last executing test programs: 6m44.210480338s ago: executing program 0 (id=2550): ioperm(0x4, 0x8, 0x5) prctl$PR_MCE_KILL(0x41555856, 0x3fe4d2d6dac9410, 0x2) 6m43.933159842s ago: executing program 0 (id=2553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930e18fbd77601b649c063577adb1a2b3600008", 0x69}], 0x1}, 0x0) 6m43.595942058s ago: executing program 0 (id=2558): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1) 6m43.313243678s ago: executing program 0 (id=2562): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000440)={"0e000016", 0x0, 0x6, 0x2, 0x0, 0x1, "f70000000000000000deffffff00", '\x00\x00\a\x00', "0300", "0001ffff", ['\x00', "808e88e2e9ffffffffff00", "0cdd42000000000000c20d00"]}) 6m42.893548043s ago: executing program 0 (id=2568): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, 0x0, &(0x7f0000000080)) 6m42.604973434s ago: executing program 0 (id=2572): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) 6m28.177136266s ago: executing program 32 (id=2572): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) 2m25.964293784s ago: executing program 2 (id=4478): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x23a0, 0x0) read$mtd(r0, 0x0, 0x0) 2m25.58152125s ago: executing program 2 (id=4481): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="24000000000000002900000032000000000000071ea170e21dc0d4693add4346", @ANYRES32=0x0, @ANYBLOB="000000001800"], 0x40}}], 0x1, 0x10) 2m25.252349428s ago: executing program 2 (id=4486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RANGE_FROM_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xd0}}, 0x0) 2m24.730610171s ago: executing program 2 (id=4494): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x49108}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_IKEY={0x8, 0x4, 0xffffff9d}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m24.484053297s ago: executing program 2 (id=4498): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m23.162668803s ago: executing program 2 (id=4507): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 2m8.669203164s ago: executing program 33 (id=4507): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 40.910441696s ago: executing program 5 (id=5552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa4}}, 0x0) 40.772183337s ago: executing program 5 (id=5556): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000240)=0x7) 40.458171595s ago: executing program 5 (id=5560): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x6}) 40.043700363s ago: executing program 5 (id=5562): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000200)={0xf000300, 0x100001, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 39.63966551s ago: executing program 5 (id=5566): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {}, 0x0, 0x0, 0x2, 0x1}, {{@in=@rand_addr=0x64010100, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0xe8) 39.40000108s ago: executing program 5 (id=5570): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf220043173ef9ce5}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x178, 0x1403, 0x1, 0x70bd28, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'caif0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'caif0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'erspan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}]}, 0x178}, 0x1, 0x0, 0x0, 0x1}, 0x900) 25.001719027s ago: executing program 34 (id=5570): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf220043173ef9ce5}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x178, 0x1403, 0x1, 0x70bd28, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'caif0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'caif0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'erspan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}]}, 0x178}, 0x1, 0x0, 0x0, 0x1}, 0x900) 6.128077822s ago: executing program 3 (id=5816): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010001980"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 5.698179082s ago: executing program 3 (id=5820): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee5, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800f00001"], 0x48) 5.119890827s ago: executing program 3 (id=5823): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 3.936344355s ago: executing program 3 (id=5830): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 2.87645171s ago: executing program 4 (id=5840): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0xe98, 0x0, 0xfffffffd}) 2.668180142s ago: executing program 4 (id=5842): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f00000002c0)=0x4, 0x4) 2.459311577s ago: executing program 4 (id=5844): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000058004f0f9c00f4f90085b3a85c91fddf080001000501009f08000280feffff7f", 0x24) 2.179797877s ago: executing program 4 (id=5847): readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000240), 0x10, &(0x7f0000000080)=[{&(0x7f0000000140)=""/5, 0x11}], 0x0, 0x0) 2.028090442s ago: executing program 6 (id=5849): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000000000000000000000028500000017000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000780)="a0de208ab086eeafa381717b1da1", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.98926079s ago: executing program 4 (id=5850): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x4b, 0xf, [0xf68f, 0x8, 0x9, 0x1ff, 0x0, 0x4, 0xe97, 0x4, 0x6, 0x1000, 0xff, 0x101, 0x7, 0x0, 0x3d, 0x5e, 0xfffffff9, 0xffff, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xffffff6b, 0x652c, 0xaa8, 0x7ffffffc, 0xd, 0xe9c4, 0xcd8, 0x6e, 0x6, 0x7, 0xc, 0x8a, 0x3, 0x6, 0x3, 0x3, 0x3, 0xfffffffc, 0xfd2, 0xa, 0x8, 0x401, 0xeffff801, 0x2b, 0xa, 0x0, 0x7, 0x8, 0x5, 0x3, 0x6, 0x8, 0x23, 0xff, 0x3, 0x10, 0x3, 0xffffffff, 0xb65, 0x6000000, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x400, 0x80800000, 0x8000, 0x3, 0x5, 0x2, 0x0, 0x2, 0x1, 0x6, 0x4, 0x3, 0x0, 0xd, 0x2000006, 0x7, 0x1008, 0x0, 0xffffffff, 0xfffffffc, 0x12, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0x3, 0x4, 0x1, 0xa, 0x6, 0x7fff, 0x1, 0x704, 0x33e4, 0x9, 0x6, 0x7fff, 0x6, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x6, 0x7, 0x200, 0x9, 0xe, 0x81, 0x0, 0x4, 0x4, 0x5, 0x8, 0x3, 0x1, 0xfffffffa]}}) 1.732660252s ago: executing program 6 (id=5852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="080100000001050588000000000000000a0000053c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020000000000000000000000000001140004002001000000000000000000000000000108000740000000007400068014000500fe80000000000000000000000000001d08000200ac1414bb080002000a01010008000100e0000001080002006401010108000100ac1e00e52c000380060002004e220000060001004e22eeff050002"], 0x108}}, 0x0) 1.534005945s ago: executing program 6 (id=5854): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7}) setfsuid(0xee01) 1.310305275s ago: executing program 6 (id=5857): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001500010000000000000000002d"], 0x20}}, 0x0) 1.269145447s ago: executing program 1 (id=5858): r0 = add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @desc3}, &(0x7f00000005c0)={0x0, "97c6e5c022b54c6e01b65660c23e2072121e3abaa079b86c68786694adfc6023d285b4dddea6bb5e36126e910840b462b36660c2e2aa14245c328b69992477ec", 0x400013}, 0x48, 0xfffffffffffffffe) keyctl$clear(0x7, r0) 1.088794061s ago: executing program 1 (id=5859): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0xffffff1f}}]}}, &(0x7f0000000f40)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 1.021025855s ago: executing program 1 (id=5860): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) 759.940136ms ago: executing program 3 (id=5861): r0 = request_key(&(0x7f0000000740)='dns_resolver\x00', &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)='\x00', 0xffffffffffffffff) request_key(&(0x7f0000000680)='dns_resolver\x00', &(0x7f00000006c0)={'syz', 0x1}, 0x0, r0) 749.121236ms ago: executing program 1 (id=5862): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write(r0, &(0x7f0000000500)="7472616e73706f72743d72646d612c6e716e3d6e716e2e323031342d30382e6f72672e6e766d657870726573733a4e564d663a757569643a31323334353637382d313233342d313233342d313233342d3132333435363938396162632c686f73745f7472616464723d3132370f302e302e312c7472616464723d3132372e302e302e312c747273766369643d34", 0x8d) 390.191135ms ago: executing program 4 (id=5863): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 368.344351ms ago: executing program 6 (id=5864): r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x4, 0x5, 0x56595559, 0x3447504d, [0x8000, 0x8], [0xffffffff, 0x1], 0x13a}}) 219.255364ms ago: executing program 1 (id=5865): symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 176.132088ms ago: executing program 3 (id=5866): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x400, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) 71.355931ms ago: executing program 1 (id=5867): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000100)={0x7efe, 0x0, 0xfdfd, 0x2, 0x6, 0x7}) 0s ago: executing program 6 (id=5868): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) kernel console output (not intermixed with test programs): T5324] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 586.256505][ T5324] usb 5-1: config 1 has no interface number 0 [ 586.256551][ T5324] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 586.256577][ T5324] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 586.256601][ T5324] usb 5-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 586.320985][ T5324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.321018][ T5324] usb 5-1: Product: syz [ 586.321035][ T5324] usb 5-1: Manufacturer: syz [ 586.321051][ T5324] usb 5-1: SerialNumber: syz [ 586.367265][T13924] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 586.391071][ T5324] usb 5-1: Expected 3 endpoints, found: 2 [ 586.658775][ T5848] usb 5-1: USB disconnect, device number 103 [ 587.750562][ T5734] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 587.896319][ T5734] usb 4-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice= 0.00 [ 587.901979][ T5734] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 587.902039][ T5734] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 587.902083][ T5734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.039528][ T5734] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 588.494716][ T5734] usb 4-1: USB disconnect, device number 62 [ 588.496163][ T2369] pvrusb2: control-write URB failure, status=-71 [ 588.496183][ T2369] pvrusb2: Device being rendered inoperable [ 588.498248][ T2369] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 588.498265][ T2369] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 588.902801][T13963] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 590.547368][T13161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.856595][T14022] bridge_slave_1: left allmulticast mode [ 590.856637][T14022] bridge_slave_1: left promiscuous mode [ 590.888572][T14022] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.919913][T14015] kAFS: unable to lookup cell '(G' [ 591.086420][T14022] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 591.893861][ T5734] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 592.049160][ T5734] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 592.051370][ T5734] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 592.051430][ T5734] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 592.051453][ T5734] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 592.051500][ T5734] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.275474][ T5324] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 592.423519][ T5734] cxacru 5-1:1.0: receive of cm 0x90 failed (-71) [ 592.423671][ T5734] cxacru 5-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 592.437386][ T5324] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 592.442233][ T5324] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 592.463658][ T5324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 592.463693][ T5324] usb 4-1: SerialNumber: syz [ 592.490446][ T5734] cxacru 5-1:1.0: probe with driver cxacru failed with error -22 [ 592.542403][ T5734] usb 5-1: USB disconnect, device number 104 [ 592.565159][T13161] veth0_vlan: entered promiscuous mode [ 592.840835][T13161] veth1_vlan: entered promiscuous mode [ 592.983455][ T5324] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 593.015100][ T5324] usb 4-1: USB disconnect, device number 63 [ 593.448632][T13161] veth0_macvtap: entered promiscuous mode [ 593.490850][T13161] veth1_macvtap: entered promiscuous mode [ 593.623501][T13161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.829474][T14072] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3719'. [ 593.868321][T13161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.094481][ T3423] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.097089][ T3374] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.097141][ T3374] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.103556][ T1272] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.837750][T14093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.957642][T14093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.998435][T14093] bond0 (unregistering): Released all slaves [ 596.497649][T14111] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3737'. [ 597.143558][ T1272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.143586][ T1272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.750302][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.750330][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.427671][ T5734] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 598.572812][ T5734] usb 3-1: Using ep0 maxpacket: 16 [ 598.577156][ T5734] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 598.596754][ T5734] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 598.610721][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.610754][ T5734] usb 3-1: Product: syz [ 598.610770][ T5734] usb 3-1: Manufacturer: syz [ 598.610787][ T5734] usb 3-1: SerialNumber: syz [ 598.657702][ T5734] r8152-cfgselector 3-1: Unknown version 0x0000 [ 598.657734][ T5734] r8152-cfgselector 3-1: config 0 descriptor?? [ 598.712262][T14153] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 599.191814][ T49] r8152-cfgselector 3-1: USB disconnect, device number 100 [ 600.014052][T14189] netlink: 'syz.2.3773': attribute type 10 has an invalid length. [ 600.014082][T14189] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3773'. [ 600.083366][T14189] team0: entered promiscuous mode [ 600.083443][T14189] team0: entered allmulticast mode [ 600.084611][T14189] bridge0: port 1(team0) entered blocking state [ 600.090854][T14189] bridge0: port 1(team0) entered disabled state [ 600.303340][T14194] overlayfs: conflicting options: userxattr,metacopy=on [ 601.067384][T14212] netlink: 'syz.1.3781': attribute type 9 has an invalid length. [ 601.572518][T14201] veth0_macvtap: left allmulticast mode [ 602.193665][T14201] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 602.377078][ T36] audit: type=1326 audit(3937513484.165:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14239 comm="syz.1.3792" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 602.377135][ T36] audit: type=1326 audit(3937513484.165:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14239 comm="syz.1.3792" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 602.400994][ T36] audit: type=1326 audit(3937513484.186:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14239 comm="syz.1.3792" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 602.428900][ T36] audit: type=1326 audit(3937513484.186:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14239 comm="syz.1.3792" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 602.428954][ T36] audit: type=1326 audit(3937513484.218:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14239 comm="syz.1.3792" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 602.428995][ T36] audit: type=1326 audit(3937513484.218:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14239 comm="syz.1.3792" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 602.493083][ T36] audit: type=1326 audit(3937513484.186:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14239 comm="syz.1.3792" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 602.504991][ T36] audit: type=1326 audit(3937513484.302:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14239 comm="syz.1.3792" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 602.505045][ T36] audit: type=1326 audit(3937513484.302:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14239 comm="syz.1.3792" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 602.589087][T14201] bridge2: left promiscuous mode [ 602.805118][ T3402] bridge0: port 3(team_slave_1) entered blocking state [ 602.805274][ T3402] bridge0: port 3(team_slave_1) entered forwarding state [ 603.368315][T14220] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 604.092739][T14266] libceph: resolve 'c' (ret=-3): failed [ 604.770204][T14291] openvswitch: netlink: VXLAN extension 54 out of range max 1 [ 606.125803][T14322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3824'. [ 606.125837][T14322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3824'. [ 606.990690][T14335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 607.317256][T14347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3835'. [ 607.317291][T14347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3835'. [ 607.317331][T14347] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3835'. [ 607.536444][ T5878] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 607.708940][T14355] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3838'. [ 607.721600][ T5878] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 607.726389][ T5878] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 607.731787][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.731815][ T5878] usb 2-1: Product: syz [ 607.731830][ T5878] usb 2-1: Manufacturer: syz [ 607.731844][ T5878] usb 2-1: SerialNumber: syz [ 607.767789][ T5878] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 608.032120][ T5878] gspca_mr97310a: reg read [21] error -71 [ 608.032257][ T5878] mr97310a 2-1:1.0: probe with driver mr97310a failed with error -71 [ 608.059559][ T5878] usb 2-1: USB disconnect, device number 101 [ 608.729980][T14372] bond2: option all_slaves_active: invalid value (2) [ 608.807689][T14372] bond2 (unregistering): Released all slaves [ 610.400439][ T5734] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 610.473936][ T36] audit: type=1326 audit(3937513492.659:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14419 comm="syz.4.3869" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9691b1e159 code=0x7ffc0000 [ 610.478847][ T36] audit: type=1326 audit(3937513492.659:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14419 comm="syz.4.3869" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9691b1e159 code=0x7ffc0000 [ 610.493421][ T36] audit: type=1326 audit(3937513492.680:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14419 comm="syz.4.3869" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f9691b1e159 code=0x7ffc0000 [ 610.493476][ T36] audit: type=1326 audit(3937513492.680:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14419 comm="syz.4.3869" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9691b1e159 code=0x7ffc0000 [ 610.493519][ T36] audit: type=1326 audit(3937513492.680:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14419 comm="syz.4.3869" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9691b1e159 code=0x7ffc0000 [ 610.620529][ T5734] usb 6-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 610.622849][ T5734] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 4 [ 610.627177][ T5734] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 610.627208][ T5734] usb 6-1: Product: syz [ 610.627225][ T5734] usb 6-1: Manufacturer: syz [ 610.680767][T14411] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 610.712436][ T5734] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input32 [ 611.024126][ T49] usb 6-1: USB disconnect, device number 2 [ 611.280071][T14436] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3876'. [ 611.421009][ T5848] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 611.562835][ T5848] usb 2-1: Using ep0 maxpacket: 16 [ 611.563781][ T5848] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 611.565778][ T5848] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 611.565805][ T5848] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 611.567324][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 611.567350][ T5848] usb 2-1: SerialNumber: syz [ 611.666078][ T5848] usb 2-1: 0:2 : does not exist [ 611.932224][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 611.969998][T14443] netlink: 'syz.5.3880': attribute type 117 has an invalid length. [ 612.097671][ T5848] usb 2-1: USB disconnect, device number 102 [ 612.328762][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 612.583964][T14454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3885'. [ 613.234774][T14472] netlink: 'syz.4.3895': attribute type 10 has an invalid length. [ 613.234802][T14472] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3895'. [ 613.234920][T14472] vlan0: entered promiscuous mode [ 613.235194][T14472] vlan0: entered allmulticast mode [ 613.235211][T14472] veth0_vlan: entered allmulticast mode [ 613.236231][T14472] bridge0: port 4(vlan0) entered blocking state [ 613.237956][T14472] bridge0: port 4(vlan0) entered disabled state [ 613.268099][T14472] bridge0: port 4(vlan0) entered blocking state [ 613.299598][T14472] bridge0: port 4(vlan0) entered forwarding state [ 613.829229][ T5734] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 613.855081][T14490] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3904'. [ 613.973806][ T5734] usb 4-1: Using ep0 maxpacket: 32 [ 613.974983][ T5734] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 613.977231][ T5734] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 613.977260][ T5734] usb 4-1: config 0 has no interface number 0 [ 613.977312][ T5734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.051780][ T5734] usb 4-1: config 0 descriptor?? [ 614.108169][ T5734] gspca_main: sunplus-2.14.0 probing 041e:400b [ 614.493851][ T5734] gspca_sunplus: reg_w_riv err -71 [ 614.493968][ T5734] sunplus 4-1:0.107: probe with driver sunplus failed with error -71 [ 614.534514][ T5734] usb 4-1: USB disconnect, device number 64 [ 614.960516][T14518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3917'. [ 615.151666][T14519] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.367901][T14519] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.482396][T14519] bridge0: port 3(team_slave_1) entered disabled state [ 615.796959][T14519] bridge0: port 4(vlan0) entered disabled state [ 616.316516][T14534] dlm: no locking on control device [ 616.743910][ T5614] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 616.897994][ T5614] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 616.925139][ T5614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.925173][ T5614] usb 5-1: Product: syz [ 616.925190][ T5614] usb 5-1: Manufacturer: syz [ 616.925206][ T5614] usb 5-1: SerialNumber: syz [ 616.972853][ T5614] usb 5-1: config 0 descriptor?? [ 616.980910][T14546] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3930'. [ 617.290072][T14548] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 617.465152][ T5614] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate [ 617.465205][ T5614] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 617.507575][ T5614] usb 5-1: USB disconnect, device number 105 [ 618.534973][T14576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3945'. [ 618.839967][T14580] netlink: 'syz.3.3947': attribute type 12 has an invalid length. [ 619.040645][ T5614] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 619.182028][ T5614] usb 6-1: Using ep0 maxpacket: 8 [ 619.183728][ T5614] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 619.186700][ T5614] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 619.186731][ T5614] usb 6-1: config 0 has no interface number 0 [ 619.222769][ T5614] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.222799][ T5614] usb 6-1: Product: syz [ 619.222815][ T5614] usb 6-1: Manufacturer: syz [ 619.222829][ T5614] usb 6-1: SerialNumber: syz [ 619.279792][ T5614] usb 6-1: config 0 descriptor?? [ 619.510816][ T5614] uvcvideo 6-1:0.31: probe with driver uvcvideo failed with error -22 [ 619.537623][ T5614] usb 6-1: USB disconnect, device number 3 [ 620.203290][ T5734] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 620.348421][ T5734] usb 2-1: New USB device found, idVendor=eb1a, idProduct=2800, bcdDevice= 1.00 [ 620.350348][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.452544][ T5734] em28xx 2-1:1.0: New device @ 480 Mbps (eb1a:2800, interface 0, class 0) [ 620.452584][ T5734] em28xx 2-1:1.0: Audio interface 0 found (Vendor Class) [ 621.718257][T14633] netlink: 'syz.2.3972': attribute type 1 has an invalid length. [ 621.834840][ T5734] em28xx 2-1:1.0: unknown em28xx chip ID (0) [ 621.835957][ T5734] em28xx 2-1:1.0: Config register raw data: 0xfffffffb [ 621.838633][ T5734] em28xx 2-1:1.0: AC97 chip type couldn't be determined [ 621.838657][ T5734] em28xx 2-1:1.0: No AC97 audio processor [ 621.903363][ T5734] usb 2-1: USB disconnect, device number 103 [ 621.917016][ T5734] em28xx 2-1:1.0: Disconnecting em28xx [ 622.335213][T14643] sctp: [Deprecated]: syz.5.3977 (pid 14643) Use of int in maxseg socket option. [ 622.335213][T14643] Use struct sctp_assoc_value instead [ 622.675694][ T5734] em28xx: Freeing device [ 622.677545][ T49] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 622.859980][ T49] usb 3-1: Using ep0 maxpacket: 16 [ 622.865410][ T49] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 622.879720][ T49] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 622.879755][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 622.902157][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.902187][ T49] usb 3-1: Product: syz [ 622.902202][ T49] usb 3-1: Manufacturer: syz [ 622.902216][ T49] usb 3-1: SerialNumber: syz [ 622.950895][ T49] usb 3-1: config 0 descriptor?? [ 622.975401][T14647] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 623.266396][ T49] usb 3-1: USB disconnect, device number 101 [ 623.798141][T14668] bond1: option all_slaves_active: invalid value (2) [ 623.869154][T14668] bond1 (unregistering): Released all slaves [ 623.930469][ T49] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 624.098745][ T49] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 624.117170][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.117203][ T49] usb 4-1: Product: syz [ 624.117220][ T49] usb 4-1: Manufacturer: syz [ 624.117237][ T49] usb 4-1: SerialNumber: syz [ 624.358140][ T49] ums-karma 4-1:1.0: USB Mass Storage device detected [ 624.381283][ T49] ums-karma 4-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 624.381283][ T49] Please send a copy of this message to and [ 624.682405][ T49] ums-karma 4-1:1.0: probe with driver ums-karma failed with error -5 [ 624.751425][ T49] usb 4-1: USB disconnect, device number 65 [ 625.401670][ T49] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 625.545448][ T49] usb 3-1: Using ep0 maxpacket: 16 [ 625.546416][ T49] usb 3-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 625.546479][ T49] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 625.593658][T14703] netlink: 'syz.4.4004': attribute type 1 has an invalid length. [ 625.593685][T14703] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4004'. [ 625.719807][ T49] usb 3-1: string descriptor 0 read error: -71 [ 625.719975][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.769351][ T49] r8152-cfgselector 3-1: Unknown version 0x0000 [ 625.769384][ T49] r8152-cfgselector 3-1: rejected 8 configurations due to insufficient available bus power [ 625.769406][ T49] r8152-cfgselector 3-1: no configuration chosen from 8 choices [ 625.806665][ T49] r8152-cfgselector 3-1: USB disconnect, device number 102 [ 627.507626][T14744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4022'. [ 628.037649][T14757] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4030'. [ 628.090889][T14757] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4030'. [ 628.090922][T14757] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 629.464873][T14778] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.235074][T14833] netlink: 'syz.4.4062': attribute type 17 has an invalid length. [ 631.235102][T14833] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4062'. [ 631.445595][T14822] nvme nvme0: rdma_resolve_addr failed (-19). [ 632.448073][T14854] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4073'. [ 632.799817][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.800151][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.573907][T14879] dummy0: mtu less than device minimum [ 633.730212][T14882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4086'. [ 633.730258][T14882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 634.288492][ T5719] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 634.457411][ T5719] usb 3-1: unable to get BOS descriptor or descriptor too short [ 634.457476][ T5719] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 634.460751][ T5719] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.460805][ T5719] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 634.463172][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 634.463196][ T5719] usb 3-1: SerialNumber: syz [ 634.518461][ T5719] cdc_ether 3-1:1.0: GUID doesn't match [ 634.699571][T14906] CIFS: Attempting to mount //::1/share [ 634.770533][T14905] veth2: entered allmulticast mode [ 634.843942][ T5719] usb 3-1: USB disconnect, device number 103 [ 635.263922][T14906] CIFS: VFS: Error connecting to socket. Aborting operation. [ 635.263985][T14906] CIFS: VFS: cifs_mount failed w/return code = -111 [ 635.995906][T14918] wg0 speed is unknown, defaulting to 1000 [ 636.102785][T14918] wg0 speed is unknown, defaulting to 1000 [ 636.559275][T14918] wg0 speed is unknown, defaulting to 1000 [ 636.832674][T14918] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 636.832720][T14918] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 636.834328][T14918] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 637.306351][T14918] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 637.591585][T14918] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 639.835879][T14985] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4137'. [ 640.044618][T14918] wg0 speed is unknown, defaulting to 1000 [ 640.454129][T14918] wg0 speed is unknown, defaulting to 1000 [ 640.713022][T14918] wg0 speed is unknown, defaulting to 1000 [ 640.736073][T14997] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 640.736194][T14997] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 641.206148][T14918] wg0 speed is unknown, defaulting to 1000 [ 641.287952][T14918] wg0 speed is unknown, defaulting to 1000 [ 641.551355][T15007] sctp: [Deprecated]: syz.1.4148 (pid 15007) Use of int in maxseg socket option. [ 641.551355][T15007] Use struct sctp_assoc_value instead [ 642.804977][T15028] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4159'. [ 643.363039][T15039] tmpfs: Bad value for 'mpol' [ 643.756506][T15049] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4169'. [ 643.756538][T15049] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4169'. [ 644.034980][T15052] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4171'. [ 644.035028][T15052] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4171'. [ 644.538569][T15047] syz.1.4167 (15047) used greatest stack depth: 19240 bytes left [ 644.609421][T15061] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4176'. [ 645.266329][T15074] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4181'. [ 645.710494][ T5719] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 645.852767][ T5719] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 645.855613][ T5719] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.855676][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.932432][ T5719] usb 4-1: config 0 descriptor?? [ 645.949578][T15090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4188'. [ 646.430942][ T5719] ath6kl: Failed to read usb control message: -71 [ 646.431006][ T5719] ath6kl: Unable to read the bmi data from the device: -71 [ 646.431024][ T5719] ath6kl: Unable to recv target info: -71 [ 646.454527][ T5719] ath6kl: Failed to init ath6kl core: -71 [ 646.455163][ T5719] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 646.542976][ T5719] usb 4-1: USB disconnect, device number 66 [ 646.585276][T15100] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 648.071324][T15142] CIFS: Attempting to mount //::1/share [ 648.170090][T15142] CIFS: VFS: Error connecting to socket. Aborting operation. [ 648.170173][T15142] CIFS: VFS: cifs_mount failed w/return code = -111 [ 648.885723][ T5719] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 649.032354][ T5719] usb 6-1: Using ep0 maxpacket: 32 [ 649.038297][ T5719] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 649.039872][ T5719] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 649.039900][ T5719] usb 6-1: config 0 has no interface number 0 [ 649.039945][ T5719] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 649.039969][ T5719] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 649.039997][ T5719] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 649.040028][ T5719] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 649.040060][ T5719] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 649.040088][ T5719] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 649.040112][ T5719] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 649.040138][ T5719] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 649.040165][ T5719] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 649.040191][ T5719] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 649.062260][T15174] CIFS: Attempting to mount //::1/share [ 649.238701][ T5719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.238734][ T5719] usb 6-1: Product: syz [ 649.238751][ T5719] usb 6-1: Manufacturer: syz [ 649.238767][ T5719] usb 6-1: SerialNumber: syz [ 649.275930][ T5719] usb 6-1: config 0 descriptor?? [ 649.277448][T15160] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 649.277673][T15160] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 649.305982][ T5719] usb 6-1: will this work? Response EP is not usually 3 [ 649.306026][ T5719] usb 6-1: will this work? Image data EP is not usually 2 [ 649.374327][ T5719] scsi host1: microtekX6 [ 649.394469][ T5741] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 649.514450][T15180] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20000 [ 649.540373][ T5719] usb 6-1: USB disconnect, device number 4 [ 649.557309][ T5741] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 649.558972][ T5741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 255, setting to 64 [ 649.565367][ T5741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.565399][ T5741] usb 4-1: Product: syz [ 649.565414][ T5741] usb 4-1: Manufacturer: syz [ 649.565430][ T5741] usb 4-1: SerialNumber: syz [ 649.606746][ T50] usb 6-1: error -19 submitting URB [ 649.623022][ T59] usb 6-1: error -19 submitting URB [ 649.629521][ T5741] usb 4-1: config 0 descriptor?? [ 649.631191][T15170] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 649.661224][ T59] usb 6-1: error -19 submitting URB [ 649.699305][ T59] usb 6-1: error -19 submitting URB [ 649.949843][ T5741] dm9601 4-1:0.0: probe with driver dm9601 failed with error -71 [ 650.000182][ T5741] usb 4-1: USB disconnect, device number 67 [ 650.102158][T15174] CIFS: VFS: Error connecting to socket. Aborting operation. [ 650.102198][T15174] CIFS: VFS: cifs_mount failed w/return code = -4 [ 651.440016][T15213] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 651.440016][T15213] Please contact the netfilter-devel mailing list or update your nftables rules. [ 653.511048][T15242] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 656.477949][T15332] bond2: option ad_select: invalid value (34) [ 656.525995][T15332] bond2 (unregistering): Released all slaves [ 657.347875][ T5741] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 657.389157][T15362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 657.495299][ T5741] usb 2-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 657.497277][ T5741] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 657.497311][ T5741] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 657.497335][ T5741] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 657.497375][ T5741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.569948][T15354] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 659.120700][ T5610] Bluetooth: hci4: Reading Intel version command failed (-71) [ 659.158058][ T5741] usb 2-1: USB disconnect, device number 104 [ 659.670862][T15415] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4347'. [ 659.670894][T15415] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4347'. [ 659.670913][T15415] netlink: 'syz.1.4347': attribute type 5 has an invalid length. [ 659.670930][T15415] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4347'. [ 660.195448][ T5734] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 660.199332][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4354'. [ 660.338348][ T5734] usb 2-1: Using ep0 maxpacket: 32 [ 660.339631][ T5734] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.6e [ 660.341508][ T5734] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 660.341537][ T5734] usb 2-1: config 0 has no interface number 0 [ 660.341588][ T5734] usb 2-1: config 0 interface 184 has no altsetting 0 [ 660.344556][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.344582][ T5734] usb 2-1: Product: syz [ 660.344597][ T5734] usb 2-1: Manufacturer: syz [ 660.344612][ T5734] usb 2-1: SerialNumber: syz [ 660.408397][T15429] bond1: entered promiscuous mode [ 660.414196][T15429] 8021q: adding VLAN 0 to HW filter on device bond1 [ 660.431619][ T5734] usb 2-1: config 0 descriptor?? [ 660.883823][ T5734] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 660.883861][ T5734] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 660.883882][ T5734] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 660.884227][ T5734] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 660.947799][ T5741] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 660.951259][ T5734] usb 2-1: USB disconnect, device number 105 [ 661.098285][ T5741] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 661.135618][ T5741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.135653][ T5741] usb 6-1: Product: syz [ 661.135670][ T5741] usb 6-1: Manufacturer: syz [ 661.135686][ T5741] usb 6-1: SerialNumber: syz [ 661.191146][ T5741] usb 6-1: config 0 descriptor?? [ 661.226658][ T5741] ch341 6-1:0.0: ch341-uart converter detected [ 661.488789][T15451] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 661.656111][ T5741] usb 6-1: failed to send control message: -71 [ 661.656254][ T5741] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 661.707175][ T5741] usb 6-1: USB disconnect, device number 5 [ 661.725836][ T5741] ch341 6-1:0.0: device disconnected [ 663.042294][T15488] netlink: 'syz.1.4383': attribute type 6 has an invalid length. [ 663.042323][T15488] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4383'. [ 663.976131][ T36] audit: type=1326 audit(3937513548.829:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15510 comm="syz.1.4393" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 663.976192][ T36] audit: type=1326 audit(3937513548.829:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15510 comm="syz.1.4393" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 663.985892][ T36] audit: type=1326 audit(3937513548.839:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15510 comm="syz.1.4393" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 663.988981][ T36] audit: type=1326 audit(3937513548.839:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15510 comm="syz.1.4393" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 663.992763][ T36] audit: type=1326 audit(3937513548.850:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15510 comm="syz.1.4393" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f763797e98e code=0x7ffc0000 [ 663.992816][ T36] audit: type=1326 audit(3937513548.850:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15510 comm="syz.1.4393" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f76379bddeb code=0x7ffc0000 [ 663.992858][ T36] audit: type=1326 audit(3937513548.850:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15510 comm="syz.1.4393" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f76379bddeb code=0x7ffc0000 [ 664.014664][ T36] audit: type=1326 audit(3937513548.871:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15510 comm="syz.1.4393" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f76379bddeb code=0x7ffc0000 [ 664.017519][ T36] audit: type=1326 audit(3937513548.881:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15510 comm="syz.1.4393" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f76379bddeb code=0x7ffc0000 [ 664.111370][ T36] audit: type=1326 audit(3937513548.986:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15510 comm="syz.1.4393" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f76379bddeb code=0x7ffc0000 [ 664.243496][ T5324] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 664.391103][ T5324] usb 2-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.00 [ 664.403337][ T5324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.403386][ T5324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.405078][T15522] cgroup: name respecified [ 664.428351][ T5324] usb 2-1: config 0 descriptor?? [ 664.752358][ T5324] usbhid 2-1:0.0: can't add hid device: -71 [ 664.752493][ T5324] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 664.774092][ T5324] usb 2-1: USB disconnect, device number 106 [ 665.585405][T15555] bridge0: port 3(netdevsim1) entered blocking state [ 665.586015][T15555] bridge0: port 3(netdevsim1) entered disabled state [ 665.634370][T15555] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 665.703496][T15555] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 665.735832][T15555] bridge0: port 3(netdevsim1) entered blocking state [ 665.735990][T15555] bridge0: port 3(netdevsim1) entered forwarding state [ 666.051104][T15564] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4419'. [ 666.051136][T15564] netlink: 'syz.3.4419': attribute type 1 has an invalid length. [ 666.051153][T15564] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4419'. [ 666.080111][T15566] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4418'. [ 666.260972][T15572] netlink: 'syz.4.4423': attribute type 3 has an invalid length. [ 666.721272][T15584] openvswitch: netlink: IP tunnel dst address not specified [ 667.418476][T15602] : renamed from lo (while UP) [ 668.919815][T15642] netlink: 'syz.2.4458': attribute type 49 has an invalid length. [ 669.231181][T15652] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4464'. [ 670.131018][T15681] binder: 15679:15681 ioctl c00c620f ffffffff81000000 returned -14 [ 670.305532][T15684] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4477'. [ 670.447628][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 671.485602][T15715] ip6gre2: entered promiscuous mode [ 672.053727][ T4977] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 672.196645][ T4977] usb 5-1: Using ep0 maxpacket: 32 [ 672.197611][ T4977] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 672.202728][ T4977] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 672.234777][ T4977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.234811][ T4977] usb 5-1: Product: syz [ 672.234828][ T4977] usb 5-1: Manufacturer: syz [ 672.234845][ T4977] usb 5-1: SerialNumber: syz [ 672.455991][ T4977] usb 5-1: config 0 descriptor?? [ 672.458006][T15730] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 672.476290][ T4977] hub 5-1:0.0: bad descriptor, ignoring hub [ 672.476336][ T4977] hub 5-1:0.0: probe with driver hub failed with error -5 [ 672.517675][ T4977] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input34 [ 673.113851][ T5324] usb 5-1: USB disconnect, device number 106 [ 673.113926][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 674.488422][T15776] process 'syz.5.4521' launched '/dev/fd/3' with NULL argv: empty string added [ 674.631642][T15779] geneve3: entered promiscuous mode [ 674.631671][T15779] geneve3: entered allmulticast mode [ 675.362015][ T31] kworker/1:0 (31) used greatest stack depth: 15144 bytes left [ 675.533232][T15802] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4534'. [ 676.355863][T15825] openvswitch: netlink: Tunnel attr 4 has unexpected len 0 expected 1 [ 676.397255][T15826] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4546'. [ 677.402248][T15848] bond2: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 677.402286][T15848] bond2: peer notification delay (280) is not a multiple of miimon (100), value rounded to 200 ms [ 677.403645][T15848] bond2: entered allmulticast mode [ 677.437547][T15848] 8021q: adding VLAN 0 to HW filter on device bond2 [ 677.810654][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 677.810675][ T36] audit: type=1326 audit(3937513563.359:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15858 comm="syz.1.4561" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 677.835735][ T36] audit: type=1326 audit(3937513563.359:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15858 comm="syz.1.4561" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 677.879606][ T36] audit: type=1326 audit(3937513563.433:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15858 comm="syz.1.4561" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 677.880284][ T36] audit: type=1326 audit(3937513563.433:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15858 comm="syz.1.4561" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 677.880336][ T36] audit: type=1326 audit(3937513563.433:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15858 comm="syz.1.4561" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 677.880385][ T36] audit: type=1326 audit(3937513563.433:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15858 comm="syz.1.4561" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 677.881371][ T36] audit: type=1326 audit(3937513563.433:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15858 comm="syz.1.4561" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 677.882509][ T36] audit: type=1326 audit(3937513563.433:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15858 comm="syz.1.4561" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 678.016694][ T36] audit: type=1326 audit(3937513563.580:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15858 comm="syz.1.4561" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 678.026263][T15862] wireguard0: entered promiscuous mode [ 678.026295][T15862] wireguard0: entered allmulticast mode [ 678.816257][ T5741] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 678.969654][ T5741] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 678.971724][ T5741] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 678.971754][ T5741] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 678.971777][ T5741] usb 2-1: config 220 has no interface number 2 [ 678.971858][ T5741] usb 2-1: config 220 interface 1 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 56 [ 678.971886][ T5741] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 678.971915][ T5741] usb 2-1: config 220 interface 0 has no altsetting 0 [ 678.971936][ T5741] usb 2-1: config 220 interface 76 has no altsetting 0 [ 678.971958][ T5741] usb 2-1: config 220 interface 1 has no altsetting 0 [ 678.976447][ T5741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.976477][ T5741] usb 2-1: Product: syz [ 678.976493][ T5741] usb 2-1: Manufacturer: syz [ 678.976510][ T5741] usb 2-1: SerialNumber: syz [ 679.150079][ T49] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 679.282398][ T5741] usb 2-1: selecting invalid altsetting 0 [ 679.335135][ T49] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 679.337191][ T49] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 679.402378][ T5741] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 679.402419][ T5741] uvcvideo 2-1:220.0: No valid video chain found. [ 679.410449][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.410477][ T49] usb 4-1: Product: syz [ 679.410492][ T49] usb 4-1: Manufacturer: syz [ 679.410506][ T49] usb 4-1: SerialNumber: syz [ 679.432076][ T5741] usb 2-1: selecting invalid altsetting 0 [ 679.432125][ T5741] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 679.455716][ T5741] usb 2-1: USB disconnect, device number 107 [ 679.802877][ T49] usb 4-1: Not enough endpoints found in device, aborting! [ 680.028561][ T5614] usb 4-1: USB disconnect, device number 68 [ 680.726396][T15915] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 681.457020][T15943] netlink: 'syz.3.4601': attribute type 21 has an invalid length. [ 681.457051][T15943] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4601'. [ 681.480725][T15943] netlink: 'syz.3.4601': attribute type 4 has an invalid length. [ 681.480842][T15943] netlink: 'syz.3.4601': attribute type 5 has an invalid length. [ 681.480857][T15943] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4601'. [ 681.764111][T15951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4606'. [ 681.812835][T15956] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 681.812944][T15956] IPv6: NLM_F_CREATE should be set when creating new route [ 681.831118][T15951] bond3: option broadcast_neighbor: invalid value (5) [ 681.875938][T15951] bond3 (unregistering): Released all slaves [ 681.995117][T15960] netlink: 'syz.1.4610': attribute type 1 has an invalid length. [ 683.237464][T15991] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 683.237484][T15991] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 683.237561][T15991] overlayfs: missing 'lowerdir' [ 683.596651][T15999] misc userio: No port type given on /dev/userio [ 683.809408][ T36] audit: type=1326 audit(3937513569.648:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16004 comm="syz.1.4633" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 683.809472][ T36] audit: type=1326 audit(3937513569.648:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16004 comm="syz.1.4633" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 683.823285][ T36] audit: type=1326 audit(3937513569.669:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16004 comm="syz.1.4633" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 683.825503][ T36] audit: type=1326 audit(3937513569.669:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16004 comm="syz.1.4633" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 683.830958][ T36] audit: type=1326 audit(3937513569.680:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16004 comm="syz.1.4633" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 683.831010][ T36] audit: type=1326 audit(3937513569.680:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16004 comm="syz.1.4633" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 683.831063][ T36] audit: type=1326 audit(3937513569.680:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16004 comm="syz.1.4633" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 683.832034][ T36] audit: type=1326 audit(3937513569.680:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16004 comm="syz.1.4633" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 683.832464][ T36] audit: type=1326 audit(3937513569.680:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16004 comm="syz.1.4633" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 685.662962][T16054] CIFS: VFS: bad security option: krb5i [ 686.311995][T16072] openvswitch: netlink: IP tunnel dst address not specified [ 686.397953][ T5614] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 686.544615][ T5614] usb 4-1: unable to get BOS descriptor or descriptor too short [ 686.544689][ T5614] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 686.568739][ T5614] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 686.587827][ T5614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.587861][ T5614] usb 4-1: Product: syz [ 686.587878][ T5614] usb 4-1: Manufacturer: syz [ 686.587894][ T5614] usb 4-1: SerialNumber: syz [ 686.864674][T16082] netlink: 'syz.5.4670': attribute type 5 has an invalid length. [ 686.928664][ T5614] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 686.930795][ T5614] usb 4-1: 2:1 : bogus bTerminalLink 2 [ 687.198273][ T5614] usb 4-1: USB disconnect, device number 69 [ 687.478952][T16091] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 687.527947][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 688.244176][T16113] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 688.259319][T16111] bond0: (slave gretap0): Opening slave failed [ 688.536673][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 688.572591][ T5610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 688.615085][ T5610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 688.638210][ T5610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 688.639120][ T5610] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 689.172687][T16127] netlink: 'syz.1.4690': attribute type 15 has an invalid length. [ 689.244052][T16130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4692'. [ 689.287067][T16127] vxlan0: entered promiscuous mode [ 689.287101][T16127] vxlan0: entered allmulticast mode [ 689.369728][ T1113] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 31488 - 0 [ 689.371270][ T3423] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 31488 - 0 [ 689.371317][ T3423] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 31488 - 0 [ 689.371359][ T3423] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 31488 - 0 [ 689.706353][T16144] netlink: 'syz.1.4697': attribute type 3 has an invalid length. [ 690.009541][T16145] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.490201][T16165] key id 000004d2 not found [ 690.598608][ T5614] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 690.695628][T16170] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4705'. [ 690.712711][ T4906] Bluetooth: hci4: command tx timeout [ 690.742159][ T5614] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 690.743537][ T5614] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 690.743564][ T5614] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.743584][ T5614] usb 2-1: config 0 has no interface number 0 [ 690.743618][ T5614] usb 2-1: config 0 interface 2 has no altsetting 0 [ 690.788440][ T5614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.788480][ T5614] usb 2-1: Product: syz [ 690.788495][ T5614] usb 2-1: Manufacturer: syz [ 690.788509][ T5614] usb 2-1: SerialNumber: syz [ 690.833930][ T5614] usb 2-1: config 0 descriptor?? [ 690.880582][T16103] wg0 speed is unknown, defaulting to 1000 [ 691.357109][ T5848] usb 2-1: USB disconnect, device number 108 [ 691.386423][ T5848] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 691.812844][T16188] tmpfs: Bad value for 'mpol' [ 692.696441][ T4906] Bluetooth: hci4: command tx timeout [ 693.036788][ T5741] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 693.189836][ T5741] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 693.211925][ T5741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.211956][ T5741] usb 4-1: Product: syz [ 693.211973][ T5741] usb 4-1: Manufacturer: syz [ 693.211990][ T5741] usb 4-1: SerialNumber: syz [ 693.349228][ T5719] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 693.852325][ T5848] usb 4-1: USB disconnect, device number 70 [ 694.282655][T16103] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.284492][T16103] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.284728][T16103] bridge_slave_0: entered allmulticast mode [ 694.333974][T16103] bridge_slave_0: entered promiscuous mode [ 694.340030][T16103] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.347080][T16103] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.347284][T16103] bridge_slave_1: entered allmulticast mode [ 694.358038][T16103] bridge_slave_1: entered promiscuous mode [ 694.418328][T16238] syz.5.4736: vmalloc error: size 35184372088832, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 694.418699][T16238] CPU: 0 UID: 0 PID: 16238 Comm: syz.5.4736 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 694.418728][T16238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 694.418742][T16238] Call Trace: [ 694.418811][T16238] [ 694.418860][T16238] dump_stack_lvl+0xe8/0x150 [ 694.418961][T16238] warn_alloc+0x24d/0x270 [ 694.418999][T16238] ? __pfx_warn_alloc+0x10/0x10 [ 694.419067][T16238] ? __lock_acquire+0x747/0x2de0 [ 694.419110][T16238] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 694.419142][T16238] __vmalloc_node_range_noprof+0x127/0x1540 [ 694.419173][T16238] ? kasan_quarantine_put+0xbb/0x1f0 [ 694.419236][T16238] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 694.419268][T16238] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 694.419351][T16238] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 694.419382][T16238] vmalloc_noprof+0xb2/0xe0 [ 694.419410][T16238] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 694.419443][T16238] dvb_dvr_do_ioctl+0x12e/0x220 [ 694.419489][T16238] dvb_usercopy+0x199/0x2e0 [ 694.419517][T16238] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 694.419547][T16238] ? __pfx_dvb_usercopy+0x10/0x10 [ 694.419587][T16238] ? __fget_files+0x3a8/0x420 [ 694.419626][T16238] ? __fget_files+0x2a/0x420 [ 694.419653][T16238] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 694.419681][T16238] dvb_dvr_ioctl+0x29/0x40 [ 694.419711][T16238] __se_sys_ioctl+0xff/0x170 [ 694.419745][T16238] do_syscall_64+0x166/0x520 [ 694.419790][T16238] ? trace_irq_disable+0x3b/0x140 [ 694.419829][T16238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.419872][T16238] ? clear_bhb_loop+0x70/0xc0 [ 694.419902][T16238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.419925][T16238] RIP: 0033:0x7f47e896e159 [ 694.419957][T16238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.419976][T16238] RSP: 002b:00007f47e6bc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 694.420026][T16238] RAX: ffffffffffffffda RBX: 00007f47e8bf5fa0 RCX: 00007f47e896e159 [ 694.420043][T16238] RDX: 0000200000000000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 694.420057][T16238] RBP: 00007f47e8a0506b R08: 0000000000000000 R09: 0000000000000000 [ 694.420070][T16238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.420083][T16238] R13: 00007f47e8bf6038 R14: 00007f47e8bf5fa0 R15: 00007ffebc047ba8 [ 694.420121][T16238] [ 694.422345][T16238] Mem-Info: [ 694.422362][T16238] active_anon:192 inactive_anon:7166 isolated_anon:0 [ 694.422362][T16238] active_file:13682 inactive_file:41689 isolated_file:0 [ 694.422362][T16238] unevictable:0 dirty:407 writeback:0 [ 694.422362][T16238] slab_reclaimable:11608 slab_unreclaimable:111114 [ 694.422362][T16238] mapped:35546 shmem:525 pagetables:3826 [ 694.422362][T16238] sec_pagetables:0 bounce:0 [ 694.422362][T16238] kernel_misc_reclaimable:0 [ 694.422362][T16238] free:1277053 free_pcp:7853 free_cma:0 [ 694.422426][T16238] Node 0 active_anon:768kB inactive_anon:28664kB active_file:54412kB inactive_file:166756kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142184kB dirty:1628kB writeback:0kB shmem:2100kB kernel_stack:13428kB pagetables:15140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 694.422481][T16238] Node 1 active_anon:0kB inactive_anon:0kB active_file:316kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 694.422533][T16238] Node 0 DMA free:15340kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 694.422602][T16238] lowmem_reserve[]: 0 2499 2500 2500 2500 [ 694.422647][T16238] Node 0 DMA32 free:1154868kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:768kB inactive_anon:28664kB active_file:54412kB inactive_file:166756kB unevictable:0kB writepending:1628kB zspages:0kB present:3129332kB managed:2559092kB mlocked:0kB bounce:0kB free_pcp:31404kB local_pcp:11840kB free_cma:0kB [ 694.422717][T16238] lowmem_reserve[]: 0 0 1 1 1 [ 694.422758][T16238] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1808kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 694.422821][T16238] lowmem_reserve[]: 0 0 0 0 0 [ 694.422863][T16238] Node 1 Normal free:3938004kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:316kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 694.422929][T16238] lowmem_reserve[]: 0 0 0 0 0 [ 694.422979][T16238] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15340kB [ 694.423480][T16238] Node 0 DMA32: 270*4kB (UME) 284*8kB (ME) 903*16kB (UME) 285*32kB (UME) 836*64kB (UME) 720*128kB (UM) 463*256kB (UME) 293*512kB (UME) 127*1024kB (UME) 23*2048kB (UM) 131*4096kB (UM) = 1154856kB [ 694.423680][T16238] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 694.423801][T16238] Node 1 Normal: 1*4kB (M) 6*8kB (UM) 8*16kB (UM) 9*32kB (UM) 8*64kB (UM) 6*128kB (UM) 6*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3938004kB [ 694.423995][T16238] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 694.424015][T16238] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 694.424035][T16238] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 694.424054][T16238] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 694.424073][T16238] 55889 total pagecache pages [ 694.424083][T16238] 0 pages in swap cache [ 694.424092][T16238] Free swap = 124996kB [ 694.424101][T16238] Total swap = 124996kB [ 694.424112][T16238] 2097051 pages RAM [ 694.424121][T16238] 0 pages HighMem/MovableOnly [ 694.424130][T16238] 425210 pages reserved [ 694.424139][T16238] 0 pages cma reserved [ 694.580977][ T5719] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 694.674933][ T4906] Bluetooth: hci4: command tx timeout [ 694.714510][ T5719] ath9k_htc: Failed to initialize the device [ 694.714997][T16242] netlink: 'syz.3.4738': attribute type 10 has an invalid length. [ 695.138944][ T5848] usb 4-1: ath9k_htc: USB layer deinitialized [ 695.308846][T16242] team0 (unregistering): Port device team_slave_0 removed [ 695.395657][T16242] team0 (unregistering): Port device team_slave_1 removed [ 695.441350][T16257] openvswitch: netlink: IPv4 tunnel dst address is zero [ 695.651909][T16103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.677973][T16103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.901985][T16270] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4752'. [ 695.956322][T16103] team0: Port device team_slave_0 added [ 695.981632][T16103] team0: Port device team_slave_1 added [ 696.321401][T16103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.321422][T16103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.321454][T16103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.387900][T16103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.387922][T16103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.387951][T16103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.627093][T16103] hsr_slave_0: entered promiscuous mode [ 696.637762][T16103] hsr_slave_1: entered promiscuous mode [ 696.642872][T16103] debugfs: 'hsr0' already exists in 'hsr' [ 696.642906][T16103] Cannot create hsr debugfs directory [ 696.656119][ T4906] Bluetooth: hci4: command tx timeout [ 696.684750][ T5848] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 696.830137][ T5848] usb 2-1: Using ep0 maxpacket: 32 [ 696.833534][ T5848] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 696.836574][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.917714][ T5848] usb 2-1: config 0 descriptor?? [ 696.986160][ T5848] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 697.355269][ T5848] gspca_vc032x: reg_w err -71 [ 697.355358][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 697.355374][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 697.355384][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 697.355394][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 697.355404][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 697.355414][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 697.355425][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 697.355435][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 697.355444][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 697.355455][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 697.355464][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 697.355475][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 697.355486][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 697.355495][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 697.355504][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 697.355515][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 697.355525][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 697.355535][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 697.355571][ T5848] gspca_vc032x: Unknown sensor... [ 697.355666][ T5848] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 697.412595][ T5848] usb 2-1: USB disconnect, device number 109 [ 697.938752][T16315] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4773'. [ 698.998161][T16342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4786'. [ 700.580142][ T5719] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 700.724884][ T5719] usb 2-1: not running at top speed; connect to a high speed hub [ 700.724931][ T5719] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=cc.66 [ 700.727753][ T5719] usb 2-1: config 8 has an invalid interface number: 159 but max is 0 [ 700.727785][ T5719] usb 2-1: config 8 has no interface number 0 [ 700.727839][ T5719] usb 2-1: config 8 interface 159 has no altsetting 0 [ 700.731878][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.731908][ T5719] usb 2-1: Product: syz [ 700.731925][ T5719] usb 2-1: Manufacturer: syz [ 700.731941][ T5719] usb 2-1: SerialNumber: syz [ 701.056909][T16381] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4804'. [ 701.057003][T16381] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 701.057343][T16103] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 701.163549][T16103] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 701.179946][T16103] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 701.326329][ T5719] usb 2-1: USB disconnect, device number 110 [ 701.371337][T16103] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 701.377234][T16103] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 701.445329][T16103] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 701.454810][T16103] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 701.564638][T16103] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 702.389274][T16410] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4815'. [ 702.547802][T16103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.599023][T16103] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.646030][ T3374] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.646181][ T3374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.756505][ T3374] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.756659][ T3374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.800278][T16445] trusted_key: encrypted_key: master key parameter '' is invalid [ 704.308980][T16463] netlink: 'syz.3.4835': attribute type 5 has an invalid length. [ 704.864516][T16476] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 704.864550][T16476] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 705.058296][T16476] vhci_hcd vhci_hcd.0: Device attached [ 705.182171][T16482] vhci_hcd vhci_hcd.0: port 0 already used [ 705.306657][T16477] vhci_hcd: connection closed [ 705.311535][ T12] vhci_hcd vhci_hcd.5: stop threads [ 705.311566][ T12] vhci_hcd vhci_hcd.5: release socket [ 705.608441][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 705.982648][ T5848] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 706.140941][ T5848] usb 4-1: Using ep0 maxpacket: 8 [ 706.149174][ T5848] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 706.175670][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.175704][ T5848] usb 4-1: Product: syz [ 706.175720][ T5848] usb 4-1: Manufacturer: syz [ 706.175736][ T5848] usb 4-1: SerialNumber: syz [ 706.232321][ T5848] usb 4-1: config 0 descriptor?? [ 706.247593][T16103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.311193][ T5848] gspca_main: sq930x-2.14.0 probing 2770:930c [ 706.394900][T16517] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4858'. [ 706.691738][ T5848] gspca_sq930x: ucbus_write failed -71 [ 706.692009][ T5848] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 706.751906][ T5848] usb 4-1: USB disconnect, device number 71 [ 706.840840][ T5614] usb usb44-port1: attempt power cycle [ 707.488970][ T5614] usb usb44-port1: unable to enumerate USB device [ 707.713737][T16103] veth0_vlan: entered promiscuous mode [ 707.804080][T16103] veth1_vlan: entered promiscuous mode [ 707.998838][T16544] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 708.075247][T16103] veth0_macvtap: entered promiscuous mode [ 708.121997][T16103] veth1_macvtap: entered promiscuous mode [ 708.228139][T16548] netlink: 'syz.3.4869': attribute type 23 has an invalid length. [ 708.266841][T16103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 708.377100][T16103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 708.488788][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.490338][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.490385][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.494893][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.854742][T16552] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 709.064544][T16552] bond1 (unregistering): Released all slaves [ 709.187324][T16569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4879'. [ 710.210207][T16583] netlink: 'syz.1.4885': attribute type 1 has an invalid length. [ 711.463179][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.463205][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.003237][T16612] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4899'. [ 712.045090][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.045115][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.291005][T16618] IPv6: NLM_F_CREATE should be specified when creating new route [ 712.330772][T16617] netlink: 'syz.4.4900': attribute type 1 has an invalid length. [ 712.330802][T16617] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 712.604809][T16623] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4904'. [ 713.339919][T16642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4913'. [ 713.558216][ T36] audit: type=1326 audit(3937513600.893:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16651 comm="syz.6.4917" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f885e159 code=0x7ffc0000 [ 713.558999][ T36] audit: type=1326 audit(3937513600.893:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16651 comm="syz.6.4917" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f885e159 code=0x7ffc0000 [ 713.569815][ T36] audit: type=1326 audit(3937513600.904:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16651 comm="syz.6.4917" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f885e159 code=0x7ffc0000 [ 713.570794][ T36] audit: type=1326 audit(3937513600.904:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16651 comm="syz.6.4917" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7ff3f885e159 code=0x7ffc0000 [ 713.571684][ T36] audit: type=1326 audit(3937513600.904:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16651 comm="syz.6.4917" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f885e159 code=0x7ffc0000 [ 713.577559][ T36] audit: type=1326 audit(3937513600.904:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16651 comm="syz.6.4917" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f885e159 code=0x7ffc0000 [ 713.657776][ T5612] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 713.708355][ T36] audit: type=1326 audit(3937513601.051:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16651 comm="syz.6.4917" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f885e159 code=0x7ffc0000 [ 713.708562][ T36] audit: type=1326 audit(3937513601.051:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16651 comm="syz.6.4917" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff3f885e159 code=0x7ffc0000 [ 713.709724][ T36] audit: type=1326 audit(3937513601.051:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16651 comm="syz.6.4917" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff3f885e159 code=0x7ffc0000 [ 713.803059][ T5612] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 713.816733][ T5612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.859067][ T5612] usb 4-1: config 0 descriptor?? [ 713.896490][ T5612] cp210x 4-1:0.0: cp210x converter detected [ 714.318308][ T5612] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 714.319493][ T5612] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 714.319577][ T5612] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 714.381796][T16668] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4926'. [ 714.382249][T16668] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4926'. [ 714.493922][ T5612] usb 4-1: cp210x converter now attached to ttyUSB0 [ 714.658674][ T5612] usb 4-1: USB disconnect, device number 72 [ 714.861537][ T5612] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 714.897982][ T5612] cp210x 4-1:0.0: device disconnected [ 717.019965][ T5612] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 717.156654][ T5610] Bluetooth: hci4: command 0x2016 tx timeout [ 717.210793][ T5612] usb 7-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 717.257606][ T5612] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.257639][ T5612] usb 7-1: Product: syz [ 717.257655][ T5612] usb 7-1: Manufacturer: syz [ 717.257670][ T5612] usb 7-1: SerialNumber: syz [ 717.289195][ T5612] usb 7-1: config 0 descriptor?? [ 717.312190][ T5612] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 717.434250][T16736] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 717.765059][ T5612] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 717.765084][ T5612] sq905c 7-1:0.0: Reading version command failed [ 717.765183][ T5612] sq905c 7-1:0.0: probe with driver sq905c failed with error -71 [ 717.817034][ T5612] usb 7-1: USB disconnect, device number 2 [ 719.004501][T16746] smbdirect: ib_dev[syz2] removed [ 719.153857][ T5610] Bluetooth: hci4: command 0x2016 tx timeout [ 720.448027][T16785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 720.505925][ T5733] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 720.669702][ T5733] usb 2-1: Using ep0 maxpacket: 32 [ 720.670677][ T5733] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.00 [ 720.677045][ T5733] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.677110][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.777336][ T5733] usb 2-1: config 0 descriptor?? [ 720.811867][ T5733] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 720.827572][ T5733] usb 2-1: Detected SIO [ 720.862293][ T5733] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 720.994388][ T5719] usb 2-1: USB disconnect, device number 111 [ 721.028441][T16791] bond1: option arp_all_targets: invalid value (1073741825) [ 721.111537][ T5719] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 721.113317][ T5719] ftdi_sio 2-1:0.0: device disconnected [ 721.204267][T16791] bond1 (unregistering): Released all slaves [ 721.488890][T16806] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4991'. [ 721.970688][T16816] netlink: 'syz.6.4997': attribute type 21 has an invalid length. [ 721.970803][T16816] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4997'. [ 722.010791][ T998] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 722.171495][ T998] usb 4-1: unable to get BOS descriptor or descriptor too short [ 722.172279][ T998] usb 4-1: not running at top speed; connect to a high speed hub [ 722.172321][ T998] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 722.219805][ T998] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 722.219838][ T998] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 722.219860][ T998] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 722.219882][ T998] usb 4-1: config 14 has no interface number 0 [ 722.219900][ T998] usb 4-1: config 14 has no interface number 1 [ 722.219977][ T998] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 722.220005][ T998] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 722.220032][ T998] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x8A has invalid maxpacket 43690, setting to 64 [ 722.220060][ T998] usb 4-1: config 14 interface 57 has no altsetting 0 [ 722.220078][ T998] usb 4-1: config 14 interface 228 has no altsetting 0 [ 722.321784][ T998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.321820][ T998] usb 4-1: Product: syz [ 722.321851][ T998] usb 4-1: Manufacturer: syz [ 722.321867][ T998] usb 4-1: SerialNumber: syz [ 722.690553][ T998] legousbtower 4-1:14.57: interrupt endpoints not found [ 722.731758][ T998] legousbtower 4-1:14.228: interrupt endpoints not found [ 722.778652][ T998] usb 4-1: USB disconnect, device number 73 [ 723.906282][ T998] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 724.007257][T16856] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5017'. [ 724.062044][ T998] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 724.064247][ T998] usb 6-1: config index 0 descriptor too short (expected 1831, got 39) [ 724.064277][ T998] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 724.064330][ T998] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 724.064355][ T998] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 724.064380][ T998] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 724.134990][ T998] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.135019][ T998] usb 6-1: Product: syz [ 724.135035][ T998] usb 6-1: Manufacturer: syz [ 724.135049][ T998] usb 6-1: SerialNumber: syz [ 724.514556][ T998] usb 6-1: Not enough endpoints found in device, aborting! [ 724.682828][ T5741] usb 6-1: USB disconnect, device number 6 [ 725.711585][T16888] overlayfs: failed to resolve './file0': -2 [ 726.988617][T16904] bond2 (unregistering): Released all slaves [ 728.985527][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 729.044128][T16955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5066'. [ 730.128261][T16971] XFS (nullb0): Invalid superblock magic number [ 730.410029][T16981] netlink: 'syz.4.5076': attribute type 3 has an invalid length. [ 730.410056][T16981] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5076'. [ 731.227616][T17004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5087'. [ 731.227676][T17004] netlink: 'syz.1.5087': attribute type 2 has an invalid length. [ 731.837954][T17020] netlink: 'syz.6.5095': attribute type 30 has an invalid length. [ 731.972921][T17023] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5096'. [ 731.972954][T17023] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5096'. [ 731.972972][T17023] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5096'. [ 733.053667][T17053] bond0: Error: Cannot enslave bond to itself. [ 733.108931][T17057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 733.662162][ T36] audit: type=1326 audit(3937513621.996:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17069 comm="syz.3.5115" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09f47e159 code=0x7ffc0000 [ 733.662228][ T36] audit: type=1326 audit(3937513621.996:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17069 comm="syz.3.5115" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09f47e159 code=0x7ffc0000 [ 733.676607][ T36] audit: type=1326 audit(3937513622.007:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17069 comm="syz.3.5115" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09f47e159 code=0x7ffc0000 [ 733.684234][ T36] audit: type=1326 audit(3937513622.017:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17069 comm="syz.3.5115" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fc09f47e159 code=0x7ffc0000 [ 733.684286][ T36] audit: type=1326 audit(3937513622.017:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17069 comm="syz.3.5115" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09f47e159 code=0x7ffc0000 [ 733.685026][ T36] audit: type=1326 audit(3937513622.017:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17069 comm="syz.3.5115" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09f47e159 code=0x7ffc0000 [ 733.685071][ T36] audit: type=1326 audit(3937513622.017:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17069 comm="syz.3.5115" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09f47e159 code=0x7ffc0000 [ 733.686714][ T36] audit: type=1326 audit(3937513622.017:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17069 comm="syz.3.5115" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc09f47e159 code=0x7ffc0000 [ 733.686762][ T36] audit: type=1326 audit(3937513622.017:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17069 comm="syz.3.5115" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc09f47e159 code=0x7ffc0000 [ 735.280970][T17100] 9p: Could not find request transport: 0xffffffffffffffff [ 735.599209][T17116] bond1: option mode: invalid value (8) [ 735.643058][T17116] bond1 (unregistering): Released all slaves [ 735.788659][T17122] netlink: 'syz.5.5142': attribute type 3 has an invalid length. [ 739.136509][ T5719] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 739.296827][ T5719] usb 4-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 739.305662][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 739.305692][ T5719] usb 4-1: Product: syz [ 739.305707][ T5719] usb 4-1: Manufacturer: syz [ 739.479321][T17211] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5184'. [ 739.722510][ T5719] scsi host1: uas [ 739.976743][ C1] usb 4-1: stat urb: status -71 [ 739.976930][ C1] usb 4-1: cmd cmplt err -71 [ 739.993538][ T5719] usb 4-1: USB disconnect, device number 74 [ 740.044329][ T5719] scsi 1:0:0:0: tag#0 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 740.110109][ T5719] scsi 1:0:0:0: tag#0 CDB: Inquiry 12 00 00 00 24 00 [ 740.136781][ T5612] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 740.280772][ T5612] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 740.299114][ T5612] usb 6-1: config 0 has an invalid interface number: 147 but max is 0 [ 740.299147][ T5612] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.299169][ T5612] usb 6-1: config 0 has no interface number 0 [ 740.299238][ T5612] usb 6-1: config 0 interface 147 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 740.299269][ T5612] usb 6-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 740.299297][ T5612] usb 6-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 740.390537][ T5612] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.390567][ T5612] usb 6-1: Product: syz [ 740.390583][ T5612] usb 6-1: Manufacturer: syz [ 740.390597][ T5612] usb 6-1: SerialNumber: syz [ 740.415203][ T5612] usb 6-1: config 0 descriptor?? [ 740.416049][T17215] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 740.482414][ T5612] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 740.781131][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 740.805931][ T5324] usb 6-1: USB disconnect, device number 7 [ 740.845708][ T1272] usb 6-1: Failed to submit usb control message: -32 [ 740.845753][ T1272] usb 6-1: unable to send the bmi data to the device: -32 [ 740.845774][ T1272] usb 6-1: unable to get target info from device [ 740.845791][ T1272] usb 6-1: could not get target info (-32) [ 740.845886][ T1272] usb 6-1: could not probe fw (-32) [ 741.059382][T17233] nvme_fabrics: unknown parameter or missing value 'nqn=' in ctrl creation request [ 741.078714][T17237] binfmt_misc: register: failed to install interpreter ./file0 [ 741.530094][T17242] netlink: 'syz.4.5196': attribute type 3 has an invalid length. [ 743.108195][T17275] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5211'. [ 743.871078][T17295] tmpfs: Bad value for 'mpol' [ 744.009214][T17300] exfat: Deprecated parameter 'debug' [ 744.036903][T17300] exFAT-fs (nullb0): invalid boot record signature [ 744.036947][T17300] exFAT-fs (nullb0): failed to read boot sector [ 744.036958][T17300] exFAT-fs (nullb0): failed to recognize exfat type [ 744.156106][ T5733] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 744.298724][ T5733] usb 2-1: Using ep0 maxpacket: 32 [ 744.303056][ T5733] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 744.306548][ T5733] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 744.306580][ T5733] usb 2-1: config 2 has no interface number 0 [ 744.306629][ T5733] usb 2-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 744.306657][ T5733] usb 2-1: config 2 interface 88 has no altsetting 0 [ 744.370404][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 744.370439][ T5733] usb 2-1: Product: syz [ 744.370456][ T5733] usb 2-1: Manufacturer: syz [ 744.370472][ T5733] usb 2-1: SerialNumber: syz [ 744.433135][T17297] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 744.697505][ T5733] asix 2-1:2.88: probe with driver asix failed with error -71 [ 744.752692][ T5733] usb 2-1: USB disconnect, device number 112 [ 744.907526][T17313] netlink: 'syz.5.5231': attribute type 1 has an invalid length. [ 744.907562][T17313] netlink: 'syz.5.5231': attribute type 1 has an invalid length. [ 745.085449][T17317] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5232'. [ 746.073263][ T5324] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 746.224549][ T5324] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 746.244481][ T5324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.244514][ T5324] usb 6-1: Product: syz [ 746.244530][ T5324] usb 6-1: Manufacturer: syz [ 746.244546][ T5324] usb 6-1: SerialNumber: syz [ 746.472819][ T49] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 747.031592][T17357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5254'. [ 747.351102][T17359] vers=1.0 (cifs) not permitted when mounting with smb3 [ 747.351102][T17359] [ 747.351344][T17359] CIFS: VFS: vers=1.0 (cifs) not permitted when mounting with smb3 [ 747.940498][ T49] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 748.928042][ T5324] usb 6-1: USB disconnect, device number 8 [ 749.137275][ T49] ath9k_htc: Failed to initialize the device [ 749.240118][ T5324] usb 6-1: ath9k_htc: USB layer deinitialized [ 749.700903][T17387] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5267'. [ 750.779339][T17414] workqueue: name exceeds WQ_NAME_LEN. Truncating to: '>N95xhˉpn [ 751.233175][ T3402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.233202][ T3402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.040580][T17481] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.195202][T17480] vlan0: entered promiscuous mode [ 755.902711][T17525] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.243399][ T5733] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 757.387219][ T5733] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 757.389649][ T5733] usb 4-1: config index 0 descriptor too short (expected 220, got 92) [ 757.389682][ T5733] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 757.389745][ T5733] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 757.438057][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.438090][ T5733] usb 4-1: Product: syz [ 757.438105][ T5733] usb 4-1: Manufacturer: syz [ 757.438120][ T5733] usb 4-1: SerialNumber: syz [ 757.507079][ T5733] usb 4-1: selecting invalid altsetting 1 [ 757.946769][ T5733] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 757.946857][ T5733] cdc_ncm 4-1:1.0: bind() failure [ 758.013826][T17576] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5340'. [ 758.103801][ T5733] usb 4-1: USB disconnect, device number 75 [ 759.157181][ T5733] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 759.305425][ T5733] usb 6-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 759.319889][ T5733] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 759.319921][ T5733] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 759.328317][ T5733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.328348][ T5733] usb 6-1: Product: syz [ 759.328364][ T5733] usb 6-1: Manufacturer: syz [ 759.328380][ T5733] usb 6-1: SerialNumber: syz [ 759.425251][ T5733] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 759.475599][ T5733] ums-sddr09 6-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 759.475599][ T5733] Please send a copy of this message to and [ 759.957821][ T5733] ums-sddr09 6-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 759.979276][ T5733] usb 6-1: USB disconnect, device number 9 [ 760.453589][T17634] netlink: 260 bytes leftover after parsing attributes in process `syz.6.5364'. [ 760.531212][T17636] ./file0: Can't lookup blockdev [ 760.583676][T17641] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5369'. [ 760.649752][T17642] netlink: 'syz.4.5367': attribute type 1 has an invalid length. [ 761.645808][ T36] audit: type=1326 audit(3937513651.372:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17667 comm="syz.1.5381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 761.645876][ T36] audit: type=1326 audit(3937513651.372:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17667 comm="syz.1.5381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 761.672321][ T36] audit: type=1326 audit(3937513651.404:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17667 comm="syz.1.5381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 761.672374][ T36] audit: type=1326 audit(3937513651.414:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17667 comm="syz.1.5381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 761.700200][ T36] audit: type=1326 audit(3937513651.414:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17667 comm="syz.1.5381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f76379bddeb code=0x7ffc0000 [ 761.700263][ T36] audit: type=1326 audit(3937513651.414:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17667 comm="syz.1.5381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f76379bddeb code=0x7ffc0000 [ 761.700306][ T36] audit: type=1326 audit(3937513651.414:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17667 comm="syz.1.5381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f76379bddeb code=0x7ffc0000 [ 761.700348][ T36] audit: type=1326 audit(3937513651.414:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17667 comm="syz.1.5381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f76379bddeb code=0x7ffc0000 [ 761.700392][ T36] audit: type=1326 audit(3937513651.414:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17667 comm="syz.1.5381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f76379bddeb code=0x7ffc0000 [ 761.700433][ T36] audit: type=1326 audit(3937513651.414:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17667 comm="syz.1.5381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f76379bddeb code=0x7ffc0000 [ 763.684318][T17705] nvme nvme0: failed to connect socket: -512 [ 764.359167][T17742] netlink: 'syz.6.5417': attribute type 15 has an invalid length. [ 764.960020][T17755] netlink: 'syz.6.5421': attribute type 62 has an invalid length. [ 765.915292][T17784] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5437'. [ 765.916100][T17784] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5437'. [ 766.197523][T17784] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5437'. [ 766.197586][T17784] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5437'. [ 767.139862][T17816] netlink: zone id is out of range [ 767.139881][T17816] netlink: zone id is out of range [ 767.139890][T17816] netlink: zone id is out of range [ 767.139899][T17816] netlink: zone id is out of range [ 767.139909][T17816] netlink: zone id is out of range [ 767.139919][T17816] netlink: zone id is out of range [ 767.139928][T17816] netlink: zone id is out of range [ 767.139938][T17816] netlink: zone id is out of range [ 767.139946][T17816] netlink: zone id is out of range [ 767.139955][T17816] netlink: zone id is out of range [ 767.329371][ T5719] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 767.478944][ T5719] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 767.492835][ T5719] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 767.492925][ T5719] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 767.496799][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 767.496830][ T5719] usb 2-1: SerialNumber: syz [ 767.587998][ T5719] usb 2-1: No union descriptors [ 767.828991][ T5612] usb 2-1: USB disconnect, device number 113 [ 768.255827][ T5719] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 768.331410][T17844] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5466'. [ 768.398943][ T5719] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 768.404243][ T5719] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 768.404311][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.448660][ T5719] usb 4-1: config 0 descriptor?? [ 768.464731][ T5719] ums-realtek 4-1:0.0: USB Mass Storage device detected [ 768.706788][T17852] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 768.848689][ T5733] usb 4-1: USB disconnect, device number 76 [ 769.074664][T17862] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5473'. [ 769.636219][T17880] netlink: 632 bytes leftover after parsing attributes in process `syz.3.5484'. [ 769.874657][T17886] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5486'. [ 769.878070][T17890] sctp: [Deprecated]: syz.3.5488 (pid 17890) Use of struct sctp_assoc_value in delayed_ack socket option. [ 769.878070][T17890] Use struct sctp_sack_info instead [ 770.245728][T17898] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5490'. [ 770.573367][T17913] sock: sock_timestamping_bind_phc: sock not bind to device [ 770.712441][ T5733] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 770.750208][T17898] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5490'. [ 770.854450][ T5733] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 770.856388][ T5733] usb 2-1: config index 0 descriptor too short (expected 64998, got 72) [ 770.866079][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.866108][ T5733] usb 2-1: Product: syz [ 770.866124][ T5733] usb 2-1: Manufacturer: syz [ 770.866138][ T5733] usb 2-1: SerialNumber: syz [ 770.936233][ T5848] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 771.462347][ T49] usb 2-1: USB disconnect, device number 114 [ 771.742256][ T135] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 771.742480][T17926] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 771.835867][T17938] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 772.070884][T17944] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 772.070906][T17944] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 772.070920][T17944] overlayfs: missing 'lowerdir' [ 772.213957][ T5848] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 772.292633][ T5848] ath9k_htc: Failed to initialize the device [ 772.294863][ T49] usb 2-1: ath9k_htc: USB layer deinitialized [ 772.613726][T17957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5519'. [ 772.613756][T17957] netlink: 'syz.1.5519': attribute type 1 has an invalid length. [ 772.763544][T17960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5521'. [ 773.357106][T17974] net_ratelimit: 340 callbacks suppressed [ 773.357194][T17974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 773.938122][T17986] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5534'. [ 775.043329][T18017] netlink: 996 bytes leftover after parsing attributes in process `syz.3.5549'. [ 775.054662][T18015] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5548'. [ 775.399835][ T49] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 775.547285][ T49] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 775.548985][ T49] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 775.563303][ T49] usb 2-1: config 1 has no interface number 0 [ 775.564409][ T49] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 775.564440][ T49] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 775.564469][ T49] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.615344][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.615378][ T49] usb 2-1: Product: syz [ 775.615395][ T49] usb 2-1: Manufacturer: syz [ 775.615411][ T49] usb 2-1: SerialNumber: syz [ 775.678819][T18020] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 775.930419][T18020] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 776.136760][ T49] usb 2-1: Incompatible driver and firmware versions [ 776.184224][ T49] usb 2-1: USB disconnect, device number 115 [ 777.925833][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 777.925858][ T36] audit: type=1326 audit(3937513668.475:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18080 comm="syz.1.5580" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 777.925913][ T36] audit: type=1326 audit(3937513668.475:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18080 comm="syz.1.5580" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 777.937644][ T36] audit: type=1326 audit(3937513668.486:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18080 comm="syz.1.5580" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 777.949194][ T36] audit: type=1326 audit(3937513668.486:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18080 comm="syz.1.5580" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 777.970972][ T36] audit: type=1326 audit(3937513668.517:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18080 comm="syz.1.5580" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 777.971676][ T36] audit: type=1326 audit(3937513668.517:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18080 comm="syz.1.5580" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 777.972507][ T36] audit: type=1326 audit(3937513668.517:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18080 comm="syz.1.5580" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 777.972557][ T36] audit: type=1326 audit(3937513668.517:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18080 comm="syz.1.5580" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f76379be159 code=0x7ffc0000 [ 778.321966][T18085] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5581'. [ 778.701187][T18091] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5585'. [ 779.067835][T18099] netlink: 'syz.1.5588': attribute type 10 has an invalid length. [ 779.080658][T18098] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 779.129067][T18099] macvlan1: entered promiscuous mode [ 779.129103][T18099] macvlan1: entered allmulticast mode [ 779.258547][T18099] veth1_vlan: entered allmulticast mode [ 779.268177][T18101] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5590'. [ 779.401713][T18099] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 779.646423][T18105] netlink: 'syz.6.5592': attribute type 1 has an invalid length. [ 779.646452][T18105] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5592'. [ 779.968841][T18060] infiniband syz1: set active [ 779.968869][T18060] infiniband syz1: added veth1_macvtap [ 780.342670][ T49] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 780.369519][T18060] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 780.369565][T18060] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 780.369608][T18060] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 780.492548][ T49] usb 2-1: Using ep0 maxpacket: 16 [ 780.493559][ T49] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.00 [ 780.497793][ T49] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 780.497824][ T49] usb 2-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 780.497845][ T49] usb 2-1: config 254 has no interface number 0 [ 780.497896][ T49] usb 2-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 780.497927][ T49] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 780.497956][ T49] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x8A has invalid wMaxPacketSize 0 [ 780.497981][ T49] usb 2-1: config 254 interface 235 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 780.498010][ T49] usb 2-1: config 254 interface 235 has no altsetting 0 [ 780.507315][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.507344][ T49] usb 2-1: Product: syz [ 780.507359][ T49] usb 2-1: Manufacturer: syz [ 780.507374][ T49] usb 2-1: SerialNumber: syz [ 780.943606][ T49] usbtest 2-1:254.235: Linux gadget zero [ 780.943634][ T49] usbtest 2-1:254.235: high-speed {control in/out iso-in} tests (+alt) [ 780.975455][T18060] RDS/IB: syz1: added [ 781.014544][T18060] smc: adding ib device syz1 with port count 1 [ 781.041517][T18060] smc: ib device syz1 port 1 has no pnetid [ 781.290050][ T998] usb 2-1: USB disconnect, device number 116 [ 781.566102][T18122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5600'. [ 781.886518][T18128] overlayfs: failed to resolve './file2': -2 [ 783.421917][T18160] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5619'. [ 784.060543][T18173] nvme_rdma: malformed address passed: 127.0.0.1:4o [ 784.356746][T18184] netlink: 'syz.6.5630': attribute type 2 has an invalid length. [ 785.402490][T18207] netlink: 'syz.1.5642': attribute type 5 has an invalid length. [ 785.961321][ T998] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 786.114727][ T998] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 786.117954][ T998] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.455302][ T998] qmi_wwan 2-1:1.0: probe with driver qmi_wwan failed with error -71 [ 786.513204][ T998] usb 2-1: USB disconnect, device number 117 [ 786.770679][ T49] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 786.931340][ T49] usb 7-1: Using ep0 maxpacket: 32 [ 786.933514][ T49] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 786.936371][ T49] usb 7-1: config index 0 descriptor too short (expected 27632, got 27) [ 786.936400][ T49] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 786.936422][ T49] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 786.936442][ T49] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 786.936461][ T49] usb 7-1: config 1 has no interface number 0 [ 786.936506][ T49] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.003417][ T49] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 787.235491][ T49] snd_usb_pod 7-1:1.1: endpoint not available, using fallback values [ 787.236038][ T49] snd_usb_pod 7-1:1.1: invalid control EP [ 787.236057][ T49] snd_usb_pod 7-1:1.1: cannot start listening: -22 [ 787.236364][ T49] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 787.236915][ T49] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 787.580292][ T49] usb 7-1: USB disconnect, device number 3 [ 787.804334][T18234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5655'. [ 788.632423][T18202] syz.4.5640 (18202): drop_caches: 2 [ 788.848488][T18250] openvswitch: netlink: Message has 2 unknown bytes. [ 788.848531][T18250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 789.472686][T18263] netlink: 'syz.3.5668': attribute type 23 has an invalid length. [ 790.043946][T18273] sctp: [Deprecated]: syz.4.5674 (pid 18273) Use of struct sctp_assoc_value in delayed_ack socket option. [ 790.043946][T18273] Use struct sctp_sack_info instead [ 790.277928][T18277] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5676'. [ 790.680299][T18288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5682'. [ 790.931680][ T5848] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 791.074826][ T5848] usb 2-1: Using ep0 maxpacket: 32 [ 791.075851][ T5848] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 791.081711][ T5848] usb 2-1: config 1 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.081749][ T5848] usb 2-1: config 1 interface 0 altsetting 254 bulk endpoint 0x82 has invalid maxpacket 608 [ 791.081787][ T5848] usb 2-1: config 1 interface 0 altsetting 254 endpoint 0x3 has invalid wMaxPacketSize 0 [ 791.081812][ T5848] usb 2-1: config 1 interface 0 altsetting 254 bulk endpoint 0x3 has invalid maxpacket 0 [ 791.081838][ T5848] usb 2-1: config 1 interface 0 altsetting 254 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 791.081868][ T5848] usb 2-1: config 1 interface 0 has no altsetting 0 [ 791.136798][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 791.136830][ T5848] usb 2-1: SerialNumber: syz [ 791.213819][T18289] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 791.226851][ T5612] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 791.286974][ T5848] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 791.379315][ T5612] usb 7-1: Using ep0 maxpacket: 32 [ 791.383917][ T5612] usb 7-1: unable to get BOS descriptor or descriptor too short [ 791.383981][ T5612] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 791.386287][ T5612] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 791.386314][ T5612] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 791.430130][ T5612] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.430161][ T5612] usb 7-1: Product: syz [ 791.430176][ T5612] usb 7-1: Manufacturer: syz [ 791.430192][ T5612] usb 7-1: SerialNumber: syz [ 791.450035][ T998] usb 2-1: USB disconnect, device number 118 [ 791.870389][ T5612] usb 7-1: unit 4 not found! [ 791.870417][ T5612] usb 7-1: unit 0 not found! [ 792.091984][ T5612] usb 7-1: USB disconnect, device number 4 [ 792.343462][T18311] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5693'. [ 792.391660][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 792.774842][ T5610] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 792.856711][ T5610] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 792.868098][ T5610] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 792.874215][ T5610] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 792.877622][ T5610] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 792.997069][T18320] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.044464][T18320] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 793.385611][T18329] random: crng reseeded on system resumption [ 794.054791][T18342] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5706'. [ 794.543933][T18357] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 794.874914][ T4906] Bluetooth: hci6: command tx timeout [ 795.444813][T18378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5721'. [ 796.857063][ T4906] Bluetooth: hci6: command tx timeout [ 797.282684][T18412] openvswitch: netlink: Actions may not be safe on all matching packets [ 797.911217][T18420] netlink: 'syz.4.5740': attribute type 4 has an invalid length. [ 798.840287][ T4906] Bluetooth: hci6: command tx timeout [ 798.946798][T18436] netlink: 312 bytes leftover after parsing attributes in process `syz.1.5748'. [ 799.628804][T18451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5755'. [ 800.710328][ T1272] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.818330][ T4906] Bluetooth: hci6: command tx timeout [ 801.363554][T18460] lo speed is unknown, defaulting to 1000 [ 801.776083][T18460] lo speed is unknown, defaulting to 1000 [ 802.551139][ T1272] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.714028][T18480] netlink: 'syz.6.5769': attribute type 16 has an invalid length. [ 802.714058][T18480] netlink: 'syz.6.5769': attribute type 17 has an invalid length. [ 802.903038][T18460] lo speed is unknown, defaulting to 1000 [ 802.982286][T18460] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 802.982333][T18460] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 802.982383][T18460] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 803.290678][T18460] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 803.508248][T18480] vlan0: left promiscuous mode [ 803.838685][ T3374] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.838866][ T3374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.155725][T18460] lo speed is unknown, defaulting to 1000 [ 804.606140][T18496] overlayfs: workdir and upperdir must be separate subtrees [ 804.618700][ T1272] bridge0: port 3(netdevsim1) entered disabled state [ 804.888348][ T1272] netdevsim netdevsim5 netdevsim1 (unregistering): left allmulticast mode [ 804.888397][ T1272] netdevsim netdevsim5 netdevsim1 (unregistering): left promiscuous mode [ 804.888965][ T1272] bridge0: port 3(netdevsim1) entered disabled state [ 805.117134][ T1272] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.322234][T18460] lo speed is unknown, defaulting to 1000 [ 805.621300][T18460] lo speed is unknown, defaulting to 1000 [ 805.683222][T18460] lo speed is unknown, defaulting to 1000 [ 806.241628][ T1272] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.498761][T18460] lo speed is unknown, defaulting to 1000 [ 806.543623][T18460] lo speed is unknown, defaulting to 1000 [ 806.866781][T18460] lo speed is unknown, defaulting to 1000 [ 807.929155][T18542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5797'. [ 808.043659][T18549] netlink: 'syz.6.5800': attribute type 15 has an invalid length. [ 808.772585][T18564] tmpfs: Bad value for 'mpol' [ 808.981232][ T4906] Bluetooth: hci4: command 0x2016 tx timeout [ 809.510351][ T36] audit: type=1326 audit(3937513701.621:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18574 comm="syz.6.5813" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f885e159 code=0x7ffc0000 [ 809.510418][ T36] audit: type=1326 audit(3937513701.621:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18574 comm="syz.6.5813" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f885e159 code=0x7ffc0000 [ 809.578287][ T36] audit: type=1326 audit(3937513701.705:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18574 comm="syz.6.5813" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f885e159 code=0x7ffc0000 [ 809.578579][ T36] audit: type=1326 audit(3937513701.705:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18574 comm="syz.6.5813" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f885e159 code=0x7ffc0000 [ 809.585413][ T36] audit: type=1326 audit(3937513701.715:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18574 comm="syz.6.5813" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7ff3f885e159 code=0x7ffc0000 [ 809.586559][ T36] audit: type=1326 audit(3937513701.715:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18574 comm="syz.6.5813" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f885e159 code=0x7ffc0000 [ 809.588766][ T36] audit: type=1326 audit(3937513701.715:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18574 comm="syz.6.5813" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff3f885e159 code=0x7ffc0000 [ 809.588815][ T36] audit: type=1326 audit(3937513701.715:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18574 comm="syz.6.5813" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f885e159 code=0x7ffc0000 [ 809.589421][ T36] audit: type=1326 audit(3937513701.715:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18574 comm="syz.6.5813" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff3f885e159 code=0x7ffc0000 [ 810.185918][T18584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5816'. [ 810.185969][T18584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 810.313075][T18588] netlink: 'syz.1.5817': attribute type 21 has an invalid length. [ 810.848710][T18588] netlink: 'syz.1.5817': attribute type 1 has an invalid length. [ 810.848736][T18588] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5817'. [ 811.447895][ T5733] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 811.477336][ T1272] bridge_slave_1: left allmulticast mode [ 811.477379][ T1272] bridge_slave_1: left promiscuous mode [ 811.477682][ T1272] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.600545][ T5733] usb 7-1: Using ep0 maxpacket: 32 [ 811.602893][ T5733] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 811.602956][ T5733] usb 7-1: too many configurations: 70, using maximum allowed: 8 [ 811.609106][ T5733] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.633266][ T5733] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.653357][ T5733] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.659076][ T5733] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.662446][ T5733] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.670608][ T5733] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.677215][ T5733] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.700923][ T5733] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.708123][ T5733] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=8 [ 811.708152][ T5733] usb 7-1: SerialNumber: syz [ 811.742487][ T5733] usb 7-1: config 0 descriptor?? [ 811.765288][ T5733] hub 7-1:0.0: Invalid hub with more than one config or interface [ 811.765339][ T5733] hub 7-1:0.0: probe with driver hub failed with error -22 [ 812.044683][ T1272] bridge_slave_0: left allmulticast mode [ 812.044727][ T1272] bridge_slave_0: left promiscuous mode [ 812.044997][ T1272] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.235185][ T49] usb 7-1: USB disconnect, device number 5 [ 814.479577][T18677] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5852'. [ 814.479606][T18677] netlink: 'syz.6.5852': attribute type 2 has an invalid length. [ 814.563488][T18679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5853'. [ 814.759565][ T1272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 814.852588][ T1272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 814.900406][ T1272] bond0 (unregistering): Released all slaves [ 815.305579][ T5253] 8021q: adding VLAN 0 to HW filter on device eth5 [ 815.373120][T18688] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5857'. [ 815.373402][T18307] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.373624][T18307] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.373966][T18307] bridge_slave_0: entered allmulticast mode [ 815.427663][T18307] bridge_slave_0: entered promiscuous mode [ 815.456640][T18307] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.456765][T18307] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.456977][T18307] bridge_slave_1: entered allmulticast mode [ 815.462938][T18307] bridge_slave_1: entered promiscuous mode [ 815.703644][T18696] nvme_rdma: malformed src address passed: 1270.0.1 [ 815.905798][T18702] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 815.923225][T18703] netlink: 'syz.4.5863': attribute type 16 has an invalid length. [ 815.923251][T18703] netlink: 'syz.4.5863': attribute type 17 has an invalid length. [ 816.144599][ T37] INFO: task syz.2.4507:15746 blocked for more than 143 seconds. [ 816.144629][ T37] Not tainted syzkaller #0 [ 816.144643][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 816.144654][ T37] task:syz.2.4507 state:D stack:28504 pid:15746 tgid:15745 ppid:5599 task_flags:0x400040 flags:0x00080002 [ 816.144729][ T37] Call Trace: [ 816.144739][ T37] [ 816.144755][ T37] __schedule+0x16d9/0x5700 [ 816.144828][ T37] ? _raw_spin_unlock_irqrestore+0x4c/0x80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 816.144866][ T37] ? __pfx___schedule+0x10/0x10 [ 816.144915][ T37] rt_mutex_schedule+0x76/0xf0 [ 816.144948][ T37] rt_mutex_slowlock_block+0x55e/0x690 [ 816.144986][ T37] ? rt_mutex_slowlock_block+0x33c/0x690 [ 816.145016][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 816.145047][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 816.145075][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 816.145245][ T37] ? usbdev_open+0x151/0x790 [ 816.145365][ T37] ? usbdev_open+0x151/0x790 [ 816.145389][ T37] mutex_lock_nested+0x168/0x1d0 [ 816.145423][ T37] usbdev_open+0x151/0x790 [ 816.145547][ T37] ? __pfx_usbdev_open+0x10/0x10 [ 816.145573][ T37] ? rt_spin_unlock+0x159/0x200 [ 816.145614][ T37] ? rt_spin_unlock+0x165/0x200 [ 816.145644][ T37] chrdev_open+0x4dc/0x600 [ 816.145682][ T37] ? __pfx_chrdev_open+0x10/0x10 [ 816.145714][ T37] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 816.145773][ T37] ? __pfx_chrdev_open+0x10/0x10 [ 816.145802][ T37] do_dentry_open+0x849/0x1420 [ 816.145845][ T37] vfs_open+0x3b/0x350 [ 816.145874][ T37] ? path_openat+0x142d/0x1d60 [ 816.145906][ T37] path_openat+0x1448/0x1d60 [ 816.145959][ T37] do_file_open+0x23e/0x4a0 [ 816.146012][ T37] ? __pfx_do_file_open+0x10/0x10 [ 816.146441][ T37] ? alloc_fd+0x654/0x6d0 [ 816.146481][ T37] do_sys_openat2+0x115/0x200 [ 816.146517][ T37] ? __pfx_do_sys_openat2+0x10/0x10 [ 816.146645][ T37] ? exc_page_fault+0x6a/0xc0 [ 816.146685][ T37] ? do_user_addr_fault+0xc4c/0x1340 [ 816.146715][ T37] __x64_sys_openat+0x138/0x170 [ 816.146755][ T37] do_syscall_64+0x166/0x520 [ 816.146776][ T37] ? trace_irq_disable+0x3b/0x140 [ 816.146805][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.146830][ T37] ? clear_bhb_loop+0x70/0xc0 [ 816.146857][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.146879][ T37] RIP: 0033:0x7f12e805e98e [ 816.146901][ T37] RSP: 002b:00007f12e62f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 816.146926][ T37] RAX: ffffffffffffffda RBX: 00007f12e62f66c0 RCX: 00007f12e805e98e [ 816.146944][ T37] RDX: 0000000000101301 RSI: 00007f12e62f5c00 RDI: ffffffffffffff9c [ 816.146960][ T37] RBP: 00007f12e62f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 816.146975][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 816.146990][ T37] R13: 00007f12e8326038 R14: 00007f12e8325fa0 R15: 00007ffde50c1d08 [ 816.147026][ T37] [ 816.147049][ T37] [ 816.147049][ T37] Showing all lock ** replaying previous printk message ** [ 816.147049][ T37] [ 816.147049][ T37] Showing all locks held in the system: [ 816.147060][ T37] locks held by kworker/0:0/9: 6, last CPU#0: [ 816.147120][ T37] #0: ffff88801f6e4538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 816.147228][ T37] #1: ffffc900000e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 816.147288][ T37] #2: ffff88802a3ca210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 816.147364][ T37] #3: ffff888063b5a210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 816.147481][ T37] #4: ffff8880600ef1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 816.147545][ T37] #5: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 816.147612][ T37] locks held by rcuc/0/20: 4, last CPU#0: [ 816.147629][ T37] #0: ffffffff8e059540 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 816.152227][ T37] #1: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 816.152325][ T37] #2: ffffffff8e1c3de0 (rcu_callback){....}-{0:0}, at: rcu_cpu_kthread+0x217/0x1740 [ 816.415735][ T37] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 816.415815][ T37] locks held by khungtaskd/37: 1, last CPU#1: [ 816.415833][ T37] #0: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 816.415922][ T37] locks held by kworker/u8:5/135: 3, on CPU#1: [ 816.415939][ T37] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 816.416000][ T37] #1: ffffc9000413fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 816.416060][ T37] #2: ffffffff8f5d5038 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 816.416196][ T37] locks held by kworker/u8:9/1272: 5, on CPU#0: [ 816.416216][ T37] #0: ffff88801aeb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 816.429435][ T37] #1: ffffc90006c27c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 816.429490][ T37] #2: ffffffff8f5c67e0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 816.429624][ T37] #3: ffffffff8f5d5038 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 816.429720][ T37] #4: ffff888064330938 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x132/0x6a0 [ 816.429806][ T37] locks held by kworker/u8:19/3374: 6, last CPU#1: [ 816.429822][ T37] #0: ffff8880332af938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 816.429875][ T37] #1: ffffc9000ea37c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 816.429930][ T37] #2: ffffffff8e059540 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 816.429981][ T37] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 816.430032][ T37] #4: ffff888071013d58 (&hash->list_locks[i]){+...}-{3:3}, at: __batadv_dat_purge+0x131/0x400 [ 816.430143][ T37] #5: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 816.430196][ T37] locks held by klogd/4946: 2, last CPU#0: [ 816.430210][ T37] #0: ffffffff8e311770 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 816.430261][ T37] #1: ffff88801b2fd258 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xef/0x2a0 [ 816.430315][ T37] locks held by dhcpcd/5253: 1, on CPU#1: [ 816.430328][ T37] #0: ffffffff8f5d5038 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 816.430404][ T37] locks held by getty/5349: 2, on CPU#1: [ 816.430418][ T37] #0: ffff8880372db0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 816.433811][ T37] #1: ffffc900044c32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 816.433870][ T37] locks held by syz-executor/5580: 4, last CPU#0: [ 816.433885][ T37] #0: ffff888035407030 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 816.433935][ T37] #1: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 816.433983][ T37] #2: ffff88803e8f7718 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 816.434084][ T37] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 816.434146][ T37] locks held by udevd/5621: 4, on CPU#0: [ 816.434160][ T37] #0: ffff888033a002c0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa5/0xcb0 [ 816.434212][ T37] #1: ffff88803a5aa878 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 816.434286][ T37] #2: ffff8880349b7c38 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 816.434344][ T37] #3: ffff888063b5a210 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 816.434427][ T37] locks held by kworker/1:4/5719: 4, last CPU#1: [ 816.434441][ T37] #0: ffff88813ff26538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 816.434495][ T37] #1: ffffc90005b0fc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 816.434546][ T37] #2: ffffffff8ed0f958 ("ratelimiter_table_lock"){+.+.}-{3:3}, at: wg_ratelimiter_gc_entries+0x5d/0x470 [ 816.434645][ T37] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 816.434701][ T37] locks held by syz.2.4507/15746: 1, on CPU#1: [ 816.434715][ T37] #0: ffff88802a3ca210 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x790 [ 816.434764][ T37] locks held by syz-executor/16103: 9, last CPU#0: [ 816.434778][ T37] #0: ffffffff8e29f270 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 816.434920][ T37] #1: ffff88813ff511b0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x18e/0x1d80 [ 816.434971][ T37] #2: ffff88801b312cb0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x27d/0x1d80 [ 816.435028][ T37] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 816.435075][ T37] #4: ffff88803cdd7358 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 816.435137][ T37] #5: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 816.435186][ T37] #6: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 816.435233][ T37] #7: ffff8880669a5058 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x569/0x58f0 [ 816.439277][ T37] #8: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock_nested+0x1e0/0x400 [ 816.439345][ T37] locks held by syz-executor/18307: 1, on CPU#0: [ 816.439361][ T37] #0: ffffffff8f5d5038 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 816.439418][ T37] locks held by syz.4.5863/18703: 1, on CPU#0: [ 816.439432][ T37] #0: ffffffff8f5d5038 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 816.439487][ T37] [ 816.439493][ T37] ============================================= [ 816.439493][ T37] [ 816.439502][ T37] NMI backtrace for cpu 0 [ 816.439517][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 816.439539][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 816.439551][ T37] Call Trace: [ 816.439560][ T37] [ 816.439569][ T37] dump_stack_lvl+0xe8/0x150 [ 816.439601][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 816.439689][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 816.439711][ T37] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 816.439738][ T37] sys_info+0x135/0x170 [ 816.439760][ T37] watchdog+0xfd7/0x1030 [ 816.439791][ T37] ? watchdog+0x1c7/0x1030 [ 816.439822][ T37] kthread+0x38b/0x470 [ 816.439843][ T37] ? __pfx_watchdog+0x10/0x10 [ 816.439864][ T37] ? __pfx_kthread+0x10/0x10 [ 816.439888][ T37] ret_from_fork+0x514/0xb70 [ 816.439912][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 816.439932][ T37] ? __switch_to+0xc89/0x1420 [ 816.439962][ T37] ? __pfx_kthread+0x10/0x10 [ 816.439984][ T37] ret_from_fork_asm+0x1a/0x30 [ 816.440018][ T37] [ 816.440027][ T37] Sending NMI from CPU 0 to CPUs 1: [ 816.440068][ C1] NMI backtrace for cpu 1 [ 816.440083][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 816.440103][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 816.440113][ C1] RIP: 0010:io_serial_out+0x7c/0xc0 [ 816.440190][ C1] Code: c9 64 fc 44 89 f9 d3 e5 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2c b8 d0 fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 38 c1 [ 816.440205][ C1] RSP: 0018:ffffc90000167900 EFLAGS: 00000202 [ 816.440221][ C1] RAX: 000000000000005b RBX: 000000000000005b RCX: 0000000000000000 [ 816.440234][ C1] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000000 [ 816.440245][ C1] RBP: 00000000000003f8 R08: 0000000000000000 R09: 0000000000000000 [ 816.440256][ C1] R10: dffffc0000000000 R11: ffffffff8561eab0 R12: dffffc0000000000 [ 816.440272][ C1] R13: 000000000000005b R14: ffffffff99ea53e0 R15: 0000000000000000 [ 816.440287][ C1] FS: 0000000000000000(0000) GS:ffff888125cc8000(0000) knlGS:0000000000000000 [ 816.440302][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 816.440315][ C1] CR2: 0000001b3251dff8 CR3: 000000003ff94000 CR4: 00000000003526f0 [ 816.440332][ C1] Call Trace: [ 816.440339][ C1] [ 816.440348][ C1] __serial8250_console_fifo_write+0x1ec/0x3f0 [ 816.440402][ C1] serial8250_console_write+0xac5/0x1230 [ 816.440427][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 816.440455][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 816.440485][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 816.440509][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 816.440541][ C1] nbcon_kthread_func+0x679/0x880 [ 816.440565][ C1] ? nbcon_kthread_func+0x163/0x880 [ 816.440585][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 816.440617][ C1] ? __kthread_parkme+0x71/0x1f0 [ 816.440640][ C1] ? __kthread_parkme+0x199/0x1f0 [ 816.440664][ C1] kthread+0x38b/0x470 [ 816.440681][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 816.440700][ C1] ? __pfx_kthread+0x10/0x10 [ 816.440717][ C1] ret_from_fork+0x514/0xb70 [ 816.440735][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 816.440751][ C1] ? __switch_to+0xc89/0x1420 [ 816.440774][ C1] ? __pfx_kthread+0x10/0x10 [ 816.440790][ C1] ret_from_fork_asm+0x1a/0x30 [ 816.440813][ C1] [ 816.447859][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 817.443177][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 817.452813][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 817.462869][ T37] Call Trace: [ 817.466147][ T37] [ 817.469087][ T37] vpanic+0x56d/0xa60 [ 817.473066][ T37] ? __pfx___schedule+0x10/0x10 [ 817.477914][ T37] ? __pfx_vpanic+0x10/0x10 [ 817.482413][ T37] panic+0xc5/0xd0 [ 817.486212][ T37] ? __pfx_panic+0x10/0x10 [ 817.490622][ T37] ? preempt_schedule_common+0x7f/0xd0 [ 817.496103][ T37] ? preempt_schedule_thunk+0x16/0x40 [ 817.501476][ T37] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 817.507640][ T37] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 817.513793][ T37] watchdog+0x1030/0x1030 [ 817.518139][ T37] ? watchdog+0x1c7/0x1030 [ 817.522578][ T37] kthread+0x38b/0x470 [ 817.526649][ T37] ? __pfx_watchdog+0x10/0x10 [ 817.531328][ T37] ? __pfx_kthread+0x10/0x10 [ 817.536010][ T37] ret_from_fork+0x514/0xb70 [ 817.540627][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 817.545743][ T37] ? __switch_to+0xc89/0x1420 [ 817.550422][ T37] ? __pfx_kthread+0x10/0x10 [ 817.555008][ T37] ret_from_fork_asm+0x1a/0x30 [ 817.559780][ T37] [ 817.563067][ T37] Kernel Offset: disabled [ 817.567422][ T37] Rebooting in 86400 seconds..