last executing test programs: 6m2.489376065s ago: executing program 4 (id=80): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) timerfd_create(0x1, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) 6m2.220282101s ago: executing program 4 (id=83): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x105, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0xe1b2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 6m2.157408798s ago: executing program 4 (id=84): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x2, 0x41059}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x12345, 0x2, {0x1}, 0x1, {0x0, r4}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 6m2.015999352s ago: executing program 4 (id=85): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000380)) 6m1.84269872s ago: executing program 4 (id=90): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 6m1.613218436s ago: executing program 4 (id=93): r0 = fsopen(&(0x7f0000000040)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x7) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) 5m46.326056824s ago: executing program 32 (id=93): r0 = fsopen(&(0x7f0000000040)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x7) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) 1m22.961921012s ago: executing program 1 (id=3094): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='pids.current\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) 1m22.87392917s ago: executing program 1 (id=3096): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x109) close(r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1m22.821758529s ago: executing program 1 (id=3097): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0xb8, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5e, 0xe, {{{}, {}, @device_b, @device_b, @from_mac=@broadcast}, 0x40, @random=0x4, 0x562, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @val={0x2d, 0x1a, {0x800, 0x1, 0x4, 0x0, {0x6, 0xbaa, 0x0, 0x6, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x6, 0x3, 0x2}}, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x2, 0xf0, 0x8}}, @void}}, @NL80211_ATTR_BEACON_TAIL={0x22, 0xf, [@ht={0x2d, 0x1a, {0x10, 0x3, 0x7, 0x0, {0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x6, 0x8}}, @supported_rates]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xb8}}, 0x0) 1m22.55922441s ago: executing program 1 (id=3101): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m22.4536062s ago: executing program 1 (id=3103): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x78, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x4}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0x9, @mcast2, 0x4}, 0x1c) 1m21.476109717s ago: executing program 1 (id=3115): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0xa096a000) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000440), 0x2) 1m21.045611488s ago: executing program 33 (id=3115): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0xa096a000) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000440), 0x2) 5.933793745s ago: executing program 3 (id=3776): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x3}, 0x18) sendmmsg$inet_sctp(r0, &(0x7f0000004340)=[{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000180)="9077827456179fa24fb2128127d29b18f81bd6ab5a1456ba9fbe9095df8b22968fda6b92de3b60968f2c3a44f87c7760568e838475c19aee17426e3b33fdf4f85d1aa22df9d84ac01f2671f42769d92d5f110d05d749062bddac5d822cdd801e7b210b2db8348bfd015720b91b675069c04d207a52e4f40abf771fae024120dbf961cb074c97a3da6d10286b5b70321c3a338773607f6320f8f2e958daf292a7b7118a7877b19de7b77a9e1c47078c14234919eff0eb9b1a66e51710dbc44f", 0xbf}, {&(0x7f0000000240)="c37d67ed5260cedde426bc53736a22f4d92d4222f7da3fcc4bb8548d60efc69533bd2ad864d24323fd91b9f218bf1a65239ba53b8a488d396b8573ee3c3e689f5ef8412c8a7df6d4b4d2bae4ac334143cd628f09c58c609962ae4c6560550805b9f3182274055cec736952caa26cf8cf", 0x70}, {&(0x7f00000002c0)="c0ecf269eca8db27b35cf3d4e5bfb120805fa3d6b7513d35f65267f7d5df999a72637e551ffd39653e802dd69f7ed3cff821c43d3ccb19813fc7be7639935d0615e3e1983d557bf29d8423abd59ee073df4e54f4a799eab79088d98dddf50e7552025f19f0de91824f68b84e8fa231cf4e9a50bad5c0d4df4e2b69d73ef58107d71e69af9348dee75c5f3a47a55bfafd6d62187421315f79cb36cd9dbfa00701b52a27c75f53fcc864328ff2c3a9ebf113cc5c798738356f59ba6cf371e6b166b7b96a5f340bc7d15a24e292db0c4c5c", 0xd0}, {&(0x7f0000001340)="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", 0xe01}], 0x4, 0x0, 0x0, 0x2}], 0x1, 0x4000090) 5.872240857s ago: executing program 0 (id=3777): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) close(0x3) 5.467956725s ago: executing program 0 (id=3779): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 4.988496997s ago: executing program 0 (id=3782): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x1, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000140)="836bb66f12dc002786861d71052325f0fb3a267a9d4edac3", 0x18, 0x2000084, 0x0, 0x0) 4.644229869s ago: executing program 0 (id=3783): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='GPL\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.828930271s ago: executing program 5 (id=3787): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) 3.231730866s ago: executing program 0 (id=3790): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f00000001c0)=[{0x1, 0x400, 0x34, &(0x7f0000000100)="0a803215676c46d3ae01be44029bdf3299205817df48187fa3fd8de2e552d15fb3eaea801ab0f23e63f1c954c01989e36834dc0e"}], 0x1}) 2.701151781s ago: executing program 3 (id=3795): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={r2, 0x5, 0x1}, 0x8) 2.638698209s ago: executing program 5 (id=3796): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240), 0x8) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000180)={0x1}, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.586262151s ago: executing program 2 (id=3797): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/conf/lo/disable_xfrm\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0', 0x1) write$tun(r0, &(0x7f0000000400)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @void, {@canfd={0xd, {{0x4, 0x0, 0x0, 0x1}, 0xa, 0x1, 0x0, 0x0, "02418f91784cd47efadabdacc5384028743d8dc805e17fbfd006cbe64a582dd11fc1c7143777bee9c56148bfce3034b640fbe36ee25aa7e1f36e52e5e7ef413e"}}}}}, 0x56) 2.409116208s ago: executing program 2 (id=3798): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x4e20, 0x0, @mcast2}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002500)={0x1, {{0xa, 0x4e1d, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e25, 0xa4fffffb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffd}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) 2.200843301s ago: executing program 5 (id=3799): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)='file read /etc/passwd /as/\\*id=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) 1.931309282s ago: executing program 2 (id=3800): write(0xffffffffffffffff, &(0x7f0000000040)="3c00000058001f000307f4f9002304000a04d649080001000201000204000380050000009ddb973b91aa05797251725df7", 0x31) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000305bfdd082e0c0007f4d40102030109022400016406200b0904ad8e02df30059e09050e124000fafa01090583"], &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1de) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x5002, 0x0) 1.910256002s ago: executing program 5 (id=3801): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) exit(0xffff) statx(r0, 0x0, 0x800, 0x7ff, 0x0) mkdirat(r0, &(0x7f0000000240)='./file0\x00', 0x21) 1.741045891s ago: executing program 3 (id=3802): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)='file read /etc/passwd /as/\\xid=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) 1.572295106s ago: executing program 3 (id=3803): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000004c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) 1.101983751s ago: executing program 6 (id=3804): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) 968.011745ms ago: executing program 6 (id=3805): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x25d6, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f00000000c0)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000000)={&(0x7f0000000480)=@can={{0x3, 0x1}, 0x8, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x2400c015}, 0x4000811) 905.028091ms ago: executing program 5 (id=3806): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) 866.744051ms ago: executing program 6 (id=3807): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000016c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)="01", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000400)="f0", 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0)={r2, 0x0, 0x20}, 0xc) 780.253167ms ago: executing program 6 (id=3808): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b9ff05760a03076804268c989e14", 0x0, 0x10503, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 650.354408ms ago: executing program 3 (id=3809): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/sys/net/ipv4/conf/syz_tun/rp_filter\x00', 0x1, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r0, &(0x7f0000000040)=r1, 0x12) 592.928709ms ago: executing program 2 (id=3810): r0 = inotify_init() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0x5, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 500.554628ms ago: executing program 3 (id=3811): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 216.594302ms ago: executing program 2 (id=3812): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/auth_enable\x00', 0x2, 0x0) sendfile(r0, r1, 0x0, 0x1) 204.961769ms ago: executing program 5 (id=3813): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r0, 0x6000000) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file1\x00', 0x2000000) copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0x4100, 0x9, 0x0) 148.732107ms ago: executing program 6 (id=3814): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0xa) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0xd5e14713bc8ece5d, 'vxcan1\x00', 0x1}, 0x18) 38.110987ms ago: executing program 0 (id=3815): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x152) 35.522131ms ago: executing program 2 (id=3816): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)='file read /etc/passwd 0-0k.ui!=0 exec.argv[0]=\"sh\" exec.envp[\"PATH\"!=\"/bin\"\n', 0x4c) 0s ago: executing program 6 (id=3817): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000fc0)={0x48}) kernel console output (not intermixed with test programs): g 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 243.853401][ T5716] usb 2-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 243.853423][ T5716] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 243.855151][ T5716] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 243.855201][ T5716] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 243.855223][ T5716] usb 2-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 243.855245][ T5716] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 243.859010][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.859033][ T5716] usb 2-1: Product: syz [ 243.859047][ T5716] usb 2-1: Manufacturer: syz [ 243.859061][ T5716] usb 2-1: SerialNumber: syz [ 243.872506][ T9378] veth1_macvtap: entered promiscuous mode [ 243.872528][ T9378] veth1_macvtap: entered allmulticast mode [ 243.939684][ T9378] macsec0: left allmulticast mode [ 243.939774][ T9378] veth1_macvtap: left allmulticast mode [ 243.970514][ T5716] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 244.106141][ T5716] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 244.158924][ T9361] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 244.206819][ T5716] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 244.351316][ T5716] usb 2-1: USB disconnect, device number 10 [ 244.507609][ T5716] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 244.570353][ T5716] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 244.575168][ T5716] ti_usb_3410_5052 2-1:2.0: device disconnected [ 244.627777][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 244.630762][ T37] audit: type=1326 audit(1787765750.826:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9398 comm="syz.0.1502" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ae290e0d9 code=0x0 [ 245.011508][ T36] hid-generic 0005:0007:0003.0004: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 245.658060][ T9429] netlink: 'syz.5.1516': attribute type 3 has an invalid length. [ 245.791593][ T9436] jffs2: notice: (9436) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 245.917679][ T9444] input: syz0 as /devices/virtual/input/input13 [ 246.165815][ T3800] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.177784][ T3800] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.177826][ T3800] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.177875][ T3800] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.598334][ T198] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 246.795806][ T198] usb 6-1: Using ep0 maxpacket: 16 [ 246.799767][ T198] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 246.824404][ T198] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 246.838595][ T198] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.838778][ T198] usb 6-1: Product: syz [ 246.838795][ T198] usb 6-1: Manufacturer: syz [ 246.838809][ T198] usb 6-1: SerialNumber: syz [ 246.878066][ T198] usb 6-1: config 0 descriptor?? [ 246.896150][ T198] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 246.905650][ T198] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 247.166225][ T198] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 247.443052][ T198] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 247.471164][ T198] em28xx 6-1:0.0: board has no eeprom [ 247.500412][ T9476] ip6gretap1: entered allmulticast mode [ 247.535093][ T9476] batman_adv: batadv0: Adding interface: ip6gretap1 [ 247.541987][ T9476] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.542037][ T9476] batman_adv: batadv0: Interface activated: ip6gretap1 [ 247.595960][ T198] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 247.603910][ T198] em28xx 6-1:0.0: dvb set to bulk mode. [ 247.605086][ T10] em28xx 6-1:0.0: Binding DVB extension [ 247.687177][ T198] usb 6-1: USB disconnect, device number 9 [ 247.708604][ T198] em28xx 6-1:0.0: Disconnecting em28xx [ 247.783355][ T10] em28xx 6-1:0.0: Registering input extension [ 247.796070][ T198] em28xx 6-1:0.0: Closing input extension ޣPTHJTRڞ@zRgQr싓B8_ԪI/F@e}D?G甑 (n$l`KGeJ >qSfeF;tCMz,j2Q#= QEo=I^`aY?9٦T;><6CJ?:H6;U [ 248.419806][ T198] em28xx: Freeing device [ 249.034191][ T9528] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1558'. [ 249.381109][ T9539] faux_driver vgem: [drm] Unknown color mode 11173; guessing buffer size. [ 250.182114][ T9557] netlink: 'syz.0.1571': attribute type 5 has an invalid length. [ 250.206009][ T9557] netlink: 'syz.0.1571': attribute type 6 has an invalid length. [ 250.206029][ T9557] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1571'. [ 250.206133][ T9557] netlink: 'syz.0.1571': attribute type 1 has an invalid length. [ 250.611174][ T9566] jffs2: notice: (9566) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 250.648835][ T9567] program syz.2.1575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.769922][ T4897] block nbd1: Receive control failed (result -32) [ 250.923594][ T9555] block nbd1: shutting down sockets [ 251.455009][ T9581] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 251.508155][ T9581] bond1 (unregistering): Released all slaves [ 254.554055][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 254.573892][ T9668] devpts: Bad value for 'max' [ 254.755795][ T198] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 254.905690][ T198] usb 4-1: Using ep0 maxpacket: 16 [ 254.909391][ T198] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 254.921453][ T198] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 254.934121][ T198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.937282][ T198] usb 4-1: Product: syz [ 254.937299][ T198] usb 4-1: Manufacturer: syz [ 254.937314][ T198] usb 4-1: SerialNumber: syz [ 254.981278][ T198] usb 4-1: config 0 descriptor?? [ 255.006306][ T198] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 255.018119][ T198] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 255.666164][ T198] em28xx 4-1:0.0: chip ID is em2882/3 [ 255.709967][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.728825][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.905782][ T36] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 256.007715][ T9703] syz.2.1635 uses obsolete (PF_INET,SOCK_PACKET) [ 256.033329][ T198] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 256.041426][ T198] em28xx 4-1:0.0: board has no eeprom [ 256.056889][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 256.057538][ T36] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 256.060664][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.060686][ T36] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 256.068689][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.068778][ T36] usb 1-1: Product: syz [ 256.068793][ T36] usb 1-1: Manufacturer: syz [ 256.068806][ T36] usb 1-1: SerialNumber: syz [ 256.187243][ T198] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 256.195174][ T198] em28xx 4-1:0.0: dvb set to bulk mode. [ 256.195509][ T9] em28xx 4-1:0.0: Binding DVB extension [ 256.250985][ T36] usb 1-1: config 0 descriptor?? [ 256.307813][ T198] usb 4-1: USB disconnect, device number 6 [ 256.317635][ T198] em28xx 4-1:0.0: Disconnecting em28xx [ 256.336295][ T9] em28xx 4-1:0.0: Registering input extension [ 256.350913][ T9] rc_core: Couldn't load IR keymap rc-pinnacle-pctv-hd [ 256.350932][ T9] Registered IR keymap rc-empty [ 256.462938][ T9] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 256.480114][ T9] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input15 [ 256.504482][ T9692] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 256.532099][ T1238] usb 1-1: USB disconnect, device number 7 [ 256.632423][ T9] em28xx 4-1:0.0: Input extension successfully initialized [ 256.639923][ T198] em28xx 4-1:0.0: Closing input extension [ 258.369070][ T198] em28xx: Freeing device [ 258.376263][ T9753] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1655'. [ 258.650601][ T9762] tipc: Started in network mode [ 258.650631][ T9762] tipc: Node identity 0010000000000000002, cluster identity 4711 [ 260.538801][ T9799] jffs2: notice: (9799) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 260.623417][ T9802] openvswitch: netlink: IP tunnel TTL not specified. [ 260.624601][ T9802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.397199][ T36] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 261.545914][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 261.548450][ T36] usb 4-1: unable to get BOS descriptor or descriptor too short [ 261.548502][ T36] usb 4-1: New USB device found, idVendor=b20b, idProduct=9845, bcdDevice=55.37 [ 261.552098][ T36] usb 4-1: config 127 has an invalid interface number: 56 but max is 0 [ 261.552122][ T36] usb 4-1: config 127 has no interface number 0 [ 261.552154][ T36] usb 4-1: config 127 interface 56 has no altsetting 0 [ 261.555223][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.555247][ T36] usb 4-1: Product: syz [ 261.555262][ T36] usb 4-1: Manufacturer: syz [ 261.555276][ T36] usb 4-1: SerialNumber: syz [ 261.854734][ T36] usb-storage 4-1:127.56: USB Mass Storage device detected [ 262.016070][ T9823] kAFS: bad VL server IP address [ 262.142855][ T36] usb 4-1: USB disconnect, device number 7 [ 262.278583][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1683'. [ 262.523386][ T9832] jffs2: notice: (9832) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 262.916120][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 263.066060][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 263.071943][ T9] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 263.073133][ T9] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 263.073157][ T9] usb 1-1: config 0 has no interface number 0 [ 263.073204][ T9] usb 1-1: config 0 interface 12 has no altsetting 0 [ 263.106372][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.114464][ T9] usb 1-1: Product: syz [ 263.114491][ T9] usb 1-1: Manufacturer: syz [ 263.114505][ T9] usb 1-1: SerialNumber: syz [ 263.158812][ T9] usb 1-1: config 0 descriptor?? [ 263.530541][ T9856] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input16 [ 263.687821][ T9] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 263.688818][ T9] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 263.688839][ T9] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 263.688932][ T9] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 263.760820][ T9] usb 1-1: USB disconnect, device number 8 [ 264.353112][ T9875] program syz.0.1705 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.431215][ T9878] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 264.690871][ T9889] : renamed from vlan0 (while UP) [ 266.838822][ T9938] bridge0: port 3(syz_tun) entered blocking state [ 266.858767][ T9938] bridge0: port 3(syz_tun) entered disabled state [ 266.892162][ T9941] block nbd0: server does not support multiple connections per device. [ 266.951608][ T9938] syz_tun: entered allmulticast mode [ 267.109299][ T9941] block nbd0: shutting down sockets [ 267.120449][ T9938] syz_tun: entered promiscuous mode [ 267.379642][ T9938] bridge0: port 3(syz_tun) entered blocking state [ 267.423795][ T9938] bridge0: port 3(syz_tun) entered forwarding state [ 267.459201][ T9946] netlink: 'syz.2.1737': attribute type 3 has an invalid length. [ 267.969285][ T9963] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 268.307816][ T9976] tipc: Started in network mode [ 268.308445][ T9976] tipc: Node identity ac14140f, cluster identity 4711 [ 268.308745][ T9976] tipc: New replicast peer: 255.255.255.255 [ 268.323560][ T9976] tipc: Enabled bearer , priority 10 [ 268.686523][ T9990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1757'. [ 269.425866][ T1238] tipc: Node number set to 2886997007 [ 270.088298][ T5687] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 270.246431][ T5687] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 270.257817][ T5687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.262894][ T5687] usb 4-1: Product: syz [ 270.262913][ T5687] usb 4-1: Manufacturer: syz [ 270.262926][ T5687] usb 4-1: SerialNumber: syz [ 270.643805][ T5687] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 270.655974][ T5687] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 270.655998][ T5687] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 270.771156][ T5687] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 270.819633][T10065] program syz.1.1791 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.978405][ T5687] usb 4-1: USB disconnect, device number 8 [ 271.117468][T10063] ip6gretap1: entered allmulticast mode [ 271.227671][T10063] batman_adv: batadv0: Adding interface: ip6gretap1 [ 271.227689][T10063] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.227720][T10063] batman_adv: batadv0: Interface activated: ip6gretap1 [ 271.313870][T10075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1796'. [ 271.338630][T10078] Context (ID=0x0) not attached to queue pair (handle=0x2:0x2) [ 271.689864][T10096] ieee802154 phy0 wpan0: encryption failed: -22 [ 271.752762][T10098] program syz.3.1808 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.926799][ T5687] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 272.086342][ T5687] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 272.098834][ T5687] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 272.098891][ T5687] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.101781][ T5687] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 272.101805][ T5687] usb 2-1: Manufacturer: syz [ 272.167316][ T5687] usb 2-1: config 0 descriptor?? [ 272.185446][ T5687] rc_core: Couldn't load IR keymap rc-hauppauge [ 272.187271][ T5687] Registered IR keymap rc-empty [ 272.199992][ T5687] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 272.226199][ T5687] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17 [ 272.648960][T10118] rc rc0: two consecutive events of type space [ 272.925274][ T36] usb 2-1: USB disconnect, device number 11 [ 273.190254][T10141] program syz.2.1825 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.532174][T10153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1832'. [ 273.554556][T10155] nbd: must specify a device to reconfigure [ 273.863664][T10170] sctp: Trying to GSO but underlying device doesn't support it. [ 274.030000][ T36] hid-generic 0005:10CF:0004.0005: item fetching failed at offset 0/1 [ 274.046675][ T36] hid-generic 0005:10CF:0004.0005: probe with driver hid-generic failed with error -22 [ 274.171026][T10182] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1843'. [ 274.447226][ T36] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 274.605717][ T36] usb 6-1: Using ep0 maxpacket: 32 [ 274.613107][ T36] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 274.617546][ T36] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.632211][ T36] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.639404][ T5716] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 274.662358][ T36] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 274.671280][ T36] usb 6-1: Product: syz [ 274.671299][ T36] usb 6-1: Manufacturer: syz [ 274.693664][ T36] hub 6-1:4.0: USB hub found [ 274.704613][T10197] 0x000000000006-0x000000020000 : "" [ 274.715693][ T1238] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 274.805734][ T5716] usb 4-1: Using ep0 maxpacket: 16 [ 274.814895][ T5716] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 274.834267][ T5716] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 274.841410][ T5716] usb 4-1: config 0 has no interface number 0 [ 274.842106][ T5716] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 274.842124][ T5716] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 274.870629][T10197] ftl_cs: FTL header corrupt! [ 274.882181][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.890353][ T5716] usb 4-1: Product: syz [ 274.894688][ T5716] usb 4-1: Manufacturer: syz [ 274.894715][ T5716] usb 4-1: SerialNumber: syz [ 274.919938][ T36] hub 6-1:4.0: config failed, hub has too many ports! (err -19) [ 274.943358][ T5716] usb 4-1: config 0 descriptor?? [ 274.956336][T10191] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 274.958968][T10191] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 275.040541][ T1238] usb 1-1: unable to get BOS descriptor or descriptor too short [ 275.040685][ T1238] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 275.058540][ T1238] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 275.104380][ T1238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.105660][ T1238] usb 1-1: Product: syz [ 275.105770][ T1238] usb 1-1: Manufacturer: syz [ 275.105785][ T1238] usb 1-1: SerialNumber: syz [ 275.193533][T10191] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 275.193657][T10191] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 275.344719][T10204] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1855'. [ 275.356301][T10204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1855'. [ 275.356322][T10204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1855'. [ 275.367262][ T9] usb 6-1: USB disconnect, device number 10 [ 275.449963][ T1238] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 275.612009][ T1238] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 275.612311][ T1238] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 275.807124][ T5716] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 275.807585][ T5716] asix 4-1:0.34: probe with driver asix failed with error -71 [ 275.974337][T10216] netlink: 'syz.1.1860': attribute type 6 has an invalid length. [ 275.989793][ T5716] usb 4-1: USB disconnect, device number 9 [ 276.032420][ T1238] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 276.083185][T10218] program syz.5.1862 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.408628][ T1238] usb 1-1: USB disconnect, device number 9 [ 276.655139][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.953932][T10249] i2c i2c-0: delete_device: Extra parameters [ 278.140792][T10287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1894'. [ 279.521281][T10330] rnbd_client L127: Can't parse path ip:: -22 [ 279.615196][T10336] mmap: syz.1.1916 (10336) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 280.134498][T10357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 280.135690][ T1238] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 280.217969][T10359] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 280.289905][ T1238] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 280.293103][ T1238] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 280.293128][ T1238] usb 1-1: config 1 has no interface number 0 [ 280.293179][ T1238] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 280.293201][ T1238] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 280.293225][ T1238] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x8 has invalid maxpacket 1463, setting to 1024 [ 280.293250][ T1238] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1024 [ 280.295500][ T1238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.295524][ T1238] usb 1-1: Product: syz [ 280.295538][ T1238] usb 1-1: Manufacturer: syz [ 280.295551][ T1238] usb 1-1: SerialNumber: syz [ 280.363417][T10348] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 280.375192][ T1238] usb 1-1: Error in usbnet_get_endpoints (-22) [ 280.708392][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1918'. [ 280.729112][ T1238] usb 1-1: USB disconnect, device number 10 [ 281.169258][T10382] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1937'. [ 281.469589][T10392] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1941'. [ 281.742257][T10400] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1944'. [ 282.077944][T10410] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1949'. [ 282.327091][T10419] loop5: detected capacity change from 0 to 7 [ 282.420656][T10419] Dev loop5: unable to read RDB block 7 [ 282.445792][T10419] loop5: unable to read partition table [ 282.445967][T10419] loop5: partition table beyond EOD, truncated [ 282.446020][T10419] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 282.764731][T10437] program syz.2.1962 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.865696][T10471] bond0: entered promiscuous mode [ 283.865762][T10471] bond_slave_0: entered promiscuous mode [ 283.866089][T10471] bond_slave_1: entered promiscuous mode [ 283.868188][T10471] batadv0: entered promiscuous mode [ 283.870302][T10471] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 283.870323][T10471] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 283.882612][T10471] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 283.938188][T10471] bond0: left promiscuous mode [ 283.938253][T10471] bond_slave_0: left promiscuous mode [ 283.938496][T10471] bond_slave_1: left promiscuous mode [ 283.983198][T10471] batadv0: left promiscuous mode [ 284.075801][ T5716] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 284.225702][ T5716] usb 3-1: Using ep0 maxpacket: 8 [ 284.373200][T10486] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1985'. [ 284.824824][ T5716] usb 3-1: unable to get BOS descriptor or descriptor too short [ 284.824981][ T5716] usb 3-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 284.826114][ T5716] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 284.826235][ T5716] usb 3-1: can't read configurations, error -71 [ 284.996131][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 285.139199][T10538] bridge0: port 3(syz_tun) entered blocking state [ 285.145923][T10538] bridge0: port 3(syz_tun) entered disabled state [ 285.146111][T10538] syz_tun: entered allmulticast mode [ 285.155868][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 285.156573][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 285.157696][T10538] syz_tun: entered promiscuous mode [ 285.165632][ T9] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 285.165656][ T9] usb 4-1: config 0 has no interface number 0 [ 285.168289][ T9] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 285.168320][ T9] usb 4-1: config 0 interface 85 has no altsetting 0 [ 285.234063][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.241682][ T9] usb 4-1: Product: syz [ 285.242759][ T9] usb 4-1: Manufacturer: syz [ 285.242777][ T9] usb 4-1: SerialNumber: syz [ 285.281366][ T9] usb 4-1: config 0 descriptor?? [ 285.575756][ T3800] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 285.914509][ T9] appletouch 4-1:0.85: Geyser mode initialized. [ 285.930390][ T9] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input18 [ 286.261107][ T9] usb 4-1: USB disconnect, device number 10 [ 286.261114][ C1] appletouch 4-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 286.425437][ T9] appletouch 4-1:0.85: input: appletouch disconnected [ 287.036815][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2011'. [ 287.036905][T10588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2011'. [ 287.214817][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2010'. [ 287.404173][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 287.499204][T10602] netlink: 'syz.2.2017': attribute type 2 has an invalid length. [ 287.566411][ T9] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 287.575753][ T198] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 287.583645][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.584792][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 287.584816][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 287.584839][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.584878][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.736648][ T198] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 287.738910][ T198] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 287.738940][ T198] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 287.748055][ T198] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 287.748083][ T198] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 287.788261][ T198] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.788360][ T198] usb 6-1: Product: syz [ 287.788377][ T198] usb 6-1: Manufacturer: syz [ 287.788392][ T198] usb 6-1: SerialNumber: syz [ 287.859939][ T198] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 287.919158][ T198] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 287.943352][ T198] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 288.141787][T10592] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90 [ 288.177409][ T5716] usb 6-1: USB disconnect, device number 11 [ 288.197952][ T5716] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 288.213606][ T5716] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 288.214763][ T5716] ti_usb_3410_5052 6-1:2.0: device disconnected [ 288.306473][T10617] block2mtd: error: cannot open device / [ 288.531926][T10624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2026'. [ 288.542097][ T9] gud 4-1:1.0: Failed to get connectors (error=-71) [ 288.542180][ T9] gud 4-1:1.0: probe with driver gud failed with error -71 [ 288.601766][ T9] usb 4-1: USB disconnect, device number 11 [ 288.796064][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2029'. [ 289.456795][ T198] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 289.593937][T10663] loop9: detected capacity change from 0 to 524287997 [ 289.704533][ T198] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 289.705994][ T198] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 289.706026][ T198] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.706048][ T198] usb 6-1: config 0 interface 0 has no altsetting 0 [ 289.706079][ T198] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.745213][ T198] usb 6-1: config 0 descriptor?? [ 289.975446][T10644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.981222][T10644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.147393][T10679] jffs2: notice: (10679) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 290.289095][ T198] hid_parser_main: 109 callbacks suppressed [ 290.289118][ T198] waterforce 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 290.289150][ T198] waterforce 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 290.289176][ T198] waterforce 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 290.289203][ T198] waterforce 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 290.289228][ T198] waterforce 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 290.289267][ T198] waterforce 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 290.289294][ T198] waterforce 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 290.289320][ T198] waterforce 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 290.289346][ T198] waterforce 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 290.289371][ T198] waterforce 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 290.292981][ T198] waterforce 0003:1044:7A4D.0006: unexpected long global item [ 290.294397][ T198] waterforce 0003:1044:7A4D.0006: hid parse failed with -22 [ 290.294502][ T198] waterforce 0003:1044:7A4D.0006: probe with driver waterforce failed with error -22 [ 290.446811][ T198] usb 6-1: USB disconnect, device number 12 [ 291.289008][T10712] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2073'. [ 291.319201][T10711] geneve2: entered promiscuous mode [ 291.379622][T10714] jffs2: notice: (10714) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 291.531612][T10719] input: syz0 as /devices/virtual/input/input19 [ 291.578915][T10722] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 291.647020][T10724] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2068'. [ 291.847623][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2071'. [ 292.040658][T10740] program syz.1.2077 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.945045][T10783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2096'. [ 293.432206][T10793] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2102'. [ 295.280385][T10833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2117'. [ 295.391016][T10833] gretap0: entered promiscuous mode [ 295.463260][T10833] macvlan2: entered allmulticast mode [ 295.463330][T10833] gretap0: entered allmulticast mode [ 295.682123][T10845] Bluetooth: MGMT ver 1.23 [ 295.717071][T10842] erspan0: entered promiscuous mode [ 295.786767][T10846] veth0_to_bond: entered promiscuous mode [ 295.798055][T10846] macsec1: entered promiscuous mode [ 295.798284][T10846] macsec1: entered allmulticast mode [ 295.798300][T10846] veth0_to_bond: entered allmulticast mode [ 296.288499][T10863] misc userio: Can't change port extra on an already running userio instance [ 296.375532][T10869] kAFS: bad VL server IP address [ 296.774019][T10882] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2140'. [ 297.537244][T10906] sd 0:0:1:0: PR command failed: 1026 [ 297.541300][T10906] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 297.541347][T10906] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 298.269545][T10921] MTRR 1 not used [ 298.538374][T10926] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 298.605786][ T1238] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 298.756442][ T1238] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 298.767184][ T1238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.773887][ T1238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.773934][ T1238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.834138][ T1238] usb 4-1: config 0 descriptor?? [ 299.035129][T10934] [ 299.110252][T10923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.128923][T10923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.144669][ T1238] usbhid 4-1:0.0: can't add hid device: -71 [ 299.147564][ T1238] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 299.178286][ T1238] usb 4-1: USB disconnect, device number 12 [ 299.715790][ T1238] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 299.866846][ T1238] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 299.876037][ T1238] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 299.885349][ T1238] usb 4-1: config 8 has no interface number 0 [ 299.885400][ T1238] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 299.885428][ T1238] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.885449][ T1238] usb 4-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.885476][ T1238] usb 4-1: config 8 interface 177 has no altsetting 0 [ 299.885506][ T1238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.955107][ T1238] ir_toy 4-1:8.177: required endpoints not found [ 300.181638][ T9] usb 4-1: USB disconnect, device number 13 [ 301.724937][T10995] program syz.3.2189 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.750467][T10994] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 302.016294][ T1011] IPVS: starting estimator thread 0... [ 302.116515][T11003] IPVS: using max 15 ests per chain, 36000 per kthread [ 302.992478][T11025] netlink: 'syz.2.2203': attribute type 3 has an invalid length. [ 303.574028][T11033] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2207'. [ 303.922168][T11045] binder: 11041:11045 ioctl c0306201 2000000001c0 returned -22 [ 304.709951][ T1238] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 304.855658][ T1238] usb 6-1: Using ep0 maxpacket: 8 [ 304.856329][ T1238] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 304.862774][ T1238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.862798][ T1238] usb 6-1: Product: syz [ 304.862813][ T1238] usb 6-1: Manufacturer: syz [ 304.862826][ T1238] usb 6-1: SerialNumber: syz [ 304.895537][ T1238] usb 6-1: config 0 descriptor?? [ 304.920500][ T1238] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 305.486786][ T5687] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 305.646479][ T5687] usb 2-1: Using ep0 maxpacket: 32 [ 305.652132][ T5687] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 305.653425][ T5687] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 305.653454][ T5687] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 305.653480][ T5687] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 305.653503][ T5687] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 305.653529][ T5687] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 305.656009][ T5687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.656033][ T5687] usb 2-1: Product: syz [ 305.656047][ T5687] usb 2-1: Manufacturer: syz [ 305.656061][ T5687] usb 2-1: SerialNumber: syz [ 305.744169][ T1238] gspca_sonixj: reg_r err -71 [ 305.744320][ T1238] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 305.795998][ T5687] usb 2-1: config 0 descriptor?? [ 305.947374][ T1238] usb 6-1: USB disconnect, device number 13 [ 306.217831][ T5687] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 306.218974][ T5687] input input22: Device does not respond to id packet M [ 306.222268][ T5687] input input22: Device does not respond to id packet P [ 306.427221][ T5687] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 306.433352][ T5687] input input22: Device does not respond to id packet B [ 306.434812][ T5687] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 306.434861][ T5687] input input22: Device does not respond to id packet N [ 306.456093][ T5687] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 306.462804][ T5687] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 306.472892][ T5687] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 306.479747][ T5687] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 306.544246][ T5687] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input22 [ 306.637520][ T5687] usb 2-1: USB disconnect, device number 12 [ 306.885820][ T5716] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 307.035850][ T5716] usb 3-1: Using ep0 maxpacket: 32 [ 307.036669][ T5716] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 307.037871][ T5716] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.037979][ T5716] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.039809][ T5716] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 307.039834][ T5716] usb 3-1: Product: syz [ 307.039849][ T5716] usb 3-1: Manufacturer: syz [ 307.121238][ T5716] hub 3-1:4.0: USB hub found [ 307.333295][ T5716] hub 3-1:4.0: 2 ports detected [ 307.753833][T11131] pimreg1: tun_chr_ioctl cmd 1074025673 [ 307.953138][ T5716] usb 3-1: USB disconnect, device number 11 [ 308.729569][T11147] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5586] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[11147] [ 308.772242][T11148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2259'. [ 309.221281][T11162] ALSA: seq fatal error: cannot create timer (-19) [ 310.687646][T11209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2284'. [ 310.789239][T11211] batadv_slave_1: entered promiscuous mode [ 310.796363][T11210] batadv_slave_1: left promiscuous mode [ 312.871848][T11277] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2316'. [ 313.385789][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 313.546342][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 313.552951][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 313.552990][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.560406][ T9] usb 4-1: config 0 descriptor?? [ 313.702621][T11287] batadv_slave_0: entered promiscuous mode [ 313.714896][T11286] batadv_slave_0: left promiscuous mode [ 313.978230][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880654a5400: rx timeout, send abort [ 314.002617][ T9] hid (null): unknown global tag 0xfd [ 314.041531][ T9] wacom 0003:056A:0084.0007: unexpected long global item [ 314.048589][ T9] wacom 0003:056A:0084.0007: parse failed [ 314.048758][ T9] wacom 0003:056A:0084.0007: probe with driver wacom failed with error -22 [ 314.223445][ T9] usb 4-1: USB disconnect, device number 14 [ 314.479463][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880654a5400: abort rx timeout. Force session deactivation [ 314.972258][T11320] device-mapper: ioctl: Unable to rename non-existent device, to $ [ 315.885881][ T36] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 316.039099][ T36] usb 6-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 316.049782][ T36] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 316.057168][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.096748][ T36] usb 6-1: config 0 descriptor?? [ 316.102575][T11349] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 316.551912][ T36] hid_parser_main: 48 callbacks suppressed [ 316.558606][ T36] uclogic 0003:5543:0064.0008: unknown main item tag 0x0 [ 316.560259][ T36] uclogic 0003:5543:0064.0008: unknown main item tag 0x0 [ 316.573979][ T36] uclogic 0003:5543:0064.0008: unknown main item tag 0x0 [ 316.581109][ T36] uclogic 0003:5543:0064.0008: unknown main item tag 0x0 [ 316.581140][ T36] uclogic 0003:5543:0064.0008: unknown main item tag 0x0 [ 316.581166][ T36] uclogic 0003:5543:0064.0008: unknown main item tag 0x0 [ 316.581202][ T36] uclogic 0003:5543:0064.0008: unknown main item tag 0x0 [ 316.581228][ T36] uclogic 0003:5543:0064.0008: unknown main item tag 0x0 [ 316.581255][ T36] uclogic 0003:5543:0064.0008: unknown main item tag 0x0 [ 316.581282][ T36] uclogic 0003:5543:0064.0008: unknown main item tag 0x0 [ 316.708658][ T9240] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 316.822178][ T36] uclogic 0003:5543:0064.0008: hidraw0: USB HID v7b.fd Device [HID 5543:0064] on usb-dummy_hcd.5-1/input0 [ 316.854999][ T36] usb 6-1: USB disconnect, device number 14 [ 316.932346][T11377] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2362'. [ 317.088877][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.090269][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.090473][T11374] fido_id[11374]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 317.214428][T11375] Process accounting resumed [ 317.521883][T11395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2369'. [ 318.015764][ T36] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 318.171131][ T36] usb 2-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00 [ 318.173526][ T36] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 318.173553][ T36] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 318.173590][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.200511][ T36] usb-storage 2-1:1.0: USB Mass Storage device detected [ 318.396165][ T36] scsi host1: usb-storage 2-1:1.0 [ 318.398907][ T4897] Bluetooth: hci0: Zero size dump init pkt [ 319.328616][T11467] loop5: detected capacity change from 0 to 6 [ 319.356657][T11467] Dev loop5: unable to read RDB block 6 [ 319.356812][T11467] loop5: unable to read partition table [ 319.357006][T11467] loop5: partition table beyond EOD, truncated [ 319.357037][T11467] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 319.598902][ T36] usb 2-1: USB disconnect, device number 13 [ 320.275794][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 320.456519][ T9] usb 6-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 320.457894][ T9] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.457926][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 320.457957][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.515271][ T9] usb 6-1: config 0 descriptor?? [ 320.966288][ T9] pantherlord 0003:0F30:0111.0009: bogus close delimiter [ 320.966372][ T9] pantherlord 0003:0F30:0111.0009: item 0 0 2 10 parsing failed [ 320.983232][ T9] pantherlord 0003:0F30:0111.0009: parse failed [ 320.987996][ T9] pantherlord 0003:0F30:0111.0009: probe with driver pantherlord failed with error -22 [ 321.161926][ T9] usb 6-1: USB disconnect, device number 15 [ 322.427461][T11558] loop8: detected capacity change from 0 to 7 [ 322.577001][T11558] Dev loop8: unable to read RDB block 7 [ 322.582940][T11558] loop8: unable to read partition table [ 322.583146][T11558] loop8: partition table beyond EOD, truncated [ 322.583181][T11558] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 323.275764][ T198] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 323.447998][ T198] usb 2-1: unable to get BOS descriptor or descriptor too short [ 323.455781][ T198] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 323.466648][ T198] usb 2-1: config 100 has an invalid interface number: 173 but max is 0 [ 323.475131][ T198] usb 2-1: config 100 has no interface number 0 [ 323.475203][ T198] usb 2-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 323.475228][ T198] usb 2-1: config 100 interface 173 altsetting 142 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 323.475254][ T198] usb 2-1: config 100 interface 173 altsetting 142 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 323.475279][ T198] usb 2-1: config 100 interface 173 altsetting 142 endpoint 0x8F has invalid maxpacket 255, setting to 8 [ 323.475305][ T198] usb 2-1: config 100 interface 173 has no altsetting 0 [ 323.516776][ T198] usb 2-1: string descriptor 0 read error: -22 [ 323.545805][ T198] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.562888][T11576] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 323.563751][T11576] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 323.592858][ T198] metro_usb 2-1:100.173: Metrologic USB to Serial converter detected [ 323.649548][ T198] usb 2-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 323.750262][T11594] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2459'. [ 323.912808][T11576] metro-usb ttyUSB0: metrousb_open - failed to configure device, error code=-8 [ 323.985787][ C1] metro-usb ttyUSB0: metrousb_read_int_callback - failed submitting interrupt in urb, error code=-1 [ 324.022594][ T198] usb 2-1: USB disconnect, device number 14 [ 324.054654][ T198] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 324.077468][ T198] metro_usb 2-1:100.173: device disconnected [ 327.996116][T11686] sctp: [Deprecated]: syz.2.2502 (pid 11686) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.996116][T11686] Use struct sctp_sack_info instead [ 328.294675][T11690] Invalid argument reading file caps for ./file0 [ 329.153407][T11717] syzkaller1: entered promiscuous mode [ 329.153487][T11717] syzkaller1: entered allmulticast mode [ 330.272142][T11752] netlink: 'syz.0.2531': attribute type 2 has an invalid length. [ 330.356527][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2532'. [ 330.907326][ T1161] IPVS: starting estimator thread 0... [ 330.911596][T11771] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 331.006356][T11776] IPVS: using max 11 ests per chain, 26400 per kthread [ 331.279413][T11764] gadgetfs: bound to dummy_udc driver [ 332.008163][T11795] input: syz1 as /devices/virtual/input/input24 [ 332.805732][ T1238] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 332.955929][ T1238] usb 6-1: Using ep0 maxpacket: 32 [ 332.956670][ T1238] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 332.957878][ T1238] usb 6-1: config index 0 descriptor too short (expected 27632, got 27) [ 332.957903][ T1238] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 332.957923][ T1238] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 332.957943][ T1238] usb 6-1: config 1 has no interface number 0 [ 332.957986][ T1238] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 332.958011][ T1238] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 332.958050][ T1238] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.072886][T11839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2567'. [ 333.079729][ T1238] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 333.363608][ T91] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 333.393228][ T91] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 333.422318][ T1238] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 333.513323][ T91] bond0: active interface up! [ 333.723048][ T36] usb 6-1: USB disconnect, device number 16 [ 333.732214][ T36] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 333.757232][T11855] loop2: detected capacity change from 0 to 7 [ 333.760173][T11855] Dev loop2: unable to read RDB block 7 [ 333.760205][T11855] loop2: AHDI p1 p3 [ 333.760225][T11855] loop2: partition table partially beyond EOD, truncated [ 333.760623][T11855] loop2: p1 start 2036297842 is beyond EOD, truncated [ 334.569064][T11882] rnbd_client L213: map_device: Parameters missing [ 334.977460][T11895] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2590'. [ 335.015781][ T9] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 335.180079][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 335.190591][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 335.190629][ T9] usb 2-1: can't read configurations, error -71 [ 336.030594][T11921] GUP no longer grows the stack in syz.1.2601 (11921): 200000004000-200000006000 (200000002000) [ 336.048056][T11921] CPU: 0 UID: 0 PID: 11921 Comm: syz.1.2601 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 336.048091][T11921] Tainted: [L]=SOFTLOCKUP [ 336.048099][T11921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 336.048119][T11921] Call Trace: [ 336.048127][T11921] [ 336.048136][T11921] dump_stack_lvl+0xe8/0x150 [ 336.048171][T11921] __get_user_pages+0x22b5/0x2650 [ 336.048228][T11921] get_user_pages_remote+0x307/0xb10 [ 336.048251][T11921] ? __pfx_mtree_load+0x10/0x10 [ 336.048287][T11921] ? __pfx_get_user_pages_remote+0x10/0x10 [ 336.048312][T11921] ? __access_remote_vm+0x42c/0x6f0 [ 336.048341][T11921] __access_remote_vm+0x222/0x6f0 [ 336.048375][T11921] ? __pfx___access_remote_vm+0x10/0x10 [ 336.048397][T11921] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 336.048422][T11921] ? proc_pid_cmdline_read+0x41f/0x900 [ 336.048441][T11921] ? proc_pid_cmdline_read+0x41f/0x900 [ 336.048468][T11921] proc_pid_cmdline_read+0x46e/0x900 [ 336.048496][T11921] ? __asan_memset+0x22/0x50 [ 336.048526][T11921] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 336.048562][T11921] ? rw_verify_area+0x250/0x4d0 [ 336.048587][T11921] vfs_readv+0x588/0x850 [ 336.048611][T11921] ? __pfx_futex_wake+0x10/0x10 [ 336.048634][T11921] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 336.048673][T11921] ? __pfx_vfs_readv+0x10/0x10 [ 336.048715][T11921] ? __fget_files+0x2a/0x420 [ 336.048748][T11921] ? __fget_files+0x3a8/0x420 [ 336.048777][T11921] ? __fget_files+0x2a/0x420 [ 336.048815][T11921] __x64_sys_preadv+0x19f/0x2c0 [ 336.048842][T11921] ? __pfx___x64_sys_preadv+0x10/0x10 [ 336.048877][T11921] do_syscall_64+0x166/0x520 [ 336.048903][T11921] ? trace_irq_disable+0x3b/0x140 [ 336.048928][T11921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.048949][T11921] ? clear_bhb_loop+0x70/0xc0 [ 336.048974][T11921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.048999][T11921] RIP: 0033:0x7fb4b1dce0d9 [ 336.049026][T11921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.049044][T11921] RSP: 002b:00007fb4b0026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 336.049067][T11921] RAX: ffffffffffffffda RBX: 00007fb4b2055fa0 RCX: 00007fb4b1dce0d9 [ 336.049082][T11921] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 336.049095][T11921] RBP: 00007fb4b1e65024 R08: 00000000fffffff9 R09: 0000000000000000 [ 336.049108][T11921] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 336.049121][T11921] R13: 00007fb4b2056038 R14: 00007fb4b2055fa0 R15: 00007ffd645d5d78 [ 336.049154][T11921] [ 336.620410][T11927] input: syz0 as /devices/virtual/input/input25 [ 336.626892][T11927] input: failed to attach handler leds to device input25, error: -6 [ 336.886527][ T36] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 337.035786][ T36] usb 3-1: Using ep0 maxpacket: 16 [ 337.036655][ T36] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 337.037953][ T36] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.037977][ T36] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 337.045308][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.045333][ T36] usb 3-1: Product: syz [ 337.045347][ T36] usb 3-1: Manufacturer: syz [ 337.045360][ T36] usb 3-1: SerialNumber: syz [ 337.062481][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2608'. [ 337.189210][ T36] usb 3-1: 0:2 : does not exist [ 337.407891][ T36] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 337.579341][ T36] usb 3-1: USB disconnect, device number 12 [ 337.818138][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.763317][T11965] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2622'. [ 340.795827][ T37] audit: type=1400 audit(1787765846.986:90): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="l" requested=r pid=12035 comm="syz.5.2652" name="file1" dev="tmpfs" ino=2179 [ 341.311401][ T5687] kernel read not supported for file /media2 (pid: 5687 comm: kworker/0:4) [ 341.447775][T12065] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 6d [ 342.395773][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 342.567128][ T9] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 342.579000][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.579054][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 342.579091][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 342.579115][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.579156][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.451847][ T9] gud 3-1:1.0: Failed to get connectors (error=-5) [ 343.451892][ T9] gud 3-1:1.0: probe with driver gud failed with error -5 [ 343.618365][ T1238] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 343.676972][ T9] usb 3-1: USB disconnect, device number 13 [ 343.766192][ T1238] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 343.767392][ T1238] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 343.767417][ T1238] usb 4-1: config 0 has no interface number 0 [ 343.767460][ T1238] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 25955, setting to 64 [ 343.769232][ T1238] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 343.769256][ T1238] usb 4-1: Manufacturer: syz [ 343.769270][ T1238] usb 4-1: SerialNumber: syz [ 343.787737][ T1238] usb 4-1: config 0 descriptor?? [ 343.805831][T12137] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 344.403865][T12160] support for cryptoloop has been removed. Use dm-crypt instead. [ 344.417069][ T1238] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 344.450660][ T1238] usb 4-1: USB disconnect, device number 15 [ 344.805773][ T5570] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 344.977231][ T5570] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 344.986900][ T5570] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.986955][ T5570] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 345.013831][ T5570] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 345.013901][ T5570] usb 3-1: SerialNumber: syz [ 345.262570][ T5570] usb 3-1: 0:2 : does not exist [ 345.325191][T12195] input: syz0 as /devices/virtual/input/input27 [ 345.546830][ T5570] usb 3-1: USB disconnect, device number 14 [ 345.976889][T12207] bond1: Unable to set down delay as MII monitoring is disabled [ 346.022460][T12207] bond1 (unregistering): Released all slaves [ 346.221109][ T36] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 346.395723][ T36] usb 3-1: Using ep0 maxpacket: 32 [ 346.402556][ T36] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 346.403721][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.403752][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.403790][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.452828][ T36] usb 3-1: config 0 descriptor?? [ 346.906376][ T36] hid_parser_main: 451 callbacks suppressed [ 346.916280][ T36] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 346.923248][ T36] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 347.094638][ T36] ft260 0003:0403:6030.000A: chip code: 0000 0000 [ 347.519251][ T36] usb 3-1: USB disconnect, device number 15 [ 347.952937][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 348.182145][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2760'. [ 348.189783][T12279] netlink: 'syz.5.2760': attribute type 5 has an invalid length. [ 348.370240][T12285] vxcan3: entered promiscuous mode [ 349.177753][T12297] binder: 12296:12297 ioctl c0306201 200000000080 returned -14 [ 349.346908][ T4897] Bluetooth: hci5: link tx timeout [ 349.358784][ T4897] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 349.986937][ T5570] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 350.148064][ T5570] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 350.152002][ T5570] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.194026][ T5570] usb 2-1: config 0 descriptor?? [ 350.220551][ T5570] cp210x 2-1:0.0: cp210x converter detected [ 350.554843][T12343] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 350.584576][T12343] CIFS: Attempting to mount //127.0.0.1/share [ 350.641458][ T5570] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 350.891018][ T5570] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 350.896871][ T5570] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 351.062556][ T5570] usb 2-1: cp210x converter now attached to ttyUSB0 [ 351.079865][ T5570] usb 2-1: USB disconnect, device number 17 [ 351.132563][ T5570] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 351.133512][ T5570] cp210x 2-1:0.0: device disconnected [ 351.401027][ T4897] Bluetooth: hci5: command 0x0405 tx timeout [ 351.448249][T12343] CIFS: VFS: cifs_mount failed w/return code = -512 [ 352.155799][ T5570] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 352.317405][ T5570] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 352.318603][ T5570] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 352.318717][ T5570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.318788][ T5570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.318819][ T5570] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 352.319951][ T5570] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 352.319974][ T5570] usb 4-1: Manufacturer: syz [ 352.378948][ T5570] usb 4-1: config 0 descriptor?? [ 352.854520][ T5570] appleir 0003:05AC:8243.000B: item fetching failed at offset 0/1 [ 352.859270][ T5570] appleir 0003:05AC:8243.000B: parse failed [ 352.859376][ T5570] appleir 0003:05AC:8243.000B: probe with driver appleir failed with error -22 [ 353.038872][T12385] binder: 12384:12385 ioctl c0306201 2000000003c0 returned -14 [ 353.135776][ T5570] usb 4-1: USB disconnect, device number 16 [ 354.016086][T12414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2815'. [ 354.605739][ T36] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 354.757296][ T36] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 354.766735][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.775888][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.775933][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.806528][ T36] usb 3-1: config 0 descriptor?? [ 355.193231][T12462] loop9: detected capacity change from 0 to 7 [ 355.222452][T12462] Dev loop9: unable to read RDB block 7 [ 355.227494][T12462] loop9: unable to read partition table [ 355.235296][T12462] loop9: partition table beyond EOD, truncated [ 355.243086][T12462] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 355.264004][ T36] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 355.270301][ T36] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 355.270331][ T36] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 355.270357][ T36] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 355.270382][ T36] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 355.316638][ T36] playstation 0003:054C:0DF2.000C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 355.436996][ T36] playstation 0003:054C:0DF2.000C: Invalid byte count transferred, expected 20 got 0 [ 355.437076][ T36] playstation 0003:054C:0DF2.000C: Failed to retrieve DualSense pairing info: -22 [ 355.437128][ T36] playstation 0003:054C:0DF2.000C: Failed to get MAC address from DualSense [ 355.437143][ T36] playstation 0003:054C:0DF2.000C: Failed to create dualsense. [ 355.513304][ T36] playstation 0003:054C:0DF2.000C: probe with driver playstation failed with error -22 [ 355.720165][ T36] usb 3-1: USB disconnect, device number 16 [ 356.299791][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2852'. [ 356.300036][T12499] netlink: 'syz.1.2854': attribute type 11 has an invalid length. [ 356.365467][T12502] afs: Bad value for 'source' [ 356.428750][T12498] vlan3: entered allmulticast mode [ 356.429185][T12498] bridge0: port 4(vlan3) entered blocking state [ 356.429404][T12498] bridge0: port 4(vlan3) entered disabled state [ 356.433433][T12498] vlan3: entered promiscuous mode [ 356.725754][ T5570] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 356.886555][ T5570] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 356.902477][ T5570] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.902549][ T5570] usb 2-1: Product: syz [ 356.902565][ T5570] usb 2-1: Manufacturer: syz [ 356.902578][ T5570] usb 2-1: SerialNumber: syz [ 357.339964][ T12] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.343763][ T12] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.343806][ T12] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.343842][ T12] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.620619][ T5570] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 357.620747][ T5570] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 357.863817][ T5570] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 357.902856][ T5570] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 357.959513][ T5570] usb 2-1: USB disconnect, device number 18 [ 358.496296][T12562] TCP: TCP_TX_DELAY enabled [ 358.635047][T12565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2879'. [ 358.741018][ T5695] kernel write not supported for file /bluetooth/6lowpan_control (pid: 5695 comm: kworker/1:5) [ 360.323430][ T5695] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 360.422822][ T5695] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 360.517365][T12627] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2904'. [ 361.015738][ T9] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 361.127755][ T5570] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 361.166956][ T9] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 361.170736][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.170760][ T9] usb 4-1: Product: syz [ 361.170775][ T9] usb 4-1: Manufacturer: syz [ 361.170789][ T9] usb 4-1: SerialNumber: syz [ 361.189199][ T9] usb 4-1: config 0 descriptor?? [ 361.198227][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 361.285768][ T5570] usb 3-1: Using ep0 maxpacket: 32 [ 361.286843][ T5570] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 361.288040][ T5570] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.288171][ T5570] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 361.292610][ T5570] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.293004][ T5570] usb 3-1: Product: syz [ 361.293020][ T5570] usb 3-1: Manufacturer: syz [ 361.293035][ T5570] usb 3-1: SerialNumber: syz [ 361.651178][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2917'. [ 361.660278][T12655] netlink: 'syz.1.2917': attribute type 20 has an invalid length. [ 361.660296][T12655] netlink: 'syz.1.2917': attribute type 21 has an invalid length. [ 361.672874][ T5570] snd-ua101 3-1:1.1: sample format descriptor not found [ 361.672927][ T5570] snd-ua101 3-1:1.0: invalid num_altsetting [ 361.957571][ T5570] usb 3-1: USB disconnect, device number 17 [ 362.227004][ T9] gspca_stk1135: reg_w 0x7 err -71 [ 362.228240][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 362.228255][ T9] gspca_stk1135: Sensor write failed [ 362.228309][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 362.228320][ T9] gspca_stk1135: Sensor write failed [ 362.228341][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 362.228349][ T9] gspca_stk1135: Sensor read failed [ 362.228370][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 362.228378][ T9] gspca_stk1135: Sensor read failed [ 362.228386][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 362.228413][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 362.228422][ T9] gspca_stk1135: Sensor read failed [ 362.228446][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 362.228455][ T9] gspca_stk1135: Sensor read failed [ 362.228479][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 362.228487][ T9] gspca_stk1135: Sensor write failed [ 362.228510][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 362.228519][ T9] gspca_stk1135: Sensor write failed [ 362.228630][ T9] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 362.333337][ T9] usb 4-1: USB disconnect, device number 17 [ 362.831864][T12680] loop8: detected capacity change from 0 to 7 [ 362.847833][T12680] Dev loop8: unable to read RDB block 7 [ 362.848190][T12680] loop8: unable to read partition table [ 362.848384][T12680] loop8: partition table beyond EOD, truncated [ 362.848421][T12680] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 363.332499][T12697] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2937'. [ 363.901279][ T198] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 364.003544][T12691] evm: overlay not supported [ 364.056493][ T198] usb 6-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 0.00 [ 364.073577][ T198] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.081777][ T198] usb 6-1: Product: syz [ 364.081797][ T198] usb 6-1: Manufacturer: syz [ 364.081812][ T198] usb 6-1: SerialNumber: syz [ 364.093796][ T36] kernel read not supported for file /dsp (pid: 36 comm: kworker/1:1) [ 364.361027][ T198] kalmia 6-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0 [ 364.373947][ T198] kalmia 6-1:1.0 (unnamed net_device) (uninitialized): Unexpected init result length: 0 [ 364.430334][T12725] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2950'. [ 364.574265][ T198] kalmia 6-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0 [ 364.885916][T12733] bridge0: entered allmulticast mode [ 364.897261][ T198] kalmia 6-1:1.0 wwan0: register 'kalmia' at usb-dummy_hcd.5-1, Samsung Kalmia LTE USB dongle, 00:00:01:02:03:04 [ 364.898728][T12735] bridge0: left allmulticast mode [ 364.928714][ T198] usb 6-1: USB disconnect, device number 17 [ 364.944961][ T198] kalmia 6-1:1.0 wwan0: unregister 'kalmia' usb-dummy_hcd.5-1, Samsung Kalmia LTE USB dongle [ 365.138217][ T6506] udevd[6506]: setting mode of /dev/bus/usb/006/017 to 020664 failed: No such file or directory [ 365.138825][ T6506] udevd[6506]: setting owner of /dev/bus/usb/006/017 to uid=0, gid=0 failed: No such file or directory [ 365.542144][T12753] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2963'. [ 366.320856][T12784] netlink: 'syz.2.2975': attribute type 12 has an invalid length. [ 366.500905][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 366.879828][T12801] bridge0: port 5(veth0) entered blocking state [ 366.882400][T12801] bridge0: port 5(veth0) entered disabled state [ 366.882573][T12801] veth0: entered allmulticast mode [ 366.894443][T12801] veth0: entered promiscuous mode [ 367.018319][T12801] bridge0: port 5(veth0) entered blocking state [ 367.018509][T12801] bridge0: port 5(veth0) entered forwarding state [ 368.076047][ T5570] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 368.255624][ T5570] usb 2-1: Using ep0 maxpacket: 16 [ 368.261515][ T5570] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 368.291529][ T5570] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.291603][ T5570] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.291627][ T5570] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 368.291729][ T5570] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.348808][ T5570] usb 2-1: config 0 descriptor?? [ 368.983104][ T5570] microsoft 0003:045E:07DA.000E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 369.161487][ T5570] usb 2-1: USB disconnect, device number 19 [ 369.870776][T12841] fido_id[12841]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 370.016816][ T5570] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 370.177387][ T5570] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 370.193892][ T5570] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.202011][ T5570] usb 4-1: Product: syz [ 370.202031][ T5570] usb 4-1: Manufacturer: syz [ 370.202045][ T5570] usb 4-1: SerialNumber: syz [ 370.273463][ T5570] ums-karma 4-1:1.0: USB Mass Storage device detected [ 370.288142][ T5570] ums-karma 4-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 370.288142][ T5570] Please send a copy of this message to and [ 370.735047][ T5570] ums-karma 4-1:1.0: probe with driver ums-karma failed with error -5 [ 370.737169][ T1238] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 370.891369][ T5570] usb 4-1: USB disconnect, device number 18 [ 370.893392][ T1238] usb 2-1: Using ep0 maxpacket: 32 [ 370.894055][ T1238] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 370.894671][ T1238] usb 2-1: config 0 has no interfaces? [ 370.899181][ T1238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.899205][ T1238] usb 2-1: Product: syz [ 370.899220][ T1238] usb 2-1: Manufacturer: syz [ 370.899234][ T1238] usb 2-1: SerialNumber: syz [ 370.963633][ T1238] usb 2-1: config 0 descriptor?? [ 371.199912][T12856] loop9: detected capacity change from 0 to 7 [ 371.203694][T12856] Dev loop9: unable to read RDB block 7 [ 371.203724][T12856] loop9: AHDI p1 p2 p3 [ 371.203745][T12856] loop9: partition table partially beyond EOD, truncated [ 371.203949][T12856] loop9: p1 start 1920169572 is beyond EOD, truncated [ 371.203968][T12856] loop9: p2 start 1851744889 is beyond EOD, truncated [ 371.258394][ T1238] usb 2-1: USB disconnect, device number 20 [ 373.360718][T12926] Invalid argument reading file caps for ./file0 [ 374.220144][T12954] : renamed from vlan0 (while UP) [ 375.776338][ T5570] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 375.946327][ T5570] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 375.957767][ T5570] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.984225][ T5570] usb 4-1: config 0 descriptor?? [ 375.992898][ T5570] cp210x 4-1:0.0: cp210x converter detected [ 376.493784][ T5570] usb 4-1: cp210x converter now attached to ttyUSB0 [ 376.656056][ T1238] usb 4-1: USB disconnect, device number 19 [ 376.696752][ T1238] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 376.737542][T13018] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 376.907475][ T1238] cp210x 4-1:0.0: device disconnected [ 376.974374][T13027] C: renamed from veth1_to_team (while UP) [ 377.015003][T13027] netlink: 'syz.1.3073': attribute type 1 has an invalid length. [ 377.016901][T13027] netlink: 'syz.1.3073': attribute type 2 has an invalid length. [ 377.016921][T13027] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 377.485307][T13039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3078'. [ 378.394753][T13063] mac80211_hwsim hwsim5 ..c: renamed from wlan1 (while UP) [ 378.559443][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.559587][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.691855][ T37] audit: type=1326 audit(1787765884.896:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13068 comm="syz.5.3093" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7c955e0d9 code=0x0 [ 378.816903][ T5695] kernel read not supported for file bpf-prog (pid: 5695 comm: kworker/1:5) [ 379.327104][T13093] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 379.819441][ T9477] syz_tun (unregistering): left allmulticast mode [ 379.819523][ T9477] syz_tun (unregistering): left promiscuous mode [ 379.824144][ T9477] bridge0: port 3(syz_tun) entered disabled state [ 380.095710][ T5695] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 380.135744][ T5570] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 380.242145][T13115] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3116'. [ 380.256388][ T5695] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 380.259307][ T5695] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 380.259331][ T5695] usb 4-1: Product: syz [ 380.259353][ T5695] usb 4-1: SerialNumber: syz [ 380.264829][ T5695] usb 4-1: config 0 descriptor?? [ 380.295602][ T5570] usb 3-1: Using ep0 maxpacket: 8 [ 380.301498][ T5570] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 380.305119][ T5570] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.305143][ T5570] usb 3-1: Product: syz [ 380.305158][ T5570] usb 3-1: Manufacturer: syz [ 380.305172][ T5570] usb 3-1: SerialNumber: syz [ 380.371961][ T5570] usb 3-1: config 0 descriptor?? [ 380.517321][ T5695] hso 4-1:0.0: Failed to find BULK eps [ 380.590957][ T5570] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 380.615392][ T5570] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 380.642781][ T5570] usb 3-1: USB disconnect, device number 18 [ 380.700008][ T5695] usb 4-1: USB disconnect, device number 20 [ 380.942355][ T4897] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 381.009116][ T4897] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 381.036173][ T4897] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 381.063618][ T4897] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 381.066168][ T4897] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 381.371147][T13131] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3122'. [ 381.371218][T13131] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3122'. [ 381.605901][T13131] geneve2: entered promiscuous mode [ 381.606041][T13131] geneve2: entered allmulticast mode [ 381.808551][T13145] macvlan0: left promiscuous mode [ 381.827827][T13145] netlink: 'syz.2.3126': attribute type 2 has an invalid length. [ 382.349831][T13164] loop8: detected capacity change from 0 to 7 [ 382.355374][T13164] Dev loop8: unable to read RDB block 7 [ 382.355416][T13164] loop8: unable to read partition table [ 382.356736][T13164] loop8: partition table beyond EOD, truncated [ 382.356772][T13164] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 382.609435][ T1028] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.610501][ T1028] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.610541][ T1028] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.610577][ T1028] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.395790][ T5593] Bluetooth: hci1: command tx timeout [ 383.604038][ T5570] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 383.765920][ T5570] usb 4-1: Using ep0 maxpacket: 32 [ 383.771923][ T5570] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 383.773256][ T5570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 383.773301][ T5570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 383.773328][ T5570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 383.806116][ T5570] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.806141][ T5570] usb 4-1: Product: syz [ 383.806155][ T5570] usb 4-1: Manufacturer: syz [ 383.806168][ T5570] usb 4-1: SerialNumber: syz [ 383.848630][ T5570] usb 4-1: config 0 descriptor?? [ 383.869592][ T5570] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input29 [ 384.028186][ T4933] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 384.156429][T13212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3153'. [ 384.183233][ T5570] usb 4-1: USB disconnect, device number 21 [ 384.528214][T13123] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.528452][T13123] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.528631][T13123] bridge_slave_0: entered allmulticast mode [ 384.535101][T13123] bridge_slave_0: entered promiscuous mode [ 384.575506][T13123] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.576265][T13123] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.576437][T13123] bridge_slave_1: entered allmulticast mode [ 384.587796][T13123] bridge_slave_1: entered promiscuous mode [ 384.896105][T13123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.960734][T13123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.251434][T13123] team0: Port device team_slave_0 added [ 385.266673][T13123] team0: Port device team_slave_1 added [ 385.391668][T13123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.404212][T13123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.404246][T13123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.478047][ T5593] Bluetooth: hci1: command tx timeout [ 385.952139][T13123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.953733][T13123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.953764][T13123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.087827][T13123] hsr_slave_0: entered promiscuous mode [ 386.096942][T13123] hsr_slave_1: entered promiscuous mode [ 386.105325][T13123] debugfs: 'hsr0' already exists in 'hsr' [ 386.105344][T13123] Cannot create hsr debugfs directory [ 386.349600][T13247] loop5: detected capacity change from 0 to 7 [ 386.386123][T13247] Dev loop5: unable to read RDB block 7 [ 386.399604][T13247] loop5: AHDI p1 p2 [ 386.399638][T13247] loop5: partition table partially beyond EOD, truncated [ 386.399909][T13247] loop5: p1 size 150995456 extends beyond EOD, truncated [ 386.632295][ T5826] udevd[5826]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 386.703796][ T5826] udevd[5826]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 387.556987][ T5593] Bluetooth: hci1: command tx timeout [ 388.116874][T13280] jffs2: notice: (13280) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 388.390268][T13282] overlayfs: conflicting lowerdir path [ 388.843333][T13288] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 389.015753][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 389.175768][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 389.180340][T13123] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 389.186802][ T9] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 389.198948][ T9] usb 3-1: config index 0 descriptor too short (expected 27632, got 27) [ 389.200548][ T9] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 389.200573][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 389.200594][ T9] usb 3-1: config 1 has no interface number 0 [ 389.260370][ T9] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 389.271731][ T9] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 389.271783][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.372714][T13123] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 389.460876][T13123] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 389.498021][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 389.648441][ T5593] Bluetooth: hci1: command tx timeout [ 389.675776][T13123] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 389.681327][T13123] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 389.707835][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 389.814920][T13123] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 389.847427][T13123] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 389.934409][T13123] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 390.156164][ T198] usb 3-1: USB disconnect, device number 19 [ 390.166127][ T198] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 390.424245][T13123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.478210][T13123] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.524658][ T9214] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.524856][ T9214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.566580][ T9214] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.566828][ T9214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.120561][T13123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.628839][T13123] veth0_vlan: entered promiscuous mode [ 391.733134][T13358] jffs2: notice: (13358) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 391.799145][T13123] veth1_vlan: entered promiscuous mode [ 391.994049][T13123] veth0_macvtap: entered promiscuous mode [ 391.995858][ T1238] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 392.016731][T13123] veth1_macvtap: entered promiscuous mode [ 392.145675][ T1238] usb 4-1: Using ep0 maxpacket: 8 [ 392.149187][ T1238] usb 4-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 392.150403][ T1238] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 392.150432][ T1238] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 392.150469][ T1238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.322089][ T1238] kobil_sct 4-1:1.0: KOBIL USB smart card terminal converter detected [ 392.380226][ T1238] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 392.510851][T13366] loop5: detected capacity change from 0 to 7 [ 392.523235][T13366] Dev loop5: unable to read RDB block 7 [ 392.532320][T13366] loop5: unable to read partition table [ 392.532538][T13366] loop5: partition table beyond EOD, truncated [ 392.532565][T13366] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 392.617095][T13123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.648157][T13123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.982957][T13373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.387758][ T9] usb 4-1: USB disconnect, device number 22 [ 393.478798][ T9] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 393.492893][ T9] kobil_sct 4-1:1.0: device disconnected [ 394.028097][ T9240] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.215046][ T3800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.216288][ T3800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.428193][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.452157][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.460991][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.823447][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.823518][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.828305][T13395] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3220'. [ 396.385746][ T198] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 396.546823][ T198] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 396.558782][T13421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3231'. [ 396.566625][ T198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.578750][ T198] usb 3-1: Product: syz [ 396.582694][ T198] usb 3-1: Manufacturer: syz [ 396.582708][ T198] usb 3-1: SerialNumber: syz [ 396.631860][T13424] syz.5.3232 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 397.056538][ T198] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 397.083124][ T198] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 397.493143][ T198] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 397.493247][ T198] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 397.550616][ T198] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 397.584247][ T198] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 397.700807][ T198] usb 3-1: USB disconnect, device number 20 [ 398.273764][T13470] netlink: 880 bytes leftover after parsing attributes in process `syz.3.3252'. [ 398.274923][T13470] netlink: 880 bytes leftover after parsing attributes in process `syz.3.3252'. [ 398.922360][T13505] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 400.728821][T13559] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 401.316814][T13571] Invalid argument reading file caps for ./file0 [ 401.543267][T13578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3298'. [ 401.877102][ T36] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 402.032780][ T36] usb 3-1: Using ep0 maxpacket: 16 [ 402.033679][ T36] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 402.034994][ T36] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.035044][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 402.035071][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 402.035093][ T36] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 402.035115][ T36] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 402.038955][ T36] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 402.038980][ T36] usb 3-1: Manufacturer: syz [ 402.065952][ T36] usb 3-1: config 0 descriptor?? [ 402.286612][ T36] rc_core: Couldn't load IR keymap rc-hauppauge [ 402.286685][ T36] Registered IR keymap rc-empty [ 402.287060][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 402.307670][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 402.411492][ T36] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 402.432327][ T36] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input30 [ 402.453906][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 402.469182][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 402.486066][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 402.511124][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 402.526091][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 402.549866][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 402.565848][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 402.589949][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 402.608234][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 402.625862][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 402.670699][ T36] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 402.681897][ T36] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 402.774683][ T36] usb 3-1: USB disconnect, device number 21 [ 402.841199][ T12] ..c: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 403.125891][ T198] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 403.275637][ T198] usb 4-1: Using ep0 maxpacket: 32 [ 403.281631][ T198] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 403.283106][ T198] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 403.306552][ T198] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 403.316061][ T198] usb 4-1: Product: syz [ 403.316085][ T198] usb 4-1: Manufacturer: syz [ 403.316102][ T198] usb 4-1: SerialNumber: syz [ 403.358925][ T198] usb 4-1: config 0 descriptor?? [ 403.364849][T13596] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 403.375106][ T198] hub 4-1:0.0: bad descriptor, ignoring hub [ 403.381132][ T198] hub 4-1:0.0: probe with driver hub failed with error -5 [ 403.797814][ T198] usb 4-1: USB disconnect, device number 23 [ 404.195920][ T36] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 404.465874][ T36] usb 3-1: Using ep0 maxpacket: 16 [ 404.473834][ T36] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 404.475221][ T36] usb 3-1: config 4 has an invalid interface number: 9 but max is 0 [ 404.475245][ T36] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 404.475265][ T36] usb 3-1: config 4 has no interface number 0 [ 404.475308][ T36] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 404.475332][ T36] usb 3-1: config 4 interface 9 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 404.475359][ T36] usb 3-1: config 4 interface 9 has no altsetting 0 [ 404.494955][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.494980][ T36] usb 3-1: Product: syz [ 404.495094][ T36] usb 3-1: Manufacturer: syz [ 404.495109][ T36] usb 3-1: SerialNumber: syz [ 404.514783][T13613] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 404.664945][ T36] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 404.745772][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 404.823224][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 404.826639][ T36] usb 3-1: USB disconnect, device number 22 [ 404.846584][ T1028] usb 3-1: Failed to submit usb control message: -32 [ 404.854600][ T1028] usb 3-1: unable to send the bmi data to the device: -32 [ 404.854623][ T1028] usb 3-1: unable to get target info from device [ 404.854714][ T1028] usb 3-1: could not get target info (-32) [ 404.855173][ T1028] usb 3-1: could not probe fw (-32) [ 404.925738][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 404.931061][ T9] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 404.933694][ T9] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 404.933720][ T9] usb 7-1: config 0 has no interface number 0 [ 404.933769][ T9] usb 7-1: config 0 interface 12 has no altsetting 0 [ 404.941858][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.941884][ T9] usb 7-1: Product: syz [ 404.941899][ T9] usb 7-1: Manufacturer: syz [ 404.941913][ T9] usb 7-1: SerialNumber: syz [ 405.018198][ T9] usb 7-1: config 0 descriptor?? [ 405.511119][T13638] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3321'. [ 406.078461][ T9] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 406.078764][ T9] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 406.078794][ T9] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 406.078890][ T9] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 406.154204][ T9] usb 7-1: USB disconnect, device number 2 [ 407.435025][T13710] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3350'. [ 407.444031][T13710] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3350'. [ 408.291333][T13731] device-mapper: ioctl: Invalid ioctl structure: name m, dev f801 [ 408.621427][T13741] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3363'. [ 408.800459][T13745] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3364'. [ 408.837394][T13745] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3364'. [ 408.837991][T13745] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 409.601744][T13768] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 409.712610][T13770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3375'. [ 411.013089][T13806] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3389'. [ 411.013862][T13806] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3389'. [ 411.485924][T13812] sctp: [Deprecated]: syz.6.3393 (pid 13812) Use of struct sctp_assoc_value in delayed_ack socket option. [ 411.485924][T13812] Use struct sctp_sack_info instead [ 411.705719][ T36] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 411.857250][ T36] usb 4-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 411.859959][ T36] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.868472][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 411.868496][ T36] usb 4-1: Product: syz [ 411.868510][ T36] usb 4-1: Manufacturer: syz [ 411.927462][ T36] hub 4-1:1.0: bad descriptor, ignoring hub [ 411.959711][ T36] hub 4-1:1.0: probe with driver hub failed with error -5 [ 411.968447][ T36] navman 4-1:1.0: navman converter detected [ 412.067239][ T36] usb 4-1: navman converter now attached to ttyUSB0 [ 412.840819][ T36] usb 4-1: USB disconnect, device number 24 [ 412.866797][T13860] pim6reg1: entered promiscuous mode [ 412.867524][T13860] pim6reg1: entered allmulticast mode [ 413.115275][ T36] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 413.126253][ T36] navman 4-1:1.0: device disconnected [ 415.000044][ T37] audit: type=1326 audit(1787765921.176:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13903 comm="syz.0.3418" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae290e0d9 code=0x7ffc0000 [ 415.024612][ T37] audit: type=1326 audit(1787765921.186:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13903 comm="syz.0.3418" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae290e0d9 code=0x7ffc0000 [ 415.031273][ T37] audit: type=1326 audit(1787765921.226:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13903 comm="syz.0.3418" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae290e0d9 code=0x7ffc0000 [ 415.031321][ T37] audit: type=1326 audit(1787765921.226:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13903 comm="syz.0.3418" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae290e0d9 code=0x7ffc0000 [ 415.034847][ T37] audit: type=1326 audit(1787765921.226:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13903 comm="syz.0.3418" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7ae290e0d9 code=0x7ffc0000 [ 415.034891][ T37] audit: type=1326 audit(1787765921.226:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13903 comm="syz.0.3418" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae290e0d9 code=0x7ffc0000 [ 415.034942][ T37] audit: type=1326 audit(1787765921.226:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13903 comm="syz.0.3418" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae290e0d9 code=0x7ffc0000 [ 415.041529][ T37] audit: type=1326 audit(1787765921.236:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13903 comm="syz.0.3418" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae290e0d9 code=0x7ffc0000 [ 415.051888][ T37] audit: type=1326 audit(1787765921.236:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13903 comm="syz.0.3418" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae290e0d9 code=0x7ffc0000 [ 415.056271][ T37] audit: type=1326 audit(1787765921.256:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13903 comm="syz.0.3418" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ae290e0d9 code=0x7ffc0000 [ 416.330097][T13945] input: syz0 as /devices/virtual/input/input31 [ 416.528644][ T36] wiimote 0005:057E:0306.000F: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 416.599507][ T36] wiimote 0005:057E:0306.000F: New device registered [ 417.715950][ T1238] wiimote 0005:057E:0306.000F: detected device: Nintendo Wii Remote (Gen 1) [ 417.836297][ T5716] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 418.012891][ T5716] usb 7-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 418.025370][ T5716] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 418.025405][ T5716] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.025428][ T5716] usb 7-1: config 0 interface 0 has no altsetting 0 [ 418.025461][ T5716] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.063287][ T5716] usb 7-1: config 0 descriptor?? [ 418.594677][ T5716] hid (null): unknown global tag 0xc [ 418.594793][ T5716] hid (null): report_id 0 is invalid [ 418.650828][ T5716] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 418.650915][ T5716] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 418.650939][ T5716] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 418.650962][ T5716] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 418.650987][ T5716] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 418.651013][ T5716] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 418.651039][ T5716] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 418.651065][ T5716] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 418.651090][ T5716] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 418.651116][ T5716] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 418.696690][ T5716] waterforce 0003:1044:7A4D.0010: unknown global tag 0xc [ 418.696713][ T5716] waterforce 0003:1044:7A4D.0010: item 0 1 1 12 parsing failed [ 418.699613][ T5716] waterforce 0003:1044:7A4D.0010: hid parse failed with -22 [ 418.699722][ T5716] waterforce 0003:1044:7A4D.0010: probe with driver waterforce failed with error -22 [ 418.789927][ T198] usb 7-1: USB disconnect, device number 3 [ 418.912874][T13925] wiimote 0005:057E:0306.000F: Device removed [ 419.633230][T14017] autofs4:pid:14017:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(832.8192), cmd(0xc0189374) [ 419.638583][T14017] autofs4:pid:14017:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 419.788543][ T1238] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.000F/input/input33 [ 420.300506][ T1238] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.000F/input/input34 [ 420.373688][ T1238] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.000F/input/input32 [ 420.787142][T14046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3483'. [ 421.034979][T14052] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3486'. [ 421.044165][T14052] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3486'. [ 421.115741][ T5695] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 421.268104][ T5695] usb 3-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 421.288014][ T5695] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.288083][ T5695] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 421.288123][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.346816][ T5695] opticon 3-1:1.0: opticon converter detected [ 421.367334][ T5695] usb 3-1: opticon converter now attached to ttyUSB0 [ 421.585748][T14048] opticon ttyUSB0: usb_serial_generic_submit_read_urb - usb_submit_urb failed: -90 [ 421.776100][ T5695] usb 3-1: USB disconnect, device number 23 [ 421.811846][ T5695] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 421.827249][ T5695] opticon 3-1:1.0: device disconnected [ 423.076152][ T5695] page_pool_release_retry() stalled pool shutdown: id 66, 1 inflight 60 sec [ 423.301477][T14106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3506'. [ 423.744310][T14117] device-mapper: ioctl: Invalid ioctl structure: name , dev 1b00000085 [ 424.475699][ T5695] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 424.685194][ T5695] usb 6-1: not running at top speed; connect to a high speed hub [ 424.685277][ T5695] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice=ba.a3 [ 424.709703][ T5695] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.713940][ T5695] usb 6-1: New USB device strings: Mfr=226, Product=216, SerialNumber=0 [ 424.713968][ T5695] usb 6-1: Product: syz [ 424.713982][ T5695] usb 6-1: Manufacturer: syz [ 424.757864][ T5695] uvcvideo 6-1:1.0: Found UVC 1.00 device syz (046d:0825) [ 425.001058][ T5695] uvcvideo 6-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 425.001659][ T5695] uvcvideo 6-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 425.001762][ T5695] uvcvideo 6-1:1.1: Failed to initialize the device (-71). [ 425.002632][ T5695] uvcvideo 6-1:1.0: probe with driver uvcvideo failed with error -71 [ 425.104096][ T5695] usb 6-1: USB disconnect, device number 18 [ 426.496890][T14203] Invalid argument reading file caps for ./file0 [ 427.786016][T14226] tun0: tun_chr_ioctl cmd 1074025675 [ 427.791442][T14226] tun0: persist enabled [ 427.793983][T14228] tun0: tun_chr_ioctl cmd 1074025675 [ 427.794003][T14228] tun0: persist enabled [ 429.394298][T14273] netlink: 'syz.0.3568': attribute type 21 has an invalid length. [ 429.394987][T14273] netlink: 'syz.0.3568': attribute type 4 has an invalid length. [ 429.395004][T14273] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3568'. [ 429.625132][T14281] vcan0: tx address claim with dest, not broadcast [ 429.756538][ T36] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 429.987443][ T36] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 429.988205][ T36] usb 6-1: config 0 has no interfaces? [ 429.992603][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.992696][ T36] usb 6-1: Product: syz [ 429.992711][ T36] usb 6-1: Manufacturer: syz [ 429.992726][ T36] usb 6-1: SerialNumber: syz [ 430.181060][ T36] usb 6-1: config 0 descriptor?? [ 430.312328][T14291] kAFS: No cell specified [ 430.419907][ T36] usb 6-1: USB disconnect, device number 19 [ 430.924769][T14304] syzkaller1: entered promiscuous mode [ 430.924797][T14304] syzkaller1: entered allmulticast mode [ 433.285739][ T36] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 433.446274][ T36] usb 6-1: Using ep0 maxpacket: 32 [ 433.447076][ T36] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 433.449241][ T36] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 433.449266][ T36] usb 6-1: config 0 has no interface number 0 [ 433.449310][ T36] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 433.449338][ T36] usb 6-1: config 0 interface 85 has no altsetting 0 [ 433.454303][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.454327][ T36] usb 6-1: Product: syz [ 433.454341][ T36] usb 6-1: Manufacturer: syz [ 433.454368][ T36] usb 6-1: SerialNumber: syz [ 433.515126][ T36] usb 6-1: config 0 descriptor?? [ 433.803800][T14372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3611'. [ 433.934101][ T36] appletouch 6-1:0.85: Geyser mode initialized. [ 434.019334][ T36] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input35 [ 434.135097][ C1] appletouch 6-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 434.213146][ T1011] ..c: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 434.387899][ T9] usb 6-1: USB disconnect, device number 20 [ 434.683949][ T9] appletouch 6-1:0.85: input: appletouch disconnected [ 434.786348][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 434.958333][ T10] usb 4-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 434.968838][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 434.968872][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 434.971255][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.971280][ T10] usb 4-1: Product: syz [ 434.971294][ T10] usb 4-1: Manufacturer: syz [ 434.971308][ T10] usb 4-1: SerialNumber: syz [ 435.085308][ T10] ums-onetouch 4-1:1.0: USB Mass Storage device detected [ 435.113478][ T10] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/input/input36 [ 435.113745][ T10] input input36: usb_submit_urb failed [ 435.187275][ T10] input: failed to attach handler kbd to device input36, error: -5 [ 435.263143][ T4933] input input36: usb_submit_urb failed [ 435.272818][ T10] scsi host1: usb-storage 4-1:1.0 [ 435.349635][ T4933] input input36: usb_submit_urb failed [ 435.359069][ T10] usb 4-1: USB disconnect, device number 25 [ 435.845796][ T5695] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 435.965209][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 435.965639][ T37] audit: type=1326 audit(1787765943.159:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14421 comm="syz.3.3628" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb567b0e0d9 code=0x0 [ 435.996380][ T5695] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 436.009008][ T5695] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 436.020635][ T5695] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 436.020666][ T5695] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 436.023013][ T5695] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.023037][ T5695] usb 7-1: Product: syz [ 436.023051][ T5695] usb 7-1: Manufacturer: syz [ 436.023064][ T5695] usb 7-1: SerialNumber: syz [ 436.085428][ T5695] usb 7-1: config 0 descriptor?? [ 436.091958][T14418] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 436.163923][ T5695] rc_core: Couldn't load IR keymap rc-streamzap [ 436.170120][ T5695] Registered IR keymap rc-empty [ 436.182380][ T5695] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 436.207234][ T5695] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input37 [ 437.678036][T14453] device-mapper: ioctl: Unable to rename non-existent device, to f. [ 437.876635][ T36] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 438.057136][ T36] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 438.073927][ T36] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 438.074111][ T36] usb 6-1: config 1 has no interface number 0 [ 438.096757][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.105300][ T36] usb 6-1: Product: syz [ 438.105320][ T36] usb 6-1: Manufacturer: syz [ 438.106960][ T36] usb 6-1: SerialNumber: syz [ 438.271921][ T36] usb 6-1: 3:1 : does not exist [ 438.277011][ T36] usb 6-1: 3:2 : does not exist [ 438.477999][T14452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.494060][T14452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.092756][T14468] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 439.187198][ T1238] usb 7-1: USB disconnect, device number 4 [ 439.390600][ T36] usb 6-1: USB disconnect, device number 21 [ 439.976125][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.979242][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.110683][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.356096][ T1238] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 440.484058][T14499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3657'. [ 440.545693][ T1238] usb 7-1: Using ep0 maxpacket: 8 [ 440.551281][ T1238] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 440.552555][ T1238] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 440.555077][ T1238] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.555100][ T1238] usb 7-1: Product: syz [ 440.555114][ T1238] usb 7-1: Manufacturer: syz [ 440.555128][ T1238] usb 7-1: SerialNumber: syz [ 440.612972][ T1238] usb 7-1: config 0 descriptor?? [ 440.623528][ T1238] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 440.623676][ T1238] usb 7-1: setting power ON [ 440.734239][ T1238] dvb-usb: bulk message failed: -22 (2/0) [ 440.781413][ T1238] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 440.791690][ T1238] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 440.791751][ T1238] usb 7-1: media controller created [ 440.882365][ T1238] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 441.085832][T14492] dvb-usb: bulk message failed: -22 (3/0) [ 441.103775][T14509] netlink: 'syz.2.3660': attribute type 1 has an invalid length. [ 441.121118][T14492] cxusb: i2c wr: len=79 is too big! [ 441.121118][T14492] [ 441.139294][ T1238] usb 7-1: selecting invalid altsetting 6 [ 441.152442][ T1238] usb 7-1: digital interface selection failed (-22) [ 441.152465][ T1238] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 441.198870][ T1238] usb 7-1: setting power OFF [ 441.204993][ T1238] dvb-usb: bulk message failed: -22 (2/0) [ 441.205018][ T1238] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 441.205041][ T1238] (NULL device *): no alternate interface [ 441.768058][ T1238] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 441.846256][ T1238] usb 7-1: USB disconnect, device number 5 [ 442.769415][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 442.919485][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 442.924428][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.924476][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.993127][ T9] usb 3-1: config 0 descriptor?? [ 443.457370][ T9] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 443.593574][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0011/input/input38 [ 444.000801][ T5687] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 444.214986][ T5687] usb 7-1: Using ep0 maxpacket: 16 [ 444.220824][ T5687] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 444.222190][ T5687] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.222213][ T5687] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 444.224985][ T5687] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.225009][ T5687] usb 7-1: Product: syz [ 444.225023][ T5687] usb 7-1: Manufacturer: syz [ 444.225097][ T5687] usb 7-1: SerialNumber: syz [ 444.731358][ T5687] usb 7-1: 0:2 : does not exist [ 444.857862][ T5687] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 445.184120][ T5687] usb 7-1: USB disconnect, device number 6 [ 445.196607][ T198] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 445.236857][T14587] kvm: user requested TSC rate below hardware speed [ 445.388250][ T198] usb 6-1: Using ep0 maxpacket: 32 [ 445.398168][ T198] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 445.411426][ T198] usb 6-1: config 2 has an invalid interface number: 88 but max is 0 [ 445.411492][ T198] usb 6-1: config 2 has no interface number 0 [ 445.411534][ T198] usb 6-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 445.411560][ T198] usb 6-1: config 2 interface 88 has no altsetting 0 [ 445.427733][ T198] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 445.427759][ T198] usb 6-1: Product: syz [ 445.427774][ T198] usb 6-1: Manufacturer: syz [ 445.427789][ T198] usb 6-1: SerialNumber: syz [ 445.468365][T14581] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 445.480117][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 445.698984][T14581] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 445.948165][ T9] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 445.993813][ T9] usb 3-1: USB disconnect, device number 24 [ 446.040563][T14598] input: syz0 as /devices/virtual/input/input39 [ 446.313395][T14600] fido_id[14600]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 446.564548][ T198] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 446.564683][ T198] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 446.564925][ T198] asix 6-1:2.88: probe with driver asix failed with error -71 [ 446.702390][ T198] usb 6-1: USB disconnect, device number 22 [ 450.355663][ T5593] Bluetooth: hci2: command 0x0401 tx timeout [ 450.355824][ T5716] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 450.355843][ T5716] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 451.667988][T14746] netlink: 4384 bytes leftover after parsing attributes in process `syz.2.3741'. [ 452.844541][T14786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3752'. [ 452.845142][T14786] syz_tun: Device is already in use. [ 452.915700][ T5593] Bluetooth: hci3: command 0x0406 tx timeout [ 452.923176][ T5716] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 452.923198][ T5716] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 456.769924][T14877] input: syz1 as /devices/virtual/input/input40 [ 456.776685][T14877] input: failed to attach handler leds to device input40, error: -6 [ 457.694707][T14829] Dynamic Preempt: lazy [ 458.193382][T14899] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3788'. [ 458.250334][T14899] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3788'. [ 458.250358][T14899] netlink: 'syz.2.3788': attribute type 6 has an invalid length. [ 458.250372][T14899] netlink: 'syz.2.3788': attribute type 5 has an invalid length. [ 458.250385][T14899] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3788'. [ 459.115721][ T5695] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 459.283053][ T5695] usb 7-1: Using ep0 maxpacket: 32 [ 459.283765][ T5695] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 459.284963][ T5695] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 459.284986][ T5695] usb 7-1: config 0 has no interface number 0 [ 459.285028][ T5695] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.285055][ T5695] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.285090][ T5695] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.309052][ T5695] usb 7-1: config 0 descriptor?? [ 459.930833][ T5695] uclogic 0003:28BD:0094.0012: pen parameters not found [ 459.931237][ T5695] uclogic 0003:28BD:0094.0012: interface is invalid, ignoring [ 459.960458][ T5695] usb 7-1: USB disconnect, device number 7 [ 460.055755][ T9] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 460.207753][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 460.207836][ T9] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 460.214847][ T9] usb 3-1: config 100 has an invalid interface number: 173 but max is 0 [ 460.214876][ T9] usb 3-1: config 100 has no interface number 0 [ 460.214919][ T9] usb 3-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 460.214943][ T9] usb 3-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 460.214969][ T9] usb 3-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 460.214991][ T9] usb 3-1: config 100 interface 173 has no altsetting 0 [ 460.239059][ T9] usb 3-1: string descriptor 0 read error: -22 [ 460.239302][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.251368][T14930] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 460.277206][ T9] metro_usb 3-1:100.173: Metrologic USB to Serial converter detected [ 460.311583][ T9] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 460.469945][T14930] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90 [ 460.477966][ T31] usb 3-1: USB disconnect, device number 25 [ 460.502340][ T31] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 460.517622][ T31] metro_usb 3-1:100.173: device disconnected [ 461.635671][ T5716] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 461.665253][ T5716] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 461.715934][ C1] ------------[ cut here ]------------ [ 461.715951][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci5 [ 461.716096][ C1] WARNING: kernel/workqueue.c:2353 at __queue_work+0xdc4/0x1120, CPU#1: ktimers/1/29 [ 461.737746][ C1] Modules linked in: [ 461.741651][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 461.752806][ C1] Tainted: [L]=SOFTLOCKUP [ 461.757108][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 461.767142][ C1] RIP: 0010:__queue_work+0xde1/0x1120 [ 461.772558][ C1] Code: 81 c3 68 01 00 00 4c 8d 35 6c 5c 26 0e 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 89 e4 a3 00 49 8b 77 18 4c 89 f7 48 89 da <67> 48 0f b9 3a 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff [ 461.792151][ C1] RSP: 0018:ffffc90000a3f988 EFLAGS: 00010046 [ 461.798304][ C1] RAX: 1ffff110079a6953 RBX: ffff888060721968 RCX: ffff88801d2fbe80 [ 461.806285][ C1] RDX: ffff888060721968 RSI: ffffffff8a44fdc0 RDI: ffffffff8fb482a0 [ 461.814263][ C1] RBP: 0000000000000100 R08: 0000000000000100 R09: 0000000000000100 [ 461.822237][ C1] R10: dffffc0000000000 R11: ffffffff818e2d60 R12: dffffc0000000000 [ 461.830214][ C1] R13: 0000000000000008 R14: ffffffff8fb482a0 R15: ffff88803cd34a80 [ 461.838186][ C1] FS: 0000000000000000(0000) GS:ffff888125cde000(0000) knlGS:0000000000000000 [ 461.847108][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 461.853682][ C1] CR2: 00007f7ae2940900 CR3: 0000000056e54000 CR4: 00000000003526f0 [ 461.861645][ C1] Call Trace: [ 461.864989][ C1] [ 461.867943][ C1] ? call_timer_fn+0xd5/0x5f0 [ 461.872674][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 461.878054][ C1] call_timer_fn+0x18d/0x5f0 [ 461.882650][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 461.888454][ C1] ? call_timer_fn+0xd5/0x5f0 [ 461.893129][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 461.898241][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 461.904046][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 461.909149][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 461.914951][ C1] __run_timer_base+0x73c/0x9b0 [ 461.919810][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 461.925181][ C1] ? __local_bh_disable_ip+0x3d/0x420 [ 461.930580][ C1] run_timer_softirq+0xb7/0x170 [ 461.935428][ C1] handle_softirqs+0x1da/0x6d0 [ 461.940196][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 461.945217][ C1] run_ktimerd+0x6a/0x100 [ 461.949543][ C1] smpboot_thread_fn+0x565/0xa70 [ 461.954480][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 461.959505][ C1] kthread+0x38b/0x470 [ 461.963565][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 461.969017][ C1] ? __pfx_kthread+0x10/0x10 [ 461.973597][ C1] ret_from_fork+0x514/0xb70 [ 461.978210][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 461.983307][ C1] ? __switch_to+0xc89/0x1420 [ 461.987982][ C1] ? __pfx_kthread+0x10/0x10 [ 461.992578][ C1] ret_from_fork_asm+0x1a/0x30 [ 461.997360][ C1] [ 462.000368][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 462.007641][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 462.018735][ C1] Tainted: [L]=SOFTLOCKUP [ 462.023041][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 462.033080][ C1] Call Trace: [ 462.036347][ C1] [ 462.039267][ C1] vpanic+0x56d/0xa60 [ 462.043256][ C1] ? __pfx__printk+0x10/0x10 [ 462.047840][ C1] ? __pfx_vpanic+0x10/0x10 [ 462.052333][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 462.057632][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 462.062837][ C1] panic+0xc5/0xd0 [ 462.066550][ C1] ? __pfx_panic+0x10/0x10 [ 462.070959][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 462.075892][ C1] __warn+0x315/0x4c0 [ 462.079862][ C1] ? __queue_work+0xdc4/0x1120 [ 462.084646][ C1] ? __queue_work+0xdc4/0x1120 [ 462.089406][ C1] __report_bug+0x276/0x570 [ 462.093995][ C1] ? __asan_memcpy+0x40/0x70 [ 462.098598][ C1] ? __pskb_copy_fclone+0xb7e/0x1200 [ 462.103926][ C1] ? __queue_work+0xdc4/0x1120 [ 462.108690][ C1] ? __pfx___report_bug+0x10/0x10 [ 462.113708][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 462.118989][ C1] ? look_up_lock_class+0x57/0x110 [ 462.124140][ C1] ? register_lock_class+0x31/0x2e0 [ 462.129328][ C1] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 462.134663][ C1] report_bug_entry+0x19b/0x290 [ 462.139510][ C1] ? __queue_work+0xde1/0x1120 [ 462.144267][ C1] ? __queue_work+0xde6/0x1120 [ 462.149025][ C1] handle_bug+0xce/0x200 [ 462.153256][ C1] exc_invalid_op+0x1a/0x50 [ 462.157745][ C1] asm_exc_invalid_op+0x1a/0x20 [ 462.162637][ C1] RIP: 0010:__queue_work+0xde1/0x1120 [ 462.168008][ C1] Code: 81 c3 68 01 00 00 4c 8d 35 6c 5c 26 0e 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 89 e4 a3 00 49 8b 77 18 4c 89 f7 48 89 da <67> 48 0f b9 3a 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff [ 462.187599][ C1] RSP: 0018:ffffc90000a3f988 EFLAGS: 00010046 [ 462.193657][ C1] RAX: 1ffff110079a6953 RBX: ffff888060721968 RCX: ffff88801d2fbe80 [ 462.201617][ C1] RDX: ffff888060721968 RSI: ffffffff8a44fdc0 RDI: ffffffff8fb482a0 [ 462.209578][ C1] RBP: 0000000000000100 R08: 0000000000000100 R09: 0000000000000100 [ 462.217533][ C1] R10: dffffc0000000000 R11: ffffffff818e2d60 R12: dffffc0000000000 [ 462.225493][ C1] R13: 0000000000000008 R14: ffffffff8fb482a0 R15: ffff88803cd34a80 [ 462.233468][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 462.239276][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 462.244562][ C1] ? __queue_work+0xd9a/0x1120 [ 462.249320][ C1] ? call_timer_fn+0xd5/0x5f0 [ 462.253999][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 462.259370][ C1] call_timer_fn+0x18d/0x5f0 [ 462.263965][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 462.269767][ C1] ? call_timer_fn+0xd5/0x5f0 [ 462.274438][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 462.279553][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 462.285357][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 462.290459][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 462.296273][ C1] __run_timer_base+0x73c/0x9b0 [ 462.301165][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 462.306545][ C1] ? __local_bh_disable_ip+0x3d/0x420 [ 462.311930][ C1] run_timer_softirq+0xb7/0x170 [ 462.316781][ C1] handle_softirqs+0x1da/0x6d0 [ 462.321563][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 462.326590][ C1] run_ktimerd+0x6a/0x100 [ 462.330924][ C1] smpboot_thread_fn+0x565/0xa70 [ 462.335864][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 462.340895][ C1] kthread+0x38b/0x470 [ 462.344956][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 462.350413][ C1] ? __pfx_kthread+0x10/0x10 [ 462.354999][ C1] ret_from_fork+0x514/0xb70 [ 462.359586][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 462.364690][ C1] ? __switch_to+0xc89/0x1420 [ 462.369375][ C1] ? __pfx_kthread+0x10/0x10 [ 462.373959][ C1] ret_from_fork_asm+0x1a/0x30 [ 462.378726][ C1] [ 462.381999][ C1] Kernel Offset: disabled [ 462.386316][ C1] Rebooting in 86400 seconds..