last executing test programs: 5m0.004851613s ago: executing program 2 (id=6148): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x2e}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7e9d19db568a1fea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0}, 0x94) 4m59.698188657s ago: executing program 2 (id=6153): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x10000000, 0x4, 0x200000006}) 4m59.368847333s ago: executing program 2 (id=6158): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="e80100001900010000000000fbdbdf251d010900500012804c00f8801400330000000000000000000000ffff64ef00013100fb80b5c06b2b80f7297959472d504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72000000840106"], 0x1e8}, 0x1, 0x0, 0x0, 0x5}, 0x0) 4m59.111634726s ago: executing program 2 (id=6163): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e0021002bbd7000000000000700000005002a000000000008000f8004"], 0x24}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) 4m58.674219569s ago: executing program 2 (id=6168): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="170000001400010028de4ae677dbdf2502"], 0x20}}, 0x40000c0) 4m58.375492289s ago: executing program 2 (id=6173): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 4m42.260855042s ago: executing program 32 (id=6173): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 2m49.254298271s ago: executing program 0 (id=7827): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m47.826989976s ago: executing program 0 (id=7837): getpid() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 2m47.543523451s ago: executing program 0 (id=7842): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r0, 0x1, 0x3, &(0x7f0000000680)=""/241, &(0x7f0000000040)=0xf1) 2m47.192742473s ago: executing program 0 (id=7847): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x9100}, [@IFLA_OPERSTATE={0x5, 0x10, 0x1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_LINKMODE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m46.523202768s ago: executing program 0 (id=7852): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000002640)={0x28, 0x12, 0x0, 0x201, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0xb}, [@nested={0x14, 0xab, 0x0, 0x1, [@nested={0x10, 0x64, 0x0, 0x1, [@nested={0xc, 0x91, 0x0, 0x1, [@typed={0x8, 0x31, 0x0, 0x0, @pid}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8804}, 0x4c040) 2m46.320434393s ago: executing program 0 (id=7857): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='nfsd\x00', 0x1000016, 0x0) 2m30.22129931s ago: executing program 33 (id=7857): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='nfsd\x00', 0x1000016, 0x0) 1m14.030563614s ago: executing program 5 (id=9013): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m13.786275643s ago: executing program 5 (id=9016): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sync_file_range(r0, 0xb, 0x2, 0x6) 1m13.455552836s ago: executing program 5 (id=9020): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x25, 0x301, 0x670bd24, 0x25dfdbfc, {0x15}, [@typed={0x4, 0x161, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x40009060}, 0x0) 1m13.120522997s ago: executing program 5 (id=9022): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000006800010000000000feffffff0a000000000000001800088014000300fc020000000000000000000000000000060007000208000008000500", @ANYRES32, @ANYBLOB="140006"], 0x54}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) 1m12.712040562s ago: executing program 5 (id=9026): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x2800, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x6, 0x0, {0xffffffff, 0xa, 0x0, 0x18, 0x0, 0x60}}) 1m12.392704154s ago: executing program 5 (id=9030): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x0) 56.308492217s ago: executing program 34 (id=9030): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x0) 11.025830071s ago: executing program 6 (id=9768): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x0, 0x7ffe}, 0xc) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1, 0x2}, 0xc) 9.631690931s ago: executing program 7 (id=9773): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000700)=""/4109, 0x100d}], 0x20) 9.264137245s ago: executing program 6 (id=9776): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) ppoll(&(0x7f0000000000)=[{r0, 0x6100}], 0x1, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000c40)=[{&(0x7f00000005c0)="c2", 0x1}], 0x1) 8.762034463s ago: executing program 4 (id=9777): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000002700090025bd7000ffd3df250100000008000100c21f"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) 7.87445246s ago: executing program 1 (id=9778): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x800) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0xc78e, 0xffffcaca, 0x5, 0x7}, 0x8, 0x5, 0x0, 0xfffffeff, 0x0, 0x5}}) 7.759422675s ago: executing program 3 (id=9779): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@getlink={0x28, 0x12, 0x1, 0x8, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x28}}, 0x0) 7.125489711s ago: executing program 7 (id=9780): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000000c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f000087c000/0x1000)=nil, 0x4, &(0x7f0000000000)=[{0x7, 0x0, 0xffffffffffffffff}], 0x1, 0xbff, 0x1e, 0x0, 0x0, 0x6a}) 6.677599712s ago: executing program 6 (id=9781): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 6.566897227s ago: executing program 4 (id=9782): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 6.489882895s ago: executing program 3 (id=9783): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6\xff\x03\x00\x00\x00\x00\x00\x00vs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\xca\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f1, 0x0) sendfile(r0, r1, 0x0, 0x41) 6.437099097s ago: executing program 7 (id=9784): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, 0x0) 6.066412194s ago: executing program 1 (id=9785): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a04002800128009000100766c616e000000001800028006000100000000000c000200110000001300000008000500", @ANYRES32=r1, @ANYBLOB="0500110002000000b0b236b9351e3a2059ff7aaef93f3f4d7ea065d3e3bc7459bbd9718f23be4ca16858281aa0f70f6a9e5f00d016413c09f288780a2a0485029f84f112df1d698feaeb33035ddc40cb5be275e91a4181b25e3607cf60d3a1afb19375108be2f654e7b61c25395854c3dfd8f0041ca5df4288f57debf5ddbfaef747a50d9602c1f16a0619e4d5d92848460dc205aa05cf829e406e7c00f116591c784a0bc23be6b87e654ba413a5a38df05840fe0f9d0ec00ba83539e0d8a0506a97c8e8"], 0x58}}, 0x40080) 5.364276842s ago: executing program 6 (id=9786): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0xfffffffe) 5.345529039s ago: executing program 4 (id=9787): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000200)=0x3ffe, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 5.205774342s ago: executing program 1 (id=9788): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0) 5.11808458s ago: executing program 3 (id=9789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000100005"], 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x48000) 4.816392967s ago: executing program 7 (id=9790): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) 4.76108469s ago: executing program 3 (id=9791): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x4}, 0x800, 0x0, 0x3, 0x1, 0x80}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x3, 0x0, 0x40, 0x7}, 0x20) 4.690950303s ago: executing program 4 (id=9792): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r1, &(0x7f0000000a80), 0x0}, 0x20) 3.902106221s ago: executing program 1 (id=9793): signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000c40)=[{&(0x7f00000001c0)=""/130, 0x82}], 0x1, 0x0, 0x1) 3.347275387s ago: executing program 6 (id=9794): r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_channels={0x2ffdb3e722cda0e, 0x8000, 0x8, 0x1, 0x3, 0x8, 0x1000, 0x9, 0x8fb2}}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)) 3.032082121s ago: executing program 4 (id=9795): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) listen(r0, 0x8001) 2.732454119s ago: executing program 3 (id=9796): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 1.914098604s ago: executing program 1 (id=9797): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xb3f3b000) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) 1.417139256s ago: executing program 7 (id=9798): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000080)=[{0x0, 0xfdff}, {&(0x7f0000000000)='\x00', 0x1}, {&(0x7f0000000040)="d7a2", 0x2}], 0x3, 0x8, 0x0) 348.653329ms ago: executing program 3 (id=9799): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x40000e10, 0x870, 0x1, 0x1, 0xd59f81, 0x19f2, 0x3cd, 0x19ef, 0x3, 0x3, 0x6, 0x2800, 0x2, 0xd1, 0xe, 0x30, {0x8, 0x3}, 0xa7, 0x4}}) 314.70169ms ago: executing program 1 (id=9800): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002000)={0x28, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x24008004) 240.952421ms ago: executing program 6 (id=9801): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x1000000, 0x1, {0x0}, 0xea}) 240.714731ms ago: executing program 4 (id=9802): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xc70, 0xf010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x7, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x5, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x81, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x20, 0xd, 0x28, {0xd, 0xf, "83efb930f0187ff0478fa22a61a54607b71ea9e404009c479cffff45cb92e449c42123ec25cd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 7 (id=9803): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, r1, 0x3141e0b2751b0f9b, 0x70bd26, 0x25dfdc02, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44015}, 0x4000) kernel console output (not intermixed with test programs): T20542] netlink: 'syz.1.7077': attribute type 32 has an invalid length. [ 806.707229][T20542] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7077'. [ 807.782992][T20578] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7095'. [ 807.862426][T20580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7096'. [ 807.990844][T20586] netlink: 'syz.5.7098': attribute type 11 has an invalid length. [ 808.994177][ T37] audit: type=1326 audit(765.102:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20598 comm="syz.3.7105" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946331ce59 code=0x7ffc0000 [ 808.994234][ T37] audit: type=1326 audit(765.102:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20598 comm="syz.3.7105" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946331ce59 code=0x7ffc0000 [ 808.994298][ T37] audit: type=1326 audit(765.102:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20598 comm="syz.3.7105" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946331ce59 code=0x7ffc0000 [ 808.999351][ T37] audit: type=1326 audit(765.111:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20598 comm="syz.3.7105" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f946331ce59 code=0x7ffc0000 [ 808.999553][ T37] audit: type=1326 audit(765.111:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20598 comm="syz.3.7105" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946331ce59 code=0x7ffc0000 [ 809.332690][T20605] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 809.334916][T20605] overlayfs: overlapping lowerdir path [ 809.690473][ T5636] Bluetooth: hci4: unexpected event for opcode 0x200a [ 809.935895][ T5337] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 810.098579][ T5337] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 810.098614][ T5337] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.156869][ T5337] usb 6-1: config 0 descriptor?? [ 810.173141][ T5337] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 810.618629][ T5337] gspca_cpia1: usb_control_msg 03, error -71 [ 810.619232][ T5337] gspca_cpia1: usb_control_msg 01, error -71 [ 810.619249][ T5337] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 810.630598][ T5337] usb 6-1: USB disconnect, device number 3 [ 810.866368][ T821] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 811.053860][ T821] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 811.053894][ T821] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 811.053916][ T821] usb 2-1: Product: syz [ 811.053937][ T821] usb 2-1: SerialNumber: syz [ 811.058289][ T821] usb 2-1: config 0 descriptor?? [ 811.540612][ T5337] usb 2-1: USB disconnect, device number 120 [ 811.828348][T20664] netlink: 'syz.5.7136': attribute type 11 has an invalid length. [ 813.016488][ T821] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 813.176744][ T821] usb 1-1: Using ep0 maxpacket: 8 [ 813.178949][ T821] usb 1-1: config 0 has an invalid interface number: 128 but max is 2 [ 813.178988][ T821] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 813.179011][ T821] usb 1-1: config 0 has no interface number 1 [ 813.179031][ T821] usb 1-1: config 0 has no interface number 2 [ 813.179106][ T821] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 813.179133][ T821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.242203][ T821] usb 1-1: config 0 descriptor?? [ 813.504437][ T821] qcserial 1-1:0.128: Qualcomm USB modem converter detected [ 813.667648][T20718] netlink: 260 bytes leftover after parsing attributes in process `syz.3.7163'. [ 813.770954][ T5626] usb 1-1: USB disconnect, device number 111 [ 813.774581][ T5626] qcserial 1-1:0.128: device disconnected [ 813.971764][T20727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7167'. [ 813.971783][T20727] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7167'. [ 814.730931][T20747] netlink: 'syz.5.7176': attribute type 2 has an invalid length. [ 814.835659][ T5630] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 814.995694][ T5630] usb 4-1: Using ep0 maxpacket: 16 [ 814.998524][ T5630] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.998604][ T5630] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 814.998626][ T5630] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 814.998646][ T5630] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 814.998663][ T5630] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 814.998694][ T5630] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 814.998711][ T5630] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.006016][ T5630] usb 4-1: config 0 descriptor?? [ 815.177096][ T5630] rc_core: IR keymap rc-hauppauge not found [ 815.177118][ T5630] Registered IR keymap rc-empty [ 815.177432][ T5630] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 815.198467][ T5630] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 815.221589][ T5630] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 815.243938][ T5630] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input53 [ 815.249991][ T5630] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 815.265768][ T5630] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 815.289257][ T5630] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 815.314353][ T5630] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 815.328895][ T5630] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 815.350870][ T5630] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 815.369546][ T5630] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 815.391031][ T5630] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 815.412622][ T5630] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 815.433884][ T5630] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 815.455637][ T5630] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 815.622547][ T5630] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 815.622576][ T5630] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 815.649978][ T5630] usb 4-1: USB disconnect, device number 118 [ 815.854914][T20771] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7187'. [ 816.737990][T20791] netlink: 'syz.0.7197': attribute type 1 has an invalid length. [ 816.738007][T20791] netlink: 476 bytes leftover after parsing attributes in process `syz.0.7197'. [ 816.738019][T20791] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.7197'. [ 817.273770][ T821] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 817.444589][ T821] usb 1-1: Using ep0 maxpacket: 16 [ 817.447566][ T821] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 817.447587][ T821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.478973][ T821] usb 1-1: config 0 descriptor?? [ 817.493506][ T821] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 817.704597][ T821] usb 1-1: Detected FT232B [ 817.851374][ T5836] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 817.919364][ T821] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 817.919809][ T821] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 817.923549][ T821] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 817.952067][ T821] usb 1-1: USB disconnect, device number 112 [ 817.995298][ T821] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 817.995821][ T821] ftdi_sio 1-1:0.0: device disconnected [ 818.059545][ T5836] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 818.059577][ T5836] usb 4-1: config 0 has no interface number 0 [ 818.059627][ T5836] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 818.059658][ T5836] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 818.102562][ T5836] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 818.102614][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.102638][ T5836] usb 4-1: Product: syz [ 818.102654][ T5836] usb 4-1: Manufacturer: syz [ 818.102671][ T5836] usb 4-1: SerialNumber: syz [ 818.145942][ T5836] usb 4-1: config 0 descriptor?? [ 818.151602][T20817] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 818.166238][ T5836] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 818.206357][ T5836] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 818.616578][ T821] usb 4-1: USB disconnect, device number 119 [ 818.637158][T20835] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 818.694663][ T821] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 818.695569][ T821] cyberjack 4-1:0.69: device disconnected [ 819.730275][T20869] bond8: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 819.761182][T20869] bond8 (unregistering): Released all slaves [ 820.673430][T20902] netlink: 256 bytes leftover after parsing attributes in process `syz.5.7251'. [ 820.833137][T20909] netlink: zone id is out of range [ 820.833150][T20909] netlink: zone id is out of range [ 820.833156][T20909] netlink: zone id is out of range [ 820.833162][T20909] netlink: zone id is out of range [ 820.833168][T20909] netlink: zone id is out of range [ 820.833175][T20909] netlink: zone id is out of range [ 820.833181][T20909] netlink: zone id is out of range [ 820.833187][T20909] netlink: zone id is out of range [ 820.833193][T20909] netlink: zone id is out of range [ 820.963821][ T5337] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 821.129467][ T5337] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 821.129500][ T5337] usb 2-1: config 0 has no interface number 0 [ 821.129547][ T5337] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 821.136199][ T5337] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 821.136233][ T5337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.136256][ T5337] usb 2-1: Product: syz [ 821.136275][ T5337] usb 2-1: Manufacturer: syz [ 821.136292][ T5337] usb 2-1: SerialNumber: syz [ 821.190027][ T5337] usb 2-1: config 0 descriptor?? [ 821.312750][ T5337] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 821.467253][ C0] yurex 2-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 821.689018][ T5337] usb 2-1: USB disconnect, device number 121 [ 821.757412][ T5337] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 822.857508][ T821] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 823.019381][ T821] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 823.019420][ T821] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 823.019463][ T821] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 823.019493][ T821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.478810][ T821] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 823.492882][ T821] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input54 [ 823.554355][T20969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7285'. [ 823.584629][ T821] input: failed to attach handler kbd to device input54, error: -5 [ 823.681669][ T821] usb 4-1: USB disconnect, device number 120 [ 824.028021][T20981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7291'. [ 824.737131][T21000] bond8: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 824.765084][T21000] bond8 (unregistering): Released all slaves [ 825.246416][T21016] IPv6: A: Disabled Multicast RS [ 826.237041][ T5836] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 826.412014][ T5836] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 826.412075][ T5836] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 826.412101][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.473362][ T5836] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 827.285094][T21078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7338'. [ 827.289681][T21078] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 827.599310][T21086] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7342'. [ 827.599343][T21086] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7342'. [ 827.599362][T21086] netlink: 248 bytes leftover after parsing attributes in process `syz.5.7342'. [ 827.635872][ T5836] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 827.849835][ T5836] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 827.849861][ T5836] stv0680 1-1:4.0: last error: 86, command = 0x7c [ 827.869836][ T5836] usb 1-1: USB disconnect, device number 113 [ 828.650076][T21115] bond0: entered allmulticast mode [ 828.650101][T21115] bond_slave_0: entered allmulticast mode [ 828.650154][T21115] bond_slave_1: entered allmulticast mode [ 829.513367][T21145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7371'. [ 829.548257][T21145] veth1_macvtap: left promiscuous mode [ 829.819285][T21155] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 830.407509][T21174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7385'. [ 830.573727][T21180] veth0_vlan: entered allmulticast mode [ 830.945974][T21190] JFS: charset not found [ 831.145702][T21201] netlink: 'syz.0.7398': attribute type 1 has an invalid length. [ 831.145720][T21201] netlink: 'syz.0.7398': attribute type 2 has an invalid length. [ 831.225715][ T821] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 831.385958][ T821] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 831.386011][ T821] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 831.386052][ T821] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12336, setting to 64 [ 831.386082][ T821] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 831.389642][ T821] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 831.389675][ T821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 831.389698][ T821] usb 2-1: SerialNumber: syz [ 831.465041][T21195] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 831.501338][T21209] netlink: 'syz.0.7402': attribute type 28 has an invalid length. [ 831.501362][T21209] netlink: 'syz.0.7402': attribute type 3 has an invalid length. [ 831.501377][T21209] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7402'. [ 831.703414][ T821] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 831.727543][ T821] usb 2-1: USB disconnect, device number 122 [ 833.482782][T21233] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 833.482906][T21233] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 833.583092][T21260] net_ratelimit: 61 callbacks suppressed [ 833.583113][T21260] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 833.708310][T21233] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 833.709798][T21233] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 833.870275][T21233] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 833.870410][T21233] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 833.967835][T21233] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 833.967927][T21233] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 834.159959][T21233] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 834.177296][T21272] netlink: 'syz.5.7433': attribute type 1 has an invalid length. [ 834.877658][T21294] overlayfs: conflicting options: userxattr,metacopy=on [ 834.940134][T21296] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 835.040268][ T5636] Bluetooth: hci3: command 0x206a tx timeout [ 835.286597][ T5836] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 835.457291][ T5836] usb 6-1: Using ep0 maxpacket: 32 [ 835.463869][ T5836] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 835.463902][ T5836] usb 6-1: config 0 has no interface number 0 [ 835.463950][ T5836] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 51400, setting to 1024 [ 835.463980][ T5836] usb 6-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 835.489818][ T5836] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 835.489904][ T5836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.489965][ T5836] usb 6-1: Product: syz [ 835.490008][ T5836] usb 6-1: Manufacturer: syz [ 835.490050][ T5836] usb 6-1: SerialNumber: syz [ 835.533502][ T5836] usb 6-1: config 0 descriptor?? [ 835.549512][T21300] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 835.605735][ T5836] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 835.605781][ T5836] em28xx 6-1:0.132: Video interface 132 found: bulk [ 835.832027][ T5836] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 835.895813][ T5636] Bluetooth: hci4: command 0x0406 tx timeout [ 835.946873][ T5836] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 835.946900][ T5836] em28xx 6-1:0.132: board has no eeprom [ 836.024768][ T5836] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 836.024817][ T5836] em28xx 6-1:0.132: analog set to bulk mode. [ 836.025298][ T821] em28xx 6-1:0.132: Registering V4L2 extension [ 836.066878][ T5636] Bluetooth: hci1: command 0x0406 tx timeout [ 836.119730][ T5836] usb 6-1: USB disconnect, device number 4 [ 836.128551][ T5836] em28xx 6-1:0.132: Disconnecting em28xx [ 836.152880][ T5636] Bluetooth: hci5: command 0x0c1a tx timeout [ 836.397771][ T821] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 836.397800][ T821] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 836.397819][ T821] em28xx 6-1:0.132: No AC97 audio processor [ 836.621410][ T821] usb 6-1: Decoder not found [ 836.621434][ T821] em28xx 6-1:0.132: failed to create media graph [ 836.621512][ T821] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 836.800260][ T821] em28xx 6-1:0.132: Remote control support is not available for this card. [ 836.806827][ T5836] em28xx 6-1:0.132: Closing input extension [ 837.264905][ T5636] Bluetooth: hci3: command 0x206a tx timeout [ 837.305083][ T5836] em28xx 6-1:0.132: Freeing device [ 837.833134][T21375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7481'. [ 838.120756][ T5636] Bluetooth: hci4: command 0x0406 tx timeout [ 838.291986][ T5636] Bluetooth: hci1: command 0x0406 tx timeout [ 838.377407][ T5636] Bluetooth: hci5: command 0x0c1a tx timeout [ 838.648212][T21399] bpf: Bad value for 'mode' [ 838.747117][T21401] bond3: entered allmulticast mode [ 838.747733][T21401] 8021q: adding VLAN 0 to HW filter on device bond3 [ 838.961456][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 838.961493][ T37] audit: type=1326 audit(793.121:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21409 comm="syz.3.7499" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946331ce59 code=0x7ffc0000 [ 838.961642][ T37] audit: type=1326 audit(793.121:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21409 comm="syz.3.7499" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946331ce59 code=0x7ffc0000 [ 838.963587][ T37] audit: type=1326 audit(793.121:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21409 comm="syz.3.7499" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f946331ce59 code=0x7ffc0000 [ 838.963740][ T37] audit: type=1326 audit(793.121:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21409 comm="syz.3.7499" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946331ce59 code=0x7ffc0000 [ 838.963927][ T37] audit: type=1326 audit(793.121:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21409 comm="syz.3.7499" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946331ce59 code=0x7ffc0000 [ 840.109040][T21443] netlink: 'syz.1.7515': attribute type 8 has an invalid length. [ 840.258868][T21448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7518'. [ 840.602297][ T5636] Bluetooth: hci5: command 0x0c1a tx timeout [ 840.887237][T21461] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7525'. [ 841.348232][ T37] audit: type=1326 audit(795.355:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21480 comm="syz.5.7533" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3ff2ce59 code=0x7ffc0000 [ 841.348295][ T37] audit: type=1326 audit(795.355:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21480 comm="syz.5.7533" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3ff2ce59 code=0x7ffc0000 [ 841.410296][ T37] audit: type=1326 audit(795.402:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21480 comm="syz.5.7533" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3ff2ce59 code=0x7ffc0000 [ 841.410355][ T37] audit: type=1326 audit(795.402:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21480 comm="syz.5.7533" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3ff2ce59 code=0x7ffc0000 [ 841.410404][ T37] audit: type=1326 audit(795.412:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21480 comm="syz.5.7533" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7feb3ff2ce59 code=0x7ffc0000 [ 843.611997][T21552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7569'. [ 843.882483][T21562] usb usb8: usbfs: process 21562 (syz.3.7574) did not claim interface 0 before use [ 844.372807][T21580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 844.685384][T21591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7588'. [ 845.088082][ T5337] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 845.255090][ T5337] usb 6-1: Using ep0 maxpacket: 8 [ 845.258899][ T5337] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 845.258931][ T5337] usb 6-1: config 0 has no interface number 0 [ 845.261442][ T5337] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 845.261476][ T5337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.261492][ T5337] usb 6-1: Product: syz [ 845.261504][ T5337] usb 6-1: Manufacturer: syz [ 845.261515][ T5337] usb 6-1: SerialNumber: syz [ 845.335618][ T5337] usb 6-1: config 0 descriptor?? [ 845.558870][ T5337] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 845.558946][ T5337] uvcvideo 6-1:0.31: Failed to initialize entity for entity 32774 [ 845.558968][ T5337] uvcvideo 6-1:0.31: Failed to register entities (-22). [ 845.778787][ T821] usb 6-1: USB disconnect, device number 5 [ 847.369441][T21673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7628'. [ 848.519119][ T5630] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 848.680656][ T5630] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 848.680687][ T5630] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 848.684095][ T5630] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 848.684317][ T5630] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.684342][ T5630] usb 4-1: Product: syz [ 848.684357][ T5630] usb 4-1: Manufacturer: syz [ 848.684375][ T5630] usb 4-1: SerialNumber: syz [ 849.003574][ T5630] usb 4-1: unit 4 not found! [ 849.104942][ T5630] usb 4-1: USB disconnect, device number 121 [ 849.227177][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 849.444960][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 849.444996][ T37] audit: type=1326 audit(802.919:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21726 comm="syz.5.7655" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3ff2ce59 code=0x7ffc0000 [ 849.446716][ T37] audit: type=1326 audit(802.919:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21726 comm="syz.5.7655" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3ff2ce59 code=0x7ffc0000 [ 849.450582][ T37] audit: type=1326 audit(802.919:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21726 comm="syz.5.7655" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3ff2ce59 code=0x7ffc0000 [ 849.451991][ T37] audit: type=1326 audit(802.937:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21726 comm="syz.5.7655" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7feb3ff2ce59 code=0x7ffc0000 [ 849.452128][ T37] audit: type=1326 audit(802.937:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21726 comm="syz.5.7655" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3ff2ce59 code=0x7ffc0000 [ 849.453534][ T37] audit: type=1326 audit(802.937:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21726 comm="syz.5.7655" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3ff2ce59 code=0x7ffc0000 [ 849.455042][ T37] audit: type=1326 audit(802.937:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21726 comm="syz.5.7655" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3ff2ce59 code=0x7ffc0000 [ 849.455868][ T37] audit: type=1326 audit(802.937:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21726 comm="syz.5.7655" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7feb3ff2ce59 code=0x7ffc0000 [ 849.456587][ T37] audit: type=1326 audit(802.937:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21726 comm="syz.5.7655" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7feb3ff2ce59 code=0x7ffc0000 [ 849.916509][T21736] netlink: 'syz.5.7659': attribute type 33 has an invalid length. [ 850.298504][T21749] usb usb8: usbfs: process 21749 (syz.3.7666) did not claim interface 0 before use [ 850.706313][T21762] netlink: 272 bytes leftover after parsing attributes in process `syz.0.7672'. [ 851.202232][ T5337] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 851.362793][ T5337] usb 4-1: Using ep0 maxpacket: 16 [ 851.365847][ T5337] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 851.365870][ T5337] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.365884][ T5337] usb 4-1: config 0 has no interface number 0 [ 851.368370][ T5337] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 851.368400][ T5337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.368427][ T5337] usb 4-1: Product: syz [ 851.368438][ T5337] usb 4-1: Manufacturer: syz [ 851.368449][ T5337] usb 4-1: SerialNumber: syz [ 851.372296][ T5337] usb 4-1: config 0 descriptor?? [ 851.444900][ T5337] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 851.444939][ T5337] uvcvideo 4-1:0.105: No valid video chain found. [ 851.614099][ T821] usb 4-1: USB disconnect, device number 122 [ 851.887614][T21794] netlink: zone id is out of range [ 851.887631][T21794] netlink: get zone limit has 4 unknown bytes [ 852.731796][ T821] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 852.902972][ T821] usb 4-1: Using ep0 maxpacket: 32 [ 852.903752][ T821] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 852.906015][ T821] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 852.906041][ T821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.906062][ T821] usb 4-1: config 0 has no interface number 0 [ 852.906112][ T821] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 852.907580][ T821] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 852.907598][ T821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.907613][ T821] usb 4-1: config 0 has no interface number 0 [ 852.907659][ T821] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 852.908954][ T821] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 852.908980][ T821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.909001][ T821] usb 4-1: config 0 has no interface number 0 [ 852.909038][ T821] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 852.910194][ T821] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 852.910219][ T821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.910240][ T821] usb 4-1: config 0 has no interface number 0 [ 852.910277][ T821] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 852.911402][ T821] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 852.911428][ T821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.911450][ T821] usb 4-1: config 0 has no interface number 0 [ 852.911490][ T821] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 852.912614][ T821] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 852.912638][ T821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.912659][ T821] usb 4-1: config 0 has no interface number 0 [ 852.912698][ T821] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 852.949003][ T821] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 852.949088][ T821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.949143][ T821] usb 4-1: config 0 has no interface number 0 [ 852.949270][ T821] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 852.965618][ T821] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 852.965703][ T821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.965761][ T821] usb 4-1: config 0 has no interface number 0 [ 852.965891][ T821] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 853.064590][ T821] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 853.064667][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.064711][ T821] usb 4-1: Product: syz [ 853.064743][ T821] usb 4-1: Manufacturer: syz [ 853.064785][ T821] usb 4-1: SerialNumber: syz [ 853.196079][ T821] usb 4-1: config 0 descriptor?? [ 853.330457][ T821] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 853.464383][ T5630] usb 4-1: USB disconnect, device number 123 [ 854.543242][T21864] openvswitch: netlink: Flow actions attr not present in new flow. [ 855.321908][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 855.321978][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 855.322718][ T1339] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 855.984928][T21915] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7746'. [ 856.089104][ T37] audit: type=1326 audit(809.136:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21916 comm="syz.3.7749" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f946331ce59 code=0x0 [ 856.781151][T21939] netlink: 'syz.1.7759': attribute type 6 has an invalid length. [ 857.883725][T21977] binder: 21975:21977 ioctl c00c620f 0 returned -14 [ 858.903191][T22012] sd 0:0:1:0: device reset [ 859.530888][T22032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7805'. [ 859.530905][T22032] tc_dump_action: action bad kind [ 860.054297][T22051] ALSA: mixer_oss: invalid OSS volume '' [ 860.925227][ T5626] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 861.089312][ T5626] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 861.089339][ T5626] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 861.093508][ T5626] usb 4-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 861.093541][ T5626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.093561][ T5626] usb 4-1: Product: syz [ 861.093577][ T5626] usb 4-1: Manufacturer: syz [ 861.093592][ T5626] usb 4-1: SerialNumber: syz [ 861.447928][ T5626] usb 4-1: unit 5 not found! [ 861.447963][ T5626] usb 4-1: unit 121 not found! [ 861.594809][ T5626] usb 4-1: USB disconnect, device number 124 [ 862.517395][T22108] [U]  [ 862.517424][T22108] [U] + [ 862.517443][T22108] [U] $܁P~ƊQrAe`G-Rij笨mA)߀No4gV;uQ` [ 862.517503][T22108] [U] Wg-u]}FyȘeƮ)>,>f}a&\msOHn'Ä=#$Ǧ&g C.,jP^{"Oiňo;pʪ6qwS_{CWfs+R~qu›ŸNn! [ 862.517537][T22108] [U] Zph5Laӝ8H [ 862.517610][T22108] [U] V)*Gr [ 862.517638][T22108] [U] g©MD9i^g[&TXd}y^#"Z&|JiYDX~reGiUMNkqGJcӔ0 r088D<U0P9=>ȪU[ƒuW9jl"hZG+EĖ#LY`z2 [ 862.517662][T22108] [U] }{_S|j\ptژ1b-S4!{9C5->M [ 862.517677][T22108] [U] UXBH,~nmIM/a [ 862.517692][T22108] [U] VS6e^ SHk"(*:$}<^YD?rnHEX#X3Ys6 [ 862.517705][T22108] [U] [ 862.517741][T22108] [U] 71D%}7G\4'Kp7U,"^|-B g&@bWRY [ 862.517776][T22108] [U] p~ [ 862.517802][T22108] [U] hQVOK) ƵZ>uY`XԶޖQtBhvMdR/%F8`yǥY䦈Fؾx@-d֛ 0ʩz;D")tRgiL()d6"BnBf?ӛ,ѧ`'Lq 6t2t@F@p6v]t4NξyRΓvP':J۫ۆE*̣];M4TqB_5pM [ 862.517942][T22108] [U] _mֱ9KU""^s6rP [ 862.518019][T22108] [U] ¥U[m j0zOoF|:! /$@RH(Η1K@ǚ/w4|xJ3: [ 862.518264][T22108] [U] V :p\U 5V"cd:nb3Ob,%ǯe j9>\rCˉiVE<\7;娍+ȏ"IƔ/6FNhgw~xcWö}H6TI؆6aA耹C1v]ba9xT  [ 862.518294][T22108] [U] ۼuJD⠙("wZ[(s1yXNׯtAc/piǎj Ѕ#{0`y,Hp+̄j54?@պNa^!4^3" [ 862.518346][T22108] [U] I\xezW80ܚPfzqi^@O [ 862.518368][T22108] [U] gڑ/P+ؒb=pYY1gJd!xKTa;PaoFlu 8:!VD G\zwi=)m)o!Җ>08jͻ*( sLQ@0KeVszKP?e/K MRlya?'EtU{R]ֈS$9Ou(ŀ~le/I8# a ?,#p;R{4Hw"X{\\ .KV2$Ēΐ܀6< [ 862.818849][T22108] [U] q Oulv~-_8?O6$z«eAO_NO/C .byrˋ<[DxҿWWX [ 862.818886][T22108] [U] ܲ|9$n`i(RǿDtA4o/̈́eV2Bln| :KYW&;l1; [ 862.818898][T22108] [U] ;JO6P [ 862.824571][T22107] [U] q1n#G4Y›rMnUf[Xi^='ډz;:Q7,E [ 865.261926][T22183] openvswitch: netlink: IP tunnel TTL not specified. [ 867.623349][T22247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7912'. [ 869.332525][ T5337] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 869.498825][ T5337] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 869.498857][ T5337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.498885][ T5337] usb 4-1: Product: syz [ 869.498905][ T5337] usb 4-1: Manufacturer: syz [ 869.498916][ T5337] usb 4-1: SerialNumber: syz [ 869.503249][ T5337] usb 4-1: config 0 descriptor?? [ 869.545074][ T5337] ch341 4-1:0.0: ch341-uart converter detected [ 869.952074][ T5337] usb 4-1: failed to send control message: -71 [ 869.952135][ T5337] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 869.980333][ T5337] usb 4-1: USB disconnect, device number 125 [ 869.994074][ T5337] ch341 4-1:0.0: device disconnected [ 870.151443][T22313] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7945'. [ 870.283006][T22315] netlink: 'syz.5.7948': attribute type 20 has an invalid length. [ 870.283038][T22315] IPv6: NLM_F_CREATE should be specified when creating new route [ 871.191758][T22333] netlink: 'syz.5.7955': attribute type 5 has an invalid length. [ 871.748126][T22350] netlink: 180 bytes leftover after parsing attributes in process `syz.5.7963'. [ 872.397162][ T37] audit: type=1326 audit(824.384:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22368 comm="syz.3.7974" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946331ce59 code=0x7ffc0000 [ 872.399080][ T37] audit: type=1326 audit(824.384:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22368 comm="syz.3.7974" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946331ce59 code=0x7ffc0000 [ 872.400364][ T37] audit: type=1326 audit(824.384:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22368 comm="syz.3.7974" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946331ce59 code=0x7ffc0000 [ 872.400669][ T37] audit: type=1326 audit(824.384:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22368 comm="syz.3.7974" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f946331ce59 code=0x7ffc0000 [ 872.400968][ T37] audit: type=1326 audit(824.384:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22368 comm="syz.3.7974" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946331ce59 code=0x7ffc0000 [ 872.401232][ T37] audit: type=1326 audit(824.384:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22368 comm="syz.3.7974" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946331ce59 code=0x7ffc0000 [ 872.401540][ T37] audit: type=1326 audit(824.384:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22368 comm="syz.3.7974" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946331ce59 code=0x7ffc0000 [ 872.402003][ T37] audit: type=1326 audit(824.384:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22368 comm="syz.3.7974" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f946331ce59 code=0x7ffc0000 [ 872.425501][ T37] audit: type=1326 audit(824.412:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22368 comm="syz.3.7974" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f946331ce59 code=0x7ffc0000 [ 873.281950][T22392] tmpfs: Bad value for 'mpol' [ 873.505615][T22394] bond8: option tlb_dynamic_lb: invalid value (14) [ 873.541965][T22394] bond8 (unregistering): Released all slaves [ 874.292859][T22419] netlink: 'syz.1.7998': attribute type 7 has an invalid length. [ 875.144123][T22443] netlink: 'syz.1.8008': attribute type 15 has an invalid length. [ 875.245715][T22445] netlink: 184 bytes leftover after parsing attributes in process `syz.5.8009'. [ 876.007102][ T5626] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 876.170084][ T5626] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.170145][ T5626] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 876.170163][ T5626] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.174171][ T5626] usb 6-1: config 0 descriptor?? [ 876.613686][ T5626] ath6kl: Failed to read usb control message: -71 [ 876.613726][ T5626] ath6kl: Unable to read the bmi data from the device: -71 [ 876.613737][ T5626] ath6kl: Unable to recv target info: -71 [ 876.636979][ T5626] ath6kl: Failed to init ath6kl core: -71 [ 876.677587][ T5626] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 876.693207][ T5626] usb 6-1: USB disconnect, device number 6 [ 876.719358][T22474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8023'. [ 876.719383][T22474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8023'. [ 877.003845][T22478] netlink: 'syz.1.8025': attribute type 29 has an invalid length. [ 877.003863][T22478] netlink: 'syz.1.8025': attribute type 19 has an invalid length. [ 877.594507][ T37] audit: type=1326 audit(829.246:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22486 comm="syz.3.8029" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946331ce59 code=0x7ffc0000 [ 878.526472][T22512] CIFS mount error: No usable UNC path provided in device string! [ 878.526472][T22512] [ 878.526491][T22512] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 879.190992][T22528] bond8 (unregistering): Released all slaves [ 879.685486][T22544] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 879.685618][T22544] CIFS: VFS: Malformed UNC in devname [ 879.780964][T22546] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8058'. [ 879.921110][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 879.943396][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 880.002409][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 880.025773][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 880.026730][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 880.601750][T22572] netlink: 600 bytes leftover after parsing attributes in process `syz.1.8067'. [ 880.623819][T22572] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 880.900379][T22549] wg0 speed is unknown, defaulting to 1000 [ 880.931194][T22580] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 880.976719][T22549] lo speed is unknown, defaulting to 1000 [ 881.861535][T22549] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.863389][T22549] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.863600][T22549] bridge_slave_0: entered allmulticast mode [ 881.867944][T22549] bridge_slave_0: entered promiscuous mode [ 881.912665][T22549] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.914457][T22549] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.915186][T22549] bridge_slave_1: entered allmulticast mode [ 881.920772][T22549] bridge_slave_1: entered promiscuous mode [ 882.055181][T22549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 882.075214][T22549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.284879][ T5636] Bluetooth: hci6: command tx timeout [ 882.311822][T22549] team0: Port device team_slave_0 added [ 882.324636][T22549] team0: Port device team_slave_1 added [ 882.411606][T22549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.411621][T22549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.411641][T22549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.413282][T22549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.413299][T22549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.413337][T22549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.816144][T22549] hsr_slave_0: entered promiscuous mode [ 882.819739][T22549] hsr_slave_1: entered promiscuous mode [ 882.833485][T22549] debugfs: 'hsr0' already exists in 'hsr' [ 882.833515][T22549] Cannot create hsr debugfs directory [ 883.027081][ T5626] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 883.182894][T22625] ubi16: attaching mtd0 [ 883.188136][ T5626] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.188205][ T5626] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 883.191481][ T5626] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 883.191513][ T5626] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.191536][ T5626] usb 6-1: Product: syz [ 883.191552][ T5626] usb 6-1: Manufacturer: syz [ 883.191568][ T5626] usb 6-1: SerialNumber: syz [ 883.294798][ T5626] cdc_ncm 6-1:1.0: skipping garbage [ 883.294821][ T5626] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 883.294861][ T5626] cdc_ncm 6-1:1.0: bind() failure [ 883.354705][ T5626] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 883.354777][ T5626] cdc_ncm 6-1:1.1: bind() failure [ 883.442842][T22625] ubi16: scanning is finished [ 883.442862][T22625] ubi16: empty MTD device detected [ 883.519399][ T821] usb 6-1: USB disconnect, device number 7 [ 883.820040][T22549] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 883.862401][T22549] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 883.876333][T22549] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 883.949649][T22549] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 883.952449][T22549] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 883.955037][ T5836] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 884.032505][T22549] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 884.035412][T22549] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 884.115103][T22549] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 884.192875][ T5836] usb 4-1: unable to get BOS descriptor or descriptor too short [ 884.224903][ T5836] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 884.224937][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.224959][ T5836] usb 4-1: Product: syz [ 884.224974][ T5836] usb 4-1: Manufacturer: syz [ 884.224990][ T5836] usb 4-1: SerialNumber: syz [ 884.353218][T22625] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4 [ 884.502752][ T5636] Bluetooth: hci6: command tx timeout [ 884.570064][ T5836] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 884.573657][ T5836] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 884.811956][ T5836] usb 4-1: USB disconnect, device number 126 [ 885.041216][T22646] netlink: 'syz.1.8093': attribute type 9 has an invalid length. [ 885.041239][T22646] netlink: 'syz.1.8093': attribute type 7 has an invalid length. [ 885.041252][T22646] netlink: 'syz.1.8093': attribute type 8 has an invalid length. [ 885.282794][T22549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.356531][T22549] 8021q: adding VLAN 0 to HW filter on device team0 [ 885.363438][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.363599][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 885.415579][ T1493] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.415684][ T1493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.524968][T22549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 886.726214][ T5636] Bluetooth: hci6: command tx timeout [ 887.139865][T22549] veth0_vlan: entered promiscuous mode [ 887.165824][T22549] veth1_vlan: entered promiscuous mode [ 887.245157][T22549] veth0_macvtap: entered promiscuous mode [ 887.276938][T22549] veth1_macvtap: entered promiscuous mode [ 887.338062][T22549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 887.455503][T22549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 887.509400][ T66] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.510702][ T66] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.513753][ T66] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.515101][ T66] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.553365][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.553387][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.773724][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.773747][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.836005][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 888.836024][ T37] audit: type=1326 audit(839.754:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22727 comm="syz.3.8125" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946331ce59 code=0x7ffc0000 [ 888.838589][ T37] audit: type=1326 audit(839.754:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22727 comm="syz.3.8125" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946331ce59 code=0x7ffc0000 [ 888.839851][ T37] audit: type=1326 audit(839.754:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22727 comm="syz.3.8125" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946331ce59 code=0x7ffc0000 [ 888.840114][ T37] audit: type=1326 audit(839.754:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22727 comm="syz.3.8125" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f946331ce59 code=0x7ffc0000 [ 888.860719][ T37] audit: type=1326 audit(839.763:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22727 comm="syz.3.8125" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946331ce59 code=0x7ffc0000 [ 888.993309][ T37] audit: type=1326 audit(839.894:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22727 comm="syz.3.8125" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f94632dd68e code=0x7ffc0000 [ 888.993716][ T5636] Bluetooth: hci6: command tx timeout [ 889.023106][ T37] audit: type=1326 audit(839.903:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22727 comm="syz.3.8125" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f94632dd68e code=0x7ffc0000 [ 889.024374][ T37] audit: type=1326 audit(839.922:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22727 comm="syz.3.8125" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f94632dd68e code=0x7ffc0000 [ 889.105115][ T37] audit: type=1326 audit(840.006:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22727 comm="syz.3.8125" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f94632dd68e code=0x7ffc0000 [ 889.108258][ T37] audit: type=1326 audit(840.006:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22727 comm="syz.3.8125" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f94632dd68e code=0x7ffc0000 [ 889.870876][ T36] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 890.040611][ T36] usb 7-1: Using ep0 maxpacket: 16 [ 890.047792][ T36] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 890.049028][ T36] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 890.049059][ T36] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 890.049080][ T36] usb 7-1: Manufacturer: syz [ 890.059560][ T36] usb 7-1: config 0 descriptor?? [ 890.351131][ T5836] usb 7-1: USB disconnect, device number 2 [ 890.684414][T22771] netlink: 188 bytes leftover after parsing attributes in process `syz.5.8145'. [ 893.614439][T22841] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8180'. [ 893.902145][ T5836] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 894.083921][ T5836] usb 7-1: Using ep0 maxpacket: 16 [ 894.088446][ T5836] usb 7-1: config 10 has an invalid interface number: 145 but max is 0 [ 894.088468][ T5836] usb 7-1: config 10 has no interface number 0 [ 894.088503][ T5836] usb 7-1: config 10 interface 145 has no altsetting 0 [ 894.091404][ T5836] usb 7-1: New USB device found, idVendor=07aa, idProduct=0017, bcdDevice=5b.44 [ 894.091434][ T5836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.091458][ T5836] usb 7-1: Product: syz [ 894.091474][ T5836] usb 7-1: Manufacturer: syz [ 894.091488][ T5836] usb 7-1: SerialNumber: syz [ 894.433542][ T5836] asix 7-1:10.145: probe with driver asix failed with error -22 [ 894.453592][ T5836] usb 7-1: USB disconnect, device number 3 [ 894.662106][ T5337] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 894.821113][T22861] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 894.854056][ T5337] usb 2-1: Using ep0 maxpacket: 8 [ 894.862516][ T5337] usb 2-1: unable to get BOS descriptor or descriptor too short [ 894.881375][ T5337] usb 2-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice= 0.00 [ 894.881408][ T5337] usb 2-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 894.881435][ T5337] usb 2-1: Product: syz [ 894.881446][ T5337] usb 2-1: Manufacturer: syz [ 894.881457][ T5337] usb 2-1: SerialNumber: syz [ 895.061024][T22863] ip6tnl2: entered allmulticast mode [ 895.200940][ T5337] usb 2-1: selecting invalid altsetting 1 [ 895.200971][ T5337] catc 2-1:8.0: Can't set altsetting 1. [ 895.201035][ T5337] catc 2-1:8.0: probe with driver catc failed with error -5 [ 895.243576][ T5337] usb 2-1: USB disconnect, device number 123 [ 896.820815][T22916] openvswitch: netlink: IP tunnel dst address not specified [ 897.201638][T22930] netlink: zone id is out of range [ 897.870417][T22952] netlink: 'syz.1.8235': attribute type 3 has an invalid length. [ 897.870442][T22952] netlink: 'syz.1.8235': attribute type 1 has an invalid length. [ 897.870457][T22952] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8235'. [ 897.870492][T22952] NCSI netlink: No device for ifindex 0 [ 898.062341][T22958] netlink: 768 bytes leftover after parsing attributes in process `syz.5.8238'. [ 898.707785][T22978] kAFS: unable to lookup cell 'syz1' [ 899.347750][ T5636] Bluetooth: hci5: unexpected cc 0x0c2d length: 65 > 4 [ 899.347788][ T5636] Bluetooth: hci5: unexpected event for opcode 0x0c2d [ 899.384119][T23003] ceph: Path missing in source [ 899.855013][T23021] netlink: 'syz.3.8268': attribute type 12 has an invalid length. [ 900.579097][T23045] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8281'. [ 900.579192][T23045] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8281'. [ 900.943803][T23057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8287'. [ 901.641363][T23073] hma2: entered promiscuous mode [ 902.261277][T23097] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8307'. [ 902.565491][T23107] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8312'. [ 902.565520][T23107] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8312'. [ 902.565537][T23107] netlink: 308 bytes leftover after parsing attributes in process `syz.6.8312'. [ 903.220004][T23131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8323'. [ 903.945078][T23155] openvswitch: netlink: IP tunnel TTL not specified. [ 903.960478][ T36] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 904.134101][ T36] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 904.134135][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.134160][ T36] usb 7-1: Product: syz [ 904.134171][ T36] usb 7-1: Manufacturer: syz [ 904.134183][ T36] usb 7-1: SerialNumber: syz [ 904.190383][ T36] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 904.380074][ T821] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 904.764229][T23174] netlink: 'syz.3.8345': attribute type 1 has an invalid length. [ 904.764257][T23174] netlink: 'syz.3.8345': attribute type 3 has an invalid length. [ 904.864627][ T5626] usb 7-1: USB disconnect, device number 4 [ 905.308656][T23185] __nla_validate_parse: 1 callbacks suppressed [ 905.308672][T23185] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8351'. [ 905.431930][T23189] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 905.639066][ T821] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 905.714764][ T821] ath9k_htc: Failed to initialize the device [ 905.718952][ T5626] usb 7-1: ath9k_htc: USB layer deinitialized [ 905.767756][T23198] openvswitch: netlink: IP tunnel dst address not specified [ 905.826709][T23199] TCP: TCP_TX_DELAY enabled [ 906.510159][T23226] netlink: 'syz.5.8371': attribute type 2 has an invalid length. [ 908.991932][T23307] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 911.129021][T23380] netlink: 'syz.6.8447': attribute type 33 has an invalid length. [ 911.129040][T23380] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8447'. [ 911.129065][T23380] `: renamed from team0 (while UP) [ 911.291158][T23384] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8449'. [ 913.297652][ T5636] Bluetooth: hci5: unexpected event for opcode 0x1005 [ 913.309938][T23438] overlayfs: missing 'lowerdir' [ 913.694647][T23452] openvswitch: netlink: Multiple metadata blocks provided [ 914.521434][T23474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 915.982369][ T5630] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 916.150283][ T5630] usb 2-1: Using ep0 maxpacket: 32 [ 916.152356][ T5630] usb 2-1: config index 0 descriptor too short (expected 64884, got 36) [ 916.152423][ T5630] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 916.154809][ T5630] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00 [ 916.154838][ T5630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.154859][ T5630] usb 2-1: Product: syz [ 916.154879][ T5630] usb 2-1: Manufacturer: syz [ 916.154891][ T5630] usb 2-1: SerialNumber: syz [ 916.554206][ T5630] ljca 2-1:1.0: probe with driver ljca failed with error -71 [ 916.575876][ T5630] usb 2-1: USB disconnect, device number 124 [ 916.850491][T23530] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.871791][T23530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8521'. [ 916.871819][T23530] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 917.420009][T23548] netlink: 'syz.5.8530': attribute type 2 has an invalid length. [ 917.420026][T23548] netlink: 2 bytes leftover after parsing attributes in process `syz.5.8530'. [ 917.420056][T23548] netlink: 'syz.5.8530': attribute type 2 has an invalid length. [ 917.420066][T23548] netlink: 2 bytes leftover after parsing attributes in process `syz.5.8530'. [ 917.957096][T23564] netlink: 96 bytes leftover after parsing attributes in process `syz.6.8538'. [ 918.091442][T23558] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.092256][T23558] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.345479][T23575] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 918.833677][T23558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 918.855656][T23558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 918.960045][T23591] sg_write: data in/out 221184/136 bytes for SCSI command 0x0-- guessing data in; [ 918.960045][T23591] program syz.6.8551 not setting count and/or reply_len properly [ 919.887435][T23605] netlink: 'syz.6.8558': attribute type 11 has an invalid length. [ 919.887460][T23605] netlink: 148 bytes leftover after parsing attributes in process `syz.6.8558'. [ 920.502912][T23595] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 920.505356][ T1396] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.558285][ T1396] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.566518][ T1396] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.566560][ T1396] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.040068][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 921.048387][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 921.072878][ T1339] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 921.298339][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 921.298359][ T37] audit: type=1326 audit(870.101:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23636 comm="syz.6.8574" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d3e1ce59 code=0x7ffc0000 [ 921.298410][ T37] audit: type=1326 audit(870.101:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23636 comm="syz.6.8574" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d3e1ce59 code=0x7ffc0000 [ 921.300766][ T37] audit: type=1326 audit(870.101:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23636 comm="syz.6.8574" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fa6d3e1ce59 code=0x7ffc0000 [ 921.300957][ T37] audit: type=1326 audit(870.101:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23636 comm="syz.6.8574" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d3e1ce59 code=0x7ffc0000 [ 921.301123][ T37] audit: type=1326 audit(870.101:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23636 comm="syz.6.8574" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d3e1ce59 code=0x7ffc0000 [ 921.741209][T23649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8580'. [ 921.741237][T23649] openvswitch: netlink: Invalid VLAN frame [ 922.568100][ T5626] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 922.728778][ T5626] usb 2-1: Using ep0 maxpacket: 8 [ 922.732413][ T5626] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 922.732443][ T5626] usb 2-1: config 6 has no interface number 0 [ 922.732490][ T5626] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 922.732517][ T5626] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 922.732546][ T5626] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 922.732574][ T5626] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 922.744009][ T5626] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 922.744094][ T5626] usb 2-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 922.744187][ T5626] usb 2-1: Product: syz [ 922.744235][ T5626] usb 2-1: Manufacturer: syz [ 922.744251][ T5626] usb 2-1: SerialNumber: syz [ 922.864476][ T5626] hso 2-1:6.2: Failed to find BULK eps [ 922.875438][T23683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8597'. [ 922.875473][T23683] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8597'. [ 923.079328][ T5626] usb 2-1: USB disconnect, device number 125 [ 923.295558][ T5630] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 923.458053][ T5630] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 0 [ 923.458089][ T5630] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 0 [ 923.493212][ T5630] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 923.493244][ T5630] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.493260][ T5630] usb 7-1: Manufacturer: 曘䅾吵椾忺ꓘ噒鱽鿒죀ॆ荨姿ᶮ㑣夠졎磖എ [ 923.771127][ T5630] usb 7-1: low speed audio streaming not supported [ 923.902035][ T5630] usb 7-1: USB disconnect, device number 5 [ 924.085997][T23711] netlink: 260 bytes leftover after parsing attributes in process `syz.3.8611'. [ 924.180118][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 924.329627][T23715] netdevsim netdevsim5: Direct firmware load for / [ 924.329627][T23715] failed with error -2 [ 924.329659][T23715] netdevsim netdevsim5: Falling back to sysfs fallback for: / [ 924.329659][T23715] [ 924.710942][T23727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 925.542867][T23751] netlink: 'syz.3.8630': attribute type 21 has an invalid length. [ 925.542956][T23751] netlink: 'syz.3.8630': attribute type 1 has an invalid length. [ 925.542967][T23751] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8630'. [ 925.701542][T23757] netlink: 'syz.6.8634': attribute type 4 has an invalid length. [ 925.894649][ T36] usb 2-1: new low-speed USB device number 126 using dummy_hcd [ 926.069374][ T36] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 926.069405][ T36] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 926.069451][ T36] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 926.069482][ T36] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 926.069499][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.136965][ T36] hub 2-1:1.0: bad descriptor, ignoring hub [ 926.137008][ T36] hub 2-1:1.0: probe with driver hub failed with error -5 [ 926.138055][ T36] cdc_wdm 2-1:1.0: skipping garbage [ 926.138074][ T36] cdc_wdm 2-1:1.0: skipping garbage [ 926.166671][ T36] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 926.430013][ T5630] usb 2-1: USB disconnect, device number 126 [ 926.836116][ T36] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 927.007031][ T36] usb 7-1: Using ep0 maxpacket: 32 [ 927.012604][ T36] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 927.012636][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.012659][ T36] usb 7-1: Product: syz [ 927.012676][ T36] usb 7-1: Manufacturer: syz [ 927.012692][ T36] usb 7-1: SerialNumber: syz [ 927.017042][ T36] usb 7-1: config 0 descriptor?? [ 927.065114][ T36] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 927.463189][ T36] gspca_topro: reg_w err -71 [ 927.499184][ T36] gspca_topro: Sensor soi763a [ 927.565629][ T36] usb 7-1: USB disconnect, device number 6 [ 928.548349][ T36] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 928.558068][ T5626] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 928.710406][ T36] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.710462][ T36] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 928.710488][ T36] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 928.710517][ T36] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 928.712964][ T36] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 928.712994][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.713017][ T36] usb 6-1: Product: syz [ 928.713033][ T36] usb 6-1: Manufacturer: syz [ 928.713050][ T36] usb 6-1: SerialNumber: syz [ 928.721246][ T5626] usb 7-1: Using ep0 maxpacket: 16 [ 928.732273][ T5626] usb 7-1: unable to get BOS descriptor or descriptor too short [ 928.810586][ T36] usb 6-1: config 0 descriptor?? [ 928.821808][ T5626] usb 7-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 928.821894][ T5626] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.821916][ T5626] usb 7-1: Product: syz [ 928.821933][ T5626] usb 7-1: Manufacturer: syz [ 928.821947][ T5626] usb 7-1: SerialNumber: syz [ 928.866097][ T36] garmin_gps 6-1:0.0: Garmin GPS usb/tty converter detected [ 928.916796][ T36] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 928.946477][ T36] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 929.048777][ T36] usb 6-1: USB disconnect, device number 8 [ 929.067678][ T36] garmin_gps 6-1:0.0: device disconnected [ 929.192727][ T5626] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 929.319134][ T5626] usb 7-1: USB disconnect, device number 7 [ 930.098478][T23861] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8685'. [ 930.363885][T23871] nvme_fabrics: unknown parameter or missing value '\' in ctrl creation request [ 930.964780][ T821] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 931.125240][ T821] usb 6-1: Using ep0 maxpacket: 32 [ 931.129756][ T821] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 931.129792][ T821] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 931.129817][ T821] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 931.133604][ T821] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 931.133635][ T821] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 931.133659][ T821] usb 6-1: Product: syz [ 931.133676][ T821] usb 6-1: Manufacturer: syz [ 931.133692][ T821] usb 6-1: SerialNumber: syz [ 931.231275][ T821] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input58 [ 931.576570][T19241] usb 6-1: USB disconnect, device number 9 [ 931.783554][T19241] appletouch 6-1:1.0: input: appletouch disconnected [ 931.929847][T23918] netlink: 'syz.3.8711': attribute type 1 has an invalid length. [ 932.058866][T18644] NFSD: Failed to start, no listeners configured. [ 932.118298][T23924] ipip0: entered promiscuous mode [ 932.118318][T23924] ipip0: entered allmulticast mode [ 933.811591][T23976] netlink: 'syz.1.8740': attribute type 1 has an invalid length. [ 934.617598][T24001] netlink: ct family unspecified [ 934.617648][T24001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 935.167961][T24018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8761'. [ 935.592703][T24032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8768'. [ 935.618434][ T5719] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 935.785124][ T5719] usb 6-1: config 0 has an invalid interface number: 107 but max is 0 [ 935.785154][ T5719] usb 6-1: config 0 has no interface number 0 [ 935.785333][ T5719] usb 6-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 935.799380][ T5719] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 935.799423][ T5719] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 935.799445][ T5719] usb 6-1: Product: syz [ 935.799460][ T5719] usb 6-1: Manufacturer: syz [ 935.799476][ T5719] usb 6-1: SerialNumber: syz [ 935.856375][ T5719] usb 6-1: config 0 descriptor?? [ 935.871059][ T5719] keyspan 6-1:0.107: Keyspan 4 port adapter converter detected [ 935.871426][ T5719] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 81 [ 935.890993][ T5719] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 1 [ 935.925017][ T5719] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 935.932858][T24035] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 935.948971][ T5719] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 2 [ 935.968787][ T5719] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 936.012561][ T5719] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 4 [ 936.038435][ T5719] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 936.044419][ T5719] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 6 [ 936.068070][ T5719] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 936.168005][ T5626] usb 6-1: USB disconnect, device number 10 [ 936.259359][ T5626] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 936.347470][ T5626] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 936.411793][ T5626] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 936.508203][ T5626] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 936.509907][ T5626] keyspan 6-1:0.107: device disconnected [ 936.633116][T24046] xt_NFQUEUE: number of queues (45768) out of range (got 94214) [ 938.031635][T24096] netlink: 'syz.1.8801': attribute type 1 has an invalid length. [ 938.031663][T24096] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8801'. [ 938.031681][T24096] netlink: 658 bytes leftover after parsing attributes in process `syz.1.8801'. [ 938.031698][T24096] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8801'. [ 938.622245][T24116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 938.820561][T24120] kernel profiling enabled (shift: 63) [ 938.820580][T24120] profiling shift: 63 too large [ 938.882049][T24124] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 938.882068][T24124] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 938.882079][T24124] overlayfs: missing 'lowerdir' [ 939.470816][T24144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8824'. [ 939.470844][T24144] batadv0: left promiscuous mode [ 939.470860][T24144] batadv0: left allmulticast mode [ 939.471003][T24144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8824'. [ 939.596360][T24147] : renamed from bond_slave_0 [ 939.864238][ T821] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 939.942187][T24157] netlink: 14 bytes leftover after parsing attributes in process `syz.6.8831'. [ 940.036910][ T821] usb 4-1: Using ep0 maxpacket: 32 [ 940.043283][ T821] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 940.043320][ T821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 940.074774][ T821] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 940.074818][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.074840][ T821] usb 4-1: Product: syz [ 940.074856][ T821] usb 4-1: Manufacturer: syz [ 940.074872][ T821] usb 4-1: SerialNumber: syz [ 940.120110][ T821] usb 4-1: config 0 descriptor?? [ 940.131868][ T821] hub 4-1:0.0: bad descriptor, ignoring hub [ 940.131909][ T821] hub 4-1:0.0: probe with driver hub failed with error -5 [ 940.140727][ T821] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input59 [ 940.383813][ T5626] usb 4-1: USB disconnect, device number 127 [ 940.383949][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 940.438191][T24165] netlink: 256 bytes leftover after parsing attributes in process `syz.5.8834'. [ 940.802212][T24175] netlink: 'syz.5.8839': attribute type 20 has an invalid length. [ 942.596199][T24234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8869'. [ 943.650730][T19241] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 943.818384][T19241] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 943.818409][T19241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.818424][T19241] usb 2-1: Product: syz [ 943.818435][T19241] usb 2-1: Manufacturer: syz [ 943.818446][T19241] usb 2-1: SerialNumber: syz [ 943.858541][T19241] usb 2-1: config 0 descriptor?? [ 943.872940][T19241] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 944.080279][ T5626] usb 2-1: USB disconnect, device number 127 [ 944.879104][T24297] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 946.336253][T24343] ./file0: Can't lookup blockdev [ 946.456661][T24337] bond1 (unregistering): Released all slaves [ 948.205145][T24376] SQUASHFS error: Failed to read block 0x0: -5 [ 948.205185][T24376] unable to read squashfs_super_block [ 948.324008][T24380] netlink: 'syz.6.8939': attribute type 11 has an invalid length. [ 948.324025][T24380] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.8939'. [ 948.600691][T24390] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 948.955965][ T821] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 949.130733][ T821] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 949.130764][ T821] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 949.130803][ T821] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 949.130829][ T821] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 949.132078][ T821] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 949.132219][ T821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 949.132244][ T821] usb 4-1: SerialNumber: syz [ 949.445379][ T821] usb 4-1: 0:2 : does not exist [ 949.445465][ T821] usb 4-1: unit 5 not found! [ 949.513347][ T821] usb 4-1: USB disconnect, device number 2 [ 950.029857][ T5627] udevd[5627]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 950.576839][T24427] netlink: 892 bytes leftover after parsing attributes in process `syz.6.8960'. [ 950.649322][T24431] netlink: 'syz.3.8962': attribute type 9 has an invalid length. [ 953.084698][ T5630] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 953.245382][ T5630] usb 4-1: Using ep0 maxpacket: 8 [ 953.249383][ T5630] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 953.249421][ T5630] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 953.249445][ T5630] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 953.249470][ T5630] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 953.249499][ T5630] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 953.249540][ T5630] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 953.249565][ T5630] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.354835][ T5630] usb 4-1: config 0 descriptor?? [ 953.369320][T24495] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 954.321609][ T5630] usb 4-1: USB disconnect, device number 3 [ 954.350927][ T5636] Bluetooth: hci7: Opcode 0x0c03 failed: -19 [ 954.871136][ T821] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 955.035897][ T821] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 955.035931][ T821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.035953][ T821] usb 7-1: Product: syz [ 955.035968][ T821] usb 7-1: Manufacturer: syz [ 955.035985][ T821] usb 7-1: SerialNumber: syz [ 955.082425][ T821] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 955.137342][ T36] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 955.550094][T24525] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9008'. [ 955.650588][T19241] usb 7-1: USB disconnect, device number 8 [ 956.026180][ T5836] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 956.186657][ T5836] usb 4-1: Using ep0 maxpacket: 8 [ 956.196411][ T5836] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 956.196444][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.196467][ T5836] usb 4-1: Product: syz [ 956.196483][ T5836] usb 4-1: Manufacturer: syz [ 956.196499][ T5836] usb 4-1: SerialNumber: syz [ 956.240436][ T5836] usb 4-1: config 0 descriptor?? [ 956.469005][ T5836] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 956.473296][ T5836] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 956.493974][ T5836] usb 4-1: USB disconnect, device number 4 [ 956.550388][ T36] usb 7-1: Service connection timeout for: 256 [ 956.550415][ T36] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 956.658737][ T36] ath9k_htc: Failed to initialize the device [ 956.660053][T19241] usb 7-1: ath9k_htc: USB layer deinitialized [ 956.679554][ T5630] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 956.849111][ T5630] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 956.849146][ T5630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.849170][ T5630] usb 2-1: Product: syz [ 956.849186][ T5630] usb 2-1: Manufacturer: syz [ 956.849202][ T5630] usb 2-1: SerialNumber: syz [ 956.885704][ T5630] usb 2-1: config 0 descriptor?? [ 956.904939][ T5630] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 957.111318][ T5630] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 957.111341][ T5630] sq905c 2-1:0.0: Get version command failed [ 957.111427][ T5630] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 957.138205][ T5630] usb 2-1: USB disconnect, device number 2 [ 957.411476][T24565] hm3): entered promiscuous mode [ 959.695103][T19241] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 959.859426][T19241] usb 2-1: config 238 has too many interfaces: 194, using maximum allowed: 32 [ 959.859458][T19241] usb 2-1: config 238 has 0 interfaces, different from the descriptor's value: 194 [ 959.873024][T19241] usb 2-1: New USB device found, idVendor=2639, idProduct=0013, bcdDevice=d6.9c [ 959.873109][T19241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.873172][T19241] usb 2-1: Product: syz [ 959.873216][T19241] usb 2-1: Manufacturer: syz [ 959.873262][T19241] usb 2-1: SerialNumber: syz [ 960.161440][T19241] usb 2-1: USB disconnect, device number 3 [ 961.350036][T24658] netlink: 'syz.3.9074': attribute type 5 has an invalid length. [ 961.997511][T24677] netlink: 144 bytes leftover after parsing attributes in process `syz.6.9084'. [ 962.398183][T24688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9089'. [ 962.398206][T24688] openvswitch: netlink: Invalid VLAN frame [ 963.561440][T24720] netlink: 'syz.6.9105': attribute type 1 has an invalid length. [ 963.561463][T24720] netlink: 224 bytes leftover after parsing attributes in process `syz.6.9105'. [ 964.619705][T24752] netlink: 112 bytes leftover after parsing attributes in process `syz.1.9121'. [ 964.619725][T24752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9121'. [ 964.760446][T24756] QAT: failed to copy from user cfg_data. [ 965.095460][T24765] netlink: 'syz.3.9127': attribute type 1 has an invalid length. [ 966.187715][ T36] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 966.353789][ T36] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 966.353820][ T36] usb 7-1: config 0 has no interface number 0 [ 966.353868][ T36] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 966.353898][ T36] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 966.353929][ T36] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 966.355772][ T36] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 966.355802][ T36] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 966.355825][ T36] usb 7-1: Product: syz [ 966.355841][ T36] usb 7-1: SerialNumber: syz [ 966.438927][ T36] usb 7-1: config 0 descriptor?? [ 966.439722][T24788] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 966.457884][ T36] cm109 7-1:0.8: invalid payload size 64, expected 4 [ 966.461327][ T36] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input61 [ 966.683817][ C1] cm109 7-1:0.8: cm109_urb_irq_callback: urb status -71 [ 966.900153][ C1] cm109_urb_ctl_callback: 89 callbacks suppressed [ 966.900185][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 966.900455][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 966.900716][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 966.900962][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 966.901207][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 966.901454][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 966.901711][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 966.901952][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 966.904669][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 966.904959][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 966.913929][ T5337] usb 7-1: USB disconnect, device number 9 [ 966.914081][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 967.015571][ T5337] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 967.110475][T24812] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 967.110571][T24812] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 968.651765][T24854] netlink: 140 bytes leftover after parsing attributes in process `syz.3.9172'. [ 968.651888][T24854] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9172'. [ 969.540307][T24880] ieee802154 phy0 wpan0: encryption failed: -22 [ 969.575758][T24882] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9185'. [ 969.791516][T24888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9189'. [ 969.791536][T24888] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 971.213830][ T37] audit: type=1326 audit(916.762:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24931 comm="syz.1.9210" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa52c0ce59 code=0x7ffc0000 [ 971.216522][ T37] audit: type=1326 audit(916.771:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24931 comm="syz.1.9210" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa52c0ce59 code=0x7ffc0000 [ 971.221414][ T37] audit: type=1326 audit(916.771:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24931 comm="syz.1.9210" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa52c0ce59 code=0x7ffc0000 [ 971.222281][ T37] audit: type=1326 audit(916.771:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24931 comm="syz.1.9210" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7ffa52c0ce59 code=0x7ffc0000 [ 971.223650][ T37] audit: type=1326 audit(916.771:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24931 comm="syz.1.9210" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa52c0ce59 code=0x7ffc0000 [ 971.223778][ T37] audit: type=1326 audit(916.771:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24931 comm="syz.1.9210" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa52c0ce59 code=0x7ffc0000 [ 971.229416][ T37] audit: type=1326 audit(916.780:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24931 comm="syz.1.9210" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffa52c0ce59 code=0x7ffc0000 [ 971.230360][ T37] audit: type=1326 audit(916.780:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24931 comm="syz.1.9210" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa52c0ce59 code=0x7ffc0000 [ 971.230856][ T37] audit: type=1326 audit(916.780:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24931 comm="syz.1.9210" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ffa52c0ce59 code=0x7ffc0000 [ 971.832347][T24945] bond1: option min_links: invalid value (18446744073709551614) [ 971.832390][T24945] bond1: option min_links: allowed values 0 - 2147483647 [ 971.864657][T24945] bond1 (unregistering): Released all slaves [ 972.605735][ T36] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 972.776677][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 972.779595][ T36] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 972.779624][ T36] usb 4-1: config 0 has no interface number 0 [ 972.779666][ T36] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 972.782014][ T36] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 972.782044][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.782060][ T36] usb 4-1: Product: syz [ 972.782071][ T36] usb 4-1: Manufacturer: syz [ 972.782082][ T36] usb 4-1: SerialNumber: syz [ 972.831812][ T36] usb 4-1: config 0 descriptor?? [ 972.859624][ T36] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 972.859717][ T36] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 973.060645][ T36] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 973.276779][ T36] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71) [ 973.307826][ T36] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 973.320207][ T36] usb 4-1: USB disconnect, device number 5 [ 973.331239][ T36] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 973.705079][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 973.785308][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 973.804577][ T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 973.811950][ T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 973.871381][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 974.433784][T24986] wg0 speed is unknown, defaulting to 1000 [ 974.449576][T24986] lo speed is unknown, defaulting to 1000 [ 975.039381][T25029] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9252'. [ 975.257703][T24986] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.257938][T24986] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.279764][T24986] bridge_slave_0: entered allmulticast mode [ 975.311964][T24986] bridge_slave_0: entered promiscuous mode [ 975.380203][T24986] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.380418][T24986] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.380617][T24986] bridge_slave_1: entered allmulticast mode [ 975.410262][T24986] bridge_slave_1: entered promiscuous mode [ 975.550544][T25042] (syz.1.9256,25042,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 975.550593][T25042] (syz.1.9256,25042,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 975.583013][T24986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 975.588482][T24986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 975.672504][T24986] team0: Port device team_slave_0 added [ 975.682397][T24986] team0: Port device team_slave_1 added [ 975.747840][T24986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 975.747855][T24986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 975.747876][T24986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 975.749676][T24986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 975.749688][T24986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 975.749708][T24986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 976.060525][ T5636] Bluetooth: hci7: command tx timeout [ 976.214691][ T37] audit: type=1326 audit(921.445:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25055 comm="syz.6.9263" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d3e1ce59 code=0x7ffc0000 [ 976.262622][T24986] hsr_slave_0: entered promiscuous mode [ 976.270739][T24986] hsr_slave_1: entered promiscuous mode [ 976.271763][T24986] debugfs: 'hsr0' already exists in 'hsr' [ 976.271788][T24986] Cannot create hsr debugfs directory [ 977.128778][T24986] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 977.160993][T24986] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 977.169949][T24986] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 977.198440][T24986] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 977.199459][T24986] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 977.259254][T24986] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 977.261194][T24986] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 977.306213][T24986] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 977.604402][T24986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 977.633842][T24986] 8021q: adding VLAN 0 to HW filter on device team0 [ 977.640197][ T1493] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.640284][ T1493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 977.680190][ T1493] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.680388][ T1493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 978.289059][ T5636] Bluetooth: hci7: command tx timeout [ 978.717230][T24986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 978.944538][T25125] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9286'. [ 978.944568][T25125] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9286'. [ 979.202261][T24986] veth0_vlan: entered promiscuous mode [ 979.223649][T24986] veth1_vlan: entered promiscuous mode [ 979.235787][T25132] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 979.235810][T25132] UDF-fs: Scanning with blocksize 512 failed [ 979.258087][T25132] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 979.258155][T25132] UDF-fs: Scanning with blocksize 1024 failed [ 979.353311][T25132] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 979.353333][T25132] UDF-fs: Scanning with blocksize 2048 failed [ 979.381930][T25132] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 979.381957][T25132] UDF-fs: Scanning with blocksize 4096 failed [ 979.524746][T24986] veth0_macvtap: entered promiscuous mode [ 979.545208][T24986] veth1_macvtap: entered promiscuous mode [ 979.571698][T24986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 979.614537][T24986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 979.663324][ T1004] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.676800][ T1004] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.677709][ T1004] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.678447][ T1004] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.514324][ T5636] Bluetooth: hci7: command tx timeout [ 980.718592][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.718623][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.901283][T25155] sg_write: data in/out 518623/8 bytes for SCSI command 0x4e-- guessing data in; [ 980.901283][T25155] program syz.3.9299 not setting count and/or reply_len properly [ 980.987816][ T209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.987839][ T209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.805658][ T5622] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 982.003154][ T5622] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 982.003189][ T5622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.003213][ T5622] usb 2-1: Product: syz [ 982.003229][ T5622] usb 2-1: Manufacturer: syz [ 982.003246][ T5622] usb 2-1: SerialNumber: syz [ 982.062106][ T5622] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 982.130503][ T5626] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 982.582466][ T5719] usb 2-1: USB disconnect, device number 4 [ 982.735035][ T5636] Bluetooth: hci7: command tx timeout [ 983.216350][ T821] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 983.287113][T25213] netlink: 132 bytes leftover after parsing attributes in process `syz.7.9326'. [ 983.398073][ T821] usb 7-1: Using ep0 maxpacket: 8 [ 983.401217][ T821] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 983.401253][ T821] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 983.401277][ T821] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 983.401303][ T821] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 983.401331][ T821] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 983.401370][ T821] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 983.401396][ T821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.404678][T25217] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9328'. [ 983.404703][T25217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9328'. [ 983.404719][T25217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9328'. [ 983.407034][ T821] usb 7-1: config 0 descriptor?? [ 983.408256][T25206] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 983.424207][ T5626] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 983.751383][ T5626] ath9k_htc: Failed to initialize the device [ 983.790896][ T5719] usb 2-1: ath9k_htc: USB layer deinitialized [ 983.913008][ T821] usb 7-1: USB disconnect, device number 10 [ 983.941336][ T5636] Bluetooth: hci8: Opcode 0x0c03 failed: -19 [ 984.681852][T25239] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 984.845362][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 984.845381][ T37] audit: type=1326 audit(929.504:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25245 comm="syz.6.9342" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d3e1ce59 code=0x7ffc0000 [ 984.845432][ T37] audit: type=1326 audit(929.504:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25245 comm="syz.6.9342" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d3e1ce59 code=0x7ffc0000 [ 984.898744][ T37] audit: type=1326 audit(929.560:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25245 comm="syz.6.9342" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d3e1ce59 code=0x7ffc0000 [ 984.908119][ T37] audit: type=1326 audit(929.560:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25245 comm="syz.6.9342" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7fa6d3e1ce59 code=0x7ffc0000 [ 984.908220][ T37] audit: type=1326 audit(929.560:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25245 comm="syz.6.9342" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d3e1ce59 code=0x7ffc0000 [ 984.927599][ T37] audit: type=1326 audit(929.579:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25245 comm="syz.6.9342" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d3e1ce59 code=0x7ffc0000 [ 984.927746][ T37] audit: type=1326 audit(929.579:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25245 comm="syz.6.9342" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d3e1ce59 code=0x7ffc0000 [ 984.937068][ T37] audit: type=1326 audit(929.588:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25245 comm="syz.6.9342" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa6d3e1ce59 code=0x7ffc0000 [ 984.944463][ T37] audit: type=1326 audit(929.588:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25245 comm="syz.6.9342" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa6d3e1ce59 code=0x7ffc0000 [ 985.980642][T25280] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9357'. [ 986.325532][T25288] bond1: option resend_igmp: invalid value (18446744073709551615) [ 986.325563][T25288] bond1: option resend_igmp: allowed values 0 - 255 [ 986.377319][T25288] bond1 (unregistering): Released all slaves [ 986.758732][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 986.758805][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 986.759543][ T1339] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 986.998364][T25312] openvswitch: netlink: IP tunnel dst address not specified [ 987.141145][T25314] ipip0: entered promiscuous mode [ 987.141174][T25314] ipip0: entered allmulticast mode [ 987.262716][T25320] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9376'. [ 987.262741][T25320] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9376'. [ 987.603796][T25331] netlink: 'syz.1.9381': attribute type 30 has an invalid length. [ 989.071032][T25379] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 989.328342][T25389] netlink: 'syz.3.9410': attribute type 2 has an invalid length. [ 989.878303][T25409] netlink: 308 bytes leftover after parsing attributes in process `syz.3.9420'. [ 990.313510][T25423] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9427'. [ 990.878857][T25443] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9437'. [ 990.878878][T25443] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9437'. [ 990.878890][T25443] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9437'. [ 992.170883][T25480] netlink: 'syz.3.9455': attribute type 1 has an invalid length. [ 992.170901][T25480] netlink: 'syz.3.9455': attribute type 2 has an invalid length. [ 992.738358][T25498] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9464'. [ 993.936106][T25536] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 994.382415][T25552] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 994.382436][T25552] overlayfs: missing 'lowerdir' [ 994.728291][T25564] netlink: 'syz.7.9496': attribute type 10 has an invalid length. [ 994.728315][T25564] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9496'. [ 994.728724][T25564] bridge0: port 3(veth1_macvtap) entered blocking state [ 994.729022][T25564] bridge0: port 3(veth1_macvtap) entered disabled state [ 994.729298][T25564] veth1_macvtap: entered allmulticast mode [ 994.732543][T25564] veth1_macvtap: left allmulticast mode [ 994.733015][T25564] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 996.394213][ T5626] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 996.565450][ T5626] usb 4-1: Using ep0 maxpacket: 8 [ 996.584787][ T5626] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 996.584811][ T5626] usb 4-1: config 0 interface 0 has no altsetting 0 [ 996.614744][ T5626] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 996.614780][ T5626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.614798][ T5626] usb 4-1: Product: syz [ 996.614809][ T5626] usb 4-1: Manufacturer: syz [ 996.614820][ T5626] usb 4-1: SerialNumber: syz [ 996.631212][ T5626] usb 4-1: config 0 descriptor?? [ 996.695642][ T5626] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 996.838453][T25615] bridge1: entered promiscuous mode [ 996.838483][T25615] bridge1: entered allmulticast mode [ 996.904173][ T5626] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 996.904479][ T5626] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 996.907021][ T5626] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 997.022923][T25622] bridge0: port 3(veth1_to_bridge) entered blocking state [ 997.023172][T25622] bridge0: port 3(veth1_to_bridge) entered disabled state [ 997.023454][T25622] veth1_to_bridge: entered allmulticast mode [ 997.052178][T25622] veth1_to_bridge: entered promiscuous mode [ 997.052391][T25622] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 997.053153][T25622] bridge0: port 3(veth1_to_bridge) entered blocking state [ 997.053282][T25622] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 997.140565][ T5626] usb 4-1: USB disconnect, device number 6 [ 997.161098][T25624] @: renamed from bond_slave_0 (while UP) [ 997.416064][T25630] netlink: 'syz.6.9529': attribute type 2 has an invalid length. [ 997.416087][T25630] netlink: 51 bytes leftover after parsing attributes in process `syz.6.9529'. [ 997.979984][ T5836] kernel write not supported for file /dsp (pid: 5836 comm: kworker/1:7) [ 1000.529355][T25731] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9579'. [ 1001.304297][ T5622] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1001.468400][ T5622] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 1001.468430][ T5622] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.468449][ T5622] usb 2-1: config 0 has no interface number 0 [ 1001.468490][ T5622] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1001.472272][ T5622] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1001.472295][ T5622] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1001.519759][ T5622] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1001.519789][ T5622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.519811][ T5622] usb 2-1: Product: syz [ 1001.519826][ T5622] usb 2-1: Manufacturer: syz [ 1001.519840][ T5622] usb 2-1: SerialNumber: syz [ 1001.585529][ T5622] usb 2-1: config 0 descriptor?? [ 1001.773547][T25764] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1002.037072][ T5622] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1002.089156][ T5622] usb 2-1: USB disconnect, device number 5 [ 1002.826900][T25789] nbd: socks must be embedded in a SOCK_ITEM attr [ 1002.886298][ T5622] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1003.079395][ T5622] usb 4-1: Using ep0 maxpacket: 8 [ 1003.082349][ T5622] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.082422][ T5622] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1003.082448][ T5622] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1003.082478][ T5622] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1003.086636][ T5622] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1003.086668][ T5622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.086690][ T5622] usb 4-1: Product: syz [ 1003.086705][ T5622] usb 4-1: Manufacturer: syz [ 1003.086721][ T5622] usb 4-1: SerialNumber: syz [ 1003.174084][ T5622] usb 4-1: config 0 descriptor?? [ 1003.189687][ T5622] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 1003.450245][ T5622] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 1003.450568][ T5622] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 1003.475600][ T5622] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1003.639647][ T5337] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1003.708646][ T821] usb 4-1: USB disconnect, device number 7 [ 1003.801060][ T5337] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1003.801092][ T5337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.801118][ T5337] usb 2-1: Product: syz [ 1003.801129][ T5337] usb 2-1: Manufacturer: syz [ 1003.801140][ T5337] usb 2-1: SerialNumber: syz [ 1003.844582][ T5337] usb 2-1: config 0 descriptor?? [ 1003.859453][ T5337] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1003.884925][ T5337] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1003.885865][ T5337] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1003.885925][ T5337] usb 2-1: media controller created [ 1003.947341][ T5337] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1004.079952][T25796] dvb-usb: bulk message failed: -22 (7/0) [ 1004.103229][ T5337] DVB: Unable to find symbol mt352_attach() [ 1004.231677][ T5337] DVB: Unable to find symbol nxt6000_attach() [ 1004.231696][ T5337] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1004.260801][ T5337] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input66 [ 1004.301747][ T5337] dvb-usb: schedule remote query interval to 1000 msecs. [ 1004.301774][ T5337] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1004.301794][ T5337] dvb-usb: bulk message failed: -22 (7/0) [ 1004.301812][ T5337] dvb-usb: bulk message failed: -22 (7/0) [ 1004.341553][ T5337] usb 2-1: USB disconnect, device number 6 [ 1004.748632][ T5337] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1005.443270][ T5622] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 1005.608419][ T5622] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1005.608450][ T5622] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.608477][ T5622] usb 7-1: Product: syz [ 1005.608488][ T5622] usb 7-1: Manufacturer: syz [ 1005.608498][ T5622] usb 7-1: SerialNumber: syz [ 1005.651580][ T5622] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1005.651609][ T5622] r8152-cfgselector 7-1: config 0 descriptor?? [ 1006.110406][ T5719] r8152-cfgselector 7-1: USB disconnect, device number 11 [ 1006.304709][T25862] kAFS: unable to lookup cell '' [ 1006.305192][T25862] kAFS: unable to lookup cell '(,c' [ 1007.794180][T25901] [U] o [ 1008.949952][T25937] macsec0: entered promiscuous mode [ 1008.949978][T25937] macsec0: entered allmulticast mode [ 1009.042441][T25941] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9679'. [ 1010.904274][ T59] Bluetooth: hci6: command 0x0406 tx timeout [ 1011.001583][T25992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9703'. [ 1011.250360][T26001] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9707'. [ 1011.491001][T26005] can0: slcan on ptm0. [ 1011.548412][T26008] syz_tun: refused to change device tx_queue_len [ 1011.548434][T26008] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1012.036670][T26004] can0 (unregistered): slcan off ptm0. [ 1013.322963][T26071] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9730'. [ 1013.594752][T26081] Bluetooth: MGMT ver 1.23 [ 1014.053892][T25148] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1014.142662][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1014.143974][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1014.145394][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1014.146674][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1014.147954][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1014.149176][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1014.150495][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1014.152574][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1014.153927][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1014.772776][T25148] usb 2-1: config 220 has an invalid descriptor of length 244, skipping remainder of the config [ 1014.772806][T25148] usb 2-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 1014.772874][T25148] usb 2-1: config 220 interface 1 altsetting 5 endpoint 0x89 has invalid maxpacket 176, setting to 64 [ 1014.772895][T25148] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1014.772916][T25148] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1014.772929][T25148] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1014.776250][T25148] usb 2-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 1014.776285][T25148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.776301][T25148] usb 2-1: Product: syz [ 1014.776312][T25148] usb 2-1: Manufacturer: syz [ 1014.776324][T25148] usb 2-1: SerialNumber: syz [ 1015.159836][T25148] usb 2-1: selecting invalid altsetting 0 [ 1015.160357][T25148] uvcvideo 2-1:220.0: probe with driver uvcvideo failed with error -22 [ 1015.163686][T25148] usb 2-1: selecting invalid altsetting 0 [ 1015.163719][T25148] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1015.223831][T25148] usb 2-1: USB disconnect, device number 7 [ 1016.899930][ C0] net_ratelimit: 1797 callbacks suppressed [ 1016.899947][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1016.900771][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1016.901614][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1016.902480][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1016.903391][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1016.904755][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1016.905794][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1016.906736][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1016.907659][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1016.908546][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1018.050089][T26137] nbd: must specify a size in bytes for the device [ 1019.296939][T26157] usb usb8: usbfs: interface 0 claimed by hub while 'syz.7.9766' resets device [ 1020.482623][ T5719] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 1020.668724][ T5719] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1020.668753][ T5719] usb 4-1: config 0 has no interface number 0 [ 1020.668789][ T5719] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1020.668814][ T5719] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1020.668840][ T5719] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1020.671807][ T5719] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1020.671840][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1020.671864][ T5719] usb 4-1: Product: syz [ 1020.671880][ T5719] usb 4-1: SerialNumber: syz [ 1020.755083][ T5719] usb 4-1: config 0 descriptor?? [ 1020.768821][ T5719] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 1020.781750][ T5719] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input68 [ 1021.222876][ C1] cm109_urb_ctl_callback: 42 callbacks suppressed [ 1021.222907][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1021.223263][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1021.223518][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1021.223779][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1021.224030][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1021.224277][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1021.224531][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1021.224793][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1021.225044][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1021.225412][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1021.388594][ T821] usb 4-1: USB disconnect, device number 8 [ 1021.388684][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1021.925486][ T821] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1022.258188][ C0] net_ratelimit: 3310 callbacks suppressed [ 1022.258206][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1022.259033][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1022.259877][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1022.260721][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1022.261667][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1022.262506][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1022.263389][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1022.264261][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1022.265147][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1022.267198][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1024.467409][T26194] vlan0: entered allmulticast mode [ 1024.930067][T26202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9789'. [ 1027.617240][ C0] net_ratelimit: 7213 callbacks suppressed [ 1027.617264][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1027.618580][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1027.619586][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1027.619983][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1027.620008][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1027.620437][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1027.620865][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1027.621258][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1027.621416][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:b9:f4:b4:e3:3e, vlan:0) [ 1027.621631][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1030.569679][ T38] INFO: task syz.0.7857:22137 blocked for more than 143 seconds. [ 1030.569704][ T38] Not tainted syzkaller #0 [ 1030.569716][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1030.569745][ T38] task:syz.0.7857 state:D stack:28504 pid:22137 tgid:22136 ppid:5617 task_flags:0x400140 flags:0x00080002 [ 1030.569818][ T38] Call Trace: [ 1030.569826][ T38] [ 1030.569841][ T38] __schedule+0x16ec/0x5620 [ 1030.569905][ T38] ? __pfx___schedule+0x10/0x10 [ 1030.569938][ T38] ? irqentry_exit+0x218/0x8b0 [ 1030.569969][ T38] ? trace_irq_disable+0x3b/0x140 [ 1030.570000][ T38] ? __pfx___schedule+0x10/0x10 [ 1030.570028][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 1030.570088][ T38] rt_mutex_schedule+0x76/0xf0 [ 1030.570231][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 1030.570278][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 1030.570309][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 1030.570339][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 1030.570367][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1030.570404][ T38] ? nfsd_shutdown_threads+0x4e/0xd0 [ 1030.570486][ T38] ? nfsd_shutdown_threads+0x4e/0xd0 [ 1030.570517][ T38] ? nfsd_shutdown_threads+0x4e/0xd0 [ 1030.570539][ T38] mutex_lock_nested+0x168/0x1d0 [ 1030.570571][ T38] nfsd_shutdown_threads+0x4e/0xd0 [ 1030.570596][ T38] nfsd_umount+0x41/0x60 [ 1030.570649][ T38] deactivate_locked_super+0xbc/0x130 [ 1030.570708][ T38] cleanup_mnt+0x437/0x4d0 [ 1030.570759][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1030.570817][ T38] task_work_run+0x1d9/0x270 [ 1030.570855][ T38] ? __pfx_task_work_run+0x10/0x10 [ 1030.570901][ T38] exit_to_user_mode_loop+0x193/0x680 [ 1030.574051][ T38] ? rcu_is_watching+0x15/0xb0 [ 1030.574157][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.574185][ T38] do_syscall_64+0x353/0x580 [ 1030.574219][ T38] ? trace_irq_disable+0x3b/0x140 [ 1030.574247][ T38] ? clear_bhb_loop+0x40/0x90 [ 1030.574283][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.576785][ T38] RIP: 0033:0x7f262becce59 [ 1030.576812][ T38] RSP: 002b:00007f262a11e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1030.576838][ T38] RAX: ffffffffffffffec RBX: 00007f262c145fa0 RCX: 00007f262becce59 [ 1030.576855][ T38] RDX: 0000200000000040 RSI: 00002000000001c0 RDI: 0000000000000000 [ 1030.576872][ T38] RBP: 00007f262bf62d6f R08: 0000000000000000 R09: 0000000000000000 [ 1030.576887][ T38] R10: 0000000001000016 R11: 0000000000000246 R12: 0000000000000000 [ 1030.576902][ T38] R13: 00007f262c146038 R14: 00007f262c145fa0 R15: 00007fffd12322e8 [ 1030.576939][ T38] [ 1030.576978][ T38] [ 1030.576978][ T38] Showing all locks held in the system: [ 1030.576989][ T38] 3 locks held by ksoftirqd/0/15: [ 1030.577006][ T38] 5 locks held by ksoftirqd/1/30: [ 1030.577020][ T38] 1 lock held by khungtaskd/38: [ 1030.577032][ T38] #0: ffffffff8dfc80c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1030.577150][ T38] 4 locks held by udevd/4970: [ 1030.577165][ T38] 2 locks held by getty/5354: [ 1030.577177][ T38] #0: ffff888036e350a0 (&tty->ldisc_sem){+[ 1030.577177][ T38] #0: ffff888036e350a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1030.577234][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 1030.577302][ T38] 1 lock held by syz-executor/5616: [ 1030.577326][ T38] 2 locks held by syz.2.6173/18644: [ 1030.577340][ T38] #0: ffffffff8f3bf680 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1030.577466][ T38] #1: ffffffff8e2e8598 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b9/0xc20 [ 1030.577527][ T38] 2 locks held by syz.0.7857/22137: [ 1030.577541][ T38] #0: ffff888039b9c0d0 (&type->s_umount_key#100){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 1030.577599][ T38] #1: ffffffff8e2e8598 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1030.577653][ T38] 2 locks held by syz.5.9030/24569: [ 1030.577666][ T38] #0: ffffffff8f3bf680 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1030.577716][ T38] #1: ffffffff8e2e8598 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 1030.577797][ T38] 2 locks held by syz-executor/24986: [ 1030.577811][ T38] #0: ffff88803045a480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1030.577874][ T38] #1: ffff888063830388 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_rmdir+0x1cd/0x520 [ 1030.577989][ T38] [ 1030.577996][ T38] ============================================= [ 1030.577996][ T38] [ 1030.578012][ T38] NMI backtrace for cpu 1 [ 1030.578029][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1030.578055][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1030.578070][ T38] Call Trace: [ 1030.578079][ T38] [ 1030.578090][ T38] dump_stack_lvl+0xe8/0x150 [ 1030.578118][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1030.578181][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1030.578216][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1030.578247][ T38] sys_info+0x135/0x170 [ 1030.578280][ T38] watchdog+0xfd3/0x1030 [ 1030.578316][ T38] ? watchdog+0x1c9/0x1030 [ 1030.578349][ T38] kthread+0x388/0x470 [ 1030.578379][ T38] ? __pfx_watchdog+0x10/0x10 [ 1030.578402][ T38] ? __pfx_kthread+0x10/0x10 [ 1030.578434][ T38] ret_from_fork+0x514/0xb70 [ 1030.578462][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1030.578487][ T38] ? __switch_to+0xc79/0x1410 [ 1030.578524][ T38] ? __pfx_kthread+0x10/0x10 [ 1030.578553][ T38] ret_from_fork_asm+0x1a/0x30 [ 1030.578597][ T38] [ 1030.578623][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1030.578657][ C0] NMI backtrace for cpu 0 [ 1030.578673][ C0] CPU: 0 UID: 0 PID: 26227 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1030.578695][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1030.578707][ C0] RIP: 0010:kernel_text_address+0x0/0xe0 [ 1030.578738][ C0] Code: c1 48 81 fb 20 6d f8 90 0f 92 c2 20 ca 08 c2 0f b6 c2 5b c3 cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 1f 40 d6 55 41 56 53 48 81 ff 00 00 00 81 0f 93 c0 48 81 ff 10 [ 1030.578762][ C0] RSP: 0000:ffffc9001d84f490 EFLAGS: 00000246 [ 1030.578779][ C0] RAX: 0000000000000000 RBX: ffffffff8230dd0d RCX: 0000000000000046 [ 1030.578793][ C0] RDX: 0000000000000001 RSI: ffffffff8d85e9a4 RDI: ffffffff8230dd0d [ 1030.578807][ C0] RBP: ffffc9001d84f550 R08: ffffc9001d84f730 R09: 0000000000000000 [ 1030.578821][ C0] R10: ffffc9001d84f518 R11: fffff52003b09ea5 R12: ffff888038250000 [ 1030.578835][ C0] R13: 1ffff1100704a0be R14: dffffc0000000000 R15: 1ffff92003b09ea2 [ 1030.578851][ C0] FS: 000055558bf2b500(0000) GS:ffff888126186000(0000) knlGS:0000000000000000 [ 1030.578868][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1030.578881][ C0] CR2: 00007f94633458d2 CR3: 000000003cd98000 CR4: 00000000003526f0 [ 1030.578915][ C0] Call Trace: [ 1030.578922][ C0] [ 1030.578929][ C0] __kernel_text_address+0xd/0x30 [ 1030.578957][ C0] unwind_get_return_address+0x4d/0x90 [ 1030.578982][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1030.579051][ C0] arch_stack_walk+0xfb/0x150 [ 1030.579078][ C0] ? __set_page_owner+0x8d/0x4c0 [ 1030.579116][ C0] stack_trace_save+0xa9/0x100 [ 1030.579136][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1030.579163][ C0] save_stack+0x122/0x230 [ 1030.579185][ C0] ? __pfx_save_stack+0x10/0x10 [ 1030.579212][ C0] ? bad_range+0xa0/0x330 [ 1030.579234][ C0] __set_page_owner+0x8d/0x4c0 [ 1030.579256][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 1030.579280][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1030.579306][ C0] ? bad_range+0xa0/0x330 [ 1030.579326][ C0] post_alloc_hook+0x22d/0x280 [ 1030.579349][ C0] get_page_from_freelist+0x28b2/0x2930 [ 1030.579375][ C0] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1030.579404][ C0] ? fs_reclaim_acquire+0x7c/0x100 [ 1030.579445][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1030.579474][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1030.579501][ C0] ? __pfx_policy_nodemask+0x10/0x10 [ 1030.579556][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 1030.579584][ C0] alloc_pages_mpol+0xd1/0x380 [ 1030.579610][ C0] alloc_pages_noprof+0xd2/0x2f0 [ 1030.579634][ C0] pte_alloc_one+0x22/0x380 [ 1030.579697][ C0] do_pte_missing+0x126d/0x2950 [ 1030.579785][ C0] handle_mm_fault+0xd30/0x1400 [ 1030.579813][ C0] ? handle_mm_fault+0xec/0x1400 [ 1030.579834][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 1030.579854][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 1030.579900][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1030.579948][ C0] do_user_addr_fault+0xa73/0x1340 [ 1030.579969][ C0] ? ret_from_fork+0x4cb/0xb70 [ 1030.579993][ C0] ? rcu_is_watching+0x15/0xb0 [ 1030.580021][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 1030.580043][ C0] exc_page_fault+0x6a/0xc0 [ 1030.580070][ C0] asm_exc_page_fault+0x26/0x30 [ 1030.580089][ C0] RIP: 0033:0x7f94633458d2 [ 1030.580110][ C0] Code: Unable to access opcode bytes at 0x7f94633458a8. [ 1030.580120][ C0] RSP: 002b:00007fff8f0ee7e0 EFLAGS: 00010246 [ 1030.580136][ C0] RAX: 0000000000000000 RBX: 00007fff8f0ee7e0 RCX: 00007f94633458d2 [ 1030.580149][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1030.580161][ C0] RBP: 00007fff8f0ee96c R08: 0000000000000000 R09: 0000000000000001 [ 1030.580173][ C0] R10: 000055558bf2b7d0 R11: 0000000000000246 R12: 0000000000000001 [ 1030.580185][ C0] R13: 00000000000927c0 R14: 00000000000ed130 R15: 00007fff8f0ee9c0 [ 1030.580209][ C0] [ 1030.885253][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1030.885319][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1030.885395][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1030.885438][ T38] Call Trace: [ 1030.885462][ T38] [ 1030.885486][ T38] vpanic+0x56c/0xa60 [ 1030.885586][ T38] ? __pfx___schedule+0x10/0x10 [ 1030.885673][ T38] ? __pfx_vpanic+0x10/0x10 [ 1030.885776][ T38] panic+0xc5/0xd0 [ 1030.885844][ T38] ? __pfx_panic+0x10/0x10 [ 1030.885929][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 1030.886046][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1030.886158][ T38] watchdog+0x102c/0x1030 [ 1030.886277][ T38] ? watchdog+0x1c9/0x1030 [ 1030.886351][ T38] kthread+0x388/0x470 [ 1030.886450][ T38] ? __pfx_watchdog+0x10/0x10 [ 1030.886511][ T38] ? __pfx_kthread+0x10/0x10 [ 1030.886592][ T38] ret_from_fork+0x514/0xb70 [ 1030.886655][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1030.886723][ T38] ? __switch_to+0xc79/0x1410 [ 1030.886834][ T38] ? __pfx_kthread+0x10/0x10 [ 1030.886922][ T38] ret_from_fork_asm+0x1a/0x30 [ 1030.887043][ T38] [ 1030.887664][ T38] Kernel Offset: disabled