11234] bridge_slave_1: entered allmulticast mode [ 845.077201][T11234] bridge_slave_1: entered promiscuous mode [ 845.166672][T11502] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1515'. [ 845.394210][T11234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.457254][T11234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.180356][ T2256] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 846.332355][ T2256] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 846.334499][ T2256] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 846.334557][ T2256] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 846.334582][ T2256] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 846.334606][ T2256] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 846.428436][ T2256] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 846.428469][ T2256] usb 5-1: Product: syz [ 846.428487][ T2256] usb 5-1: Manufacturer: syz [ 846.529591][ T2256] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 846.790453][T11542] netlink: 'syz.0.1527': attribute type 2 has an invalid length. [ 846.796153][ T2256] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90 [ 846.918020][T11234] team0: Port device team_slave_0 added [ 846.928636][ T2256] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 846.957053][T11234] team0: Port device team_slave_1 added [ 847.011808][ T2256] usb 5-1: USB disconnect, device number 17 [ 847.229672][ T2256] garmin_gps 5-1:1.0: device disconnected [ 848.027166][T11234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 848.027186][T11234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.027218][T11234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 848.032697][ T5244] 8021q: adding VLAN 0 to HW filter on device eth1 [ 848.185687][T11234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 848.185703][T11234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.185725][T11234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 848.702021][T11585] netlink: 'syz.0.1542': attribute type 21 has an invalid length. [ 848.804871][T11234] hsr_slave_0: entered promiscuous mode [ 848.808167][T11234] hsr_slave_1: entered promiscuous mode [ 848.832462][T11234] debugfs: 'hsr0' already exists in 'hsr' [ 848.832493][T11234] Cannot create hsr debugfs directory [ 849.034795][T11588] binder: BC_ACQUIRE_RESULT not supported [ 849.034812][T11588] binder: 11587:11588 ioctl c0306201 200000004a40 returned -22 [ 849.452125][T11608] binder: BC_ACQUIRE_RESULT not supported [ 849.452143][T11608] binder: 11607:11608 ioctl c0306201 200000004a40 returned -22 [ 850.362923][ T8479] hsr_slave_0: left promiscuous mode [ 850.410978][ T8479] hsr_slave_1: left promiscuous mode [ 850.412606][ T8479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.418558][ T8479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 850.453368][ T8479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.453398][ T8479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.747483][ T8479] veth1_macvtap: left promiscuous mode [ 850.747603][ T8479] veth0_macvtap: left promiscuous mode [ 850.799942][ T8479] veth1_vlan: left promiscuous mode [ 850.800156][ T8479] veth0_vlan: left promiscuous mode [ 851.349361][T11644] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1560'. [ 851.539743][T11646] binder: BC_ACQUIRE_RESULT not supported [ 851.539761][T11646] binder: 11645:11646 ioctl c0306201 200000004a40 returned -22 [ 852.412634][ T8479] team0 (unregistering): Port device team_slave_1 removed [ 852.501318][ T8479] team0 (unregistering): Port device team_slave_0 removed [ 852.751407][T11629] tipc: Enabling of bearer rejected, failed to enable media [ 852.756458][ T5244] 8021q: adding VLAN 0 to HW filter on device eth2 [ 853.177163][T11674] sock: sock_set_timeout: `syz.1.1572' (pid 11674) tries to set negative timeout [ 854.960378][ T5914] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 855.160529][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 855.161393][ T5914] usb 2-1: New USB device found, idVendor=056a, idProduct=00c7, bcdDevice= 0.00 [ 855.168625][ T5914] usb 2-1: config 0 interface 0 altsetting 216 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.168660][ T5914] usb 2-1: config 0 interface 0 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 855.168689][ T5914] usb 2-1: config 0 interface 0 has no altsetting 0 [ 855.168724][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.235111][ T5914] usb 2-1: config 0 descriptor?? [ 855.907927][ T5914] wacom 0003:056A:00C7.0001: hidraw0: USB HID v7f.fe Joystick [HID 056a:00c7] on usb-dummy_hcd.1-1/input0 [ 855.934908][ T5914] usb 2-1: USB disconnect, device number 12 [ 856.016526][ T5244] 8021q: adding VLAN 0 to HW filter on device eth3 [ 856.092932][T11744] udevd[11744]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 857.633702][T11787] binder: BC_ACQUIRE_RESULT not supported [ 857.633954][T11787] binder: 11783:11787 ioctl c0306201 200000004a40 returned -22 [ 858.494079][T11804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1621'. [ 858.944431][T11823] binder: BC_ACQUIRE_RESULT not supported [ 858.944447][T11823] binder: 11817:11823 ioctl c0306201 200000004a40 returned -22 [ 859.814453][T11842] tipc: Enabling of bearer rejected, failed to enable media [ 859.918421][T11847] binder: BC_ACQUIRE_RESULT not supported [ 859.918439][T11847] binder: 11841:11847 ioctl c0306201 200000004a40 returned -22 [ 861.565672][T11895] netlink: 'syz.6.1652': attribute type 8 has an invalid length. [ 861.565698][T11895] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1652'. [ 861.565748][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1652'. [ 862.509972][T11234] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 862.623850][T11914] binder: BC_ACQUIRE_RESULT not supported [ 862.623865][T11914] binder: 11913:11914 ioctl c0306201 200000004a40 returned -22 [ 862.857747][T11234] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 862.861048][T11234] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 862.955207][T11927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1662'. [ 863.089881][T11234] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 863.188222][T11234] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 863.329414][T11234] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 863.341823][T11234] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 863.452772][T11234] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 863.726082][T11952] netlink: 'syz.4.1669': attribute type 25 has an invalid length. [ 864.121392][T11966] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1675'. [ 864.326180][T11234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 864.521245][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 864.613266][T11234] 8021q: adding VLAN 0 to HW filter on device team0 [ 864.680453][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 864.682441][ T10] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 864.710169][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.712766][ T10] usb 2-1: Product: syz [ 864.712788][ T10] usb 2-1: Manufacturer: syz [ 864.712806][ T10] usb 2-1: SerialNumber: syz [ 864.749214][ T10] usb 2-1: config 0 descriptor?? [ 864.761877][ T6065] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.762012][ T6065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.772038][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 864.969384][ T6056] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.969635][ T6056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 865.148715][T11987] binder: BC_ACQUIRE_RESULT not supported [ 865.148731][T11987] binder: 11985:11987 ioctl c0306201 200000004a40 returned -22 [ 865.341841][ T10] gspca_se401: Bayer format not supported! [ 866.212906][ T9] usb 2-1: USB disconnect, device number 13 [ 866.570967][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 866.731567][ T10] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 866.737177][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 866.782382][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.782415][ T10] usb 5-1: Product: syz [ 866.782431][ T10] usb 5-1: Manufacturer: syz [ 866.782448][ T10] usb 5-1: SerialNumber: syz [ 867.273035][ T10] ttusb-dec 5-1:1.0: probe with driver ttusb-dec failed with error -2 [ 867.305081][T12018] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1689'. [ 867.333775][ T31] usb 5-1: USB disconnect, device number 18 [ 867.631577][T12024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1692'. [ 867.743952][T12028] binder: BC_ACQUIRE_RESULT not supported [ 867.743969][T12028] binder: 12025:12028 ioctl c0306201 200000004a40 returned -22 [ 868.283190][T12049] binder: BC_ACQUIRE_RESULT not supported [ 868.283209][T12049] binder: 12041:12049 ioctl c0306201 200000004a40 returned -22 [ 868.489898][T12056] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1701'. [ 868.685060][T12062] netlink: 'syz.6.1702': attribute type 1 has an invalid length. [ 869.320120][T11234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.272492][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.272553][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.783686][T12124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1724'. [ 870.927320][T11234] veth0_vlan: entered promiscuous mode [ 871.033556][T11234] veth1_vlan: entered promiscuous mode [ 871.347606][T12130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1726'. [ 871.368397][T11234] veth0_macvtap: entered promiscuous mode [ 871.388859][T11234] veth1_macvtap: entered promiscuous mode [ 871.584265][T11234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 871.640018][T11234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 872.103497][ T6062] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.110401][ T6056] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.111000][ T6056] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.323054][T12147] No buffer was provided with the request [ 872.978450][ T6056] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.744464][ T6066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.744488][ T6066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.511814][ T3876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.511841][ T3876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.328012][ T38] audit: type=1326 audit(1787328222.714:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12213 comm="syz.5.691" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d0346e0d9 code=0x0 [ 880.142923][ T31] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 880.310923][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 880.359287][ T31] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 880.376248][ T31] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 880.376278][ T31] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 880.376298][ T31] usb 7-1: config 0 has no interface number 0 [ 880.376344][ T31] usb 7-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 880.466381][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.466412][ T31] usb 7-1: Product: syz [ 880.466427][ T31] usb 7-1: Manufacturer: syz [ 880.466443][ T31] usb 7-1: SerialNumber: syz [ 880.652820][ T31] usb 7-1: config 0 descriptor?? [ 880.759693][ T31] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 880.775942][ T31] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22 [ 881.964311][T12270] binder: BC_ACQUIRE_RESULT not supported [ 881.964327][T12270] binder: 12265:12270 ioctl c0306201 200000004a40 returned -22 [ 882.933778][T12295] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1785'. [ 882.973888][ T10] usb 7-1: USB disconnect, device number 2 [ 883.200358][ T8671] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 883.406347][T12303] ipvlan2: entered promiscuous mode [ 883.470829][ T8671] usb 5-1: Using ep0 maxpacket: 8 [ 883.471682][ T8671] usb 5-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 883.473213][ T8671] usb 5-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30 [ 883.473260][ T8671] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.473287][ T8671] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 883.473315][ T8671] usb 5-1: config 0 interface 0 has no altsetting 0 [ 883.473353][ T8671] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.567177][ T8671] usb 5-1: config 0 descriptor?? [ 883.811412][ T8671] usbhid 5-1:0.0: can't add hid device: -71 [ 883.811553][ T8671] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 883.973090][ T8671] usb 5-1: USB disconnect, device number 19 [ 885.240808][T12335] binder: BC_ACQUIRE_RESULT not supported [ 885.240826][T12335] binder: 12326:12335 ioctl c0306201 200000004a40 returned -22 [ 885.396061][ T6062] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.766477][T12334] sch_fq: defrate 1 ignored. [ 885.788104][ T5589] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 885.843159][ T5589] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 885.845102][ T5589] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 885.845916][T12333] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 885.868986][ T5589] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 885.904458][ T5589] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 887.300445][ T6062] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.104542][T12361] erspan1: entered allmulticast mode [ 888.203698][ T5589] Bluetooth: hci2: command tx timeout [ 888.496727][ T8671] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 888.651288][ T8671] usb 2-1: New USB device found, idVendor=093a, idProduct=8002, bcdDevice= 0.00 [ 888.657517][ T8671] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 888.657560][ T8671] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.657587][ T8671] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 888.657636][ T8671] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.718308][ T8671] usb 2-1: config 0 descriptor?? [ 889.029972][ T6062] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.243043][ T8671] hid-generic 0003:093A:8002.0002: unbalanced collection at end of report description [ 889.243840][ T8671] hid-generic 0003:093A:8002.0002: probe with driver hid-generic failed with error -22 [ 889.455407][ T8671] usb 2-1: USB disconnect, device number 14 [ 889.899527][T12421] netlink: 'syz.5.1827': attribute type 1 has an invalid length. [ 889.899550][T12421] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1827'. [ 890.017800][ T6062] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.270445][ T5589] Bluetooth: hci2: command tx timeout [ 890.560609][T12339] wlan0 speed is unknown, defaulting to 1000 [ 892.353629][ T5589] Bluetooth: hci2: command tx timeout [ 894.007043][T12542] pimreg: entered allmulticast mode [ 894.278574][ T6062] bridge_slave_1: left allmulticast mode [ 894.278610][ T6062] bridge_slave_1: left promiscuous mode [ 894.278889][ T6062] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.430624][ T5589] Bluetooth: hci2: command tx timeout [ 894.454354][ T6062] bridge_slave_0: left allmulticast mode [ 894.454396][ T6062] bridge_slave_0: left promiscuous mode [ 894.454680][ T6062] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.460407][ T5916] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 894.499455][T12567] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 894.642486][ T5916] usb 7-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 894.665866][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.665900][ T5916] usb 7-1: Product: syz [ 894.665918][ T5916] usb 7-1: Manufacturer: syz [ 894.665936][ T5916] usb 7-1: SerialNumber: syz [ 894.698907][ T5916] usb 7-1: config 0 descriptor?? [ 894.730543][ T5916] gspca_main: spca508-2.14.0 probing 041e:4018 [ 894.920077][ T5916] gspca_spca508: reg_read err -32 [ 895.110512][ T8671] ================================================================== [ 895.110528][ T8671] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 895.110614][ T8671] Read of size 8 at addr ffffc90006f6a008 by task kworker/0:4/8671 [ 895.110633][ T8671] [ 895.110655][ T8671] CPU: 0 UID: 0 PID: 8671 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 895.110678][ T8671] Tainted: [L]=SOFTLOCKUP [ 895.110684][ T8671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 895.110715][ T8671] Workqueue: usb_hub_wq hub_event [ 895.110849][ T8671] Call Trace: [ 895.110857][ T8671] [ 895.110868][ T8671] dump_stack_lvl+0xe8/0x150 [ 895.110904][ T8671] print_address_description+0x55/0x1e0 [ 895.110954][ T8671] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 895.110979][ T8671] print_report+0x58/0x70 [ 895.111011][ T8671] kasan_report+0x117/0x150 [ 895.111065][ T8671] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 895.111096][ T8671] __list_del_entry_valid_or_report+0xb5/0x190 [ 895.111126][ T8671] kcov_remote_start+0x2aa/0x710 [ 895.111168][ T8671] hub_event+0x15d/0x4cf0 [ 895.111196][ T8671] ? rt_spin_unlock+0x165/0x200 [ 895.111220][ T8671] ? __lock_acquire+0x683/0x2ce0 [ 895.111268][ T8671] ? register_lock_class+0x31/0x2e0 [ 895.111294][ T8671] ? __lock_acquire+0x683/0x2ce0 [ 895.111324][ T8671] ? do_raw_spin_lock+0x12b/0x2f0 [ 895.111359][ T8671] ? __pfx_hub_event+0x10/0x10 [ 895.111383][ T8671] ? process_scheduled_works+0x97a/0x1630 [ 895.111405][ T8671] ? rcu_is_watching+0x16/0xb0 [ 895.111454][ T8671] ? process_scheduled_works+0x97a/0x1630 [ 895.111481][ T8671] process_scheduled_works+0xc3d/0x1630 [ 895.111522][ T8671] ? __pfx_process_scheduled_works+0x10/0x10 [ 895.111552][ T8671] ? assign_work+0x3cf/0x5d0 [ 895.111577][ T8671] worker_thread+0xa47/0xfb0 [ 895.111617][ T8671] ? __kthread_parkme+0x71/0x1f0 [ 895.111651][ T8671] kthread+0x38b/0x470 [ 895.111684][ T8671] ? __pfx_worker_thread+0x10/0x10 [ 895.111708][ T8671] ? __pfx_kthread+0x10/0x10 [ 895.111742][ T8671] ret_from_fork+0x514/0xb70 [ 895.111767][ T8671] ? __pfx_ret_from_fork+0x10/0x10 [ 895.111810][ T8671] ? __switch_to+0xc89/0x1420 [ 895.111838][ T8671] ? __pfx_kthread+0x10/0x10 [ 895.111870][ T8671] ret_from_fork_asm+0x1a/0x30 [ 895.111912][ T8671] [ 895.111920][ T8671] [ 895.111925][ T8671] The buggy address belongs to a vmalloc virtual mapping [ 895.111956][ T8671] Memory state around the buggy address: [ 895.111983][ T8671] ffffc90006f69f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 895.111998][ T8671] ffffc90006f69f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 895.112013][ T8671] >ffffc90006f6a000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 895.112025][ T8671] ^ [ 895.112036][ T8671] ffffc90006f6a080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 895.112050][ T8671] ffffc90006f6a100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 895.112061][ T8671] ================================================================== [ 895.112890][ T8671] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 895.112913][ T8671] CPU: 0 UID: 0 PID: 8671 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 895.112952][ T8671] Tainted: [L]=SOFTLOCKUP [ 895.112961][ T8671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 895.112977][ T8671] Workqueue: usb_hub_wq hub_event [ 895.113001][ T8671] Call Trace: [ 895.113009][ T8671] [ 895.113018][ T8671] vpanic+0x56d/0xa60 [ 895.113054][ T8671] ? rcu_is_watching+0x16/0xb0 [ 895.113083][ T8671] ? __pfx_vpanic+0x10/0x10 [ 895.113121][ T8671] panic+0xc5/0xd0 [ 895.113153][ T8671] ? __pfx_panic+0x10/0x10 [ 895.113187][ T8671] ? preempt_schedule_thunk+0x16/0x40 [ 895.113215][ T8671] ? preempt_schedule_thunk+0x16/0x40 [ 895.113241][ T8671] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 895.113268][ T8671] check_panic_on_warn+0x89/0xb0 [ 895.113316][ T8671] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 895.113343][ T8671] end_report+0x73/0x170 [ 895.113367][ T8671] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 895.113393][ T8671] kasan_report+0x128/0x150 [ 895.113418][ T8671] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 895.113450][ T8671] __list_del_entry_valid_or_report+0xb5/0x190 [ 895.113479][ T8671] kcov_remote_start+0x2aa/0x710 [ 895.113502][ T8671] hub_event+0x15d/0x4cf0 [ 895.113532][ T8671] ? rt_spin_unlock+0x165/0x200 [ 895.113559][ T8671] ? __lock_acquire+0x683/0x2ce0 [ 895.113585][ T8671] ? register_lock_class+0x31/0x2e0 [ 895.113611][ T8671] ? __lock_acquire+0x683/0x2ce0 [ 895.113641][ T8671] ? do_raw_spin_lock+0x12b/0x2f0 [ 895.113678][ T8671] ? __pfx_hub_event+0x10/0x10 [ 895.113700][ T8671] ? process_scheduled_works+0x97a/0x1630 [ 895.113730][ T8671] ? rcu_is_watching+0x16/0xb0 [ 895.113759][ T8671] ? process_scheduled_works+0x97a/0x1630 [ 895.113785][ T8671] process_scheduled_works+0xc3d/0x1630 [ 895.113826][ T8671] ? __pfx_process_scheduled_works+0x10/0x10 [ 895.113857][ T8671] ? assign_work+0x3cf/0x5d0 [ 895.113885][ T8671] worker_thread+0xa47/0xfb0 [ 895.113919][ T8671] ? __kthread_parkme+0x71/0x1f0 [ 895.113961][ T8671] kthread+0x38b/0x470 [ 895.113994][ T8671] ? __pfx_worker_thread+0x10/0x10 [ 895.114020][ T8671] ? __pfx_kthread+0x10/0x10 [ 895.114053][ T8671] ret_from_fork+0x514/0xb70 [ 895.114084][ T8671] ? __pfx_ret_from_fork+0x10/0x10 [ 895.114115][ T8671] ? __switch_to+0xc89/0x1420 [ 895.114144][ T8671] ? __pfx_kthread+0x10/0x10 [ 895.114177][ T8671] ret_from_fork_asm+0x1a/0x30 [ 895.114219][ T8671] [ 895.114814][ T8671] Kernel Offset: disabled