last executing test programs: 2m26.76985539s ago: executing program 0 (id=700): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000240)={0x5, 0x0, [{0x2, 0x0, 0x0, 0x8, 0x0, 0x2}, {0x40000003, 0x6, 0x6}, {0x5e2796afef1a2f31, 0x9, 0x0, 0x9, 0x1, 0x80000001, 0x8}, {0x80000000, 0xffffffff, 0x7, 0x1008, 0x5, 0x110, 0x3}, {0x80000000, 0x5dd3, 0x6, 0x6, 0xe231, 0x1, 0xffffffff}]}) 2m26.295278125s ago: executing program 0 (id=704): r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r0, 0x7000000) r1 = dup(r0) preadv2(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/71, 0x47}], 0x1, 0x0, 0x0, 0x0) 2m26.140320174s ago: executing program 0 (id=706): r0 = semget$private(0x0, 0x7, 0x191) semtimedop(r0, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0) semop(r0, &(0x7f0000000040)=[{0x1, 0xe8c7, 0x1000}], 0x1) semctl$SETVAL(r0, 0x0, 0x10, &(0x7f0000000080)=0x4) 2m25.144843438s ago: executing program 0 (id=714): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000400)={0x0, 0x5, 0x1, "c5"}, 0x9) 2m24.967120404s ago: executing program 0 (id=716): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x154, 0x0, &(0x7f0000000540)="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", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 2m24.724300963s ago: executing program 0 (id=718): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2a003) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 2m9.54117184s ago: executing program 32 (id=718): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2a003) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 1m58.890180107s ago: executing program 4 (id=949): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x70bd2c, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x3c, 0xfffffffffff7fffd, 0x50}, {0x5, 0x0, 0x100000001, 0x3}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffff8}, 0x0) 1m58.749043078s ago: executing program 4 (id=950): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r1, 0x0, 0x0}, 0x10) 1m58.459892848s ago: executing program 4 (id=954): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007"], 0x0, 0x8, 0x0, 0x0, 0x40f00}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd63"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x3000000}, 0x48) 1m57.180081146s ago: executing program 4 (id=962): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0xfff, 0x7}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1m56.962955253s ago: executing program 4 (id=966): mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x82b) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1m56.757534525s ago: executing program 4 (id=969): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1m41.605991931s ago: executing program 33 (id=969): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 6.130012104s ago: executing program 3 (id=1887): syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c60511920000010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x16, 0x2) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect) 5.889397879s ago: executing program 5 (id=1890): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) signalfd(r1, &(0x7f0000000180)={[0x2]}, 0x8) 4.875898085s ago: executing program 5 (id=1903): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0xb, 0x6, @random="c28cee6af9b7"}, 0x14) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 4.430875243s ago: executing program 5 (id=1908): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f000004c000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000013c0)={0x28, 0x4, r1, 0x0, &(0x7f00000003c0)='y', 0x1, 0x57ea9d1f}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 4.291610899s ago: executing program 5 (id=1910): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$kcm(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)="4f8b8ea9ac8bc992fe6bc8bfbeef542c4cc3fbf68aeb85e467bbf3171020cf7c5767422b6d9dd2c6495e67280470586ef6ce42f0841c4db492fe6e256d78246805d57c6089d09907eec3da440904213c8463ab2c5ac5fd2050152f573c4c992bec30eaf3dc3b2adf4e5e9b6b1f6b84b2ea4de5131ca4ea288616cba98f06d46df219fad87e6a9a43a5e9280a1e43f95cfd5e8f14a2c41faf8e9acbdeab41b7c56d0cd28665038e5c94314ea5b47f429168b5d21df688eca46e48dab6a123aebe8f5f5c2fe1b95c312795bf5b65744a749f911927ef8834792ebfef66a2fdd19e5e77b4c2cbedaa352f63eb672e", 0xed}, {&(0x7f0000000280)="616df1431f55e8d790bdb9d32f940cd84fbe24", 0x13}, {&(0x7f00000005c0)="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", 0x1000}], 0x1}, 0x800) 3.974753713s ago: executing program 5 (id=1915): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x41, 0x6, 0x100}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 3.678592817s ago: executing program 2 (id=1919): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x2, 0x0, 0x30}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3.662525442s ago: executing program 3 (id=1920): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 3.619005494s ago: executing program 5 (id=1921): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x5, 0x0, 0x717e387b, 0x40, "1ae34e060100000000000000b240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x99bc000, 0x9, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x2) 3.498590596s ago: executing program 1 (id=1922): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 3.305217864s ago: executing program 1 (id=1924): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000340)={0x1180000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 3.163273073s ago: executing program 2 (id=1925): bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x8, @loopback}, 0x1c) 2.936443015s ago: executing program 3 (id=1926): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 2.843402261s ago: executing program 1 (id=1928): syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x0, 0x10000000, 0x1, 0x1}, {0x0, 0x4, 0x7}, {0x40000, 0x8, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @mark={0xc, 0x15, {0x350759, 0x8}}]}, 0x110}, 0x1, 0x0, 0x0, 0x41}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 2.52293705s ago: executing program 3 (id=1930): timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) close(0x3) syz_usb_connect$uac1(0x2, 0x72, 0x0, 0x0) 2.284606547s ago: executing program 1 (id=1932): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x40000000}) epoll_wait(r1, &(0x7f0000000180)=[{}], 0x1, 0x40) 1.982829241s ago: executing program 2 (id=1934): syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xab1, 0x10000, 0x0, 0x1000051}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) 1.908287984s ago: executing program 1 (id=1935): socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x8, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x22, 0x6}, 0x0, 0x0) 1.802190245s ago: executing program 3 (id=1936): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0xb) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0, 0xfffffffffffffea2}, {0x0}, {0x0}, {0x0, 0xfffffe73}], 0x5, &(0x7f0000000040), 0xffffffffffffff63, 0x4040}, 0x40) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 1.489369838s ago: executing program 3 (id=1938): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00005a1000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000703000/0x3000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.488324879s ago: executing program 6 (id=1939): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.268114425s ago: executing program 6 (id=1940): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) io_setup(0x1, &(0x7f0000000380)=0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000440)=0x58) io_submit(r1, 0x2, &(0x7f0000000000)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x2}]) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2778) 1.260509072s ago: executing program 2 (id=1941): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x3f00000000000000) 1.040168139s ago: executing program 2 (id=1942): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x1c, r1, 0x5, 0x70bd26, 0x80000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x20000014) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x1c, r1, 0x905, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8c0}, 0x40) 899.707499ms ago: executing program 6 (id=1943): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r1, &(0x7f0000001fc0)=""/184, 0x18) 782.392931ms ago: executing program 2 (id=1944): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r1, r0, 0x0, 0x8010002b) 673.561945ms ago: executing program 6 (id=1945): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000300)={0x4c, r1, 0xb97534d5fe9704cf, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x800}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x463}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}}, 0x0) 660.591484ms ago: executing program 1 (id=1946): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x34) 319.581277ms ago: executing program 6 (id=1947): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002c80)=@delchain={0x604, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x5d8, 0x2, [@TCA_BPF_ACT={0x5d4, 0x1, [@m_xt={0xd8, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xad, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbcad2b22629cd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0x1a4, 0x12, 0x0, 0x0, {{0xb}, {0x80, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4004, 0xe27, 0x10000000, 0x4bc5, 0x1}, 0xf}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xed}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf7e5}]}, {0xf9, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3179be2480bd4560f5f3df8af92646dcc1fbd383420085b4c07db2f0413025ad48ce3b346d0decc2020a76819621adf129187c02cc25e2c07331a44b29b6bee81ecbc147aa5d146be79432192fc1574145998b7d3b55d80dd7464335395b4f37be9047482b255b6f0dec2c748724aa49cbfa5ba9725d35fc7540b4a32031dc5"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x100, 0xe, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0xb6, 0x6, "5fb30546b7f724bbd0a03a2ce67cc3f75455f6dad8f7910df14f457f0b939aa1f7843f8d23ac707b39fbf4f38ff98effeff9b08050eb3e0e7e3e0b71672db4998037b547ee365f59092089a7e3e54e904ebe868f339d0f6a5ad79a6287cdbb16e3238dc8077ad21fd0fe097a227ba67efad74f0a441dfcd88e59a523aa041d602fab87928dc5ebc4c007fb8856019ad4252708b18bb036e4b855a38630c6aec103073dae680d15fbf65de3031bdd2ca0732c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x1cc, 0x4, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xab7, 0x4c1adacc, 0x5, 0x99, 0x6}, @empty, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x401, 0x5, 0x6, 0x5}, @rand_addr=0x64010102, @rand_addr=0x64010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x5, 0x7, 0xd}, @loopback, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1, 0x2, 0x10001, 0xc0e}, @multicast1, @rand_addr=0x64010101, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000000, 0x1, 0x3, 0xfd30, 0x1}, @dev={0xac, 0x14, 0x14, 0x41}, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x11d, 0x5, 0x3, 0x1}, @multicast1, @empty, 0x1000000fe, 0x80000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffffff7f, 0x5, 0x7b, 0x74e69dde}, @local, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff000, 0x2cf, 0xffffffffffffffff, 0x1, 0x3be6f802}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x8, 0x10000000, 0x1ff, 0x2}, @multicast1, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1, 0xffffffffffffffff, 0x5, 0xd}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x11, 0x6, "72c2816ab98a21c44007847797"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x88, 0x9, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1df, 0x5, 0x7, 0x1, 0x1e1c}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd784, 0x468, 0x20000000, 0x9, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x5, 0x8, 0x4}, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x604}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 6 (id=1948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) close(r0) kernel console output (not intermixed with test programs): 13.912439][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.912460][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.412522][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.412542][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.319560][ T5823] overlayfs: missing 'lowerdir' [ 117.025376][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.247498][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 117.399463][ T31] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 117.399494][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.399514][ T31] usb 2-1: Product: syz [ 117.399529][ T31] usb 2-1: Manufacturer: syz [ 117.399544][ T31] usb 2-1: SerialNumber: syz [ 117.679317][ T31] usb 2-1: config 0 descriptor?? [ 118.452182][ T31] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 002 [ 118.699203][ T31] usb 2-1: USB disconnect, device number 2 [ 118.726613][ T37] audit: type=1326 audit(1784975700.992:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5817 comm="syz.4.14" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe036f0de99 code=0x7fc00000 [ 120.454426][ T5865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29'. [ 121.158842][ T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 121.348656][ T10] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 121.348689][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.572283][ T10] usb 2-1: config 0 descriptor?? [ 121.691534][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 121.852489][ T10] gp8psk: usb in 128 operation failed. [ 122.074119][ T10] gp8psk: usb in 146 operation failed. [ 122.074139][ T10] gp8psk: failed to get FW version [ 122.074523][ T10] gp8psk: usb in 149 operation failed. [ 122.074535][ T10] gp8psk: failed to get FPGA version [ 122.076363][ T10] gp8psk: usb in 138 operation failed. [ 122.076396][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 122.076434][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 122.366359][ T10] usb 2-1: USB disconnect, device number 3 [ 124.270733][ T5927] capability: warning: `syz.1.56' uses 32-bit capabilities (legacy support in use) [ 124.287242][ T5927] program syz.1.56 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.787481][ T5707] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 125.939643][ T5707] usb 2-1: Using ep0 maxpacket: 32 [ 125.943263][ T5707] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.943294][ T5707] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 125.943320][ T5707] usb 2-1: config 0 interface 0 has no altsetting 0 [ 125.961472][ T5707] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 125.961504][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.961523][ T5707] usb 2-1: Product: syz [ 125.961538][ T5707] usb 2-1: Manufacturer: syz [ 125.961553][ T5707] usb 2-1: SerialNumber: syz [ 126.131312][ T5707] usb 2-1: config 0 descriptor?? [ 126.573529][ T5707] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 126.977928][ T5707] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 127.002721][ T5707] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 127.306681][ T5707] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 127.455524][ T5707] usb 2-1: USB disconnect, device number 4 [ 128.030562][ T5998] bridge0: port 3(ipvlan1) entered blocking state [ 128.030708][ T5998] bridge0: port 3(ipvlan1) entered disabled state [ 128.031288][ T5998] ipvlan1: entered allmulticast mode [ 128.031307][ T5998] veth0_vlan: entered allmulticast mode [ 128.156330][ T6002] openvswitch: netlink: IPv4 tunnel dst address is zero [ 128.156377][ T6002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.203618][ T5998] ipvlan1: left allmulticast mode [ 128.203644][ T5998] veth0_vlan: left allmulticast mode [ 128.414659][ T6011] netlink: 20 bytes leftover after parsing attributes in process `syz.3.88'. [ 129.290902][ T6028] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 129.478097][ T6033] program syz.1.99 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.589076][ T5707] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 129.797093][ T6037] warning: `syz.4.101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 129.807410][ T5707] usb 1-1: Using ep0 maxpacket: 16 [ 129.824798][ T5707] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 129.841527][ T5707] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 129.841563][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.841577][ T5707] usb 1-1: Product: syz [ 129.841587][ T5707] usb 1-1: Manufacturer: syz [ 129.841598][ T5707] usb 1-1: SerialNumber: syz [ 130.061624][ T5707] r8152-cfgselector 1-1: Unknown version 0x0000 [ 130.061649][ T5707] r8152-cfgselector 1-1: config 0 descriptor?? [ 130.461153][ T821] r8152-cfgselector 1-1: USB disconnect, device number 2 [ 131.227563][ T821] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 131.377441][ T821] usb 2-1: Using ep0 maxpacket: 16 [ 131.412737][ T821] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 131.412768][ T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.412801][ T821] usb 2-1: Product: syz [ 131.412816][ T821] usb 2-1: Manufacturer: syz [ 131.412830][ T821] usb 2-1: SerialNumber: syz [ 131.475727][ T821] r8152-cfgselector 2-1: Unknown version 0x0000 [ 131.475754][ T821] r8152-cfgselector 2-1: config 0 descriptor?? [ 131.961506][ T5707] r8152-cfgselector 2-1: USB disconnect, device number 5 [ 132.012871][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 132.187401][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 132.190189][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.190221][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.190244][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 132.190285][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 132.190322][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.336404][ T10] usb 3-1: config 0 descriptor?? [ 132.701910][ T6075] netlink: 48 bytes leftover after parsing attributes in process `syz.4.114'. [ 132.919906][ T10] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 132.937053][ T10] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 132.937093][ T10] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 132.937116][ T10] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 132.937139][ T10] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 132.937162][ T10] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 132.937184][ T10] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 132.937207][ T10] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 132.937231][ T10] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 132.937255][ T10] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 132.937278][ T10] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 133.037906][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.038009][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.332092][ T10] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 133.332150][ T10] microsoft 0003:045E:07DA.0001: no inputs found [ 133.332166][ T10] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 133.546003][ T10] usb 3-1: USB disconnect, device number 2 [ 133.959264][ T6089] fido_id[6089]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 134.019909][ T1441] wlan0: Trigger new scan to find an IBSS to join [ 134.199284][ T6095] syz.2.122 (6095) used greatest stack depth: 18976 bytes left [ 134.426557][ T6105] openvswitch: netlink: IP tunnel dst address not specified [ 134.426590][ T6105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.072298][ T6126] netlink: 'syz.3.135': attribute type 1 has an invalid length. [ 135.072320][ T6126] netlink: 220 bytes leftover after parsing attributes in process `syz.3.135'. [ 135.421135][ T6134] netlink: 60 bytes leftover after parsing attributes in process `syz.4.139'. [ 135.438297][ T6134] netlink: 60 bytes leftover after parsing attributes in process `syz.4.139'. [ 135.441915][ T6134] netlink: 60 bytes leftover after parsing attributes in process `syz.4.139'. [ 135.757209][ T6141] pim6reg1: tun_chr_ioctl cmd 1074812118 [ 136.452809][ T6162] capability: warning: `syz.0.150' uses deprecated v2 capabilities in a way that may be insecure [ 137.177453][ T5707] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 137.249950][ T6185] ======================================================= [ 137.249950][ T6185] WARNING: The mand mount option has been deprecated and [ 137.249950][ T6185] and is ignored by this kernel. Remove the mand [ 137.249950][ T6185] option from the mount to silence this warning. [ 137.249950][ T6185] ======================================================= [ 137.327547][ T5707] usb 2-1: Using ep0 maxpacket: 16 [ 137.329946][ T5707] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 137.329974][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.394940][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.160'. [ 137.394964][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.160'. [ 137.461318][ T5707] usb 2-1: config 0 descriptor?? [ 137.502600][ T5707] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 137.628339][ T5853] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 137.636448][ T43] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.726122][ T43] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.726171][ T43] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.726276][ T43] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.827507][ T5853] usb 3-1: Using ep0 maxpacket: 32 [ 137.830450][ T5853] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 137.830478][ T5853] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 137.830503][ T5853] usb 3-1: config 0 interface 0 has no altsetting 0 [ 137.835449][ T5853] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 137.835477][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.835497][ T5853] usb 3-1: Product: syz [ 137.835512][ T5853] usb 3-1: Manufacturer: syz [ 137.835528][ T5853] usb 3-1: SerialNumber: syz [ 137.947869][ T5853] usb 3-1: config 0 descriptor?? [ 138.071102][ T6193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.164'. [ 138.376769][ T5707] gspca_sonixj: reg_r err -71 [ 138.376869][ T5707] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 138.391149][ T5853] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 138.444762][ T5707] usb 2-1: USB disconnect, device number 6 [ 138.484693][ T6200] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 138.763234][ T6207] netlink: 20 bytes leftover after parsing attributes in process `syz.4.169'. [ 138.763388][ T6207] Zero length message leads to an empty skb [ 138.802196][ T5853] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 138.802697][ T5853] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 138.803013][ T5853] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 138.865185][ T5853] usb 3-1: USB disconnect, device number 3 [ 138.979479][ T1450] wlan0: Trigger new scan to find an IBSS to join [ 139.372387][ T6217] nbd0: detected capacity change from 0 to 63 [ 139.586199][ T5600] block nbd0: Receive control failed (result -104) [ 139.988097][ T43] wlan0: Creating new IBSS network, BSSID b2:62:bf:f1:9e:7c [ 140.219703][ T6237] process 'syz.4.182' launched './file0' with NULL argv: empty string added [ 140.323076][ T6239] veth1_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 140.879334][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 141.055672][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 141.055702][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 141.055724][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.135776][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 141.135807][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.135828][ T10] usb 1-1: Product: syz [ 141.135843][ T10] usb 1-1: Manufacturer: syz [ 141.135857][ T10] usb 1-1: SerialNumber: syz [ 141.309753][ T6266] vcan0: tx address claim with dlc 0 [ 141.411489][ T10] hub 1-1:1.0: bad descriptor, ignoring hub [ 141.411522][ T10] hub 1-1:1.0: probe with driver hub failed with error -5 [ 141.485302][ T6270] netlink: 104 bytes leftover after parsing attributes in process `syz.4.196'. [ 141.805777][ T10] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 142.103251][ T10] usb 1-1: USB disconnect, device number 3 [ 142.269797][ T10] usblp0: removed [ 142.593615][ T6296] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 142.593615][ T6296] The task syz.0.206 (6296) triggered the difference, watch for misbehavior. [ 143.637985][ T5853] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 143.799313][ T5853] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 143.799342][ T5853] usb 5-1: config 0 has no interface number 0 [ 143.805971][ T5853] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 143.806003][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.806024][ T5853] usb 5-1: Product: syz [ 143.806039][ T5853] usb 5-1: Manufacturer: syz [ 143.806053][ T5853] usb 5-1: SerialNumber: syz [ 143.882364][ T5853] usb 5-1: config 0 descriptor?? [ 144.628094][ T5853] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 144.628128][ T5853] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 144.628662][ T5853] asix 5-1:0.251: probe with driver asix failed with error -71 [ 144.677544][ T5853] usb 5-1: USB disconnect, device number 2 [ 145.186726][ T6357] netlink: 'syz.2.234': attribute type 13 has an invalid length. [ 145.341510][ T6357] gretap0: refused to change device tx_queue_len [ 145.342026][ T6357] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 147.311868][ T37] audit: type=1400 audit(1784975729.622:3): lsm=SMACK fn=smack_task_setnice action=denied subject="w" object="_" requested=w pid=6417 comm="syz.4.257" opid=5595 ocomm="syz-executor" [ 147.313093][ T37] audit: type=1400 audit(1784975729.632:4): lsm=SMACK fn=smack_task_setnice action=denied subject="w" object="_" requested=w pid=6417 comm="syz.4.257" opid=6417 ocomm="syz.4.257" [ 148.171508][ T6440] program syz.4.267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.276842][ T37] audit: type=1326 audit(1784975730.582:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6442 comm="syz.2.269" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1494de99 code=0x7ffc0000 [ 148.277027][ T37] audit: type=1326 audit(1784975730.592:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6442 comm="syz.2.269" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1494de99 code=0x7ffc0000 [ 148.328795][ T37] audit: type=1326 audit(1784975730.652:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6442 comm="syz.2.269" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1494de99 code=0x7ffc0000 [ 148.328959][ T37] audit: type=1326 audit(1784975730.652:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6442 comm="syz.2.269" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1494de99 code=0x7ffc0000 [ 148.329143][ T37] audit: type=1326 audit(1784975730.652:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6442 comm="syz.2.269" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fae1494de99 code=0x7ffc0000 [ 148.329394][ T37] audit: type=1326 audit(1784975730.652:10): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=6442 comm="syz.2.269" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1494de99 code=0x7ffc0000 [ 148.372242][ T37] audit: type=1326 audit(1784975730.662:11): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=6442 comm="syz.2.269" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1494de99 code=0x7ffc0000 [ 148.377460][ T37] audit: type=1326 audit(1784975730.692:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6442 comm="syz.2.269" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1494de99 code=0x7ffc0000 [ 150.077470][ T5613] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 150.232805][ T5613] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.232842][ T5613] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.232884][ T5613] usb 5-1: New USB device found, idVendor=056a, idProduct=fe4f, bcdDevice= 0.00 [ 150.232908][ T5613] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.326399][ T5613] usb 5-1: config 0 descriptor?? [ 150.951966][ T5613] wacom 0003:056A:FE4F.0002: unknown main item tag 0x0 [ 150.952002][ T5613] wacom 0003:056A:FE4F.0002: unknown main item tag 0x0 [ 150.952029][ T5613] wacom 0003:056A:FE4F.0002: unknown main item tag 0x0 [ 150.952055][ T5613] wacom 0003:056A:FE4F.0002: unknown main item tag 0x0 [ 150.952081][ T5613] wacom 0003:056A:FE4F.0002: unknown main item tag 0x0 [ 150.952107][ T5613] wacom 0003:056A:FE4F.0002: unknown main item tag 0x0 [ 150.952133][ T5613] wacom 0003:056A:FE4F.0002: unknown main item tag 0x0 [ 150.952160][ T5613] wacom 0003:056A:FE4F.0002: unknown main item tag 0x0 [ 150.952185][ T5613] wacom 0003:056A:FE4F.0002: unknown main item tag 0x0 [ 150.952211][ T5613] wacom 0003:056A:FE4F.0002: unknown main item tag 0x0 [ 151.163537][ T5613] usb 5-1: USB disconnect, device number 3 [ 151.525455][ T6499] Bluetooth: MGMT ver 1.23 [ 151.587214][ T6502] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 151.587242][ T6502] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 151.640413][ T6505] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 151.640439][ T6505] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 151.661948][ T6502] vhci_hcd vhci_hcd.0: Device attached [ 151.685917][ T6505] vhci_hcd vhci_hcd.0: Device attached [ 151.727552][ T6508] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(9) [ 151.727580][ T6508] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 151.727641][ T6508] vhci_hcd vhci_hcd.0: Device attached [ 151.764339][ T6502] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(5) [ 151.764366][ T6502] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 151.800209][ T6502] vhci_hcd vhci_hcd.0: Device attached [ 151.802403][ T6509] vhci_hcd: connection closed [ 151.843520][ T6511] vhci_hcd: connection closed [ 151.864678][ T56] vhci_hcd vhci_hcd.2: stop threads [ 151.894901][ T56] vhci_hcd vhci_hcd.2: release socket [ 151.895291][ T56] vhci_hcd vhci_hcd.2: disconnect device [ 151.899004][ T56] vhci_hcd vhci_hcd.2: stop threads [ 151.899098][ T56] vhci_hcd vhci_hcd.2: release socket [ 151.927275][ T6503] vhci_hcd: connection closed [ 151.927445][ T10] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 151.929216][ T6506] vhci_hcd: connection closed [ 152.004913][ T6504] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 152.080460][ T56] vhci_hcd vhci_hcd.2: disconnect device [ 152.081948][ T56] vhci_hcd vhci_hcd.2: stop threads [ 152.081969][ T56] vhci_hcd vhci_hcd.2: release socket [ 152.117349][ T56] vhci_hcd vhci_hcd.2: disconnect device [ 152.117424][ T56] vhci_hcd vhci_hcd.2: stop threads [ 152.117444][ T56] vhci_hcd vhci_hcd.2: release socket [ 152.144526][ T56] vhci_hcd vhci_hcd.2: disconnect device [ 152.299345][ T5602] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 152.464049][ T5602] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 152.464080][ T5602] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.464100][ T5602] usb 5-1: Product: syz [ 152.464113][ T5602] usb 5-1: Manufacturer: syz [ 152.464127][ T5602] usb 5-1: SerialNumber: syz [ 152.556601][ T5602] usb 5-1: UAS is ignored for this device, using usb-storage instead [ 152.557172][ T5602] usb 5-1: UAS is ignored for this device, using usb-storage instead [ 152.557196][ T5602] usb-storage 5-1:1.0: USB Mass Storage device detected [ 152.621622][ T5602] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 152.624650][ T5602] scsi host1: usb-storage 5-1:1.0 [ 153.297707][ T5613] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 153.362712][ T6549] nbd: couldn't find a device at index 36 [ 153.490137][ T5613] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 153.490168][ T5613] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 153.490192][ T5613] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.499794][ T5613] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 153.499871][ T5613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.499924][ T5613] usb 3-1: Product: syz [ 153.499952][ T5613] usb 3-1: Manufacturer: syz [ 153.499993][ T5613] usb 3-1: SerialNumber: syz [ 153.748672][ T6556] pimreg1: tun_chr_ioctl cmd 35108 [ 153.765978][ T5613] hub 3-1:1.0: bad descriptor, ignoring hub [ 153.766019][ T5613] hub 3-1:1.0: probe with driver hub failed with error -5 [ 153.927715][ T5853] usb 5-1: USB disconnect, device number 4 [ 154.087842][ T5613] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 154.259770][ T6562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.315'. [ 154.316579][ T5613] usb 3-1: USB disconnect, device number 4 [ 154.359236][ T5613] usblp0: removed [ 155.275541][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.325'. [ 156.030823][ T6610] netlink: 32 bytes leftover after parsing attributes in process `syz.4.336'. [ 156.368744][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 156.368764][ T37] audit: type=1326 audit(1784975738.682:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6617 comm="syz.0.339" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6180f9de99 code=0x7ffc0000 [ 156.369415][ T37] audit: type=1326 audit(1784975738.692:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6617 comm="syz.0.339" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6180f9de99 code=0x7ffc0000 [ 156.370899][ T37] audit: type=1326 audit(1784975738.692:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6617 comm=FF exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6180f9de99 code=0x7ffc0000 [ 156.372439][ T37] audit: type=1326 audit(1784975738.692:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6617 comm=FF exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6180f9de99 code=0x7ffc0000 [ 156.375660][ T37] audit: type=1326 audit(1784975738.692:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6617 comm=FF exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6180f9de99 code=0x7ffc0000 [ 156.583901][ T6622] syz.3.342 uses obsolete (PF_INET,SOCK_PACKET) [ 156.833972][ T6633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.346'. [ 157.049968][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 157.054699][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.348'. [ 157.324387][ T6646] binder: 6645:6646 ioctl 40046205 0 returned -22 [ 158.162860][ T6672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.361'. [ 158.162906][ T6672] netlink: 36 bytes leftover after parsing attributes in process `syz.2.361'. [ 158.210060][ T6670] netlink: 64 bytes leftover after parsing attributes in process `syz.4.360'. [ 158.394167][ T6678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.364'. [ 158.750195][ T6691] tipc: Started in network mode [ 158.750234][ T6691] tipc: Node identity ac14140f, cluster identity 4711 [ 158.908990][ T6691] tipc: Enabled bearer , priority 10 [ 159.051424][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 159.318250][ T37] audit: type=1326 audit(1784975741.642:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6705 comm="syz.3.377" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ecbdde99 code=0x7ffc0000 [ 159.318305][ T37] audit: type=1326 audit(1784975741.642:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6705 comm="syz.3.377" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ecbdde99 code=0x7ffc0000 [ 159.399327][ T37] audit: type=1326 audit(1784975741.722:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6705 comm="syz.3.377" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ecbdde99 code=0x7ffc0000 [ 159.399452][ T37] audit: type=1326 audit(1784975741.722:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6705 comm="syz.3.377" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ecbdde99 code=0x7ffc0000 [ 159.399498][ T37] audit: type=1326 audit(1784975741.722:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6705 comm="syz.3.377" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f60ecbdde99 code=0x7ffc0000 [ 160.025699][ T5826] tipc: Node number set to 2886997007 [ 160.762778][ T6734] bond1: option ad_user_port_key: invalid value (65535) [ 160.762804][ T6734] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 160.840253][ T5613] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 160.970353][ T6734] bond1 (unregistering): Released all slaves [ 160.994139][ T5613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.994189][ T5613] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 160.994216][ T5613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.045316][ T5613] usb 3-1: config 0 descriptor?? [ 161.266014][ T6749] mmap: syz.3.395 (6749) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 161.556785][ T5613] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 161.574339][ T6752] tap0: tun_chr_ioctl cmd 1074025677 [ 161.574567][ T6752] tap0: linktype set to 780 [ 161.659193][ T5613] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0003/input/input5 [ 162.596460][ T5613] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 162.730865][ T5613] usb 3-1: USB disconnect, device number 5 [ 163.110278][ T6783] fido_id[6783]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 163.964749][ T6816] netlink: 16 bytes leftover after parsing attributes in process `syz.3.426'. [ 164.972998][ T6848] tap0: tun_chr_ioctl cmd 1074025677 [ 164.989938][ T6848] tap0: linktype set to 805 [ 165.827279][ T5721] hid_parser_main: 3 callbacks suppressed [ 165.829639][ T5721] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 165.829745][ T5721] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 165.829816][ T5721] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 165.829872][ T5721] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 165.829937][ T5721] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 165.830001][ T5721] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 165.830082][ T5721] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 165.830146][ T5721] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 165.830210][ T5721] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 165.830275][ T5721] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 165.939064][ T5721] hid-generic 0000:0000:0004.0004: hidraw0: HID v0.03 Device [syz1] on syz0 [ 166.038267][ T6877] fido_id[6877]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 166.403039][ T6885] netlink: 'syz.3.458': attribute type 12 has an invalid length. [ 166.415890][ T6885] netlink: 'syz.3.458': attribute type 4 has an invalid length. [ 166.515085][ T6890] UHID_CREATE from different security context by process 240 (syz.0.460), this is not allowed. [ 166.810224][ T6896] sch_tbf: burst 7 is lower than device bond_slave_1 mtu (1514) ! [ 167.711396][ T6928] netlink: 40 bytes leftover after parsing attributes in process `syz.3.477'. [ 167.837619][ T5613] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 167.987644][ T5613] usb 3-1: Using ep0 maxpacket: 8 [ 167.993760][ T5613] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 167.993795][ T5613] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 167.993821][ T5613] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 167.993845][ T5613] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.993888][ T5613] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 167.993911][ T5613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.381638][ T5613] usb 3-1: GET_CAPABILITIES returned 0 [ 168.381692][ T5613] usbtmc 3-1:16.0: can't read capabilities [ 168.662799][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 168.696857][ T6942] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 168.722887][ T6925] usbtmc 3-1:16.0: Unable to send data, error -71 [ 168.778910][ T5853] usb 3-1: USB disconnect, device number 6 [ 168.961335][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.485'. [ 168.961359][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.485'. [ 168.961385][ T6948] netlink: 'syz.4.485': attribute type 18 has an invalid length. [ 169.026449][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.485'. [ 169.026472][ T6951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.485'. [ 169.026497][ T6951] netlink: 'syz.4.485': attribute type 18 has an invalid length. [ 169.756231][ T6971] netlink: 72 bytes leftover after parsing attributes in process `syz.1.497'. [ 169.900097][ T5721] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 169.996167][ T1423] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 170.070124][ T5721] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 170.070157][ T5721] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 170.070183][ T5721] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 170.075875][ T5721] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 170.075905][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.075925][ T5721] usb 3-1: Product: syz [ 170.075940][ T5721] usb 3-1: Manufacturer: syz [ 170.075955][ T5721] usb 3-1: SerialNumber: syz [ 170.158321][ T6973] netlink: 56 bytes leftover after parsing attributes in process `syz.4.496'. [ 170.180754][ T57] block nbd0: Possible stuck request ffff888026f2e000: control (read@0,1024B). Runtime 30 seconds [ 170.203438][ T57] block nbd0: Possible stuck request ffff888026f2e1c0: control (read@1024,1024B). Runtime 30 seconds [ 170.204391][ T57] block nbd0: Possible stuck request ffff888026f2e380: control (read@2048,1024B). Runtime 30 seconds [ 170.204428][ T57] block nbd0: Possible stuck request ffff888026f2e540: control (read@3072,1024B). Runtime 30 seconds [ 170.266037][ T5721] usb 3-1: config 0 descriptor?? [ 170.267850][ T6966] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 170.267983][ T6966] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 170.307155][ T5721] usb 3-1: ucan: probing device on interface #0 [ 170.472655][ T5721] usb 3-1: ucan: device protocol version 34563 is not supported [ 170.472681][ T5721] usb 3-1: ucan: probe failed; try to update the device firmware [ 170.681816][ T5853] usb 3-1: USB disconnect, device number 7 [ 171.948586][ T7029] netlink: 'syz.1.523': attribute type 33 has an invalid length. [ 171.948607][ T7029] netlink: 20 bytes leftover after parsing attributes in process `syz.1.523'. [ 171.948701][ T7029] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 172.534347][ T7031] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.634448][ T7031] team0: Port device bond1 added [ 173.232536][ C1] sd 0:0:1:0: [sda] tag#9985 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 173.232593][ C1] sd 0:0:1:0: [sda] tag#9985 CDB: Read(6) 08 00 43 7a 00 00 [ 174.731512][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'. [ 176.310339][ T7115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.559'. [ 176.362108][ T7117] netlink: 24 bytes leftover after parsing attributes in process `syz.0.559'. [ 176.727958][ T7111] netlink: 'syz.4.558': attribute type 6 has an invalid length. [ 177.897427][ T821] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 178.125496][ T821] usb 4-1: unable to get BOS descriptor or descriptor too short [ 178.127081][ T821] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.127105][ T821] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 178.127153][ T821] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 178.127220][ T821] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 178.127259][ T821] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 178.129494][ T821] usb 4-1: config 1 interface 1 has no altsetting 0 [ 178.226501][ T821] usb 4-1: string descriptor 0 read error: -22 [ 178.226621][ T821] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 178.226644][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.196632][ T821] usb 4-1: 2:0: failed to get current value for ch 1 (-71) [ 180.057664][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 180.066436][ T7166] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 180.401617][ T821] usb 4-1: USB disconnect, device number 2 [ 180.832218][ T7163] gretap0: entered promiscuous mode [ 180.849768][ T7163] macvlan2: entered allmulticast mode [ 180.849792][ T7163] gretap0: entered allmulticast mode [ 182.238639][ T7202] netlink: 40 bytes leftover after parsing attributes in process `syz.2.594'. [ 182.624398][ T7199] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 183.312395][ T7221] netlink: 52 bytes leftover after parsing attributes in process `syz.4.600'. [ 183.742502][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 184.574898][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.618'. [ 184.630726][ T7259] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.698852][ T5721] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 184.785147][ T7259] bridge_slave_1 (unregistering): left allmulticast mode [ 184.785333][ T7259] bridge_slave_1 (unregistering): left promiscuous mode [ 184.785447][ T7259] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.860917][ T5721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.860963][ T5721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.860978][ T5721] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 184.861009][ T5721] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.861025][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.005458][ T5721] usb 2-1: config 0 descriptor?? [ 185.489571][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 185.489593][ T37] audit: type=1326 audit(1784975767.812:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.4.625" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe036f0de99 code=0x7ffc0000 [ 185.489647][ T37] audit: type=1326 audit(1784975767.812:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.4.625" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe036f0de99 code=0x7ffc0000 [ 185.490188][ T5721] hid_parser_main: 91 callbacks suppressed [ 185.490208][ T5721] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x6 [ 185.490237][ T5721] plantronics 0003:047F:FFFF.0005: item fetching failed at offset 11/15 [ 185.490941][ T5721] plantronics 0003:047F:FFFF.0005: parse failed [ 185.491046][ T5721] plantronics 0003:047F:FFFF.0005: probe with driver plantronics failed with error -22 [ 185.533917][ T37] audit: type=1326 audit(1784975767.852:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.4.625" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe036f0de99 code=0x7ffc0000 [ 185.534052][ T37] audit: type=1326 audit(1784975767.852:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.4.625" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe036f0de99 code=0x7ffc0000 [ 185.534168][ T37] audit: type=1326 audit(1784975767.852:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.4.625" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe036f0de99 code=0x7ffc0000 [ 185.534283][ T37] audit: type=1326 audit(1784975767.852:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.4.625" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe036f0de99 code=0x7ffc0000 [ 185.561781][ T37] audit: type=1326 audit(1784975767.882:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.4.625" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe036f0de99 code=0x7ffc0000 [ 185.561922][ T37] audit: type=1326 audit(1784975767.882:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.4.625" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe036f0de99 code=0x7ffc0000 [ 185.633258][ T37] audit: type=1326 audit(1784975767.882:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.4.625" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe036f0de99 code=0x7ffc0000 [ 185.633381][ T37] audit: type=1326 audit(1784975767.952:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.4.625" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe036f0de99 code=0x7ffc0000 [ 185.882016][ T5721] usb 2-1: USB disconnect, device number 7 [ 186.064302][ T7272] loop9: detected capacity change from 0 to 524287936 [ 186.788463][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.635'. [ 186.789450][ T7272] Dev loop9: unable to read RDB block 8 [ 186.790339][ T7272] loop9: unable to read partition table [ 186.811977][ T7272] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 188.372740][ T7331] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 189.201284][ T7360] program syz.0.664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.612733][ T7377] erspan0: entered promiscuous mode [ 190.007655][ T7388] macvlan0: entered promiscuous mode [ 190.034074][ T7388] netlink: 'syz.3.675': attribute type 2 has an invalid length. [ 190.873158][ T7413] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 191.066989][ T7419] Driver unsupported XDP return value 0 on prog (id 41) dev N/A, expect packet loss! [ 191.073810][ T7417] dummy_hcd dummy_hcd.0: remove, state 4 [ 191.194711][ T7417] usb usb1: USB disconnect, device number 1 [ 191.806822][ T7432] input: syz1 as /devices/virtual/input/input7 [ 192.316317][ T7417] dummy_hcd dummy_hcd.0: stopped [ 192.316348][ T7417] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 193.367165][ T7477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.715'. [ 193.564460][ T7481] program syz.0.716 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.411402][ T7497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.722'. [ 194.433490][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.433565][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.079574][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.730'. [ 195.177433][ T5613] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 195.283514][ T7519] program syz.3.733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.330393][ T5613] usb 5-1: unable to get BOS descriptor or descriptor too short [ 195.332419][ T5613] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 8 [ 195.332454][ T5613] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 is Bulk; changing to Interrupt [ 195.405702][ T5613] usb 5-1: string descriptor 0 read error: -22 [ 195.405865][ T5613] usb 5-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 195.405889][ T5613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.438670][ T7513] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 195.446582][ T5613] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 195.446649][ T5613] usb 5-1: MIDIStreaming interface descriptor not found [ 195.963123][ T7530] netlink: 260 bytes leftover after parsing attributes in process `syz.3.736'. [ 195.994291][ T5613] usb 5-1: USB disconnect, device number 5 [ 196.916688][ T7547] batman_adv: batadv0: Adding interface: vlan2 [ 196.916708][ T7547] batman_adv: batadv0: The MTU of interface vlan2 is too small (1494) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.916737][ T7547] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 197.027417][ T821] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 197.177452][ T821] usb 3-1: Using ep0 maxpacket: 8 [ 197.199950][ T821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 197.200001][ T821] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 197.200024][ T821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.246048][ T821] usb 3-1: config 0 descriptor?? [ 197.472794][ T821] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 197.708298][ T7459] syz.1.707 (7459) used greatest stack depth: 18736 bytes left [ 198.425413][ T7580] overlayfs: workdir and upperdir must be separate subtrees [ 198.727199][ T7588] program syz.1.765 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.297449][ T5826] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 199.447474][ T5826] usb 2-1: Using ep0 maxpacket: 32 [ 199.451669][ T5826] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 199.451689][ T5826] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 199.451704][ T5826] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 199.451718][ T5826] usb 2-1: config 1 has no interface number 0 [ 199.451749][ T5826] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 199.451768][ T5826] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 199.451803][ T5826] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 199.451819][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.606986][ T5826] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 199.858803][ T5826] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 199.864238][ T5613] usb 3-1: USB disconnect, device number 8 [ 200.328203][ T821] usb 2-1: USB disconnect, device number 8 [ 200.374180][ T821] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 200.876691][ T57] block nbd0: Possible stuck request ffff888026f2e000: control (read@0,1024B). Runtime 60 seconds [ 200.876739][ T57] block nbd0: Possible stuck request ffff888026f2e1c0: control (read@1024,1024B). Runtime 60 seconds [ 200.876769][ T57] block nbd0: Possible stuck request ffff888026f2e380: control (read@2048,1024B). Runtime 60 seconds [ 200.876807][ T57] block nbd0: Possible stuck request ffff888026f2e540: control (read@3072,1024B). Runtime 60 seconds [ 201.023182][ T162] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 202.741460][ T7658] syz.3.796 (7658) used greatest stack depth: 15872 bytes left [ 205.916020][ T7727] netlink: 'syz.2.826': attribute type 5 has an invalid length. [ 206.129808][ T7731] netlink: 132 bytes leftover after parsing attributes in process `syz.1.828'. [ 206.129836][ T7731] tc_dump_action: action bad kind [ 206.893743][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 206.893762][ T37] audit: type=1400 audit(1784975789.212:65): lsm=SMACK fn=smack_file_fcntl action=denied subject="_" object="l" requested=w pid=7749 comm="syz.3.838" path="/186/file1" dev="tmpfs" ino=963 [ 207.360276][ T7763] sctp: [Deprecated]: syz.4.844 (pid 7763) Use of struct sctp_assoc_value in delayed_ack socket option. [ 207.360276][ T7763] Use struct sctp_sack_info instead [ 207.607458][ T5721] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 207.801637][ T5721] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 207.801668][ T5721] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 207.801692][ T5721] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.806006][ T5721] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 207.806036][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.806056][ T5721] usb 4-1: Product: syz [ 207.806071][ T5721] usb 4-1: Manufacturer: syz [ 207.806086][ T5721] usb 4-1: SerialNumber: syz [ 207.948367][ T5721] hub 4-1:1.0: bad descriptor, ignoring hub [ 207.948406][ T5721] hub 4-1:1.0: probe with driver hub failed with error -5 [ 208.169416][ T5721] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 208.193758][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.855'. [ 209.104863][ T821] usb 4-1: USB disconnect, device number 3 [ 209.149304][ T821] usblp0: removed [ 209.570910][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.606360][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.618771][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.620157][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 209.622740][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 210.834119][ T7847] netlink: 16 bytes leftover after parsing attributes in process `syz.3.879'. [ 210.917386][ T5728] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 211.079077][ T5728] usb 2-1: Using ep0 maxpacket: 16 [ 211.083250][ T5728] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 211.083277][ T5728] usb 2-1: config 0 has no interface number 0 [ 211.109523][ T5728] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 211.109551][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.109568][ T5728] usb 2-1: Product: syz [ 211.109580][ T5728] usb 2-1: Manufacturer: syz [ 211.109594][ T5728] usb 2-1: SerialNumber: syz [ 211.165475][ T5728] usb 2-1: config 0 descriptor?? [ 211.182218][ T5728] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 211.429684][ T7859] netlink: 16 bytes leftover after parsing attributes in process `syz.3.885'. [ 211.697564][ T5612] Bluetooth: hci5: command tx timeout [ 211.807524][ T5728] gspca_spca1528: reg_w err -71 [ 211.831551][ T5728] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 211.895792][ T5728] usb 2-1: USB disconnect, device number 9 [ 212.075053][ T7873] netlink: 13 bytes leftover after parsing attributes in process `syz.2.891'. [ 213.252451][ T7812] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.252581][ T7812] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.256315][ T7812] bridge_slave_0: entered allmulticast mode [ 213.280055][ T7812] bridge_slave_0: entered promiscuous mode [ 213.352609][ T7812] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.354350][ T7812] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.354583][ T7812] bridge_slave_1: entered allmulticast mode [ 213.392046][ T7812] bridge_slave_1: entered promiscuous mode [ 213.636743][ T7812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.661766][ T7812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.779763][ T5612] Bluetooth: hci5: command tx timeout [ 213.859711][ T7812] team0: Port device team_slave_0 added [ 213.862571][ T7812] team0: Port device team_slave_1 added [ 213.957441][ T5721] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 213.960531][ T7812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.960544][ T7812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.960562][ T7812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.962558][ T7812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.962569][ T7812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.962587][ T7812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.150079][ T5721] usb 2-1: config 0 interface 0 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 214.150118][ T5721] usb 2-1: config 0 interface 0 has no altsetting 0 [ 214.150152][ T5721] usb 2-1: New USB device found, idVendor=056a, idProduct=0041, bcdDevice= 0.00 [ 214.150183][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.238841][ T5721] usb 2-1: config 0 descriptor?? [ 214.631772][ T7812] hsr_slave_0: entered promiscuous mode [ 214.633139][ T7812] hsr_slave_1: entered promiscuous mode [ 214.633996][ T7812] debugfs: 'hsr0' already exists in 'hsr' [ 214.665886][ T7812] Cannot create hsr debugfs directory [ 214.921403][ T5853] usb 2-1: USB disconnect, device number 10 [ 215.857868][ T5612] Bluetooth: hci5: command tx timeout [ 216.143569][ T7953] kvm: kvm [7951]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x8 [ 216.616565][ T7812] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 216.711868][ T7812] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 216.714982][ T7812] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 216.807155][ T7812] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 216.807436][ T5721] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 216.823874][ T7968] netlink: 56 bytes leftover after parsing attributes in process `syz.3.933'. [ 216.825924][ T7812] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 216.955166][ T7812] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 216.966226][ T7812] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 216.978396][ T5721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 216.978433][ T5721] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 216.978488][ T5721] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 216.978514][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.053693][ T5721] usb 2-1: config 0 descriptor?? [ 217.055533][ T7966] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 217.205418][ T7812] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 217.502258][ T5721] kone 0003:1E7D:2CED.0007: item fetching failed at offset 5/44 [ 217.503034][ T5721] kone 0003:1E7D:2CED.0007: parse failed [ 217.503126][ T5721] kone 0003:1E7D:2CED.0007: probe with driver kone failed with error -22 [ 217.751609][ T10] usb 2-1: USB disconnect, device number 11 [ 217.927504][ T5721] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 217.937429][ T5612] Bluetooth: hci5: command tx timeout [ 217.971864][ T7812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.077032][ T7812] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.089020][ T5721] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.089054][ T5721] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.089092][ T5721] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 218.089114][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.146656][ T5721] usb 5-1: config 0 descriptor?? [ 218.229592][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.229725][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.396554][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.396688][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.593540][ T5721] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 218.660005][ T5721] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 218.775392][ T5721] cp2112 0003:10C4:EA90.0008: error requesting version [ 218.840748][ T5721] cp2112 0003:10C4:EA90.0008: probe with driver cp2112 failed with error -71 [ 218.879738][ T5721] usb 5-1: USB disconnect, device number 6 [ 219.006389][ T8000] program syz.1.944 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.076023][ T7998] fido_id[7998]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 221.064933][ T8046] TCP: TCP_TX_DELAY enabled [ 221.266333][ T7812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.967596][ T8078] netlink: 268 bytes leftover after parsing attributes in process `syz.2.972'. [ 222.097712][ T5605] Bluetooth: hci1: command 0x0406 tx timeout [ 222.100923][ T5610] Bluetooth: hci3: command 0x0406 tx timeout [ 222.116831][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 222.117119][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 222.470849][ T5853] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 222.512541][ T7812] veth0_vlan: entered promiscuous mode [ 222.542732][ T7812] veth1_vlan: entered promiscuous mode [ 222.587920][ T5728] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 222.587960][ T7812] veth0_macvtap: entered promiscuous mode [ 222.593673][ T7812] veth1_macvtap: entered promiscuous mode [ 222.690805][ T5853] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 222.690860][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 222.690888][ T5853] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 222.690929][ T5853] usb 2-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 222.690951][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.766296][ T5853] usb 2-1: config 0 descriptor?? [ 222.770692][ T8082] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 222.770844][ T5728] usb 3-1: Using ep0 maxpacket: 8 [ 222.841504][ T5728] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 222.841602][ T5728] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 222.841628][ T5728] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 222.841652][ T5728] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.841695][ T5728] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 222.841779][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.912223][ T7812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.960690][ T7812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.102294][ T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.116291][ T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.116584][ T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.148798][ T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.325894][ T5853] hid (null): usage index exceeded [ 223.414807][ T5728] usb 3-1: GET_CAPABILITIES returned 0 [ 223.414849][ T5728] usbtmc 3-1:16.0: can't read capabilities [ 223.684164][ T5853] uclogic 0003:28BD:0075.0009: interface is invalid, ignoring [ 223.868044][ T5728] usb 3-1: USB disconnect, device number 9 [ 223.905201][ T5853] usb 2-1: USB disconnect, device number 12 [ 224.654111][ T1450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.654132][ T1450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.807479][ T5708] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 224.957856][ T5708] usb 2-1: Using ep0 maxpacket: 16 [ 224.961007][ T5708] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.961032][ T5708] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 224.966321][ T5708] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 224.966351][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.966371][ T5708] usb 2-1: Product: syz [ 224.966386][ T5708] usb 2-1: Manufacturer: syz [ 224.966401][ T5708] usb 2-1: SerialNumber: syz [ 225.120898][ T5708] usb 2-1: config 0 descriptor?? [ 225.147656][ T5708] asix 2-1:0.0: probe with driver asix failed with error -22 [ 225.370183][ T5708] usb 2-1: USB disconnect, device number 13 [ 225.909930][ T8105] program syz.2.983 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.980396][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.980417][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.426181][ T8115] netlink: 'syz.1.988': attribute type 2 has an invalid length. [ 226.535925][ T8117] netlink: 72 bytes leftover after parsing attributes in process `syz.2.989'. [ 227.421370][ T8143] netlink: 76 bytes leftover after parsing attributes in process `syz.2.999'. [ 227.421411][ T8143] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 228.027629][ T5728] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 228.177834][ T5728] usb 2-1: Using ep0 maxpacket: 16 [ 228.181721][ T5728] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 228.181771][ T5728] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 228.181812][ T5728] usb 2-1: New USB device found, idVendor=046d, idProduct=c08d, bcdDevice= 0.00 [ 228.181835][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.234841][ T5728] usb 2-1: config 0 descriptor?? [ 228.763350][ T5728] logitech-hidpp-device 0003:046D:C08D.000A: unexpected long global item [ 228.768810][ T5728] logitech-hidpp-device 0003:046D:C08D.000A: hidpp_probe:parse failed [ 228.802793][ T5728] logitech-hidpp-device 0003:046D:C08D.000A: probe with driver logitech-hidpp-device failed with error -22 [ 228.916497][ T5707] usb 2-1: USB disconnect, device number 14 [ 229.824094][ T8181] pimreg: tun_chr_ioctl cmd 1074025677 [ 229.824489][ T8181] pimreg: linktype set to 270 [ 229.930510][ T8186] IPv6: Can't replace route, no match found [ 230.848999][ T8210] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1027'. [ 230.849021][ T8210] netlink: 'syz.2.1027': attribute type 3 has an invalid length. [ 230.948428][ T57] block nbd0: Possible stuck request ffff888026f2e000: control (read@0,1024B). Runtime 90 seconds [ 230.948476][ T57] block nbd0: Possible stuck request ffff888026f2e1c0: control (read@1024,1024B). Runtime 90 seconds [ 230.948511][ T57] block nbd0: Possible stuck request ffff888026f2e380: control (read@2048,1024B). Runtime 90 seconds [ 230.948542][ T57] block nbd0: Possible stuck request ffff888026f2e540: control (read@3072,1024B). Runtime 90 seconds [ 231.092939][ T8213] IPv6: Can't replace route, no match found [ 231.093501][ T8213] IPv6: Can't replace route, no match found [ 231.154293][ T8216] sctp: [Deprecated]: syz.2.1030 (pid 8216) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.154293][ T8216] Use struct sctp_sack_info instead [ 232.049397][ T162] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 233.373482][ T8284] TCP: tcp_parse_options: Illegal window scaling value 251 > 14 received [ 233.663278][ T8291] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1063'. [ 234.685016][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1073'. [ 235.170869][ T8327] tap0: tun_chr_ioctl cmd 1074025675 [ 235.170893][ T8327] tap0: persist disabled [ 236.114537][ T8338] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1085'. [ 237.301278][ T37] audit: type=1326 audit(1784975819.582:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8356 comm="syz.2.1101" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1494de99 code=0x7ffc0000 [ 237.303655][ T37] audit: type=1326 audit(1784975819.622:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8356 comm="syz.2.1101" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1494de99 code=0x7ffc0000 [ 237.315413][ T37] audit: type=1326 audit(1784975819.622:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8356 comm="syz.2.1101" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1494de99 code=0x7ffc0000 [ 237.315465][ T37] audit: type=1326 audit(1784975819.632:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8356 comm="syz.2.1101" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fae1494de99 code=0x7ffc0000 [ 237.315526][ T37] audit: type=1326 audit(1784975819.632:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8356 comm="syz.2.1101" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1494de99 code=0x7ffc0000 [ 237.315577][ T37] audit: type=1326 audit(1784975819.632:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8356 comm="syz.2.1101" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1494de99 code=0x7ffc0000 [ 237.337361][ T37] audit: type=1326 audit(1784975819.652:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8356 comm="syz.2.1101" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1494de99 code=0x7ffc0000 [ 237.369265][ T37] audit: type=1326 audit(1784975819.692:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8356 comm="syz.2.1101" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1494de99 code=0x7ffc0000 [ 237.421752][ T37] audit: type=1326 audit(1784975819.702:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8356 comm="syz.2.1101" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1494de99 code=0x7ffc0000 [ 237.421941][ T37] audit: type=1326 audit(1784975819.702:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8356 comm="syz.2.1101" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fae1494de99 code=0x7ffc0000 [ 237.919188][ T5612] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 237.991067][ T5612] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 237.993449][ T5612] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 237.996111][ T5612] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 238.031623][ T5612] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 238.664738][ T8376] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1102'. [ 240.257589][ T5612] Bluetooth: hci6: command tx timeout [ 240.369650][ T8422] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1117'. [ 240.720626][ T8422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.841432][ T8430] pimreg: tun_chr_ioctl cmd 1074025672 [ 240.841457][ T8430] pimreg: ignored: set checksum disabled [ 241.248385][ T5853] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 241.411799][ T5853] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 241.411828][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.411864][ T5853] usb 3-1: Product: syz [ 241.411879][ T5853] usb 3-1: Manufacturer: syz [ 241.411900][ T5853] usb 3-1: SerialNumber: syz [ 241.464180][ T5853] usb 3-1: config 0 descriptor?? [ 241.494832][ T5853] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 242.235383][ T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.235423][ T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.320009][ T5853] gspca_sunplus: reg_w_riv err -71 [ 242.320113][ T5853] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 242.337586][ T5612] Bluetooth: hci6: command tx timeout [ 242.379945][ T5853] usb 3-1: USB disconnect, device number 10 [ 242.783949][ T8461] program syz.1.1132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.096713][ T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.096746][ T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.032638][ T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.032676][ T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.427638][ T5612] Bluetooth: hci6: command tx timeout [ 244.858980][ T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.859016][ T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.460941][ T37] kauditd_printk_skb: 18 callbacks suppressed [ 246.460959][ T37] audit: type=1326 audit(1784975828.782:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8523 comm="syz.1.1156" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc408fde99 code=0x0 [ 246.497442][ T5612] Bluetooth: hci6: command tx timeout [ 246.897953][ T5728] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 247.051476][ T5728] usb 3-1: config 0 interface 0 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 247.051512][ T5728] usb 3-1: config 0 interface 0 has no altsetting 0 [ 247.051547][ T5728] usb 3-1: New USB device found, idVendor=056a, idProduct=0041, bcdDevice= 0.00 [ 247.051571][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.150033][ T5728] usb 3-1: config 0 descriptor?? [ 247.494439][ T8540] input: syz1 as /devices/virtual/input/input8 [ 247.832351][ T5707] usb 3-1: USB disconnect, device number 11 [ 248.289345][ T8364] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.292408][ T8364] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.292648][ T8364] bridge_slave_0: entered allmulticast mode [ 248.327349][ T8364] bridge_slave_0: entered promiscuous mode [ 248.497446][ T5721] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 248.625650][ T8364] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.625736][ T8364] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.704120][ T8364] bridge_slave_1: entered allmulticast mode [ 248.731465][ T5721] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 248.731487][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.731501][ T5721] usb 4-1: Product: syz [ 248.731512][ T5721] usb 4-1: Manufacturer: syz [ 248.731522][ T5721] usb 4-1: SerialNumber: syz [ 248.776317][ T8364] bridge_slave_1: entered promiscuous mode [ 249.412219][ T56] bridge_slave_1: left allmulticast mode [ 249.453012][ T56] bridge_slave_1: left promiscuous mode [ 249.656768][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.709021][ T5721] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 249.709480][ T5721] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 249.731718][ T5721] cdc_ncm 4-1:1.0: bind() failure [ 249.822572][ T5721] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 249.822606][ T5721] cdc_ncm 4-1:1.1: bind() failure [ 249.874509][ T5721] usb 4-1: USB disconnect, device number 4 [ 250.953707][ T8574] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1177'. [ 251.096078][ T56] bridge_slave_0: left allmulticast mode [ 251.096105][ T56] bridge_slave_0: left promiscuous mode [ 251.103597][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.045166][ T8596] program syz.3.1186 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.175609][ T8598] program syz.3.1187 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.604936][ T56] gretap0 (unregistering): left allmulticast mode [ 254.647424][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 254.807384][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 254.809522][ T10] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 254.809548][ T10] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 254.809568][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 254.809588][ T10] usb 6-1: config 1 has no interface number 0 [ 254.809632][ T10] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 254.809651][ T10] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 254.809679][ T10] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 254.809696][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.001372][ T10] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 255.263983][ T10] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 255.658547][ T5728] usb 6-1: USB disconnect, device number 2 [ 255.665640][ T5728] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 255.708251][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.788320][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.842752][ T56] bond0 (unregistering): Released all slaves [ 255.868057][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.868118][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.949649][ T8364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.106067][ T8364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.245427][ T8364] team0: Port device team_slave_0 added [ 256.303957][ T8364] team0: Port device team_slave_1 added [ 256.465556][ T8364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.465574][ T8364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.465599][ T8364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.547117][ T8364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.547132][ T8364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.547158][ T8364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.007562][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 257.181358][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.181409][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 257.181432][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.267439][ T10] usb 3-1: config 0 descriptor?? [ 257.355438][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 257.677703][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 257.880157][ T10] pwc: recv_control_msg error -71 req 02 val 2c00 [ 257.880614][ T10] pwc: recv_control_msg error -71 req 04 val 1000 [ 257.881057][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 257.881468][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 257.882006][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 257.882501][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 257.883198][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 257.883684][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 257.884125][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 257.890395][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 257.893754][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 257.896655][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 257.900638][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 257.901944][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 257.996424][ T8364] hsr_slave_0: entered promiscuous mode [ 258.003822][ T8364] hsr_slave_1: entered promiscuous mode [ 258.004874][ T8364] debugfs: 'hsr0' already exists in 'hsr' [ 258.004899][ T8364] Cannot create hsr debugfs directory [ 258.293489][ T8659] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1210'. [ 258.294405][ T8659] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1210'. [ 258.481479][ T10] pwc: Registered as video103. [ 258.611259][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 259.157463][ T10] usb 3-1: USB disconnect, device number 12 [ 259.268502][ T5259] 8021q: adding VLAN 0 to HW filter on device eth1 [ 261.029536][ T57] block nbd0: Possible stuck request ffff888026f2e000: control (read@0,1024B). Runtime 120 seconds [ 261.029577][ T57] block nbd0: Possible stuck request ffff888026f2e1c0: control (read@1024,1024B). Runtime 120 seconds [ 261.029601][ T57] block nbd0: Possible stuck request ffff888026f2e380: control (read@2048,1024B). Runtime 120 seconds [ 261.029622][ T57] block nbd0: Possible stuck request ffff888026f2e540: control (read@3072,1024B). Runtime 120 seconds [ 261.425467][ T5612] block nbd1: Receive control failed (result -32) [ 261.556347][ T8705] nbd1: detected capacity change from 0 to 63 [ 261.600200][ T430] block nbd1: Dead connection, failed to find a fallback [ 261.600228][ T430] block nbd1: shutting down sockets [ 261.600398][ T430] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 261.600531][ T430] Buffer I/O error on dev nbd1, logical block 0, async page read [ 261.606704][ T430] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 261.606735][ T430] Buffer I/O error on dev nbd1, logical block 1, async page read [ 261.606880][ T430] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 261.619379][ T430] Buffer I/O error on dev nbd1, logical block 2, async page read [ 261.679578][ T57] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 261.679613][ T57] Buffer I/O error on dev nbd1, logical block 3, async page read [ 261.679755][ T57] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 261.679781][ T57] Buffer I/O error on dev nbd1, logical block 0, async page read [ 261.679915][ T57] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 261.679941][ T57] Buffer I/O error on dev nbd1, logical block 1, async page read [ 261.680050][ T57] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 261.680075][ T57] Buffer I/O error on dev nbd1, logical block 2, async page read [ 261.680183][ T57] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 261.680209][ T57] Buffer I/O error on dev nbd1, logical block 3, async page read [ 261.680611][ T57] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 261.680640][ T57] Buffer I/O error on dev nbd1, logical block 0, async page read [ 261.680750][ T57] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 261.680774][ T57] Buffer I/O error on dev nbd1, logical block 1, async page read [ 261.683197][ T5586] ldm_validate_partition_table(): Disk read failed. [ 261.684873][ T5586] Dev nbd1: unable to read RDB block 0 [ 261.835050][ T5586] nbd1: unable to read partition table [ 262.060051][ T5586] ldm_validate_partition_table(): Disk read failed. [ 262.119000][ T5586] Dev nbd1: unable to read RDB block 0 [ 262.120626][ T5586] nbd1: unable to read partition table [ 262.281609][ T56] hsr_slave_0: left promiscuous mode [ 262.332029][ T56] hsr_slave_1: left promiscuous mode [ 262.333319][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.333436][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.549881][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.549908][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.594901][ T56] batman_adv: batadv0: Removing interface: vlan2 [ 263.087021][ T56] veth1_macvtap: left promiscuous mode [ 263.102654][ T56] veth0_macvtap: left promiscuous mode [ 263.103622][ T56] veth1_vlan: left promiscuous mode [ 263.154805][ T56] veth0_vlan: left promiscuous mode [ 264.968101][ T56] team0 (unregistering): Port device team_slave_1 removed [ 265.030086][ T56] team0 (unregistering): Port device team_slave_0 removed [ 266.502437][ T5608] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 266.731154][ T5608] usb 2-1: unable to get BOS descriptor or descriptor too short [ 266.742504][ T5608] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.774908][ T5608] usb 2-1: string descriptor 0 read error: -22 [ 266.775069][ T5608] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 266.775095][ T5608] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.014174][ T8364] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 267.161198][ T8364] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 267.178952][ T8364] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 267.341749][ T8364] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 267.351767][ T8364] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 267.486446][ T8364] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 267.544799][ T8364] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 267.820374][ T8364] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 267.869565][ T5259] 8021q: adding VLAN 0 to HW filter on device eth2 [ 269.043322][ T5608] usb 2-1: USB disconnect, device number 15 [ 269.355941][ T8364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.681383][ T8364] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.780508][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.780645][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.976005][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.976137][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.248859][ T5608] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 270.413250][ T5608] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 270.413294][ T5608] usb 2-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 270.413316][ T5608] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.474005][ T5608] usb 2-1: config 0 descriptor?? [ 270.483754][ T8850] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 271.016073][ T5608] wacom 0003:056A:5000.000C: unknown main item tag 0x0 [ 271.016109][ T5608] wacom 0003:056A:5000.000C: unknown main item tag 0x0 [ 271.016133][ T5608] wacom 0003:056A:5000.000C: unknown main item tag 0x0 [ 271.016155][ T5608] wacom 0003:056A:5000.000C: unknown main item tag 0x0 [ 271.016177][ T5608] wacom 0003:056A:5000.000C: unknown main item tag 0x0 [ 271.016201][ T5608] wacom 0003:056A:5000.000C: unknown main item tag 0x0 [ 271.016225][ T5608] wacom 0003:056A:5000.000C: unknown main item tag 0x0 [ 271.016249][ T5608] wacom 0003:056A:5000.000C: unknown main item tag 0x0 [ 271.016274][ T5608] wacom 0003:056A:5000.000C: unknown main item tag 0x0 [ 271.016298][ T5608] wacom 0003:056A:5000.000C: unknown main item tag 0x0 [ 271.192294][ T5259] 8021q: adding VLAN 0 to HW filter on device eth3 [ 271.197463][ T5613] usb 2-1: USB disconnect, device number 16 [ 271.277704][ T8884] program syz.5.1287 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.965069][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1295'. [ 272.006534][ T8910] team0: entered allmulticast mode [ 272.006556][ T8910] team_slave_0: entered allmulticast mode [ 272.006581][ T8910] team_slave_1: entered allmulticast mode [ 272.006602][ T8910] bond1: entered allmulticast mode [ 272.043028][ T8910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1295'. [ 272.303422][ T8921] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1298'. [ 272.303454][ T8921] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1298'. [ 272.304198][ T8921] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1298'. [ 272.304221][ T8921] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1298'. [ 272.535030][ T8929] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1300'. [ 272.566281][ T8933] sg_write: data in/out 352340/136 bytes for SCSI command 0x0-- guessing data in; [ 272.566281][ T8933] program syz.5.1301 not setting count and/or reply_len properly [ 272.793674][ T8364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.139224][ T8952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1308'. [ 273.472448][ T5259] 8021q: adding VLAN 0 to HW filter on device eth4 [ 274.091440][ T8364] veth0_vlan: entered promiscuous mode [ 274.151108][ T8364] veth1_vlan: entered promiscuous mode [ 274.369545][ T8364] veth0_macvtap: entered promiscuous mode [ 274.484227][ T8364] veth1_macvtap: entered promiscuous mode [ 274.551551][ T8364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.703251][ T8364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.799174][ T162] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.800961][ T162] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.806481][ T162] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.843626][ T162] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.932462][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.932483][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.041246][ T9019] sg_write: data in/out 1024/136 bytes for SCSI command 0x0-- guessing data in; [ 276.041246][ T9019] program syz.2.1332 not setting count and/or reply_len properly [ 276.556412][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.556433][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.087518][ T5721] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 278.240189][ T5721] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 278.240223][ T5721] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 278.240245][ T5721] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 278.240301][ T5721] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 278.246683][ T5721] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 278.246720][ T5721] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 278.246745][ T5721] usb 7-1: Product: syz [ 278.246762][ T5721] usb 7-1: Manufacturer: syz [ 278.387523][ T5721] cdc_wdm 7-1:1.0: skipping garbage [ 278.387544][ T5721] cdc_wdm 7-1:1.0: skipping garbage [ 278.417778][ T5721] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 278.417816][ T5721] cdc_wdm 7-1:1.0: Unknown control protocol [ 279.091331][ T9077] netlink: 'syz.3.1355': attribute type 11 has an invalid length. [ 279.187723][ T5721] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 279.249957][ T5613] usb 7-1: USB disconnect, device number 2 [ 279.359268][ T5721] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 279.359299][ T5721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.359319][ T5721] usb 6-1: Product: syz [ 279.359334][ T5721] usb 6-1: Manufacturer: syz [ 279.359348][ T5721] usb 6-1: SerialNumber: syz [ 280.186724][ T5721] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 280.186783][ T5721] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 280.256000][ T5721] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 280.292064][ T5721] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 280.314615][ T5721] usb 6-1: USB disconnect, device number 3 [ 280.946379][ T9110] tap0: tun_chr_ioctl cmd 2147767507 [ 281.046419][ T5613] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 281.242141][ T5613] usb 7-1: Using ep0 maxpacket: 16 [ 281.249262][ T5613] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.249288][ T5613] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.292881][ T5613] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 281.292911][ T5613] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.292930][ T5613] usb 7-1: Product: syz [ 281.292944][ T5613] usb 7-1: Manufacturer: syz [ 281.292958][ T5613] usb 7-1: SerialNumber: syz [ 281.393209][ T5613] usb 7-1: 0:2 : does not exist [ 281.567698][ T5613] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 281.961583][ T5613] usb 7-1: USB disconnect, device number 3 [ 282.381505][ T5586] udevd[5586]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.787928][ T37] audit: type=1400 audit(1784976121.140:95): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=9152 comm="syz.3.1385" name="334" dev="tmpfs" ino=1711 [ 283.508108][ T9182] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[8364] was attempted by " [ 284.016691][ T5613] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 284.281305][ T5613] usb 4-1: unable to get BOS descriptor or descriptor too short [ 284.282217][ T5613] usb 4-1: not running at top speed; connect to a high speed hub [ 284.284001][ T5613] usb 4-1: config 3 has an invalid interface number: 66 but max is 0 [ 284.284025][ T5613] usb 4-1: config 3 has no interface number 0 [ 284.284069][ T5613] usb 4-1: config 3 interface 66 altsetting 7 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 284.284096][ T5613] usb 4-1: config 3 interface 66 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 284.284124][ T5613] usb 4-1: config 3 interface 66 has no altsetting 0 [ 284.360650][ T5613] usb 4-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.0d [ 284.360686][ T5613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.360701][ T5613] usb 4-1: Product: syz [ 284.360711][ T5613] usb 4-1: SerialNumber: syz [ 284.501671][ T9190] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 284.866832][ T5613] usb-storage 4-1:3.66: USB Mass Storage device detected [ 284.882073][ T5613] usb-storage 4-1:3.66: Quirks match for vid 05ab pid 0060: 2 [ 285.001312][ T5608] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 285.041156][ T5613] usb 4-1: USB disconnect, device number 5 [ 285.149138][ T5853] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 285.153349][ T9220] console message test [ 285.160397][ T5608] usb 7-1: Using ep0 maxpacket: 8 [ 285.198668][ T5608] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.198703][ T5608] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.198728][ T5608] usb 7-1: config 0 interface 0 has no altsetting 0 [ 285.198762][ T5608] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 285.198786][ T5608] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.205046][ T5608] usb 7-1: config 0 descriptor?? [ 285.299735][ T5853] usb 3-1: Using ep0 maxpacket: 16 [ 285.364064][ T5853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.364160][ T5853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.364183][ T5853] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 285.364227][ T5853] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 285.364250][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.629772][ T5853] usb 3-1: config 0 descriptor?? [ 285.747013][ T5608] hid_parser_main: 417 callbacks suppressed [ 285.747038][ T5608] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 285.747069][ T5608] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 285.747096][ T5608] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 285.747121][ T5608] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 285.747148][ T5608] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 285.760745][ T5608] mcp2221 0003:04D8:00DD.000D: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 286.154673][ T5853] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 286.154708][ T5853] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 286.155140][ T5853] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 286.155168][ T5853] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 286.155193][ T5853] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 286.155236][ T5853] microsoft 0003:045E:07DA.000E: unbalanced collection at end of report description [ 286.161967][ T5853] microsoft 0003:045E:07DA.000E: parse failed [ 286.162249][ T5853] microsoft 0003:045E:07DA.000E: probe with driver microsoft failed with error -22 [ 286.416323][ T5853] usb 3-1: USB disconnect, device number 13 [ 286.687361][ T821] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 286.838188][ T821] usb 4-1: Using ep0 maxpacket: 8 [ 286.841537][ T821] usb 4-1: config 7 has an invalid interface number: 182 but max is 0 [ 286.841564][ T821] usb 4-1: config 7 has no interface number 0 [ 286.841596][ T821] usb 4-1: config 7 interface 182 has no altsetting 0 [ 286.902806][ T821] usb 4-1: New USB device found, idVendor=04b8, idProduct=0602, bcdDevice= 1.10 [ 286.902829][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.902843][ T821] usb 4-1: Product: syz [ 286.902854][ T821] usb 4-1: Manufacturer: syz [ 286.902864][ T821] usb 4-1: SerialNumber: syz [ 287.545807][ T821] usb-storage 4-1:7.182: USB Mass Storage device detected [ 287.702391][ T821] usb-storage 4-1:7.182: Quirks match for vid 04b8 pid 0602: 1 [ 288.230981][ T9294] netlink: 'syz.1.1438': attribute type 29 has an invalid length. [ 288.277410][ T821] usb 4-1: USB disconnect, device number 6 [ 288.386551][ T9296] netlink: 'syz.1.1438': attribute type 29 has an invalid length. [ 288.386995][ T9297] netlink: 'syz.1.1438': attribute type 29 has an invalid length. [ 288.987886][ T9318] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1444'. [ 289.161172][ T5608] usb 7-1: USB disconnect, device number 4 [ 289.327377][ T5853] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 289.507426][ T5853] usb 6-1: Using ep0 maxpacket: 32 [ 289.527800][ T5853] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 289.527842][ T5853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.527863][ T5853] usb 6-1: Product: syz [ 289.527878][ T5853] usb 6-1: Manufacturer: syz [ 289.527893][ T5853] usb 6-1: SerialNumber: syz [ 289.713964][ T9339] RDS: rds_bind could not find a transport for 0:0:fc00::, load rds_tcp or rds_rdma? [ 289.725579][ T5853] usb 6-1: config 0 descriptor?? [ 289.950025][ T5853] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: failure sending bit rate [ 289.950067][ T5853] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 289.979253][ T5853] usb 6-1: USB disconnect, device number 4 [ 290.307365][ T5721] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 290.543062][ T5721] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 290.543092][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.543111][ T5721] usb 3-1: Product: syz [ 290.543126][ T5721] usb 3-1: Manufacturer: syz [ 290.543140][ T5721] usb 3-1: SerialNumber: syz [ 290.605530][ T9362] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 290.645785][ T5721] usb 3-1: config 0 descriptor?? [ 290.662951][ T5721] ch341 3-1:0.0: ch341-uart converter detected [ 290.994814][ T9372] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1466'. [ 291.100648][ T57] block nbd0: Possible stuck request ffff888026f2e000: control (read@0,1024B). Runtime 150 seconds [ 291.100696][ T57] block nbd0: Possible stuck request ffff888026f2e1c0: control (read@1024,1024B). Runtime 150 seconds [ 291.100729][ T57] block nbd0: Possible stuck request ffff888026f2e380: control (read@2048,1024B). Runtime 150 seconds [ 291.100762][ T57] block nbd0: Possible stuck request ffff888026f2e540: control (read@3072,1024B). Runtime 150 seconds [ 291.511725][ T5721] usb 3-1: failed to send control message: -71 [ 291.511783][ T5721] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 291.620473][ T5721] usb 3-1: USB disconnect, device number 14 [ 291.651812][ T5721] ch341 3-1:0.0: device disconnected [ 291.850564][ T5602] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 291.998354][ T5602] usb 6-1: Using ep0 maxpacket: 16 [ 292.005670][ T5602] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 292.016287][ T5602] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 292.016319][ T5602] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.016341][ T5602] usb 6-1: Product: syz [ 292.016356][ T5602] usb 6-1: Manufacturer: syz [ 292.016372][ T5602] usb 6-1: SerialNumber: syz [ 292.075647][ T5602] r8152-cfgselector 6-1: Unknown version 0x0000 [ 292.075683][ T5602] r8152-cfgselector 6-1: config 0 descriptor?? [ 292.589225][ T5608] r8152-cfgselector 6-1: USB disconnect, device number 5 [ 293.134518][ T9430] binder: 9428:9430 ioctl 400c620e 200000000040 returned -22 [ 293.430689][ T9441] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1490'. [ 293.434853][ T9438] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 293.903284][ T9456] program syz.6.1495 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.197382][ T821] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 294.283626][ T9472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1501'. [ 294.283655][ T9472] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1501'. [ 294.360494][ T821] usb 4-1: unable to get BOS descriptor or descriptor too short [ 294.361967][ T821] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.361992][ T821] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 294.362041][ T821] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 294.362079][ T821] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 294.362131][ T821] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 294.362160][ T821] usb 4-1: config 1 interface 1 has no altsetting 0 [ 294.366132][ T821] usb 4-1: string descriptor 0 read error: -22 [ 294.366288][ T821] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 294.366312][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.405772][ T821] usb 4-1: 2:0: failed to get current value for ch 1 (-71) [ 295.903545][ T821] usb 4-1: USB disconnect, device number 7 [ 296.641939][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1511'. [ 297.025152][ T9513] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1517'. [ 297.977656][ T5707] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 298.132897][ T5707] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 298.132931][ T5707] usb 7-1: config 0 interface 0 has no altsetting 0 [ 298.132963][ T5707] usb 7-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 298.132985][ T5707] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.147126][ T5707] usb 7-1: config 0 descriptor?? [ 298.246934][ T9540] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 298.752479][ T5707] hid_parser_main: 2 callbacks suppressed [ 298.752508][ T5707] hid-alps 0003:044E:120C.000F: unknown main item tag 0x0 [ 298.752539][ T5707] hid-alps 0003:044E:120C.000F: unknown main item tag 0x0 [ 298.752566][ T5707] hid-alps 0003:044E:120C.000F: unknown main item tag 0x0 [ 298.752592][ T5707] hid-alps 0003:044E:120C.000F: unknown main item tag 0x0 [ 298.752618][ T5707] hid-alps 0003:044E:120C.000F: unknown main item tag 0x0 [ 298.752644][ T5707] hid-alps 0003:044E:120C.000F: unknown main item tag 0x0 [ 298.752670][ T5707] hid-alps 0003:044E:120C.000F: unknown main item tag 0x0 [ 298.752696][ T5707] hid-alps 0003:044E:120C.000F: unknown main item tag 0x0 [ 298.752722][ T5707] hid-alps 0003:044E:120C.000F: unknown main item tag 0x0 [ 298.752747][ T5707] hid-alps 0003:044E:120C.000F: unknown main item tag 0x0 [ 298.752772][ T5707] hid-alps 0003:044E:120C.000F: collection stack underflow [ 298.752796][ T5707] hid-alps 0003:044E:120C.000F: item 0 0 0 12 parsing failed [ 298.755401][ T5707] hid-alps 0003:044E:120C.000F: parse failed [ 298.755517][ T5707] hid-alps 0003:044E:120C.000F: probe with driver hid-alps failed with error -22 [ 298.949085][ T5707] usb 7-1: USB disconnect, device number 5 [ 299.104654][ T821] IPVS: starting estimator thread 0... [ 299.145118][ T9571] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 299.145353][ T9571] syzkaller0: linktype set to 0 [ 299.189825][ T9567] IPVS: using max 8 ests per chain, 19200 per kthread [ 299.408941][ T9570] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1542'. [ 299.663052][ T9587] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1548'. [ 299.717131][ T9586] input: syz1 as /devices/virtual/input/input10 [ 299.826572][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1551'. [ 300.873124][ T9616] input: syz1 as /devices/virtual/input/input11 [ 302.329440][ T9653] sctp: [Deprecated]: syz.5.1577 (pid 9653) Use of int in max_burst socket option. [ 302.329440][ T9653] Use struct sctp_assoc_value instead [ 302.460546][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1579'. [ 303.345562][ T5721] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 303.507360][ T5721] usb 7-1: Using ep0 maxpacket: 16 [ 303.509985][ T5721] usb 7-1: config index 0 descriptor too short (expected 51443, got 18) [ 303.513022][ T5721] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 303.513049][ T5721] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.513068][ T5721] usb 7-1: Product: syz [ 303.513081][ T5721] usb 7-1: Manufacturer: syz [ 303.513094][ T5721] usb 7-1: SerialNumber: syz [ 303.586819][ T5721] r8152-cfgselector 7-1: Unknown version 0x0000 [ 303.586845][ T5721] r8152-cfgselector 7-1: config 0 descriptor?? [ 303.752472][ T9681] input: syz0 as /devices/virtual/input/input12 [ 303.842840][ T5721] r8152-cfgselector 7-1: Needed 1 retries to read version [ 303.842893][ T5721] r8152-cfgselector 7-1: Unknown version 0x0030 [ 303.844213][ T5721] r8152-cfgselector 7-1: No union descriptors [ 304.084671][ T821] r8152-cfgselector 7-1: USB disconnect, device number 6 [ 304.376704][ T9699] usbcore.quirks: string doesn't fit in 127 chars. [ 304.704117][ T9710] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1601'. [ 304.863840][ T9716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1605'. [ 304.863891][ T9716] bond0: Unable to set up delay as MII monitoring is disabled [ 306.935229][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1629'. [ 306.994179][ T37] audit: type=1800 audit(1784976145.340:96): pid=9771 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1630" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 307.324995][ T37] audit: type=1326 audit(1784976145.700:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9782 comm="syz.6.1637" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face538de99 code=0x7ffc0000 [ 307.325052][ T37] audit: type=1326 audit(1784976145.700:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9782 comm="syz.6.1637" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face538de99 code=0x7ffc0000 [ 307.328556][ T37] audit: type=1326 audit(1784976145.700:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9782 comm="syz.6.1637" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face538de99 code=0x7ffc0000 [ 307.332675][ T37] audit: type=1326 audit(1784976145.710:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9782 comm="syz.6.1637" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face538de99 code=0x7ffc0000 [ 307.334519][ T37] audit: type=1326 audit(1784976145.710:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9782 comm="syz.6.1637" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7face538de99 code=0x7ffc0000 [ 307.342849][ T37] audit: type=1326 audit(1784976145.710:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9782 comm="syz.6.1637" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face538de99 code=0x7ffc0000 [ 307.350452][ T9780] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 307.351103][ T9780] syzkaller1: linktype set to 768 [ 307.352627][ T37] audit: type=1326 audit(1784976145.720:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9782 comm="syz.6.1637" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face538de99 code=0x7ffc0000 [ 307.383923][ T5853] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 307.468128][ T37] audit: type=1326 audit(1784976145.850:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9782 comm="syz.6.1637" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face538de99 code=0x7ffc0000 [ 307.482780][ T37] audit: type=1326 audit(1784976145.850:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9782 comm="syz.6.1637" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7face538de99 code=0x7ffc0000 [ 307.609391][ T5853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.609423][ T5853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.609445][ T5853] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 307.609482][ T5853] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.609503][ T5853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.616227][ T5853] usb 6-1: config 0 descriptor?? [ 308.116462][ T5853] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 308.116499][ T5853] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 308.116527][ T5853] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 308.116553][ T5853] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 308.116580][ T5853] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 308.116606][ T5853] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 308.116632][ T5853] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 308.116658][ T5853] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 308.116684][ T5853] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 308.116710][ T5853] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 308.502629][ T5853] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 308.541205][ T9806] loop8: detected capacity change from 0 to 7 [ 308.611218][ T5853] usb 6-1: USB disconnect, device number 6 [ 308.786006][ T9806] Dev loop8: unable to read RDB block 7 [ 308.786063][ T9806] loop8: unable to read partition table [ 308.786263][ T9806] loop8: partition table beyond EOD, truncated [ 308.786325][ T9806] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 309.134187][ T9815] sctp: [Deprecated]: syz.3.1647 (pid 9815) Use of struct sctp_assoc_value in delayed_ack socket option. [ 309.134187][ T9815] Use struct sctp_sack_info instead [ 309.571189][ T9828] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1653'. [ 311.783814][ T9878] netlink: 165 bytes leftover after parsing attributes in process `syz.5.1676'. [ 312.343305][ T9899] input: syz0 as /devices/virtual/input/input14 [ 313.097154][ T9923] sg_write: data in/out 393180/136 bytes for SCSI command 0x0-- guessing data in; [ 313.097154][ T9923] program syz.2.1699 not setting count and/or reply_len properly [ 313.227359][ T5613] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 313.233094][ T9928] ALSA: mixer_oss: invalid OSS volume 'Destination' [ 313.233114][ T9928] ALSA: mixer_oss: invalid OSS volume 'wg1' [ 313.407401][ T5613] usb 7-1: Using ep0 maxpacket: 32 [ 313.423874][ T5613] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 313.423905][ T5613] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.423925][ T5613] usb 7-1: Product: syz [ 313.423940][ T5613] usb 7-1: Manufacturer: syz [ 313.423956][ T5613] usb 7-1: SerialNumber: syz [ 313.473696][ T5613] usb 7-1: config 0 descriptor?? [ 314.238569][ T5613] peak_usb 7-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 314.238626][ T5613] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 314.238703][ T5613] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 314.689031][ T5613] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -22 [ 314.734909][ T5613] usb 7-1: USB disconnect, device number 7 [ 316.067572][ T5613] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 316.237337][ T5613] usb 6-1: Using ep0 maxpacket: 32 [ 316.246965][ T5613] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 316.246993][ T5613] usb 6-1: config 0 has no interface number 0 [ 316.269621][ T5613] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 316.269651][ T5613] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.269671][ T5613] usb 6-1: Product: syz [ 316.269686][ T5613] usb 6-1: Manufacturer: syz [ 316.269700][ T5613] usb 6-1: SerialNumber: syz [ 316.335875][ T5613] usb 6-1: config 0 descriptor?? [ 316.734530][T10010] netlink: 'syz.3.1732': attribute type 83 has an invalid length. [ 317.299519][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.299578][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.396678][ T5613] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 317.396711][ T5613] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 317.402888][ T5613] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 317.403583][ T5613] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 317.459207][ T5613] usb 6-1: USB disconnect, device number 7 [ 317.811596][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.432140][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 318.432159][ T37] audit: type=1326 audit(1784976156.790:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10058 comm="syz.2.1752" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae1494de99 code=0x0 [ 318.487567][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.821558][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.457456][ T5612] Bluetooth: hci2: command 0x0406 tx timeout [ 319.687480][ T5721] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 319.754021][T10100] loop5: detected capacity change from 0 to 7 [ 319.860515][T10100] Dev loop5: unable to read RDB block 7 [ 319.860578][T10100] loop5: unable to read partition table [ 319.860783][T10100] loop5: partition table beyond EOD, truncated [ 319.860817][T10100] loop_reread_partitions: partition scan of loop5 (xk% ) failed (rc=-5) [ 319.860931][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.917405][ T5721] usb 7-1: Using ep0 maxpacket: 32 [ 319.935599][ T5721] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 319.935629][ T5721] usb 7-1: config 0 has no interface number 0 [ 319.935675][ T5721] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 319.935704][ T5721] usb 7-1: config 0 interface 85 has no altsetting 0 [ 319.961560][ T5721] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 319.961592][ T5721] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.961614][ T5721] usb 7-1: Product: syz [ 319.961630][ T5721] usb 7-1: Manufacturer: syz [ 319.961645][ T5721] usb 7-1: SerialNumber: syz [ 320.090025][ T5721] usb 7-1: config 0 descriptor?? [ 320.745846][ T5721] appletouch 7-1:0.85: Geyser mode initialized. [ 320.802233][ T5721] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input15 [ 320.897713][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.946468][T10113] syz_tun: entered allmulticast mode [ 321.124867][ C1] appletouch 7-1:0.85: atp_complete: usb_submit_urb failed with result -1 [ 321.164000][ T5721] usb 7-1: USB disconnect, device number 8 [ 321.187476][ T57] block nbd0: Possible stuck request ffff888026f2e000: control (read@0,1024B). Runtime 180 seconds [ 321.187524][ T57] block nbd0: Possible stuck request ffff888026f2e1c0: control (read@1024,1024B). Runtime 180 seconds [ 321.187593][ T57] block nbd0: Possible stuck request ffff888026f2e380: control (read@2048,1024B). Runtime 180 seconds [ 321.187627][ T57] block nbd0: Possible stuck request ffff888026f2e540: control (read@3072,1024B). Runtime 180 seconds [ 321.354859][T10112] syz_tun: left allmulticast mode [ 321.458019][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.586945][ T5721] appletouch 7-1:0.85: input: appletouch disconnected [ 321.978333][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.097442][ T5853] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 322.258377][ T5853] usb 7-1: Using ep0 maxpacket: 32 [ 322.267779][ T5853] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 322.267861][ T5853] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 322.267921][ T5853] usb 7-1: config 0 interface 0 has no altsetting 0 [ 322.313855][ T5853] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 322.313893][ T5853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.313914][ T5853] usb 7-1: Product: syz [ 322.313929][ T5853] usb 7-1: Manufacturer: syz [ 322.313943][ T5853] usb 7-1: SerialNumber: syz [ 322.396746][ T5853] usb 7-1: config 0 descriptor?? [ 322.421806][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.852231][ T5853] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 323.047096][T10169] tun0: tun_chr_ioctl cmd 1074025675 [ 323.047120][T10169] tun0: persist enabled [ 323.055953][T10169] tun0: tun_chr_ioctl cmd 1074025675 [ 323.056267][T10169] tun0: persist enabled [ 323.060797][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.258865][ T5853] gs_usb 7-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 323.300540][ T5853] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -22 [ 323.457921][ T5826] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 323.485388][ T5853] usb 7-1: USB disconnect, device number 9 [ 323.649722][ T5826] usb 2-1: Using ep0 maxpacket: 32 [ 323.652125][ T5826] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 323.652151][ T5826] usb 2-1: config 0 has no interface number 0 [ 323.652194][ T5826] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 323.652222][ T5826] usb 2-1: config 0 interface 85 has no altsetting 0 [ 323.655268][ T5826] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 323.655305][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.655326][ T5826] usb 2-1: Product: syz [ 323.655342][ T5826] usb 2-1: Manufacturer: syz [ 323.655357][ T5826] usb 2-1: SerialNumber: syz [ 323.788972][ T5826] usb 2-1: config 0 descriptor?? [ 324.097680][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.387217][T10199] loop5: detected capacity change from 0 to 7 [ 324.415372][ T5826] appletouch 2-1:0.85: Geyser mode initialized. [ 324.434222][ T5826] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input16 [ 324.501669][ T5602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.624813][T10199] Dev loop5: unable to read RDB block 7 [ 324.624866][T10199] loop5: unable to read partition table [ 324.625109][T10199] loop5: partition table beyond EOD, truncated [ 324.625156][T10199] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 324.703521][ T5826] usb 2-1: USB disconnect, device number 17 [ 324.945574][ T5826] appletouch 2-1:0.85: input: appletouch disconnected [ 325.194978][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.269880][ T5721] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 325.459842][ T5721] usb 7-1: unable to get BOS descriptor or descriptor too short [ 325.466055][ T5721] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.466083][ T5721] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 325.499326][ T5721] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 325.499357][ T5721] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.499377][ T5721] usb 7-1: Product: syz [ 325.499393][ T5721] usb 7-1: Manufacturer: syz [ 325.499423][ T5721] usb 7-1: SerialNumber: syz [ 325.616184][ T5721] usb 7-1: selecting invalid altsetting 1 [ 325.617033][ T5721] usb 7-1: unit 6 not found! [ 325.759794][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1821'. [ 326.041890][ T5721] usb 7-1: 2:0: cannot get min/max values for control 1 (id 2) [ 326.238242][T10236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1828'. [ 326.268830][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.590418][ T5721] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 326.594700][ T5721] usb 7-1: USB disconnect, device number 10 [ 326.716621][ T5586] udevd[5586]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.066122][T10243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.211634][T10243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.214441][T10243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.308110][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.474386][T10243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.339155][ T5853] net_ratelimit: 148 callbacks suppressed [ 328.339175][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.652337][T10280] loop8: detected capacity change from 0 to 8 [ 328.690048][T10280] Dev loop8: unable to read RDB block 8 [ 328.690095][T10280] loop8: unable to read partition table [ 328.690424][T10280] loop8: partition table beyond EOD, truncated [ 328.690444][T10280] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 329.208493][T10296] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1853'. [ 329.377648][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.417721][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.659734][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.006158][T10342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.024109][T10342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.026546][T10342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.044374][T10342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.044864][T10342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.045133][T10342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.667504][ T5721] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 332.823501][ T5721] usb 4-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice= 0.00 [ 332.823533][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.823555][ T5721] usb 4-1: Product: syz [ 332.823571][ T5721] usb 4-1: Manufacturer: syz [ 332.823586][ T5721] usb 4-1: SerialNumber: syz [ 332.888469][ T5721] qcserial 4-1:1.0: Qualcomm USB modem converter detected [ 332.915413][ T5721] usb 4-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 333.538212][ T5853] net_ratelimit: 4 callbacks suppressed [ 333.538232][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.697692][ T5602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.105125][T10426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1909'. [ 334.105163][T10426] bond0: ARP target 1.4.0.0 is already present [ 334.105184][T10426] bond0: option arp_ip_target: invalid value (1025) [ 334.131361][ T5721] usb 4-1: USB disconnect, device number 8 [ 334.174063][ T5721] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 334.175163][ T5721] qcserial 4-1:1.0: device disconnected [ 334.270895][T10430] netlink: 83 bytes leftover after parsing attributes in process `syz.1.1911'. [ 334.472246][T10434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.578359][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.579443][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.132122][T10457] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 338.417963][ T38] INFO: task syz.0.718:7486 blocked for more than 143 seconds. [ 338.417991][ T38] Tainted: G L syzkaller #0 [ 338.418003][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 338.418013][ T38] task:syz.0.718 state:D stack:28424 pid:7486 tgid:7485 ppid:5597 task_flags:0x400040 flags:0x00080002 [ 338.418106][ T38] Call Trace: [ 338.418115][ T38] [ 338.418129][ T38] __schedule+0x16dc/0x5500 [ 338.418166][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 338.418209][ T38] ? rcu_is_watching+0x15/0xb0 [ 338.418253][ T38] ? __pfx___schedule+0x10/0x10 [ 338.418275][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 338.418328][ T38] rt_mutex_schedule+0x76/0xf0 [ 338.418355][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 338.418399][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 338.418438][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 338.418476][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 338.418512][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 338.418544][ T38] ? smack_log+0xf5/0x3f0 [ 338.418588][ T38] ? bdev_open+0xde/0xd00 [ 338.418634][ T38] ? bdev_open+0xde/0xd00 [ 338.418662][ T38] mutex_lock_nested+0x168/0x1d0 [ 338.418711][ T38] bdev_open+0xde/0xd00 [ 338.418756][ T38] blkdev_open+0x47f/0x630 [ 338.418793][ T38] ? __pfx_blkdev_open+0x10/0x10 [ 338.418827][ T38] do_dentry_open+0x849/0x1420 [ 338.418864][ T38] vfs_open+0x3b/0x350 [ 338.418884][ T38] ? path_openat+0x2e49/0x3850 [ 338.418917][ T38] path_openat+0x2e60/0x3850 [ 338.418951][ T38] ? kmem_cache_alloc_noprof+0x355/0x650 [ 338.418970][ T38] ? __x64_sys_openat+0x138/0x170 [ 338.418987][ T38] ? do_syscall_64+0x174/0x580 [ 338.419007][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.419046][ T38] do_file_open+0x23e/0x4a0 [ 338.419068][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 338.419094][ T38] ? __pfx_do_file_open+0x10/0x10 [ 338.419144][ T38] ? alloc_fd+0x654/0x6d0 [ 338.419175][ T38] do_sys_openat2+0x115/0x200 [ 338.419200][ T38] ? __pfx_do_sys_openat2+0x10/0x10 [ 338.419223][ T38] ? exc_page_fault+0x6a/0xc0 [ 338.419275][ T38] ? do_user_addr_fault+0xc4a/0x1340 [ 338.419296][ T38] __x64_sys_openat+0x138/0x170 [ 338.419316][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.419334][ T38] do_syscall_64+0x174/0x580 [ 338.419354][ T38] ? trace_irq_disable+0x3b/0x140 [ 338.419371][ T38] ? clear_bhb_loop+0x40/0x90 [ 338.419392][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.419418][ T38] RIP: 0033:0x7f6180f5e6ce [ 338.419438][ T38] RSP: 002b:00007f617f1f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 338.419456][ T38] RAX: ffffffffffffffda RBX: 00007f617f1f66c0 RCX: 00007f6180f5e6ce [ 338.419469][ T38] RDX: 000000000002a003 RSI: 00007f617f1f5c00 RDI: ffffffffffffff9c [ 338.419481][ T38] RBP: 00007f617f1f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 338.419492][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 338.419503][ T38] R13: 00007f6181226038 R14: 00007f6181225fa0 R15: 00007ffd396e2ba8 [ 338.419530][ T38] [ 338.419567][ T38] [ 338.419567][ T38] Showing all locks held in the system: [ 338.419580][ T38] 1 lock held by khungtaskd/38: [ 338.419590][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 338.419660][ T38] 4 locks held by udevd/4964: [ 338.419678][ T38] #0: ffff888035176500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 338.419727][ T38] #1: ffff8880327b2c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 338.419776][ T38] #2: ffff8880262bdd28 (kn->active#5){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 338.419826][ T38] #3: ffffffff8f95a8f8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x281/0x560 [ 338.419881][ T38] 2 locks held by getty/5350: [ 338.419891][ T38] #0: ffff8880360ce0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 338.419932][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 338.419981][ T38] 1 lock held by udevd/5584: [ 338.419989][ T38] #0: ffff888026e754c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd00 [ 338.420039][ T38] 3 locks held by kworker/0:6/5721: [ 338.420049][ T38] 1 lock held by syz.0.718/7486: [ 338.420058][ T38] #0: ffff888026e754c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd00 [ 338.420101][ T38] 9 locks held by syz-executor/8364: [ 338.420112][ T38] 4 locks held by syz.5.1921/10448: [ 338.420121][ T38] #0: ffff8880390420a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0xb8/0x520 [ 338.420164][ T38] #1: ffff88803d6180a0 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: tty_ldisc_release+0xdc/0x520 [ 338.420212][ T38] #2: ffff8880618800e0 (&gsm->mutex){+.+.}-{4:4}, at: gsm_cleanup_mux+0xbf/0xc70 [ 338.420259][ T38] #3: ffffffff8f95a8f8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x281/0x560 [ 338.420312][ T38] 3 locks held by syz.1.1924/10462: [ 338.420322][ T38] 1 lock held by syz.3.1938/10496: [ 338.420331][ T38] #0: ffff888039faf030 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1e0/0x4e0 [ 338.420378][ T38] 4 locks held by syz.3.1938/10498: [ 338.420388][ T38] 1 lock held by syz.3.1938/10516: [ 338.420397][ T38] #0: ffff888039faf030 (&mm->mmap_lock){++++}-{4:4}, at: __se_sys_mremap+0x477/0x11d0 [ 338.420443][ T38] 7 locks held by syz.2.1944/10509: [ 338.420453][ T38] 2 locks held by syz.1.1946/10514: [ 338.420464][ T38] [ 338.420468][ T38] ============================================= [ 338.420468][ T38] [ 338.420476][ T38] NMI backtrace for cpu 0 [ 338.420502][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 338.420528][ T38] Tainted: [L]=SOFTLOCKUP [ 338.420534][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 338.420545][ T38] Call Trace: [ 338.420551][ T38] [ 338.420558][ T38] dump_stack_lvl+0xe8/0x150 [ 338.420587][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 338.420615][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 338.420645][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 338.420682][ T38] sys_info+0x135/0x170 [ 338.420706][ T38] watchdog+0xfd7/0x1030 [ 338.420730][ T38] ? watchdog+0x1c7/0x1030 [ 338.420757][ T38] kthread+0x388/0x470 [ 338.420792][ T38] ? __pfx_watchdog+0x10/0x10 [ 338.420809][ T38] ? __pfx_kthread+0x10/0x10 [ 338.420846][ T38] ret_from_fork+0x514/0xb70 [ 338.420876][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 338.420902][ T38] ? __switch_to+0xc89/0x1420 [ 338.420927][ T38] ? __pfx_kthread+0x10/0x10 [ 338.420954][ T38] ret_from_fork_asm+0x1a/0x30 [ 338.420983][ T38] [ 338.420997][ T38] Sending NMI from CPU 0 to CPUs 1: [ 338.421025][ C1] NMI backtrace for cpu 1 [ 338.421043][ C1] CPU: 1 UID: 0 PID: 10509 Comm: syz.2.1944 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 338.421069][ C1] Tainted: [L]=SOFTLOCKUP [ 338.421075][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 338.421086][ C1] RIP: 0010:__lock_acquire+0x18fa/0x2ce0 [ 338.421110][ C1] Code: 14 25 ff 0f 00 00 39 05 d0 25 04 12 73 06 89 05 c8 25 04 12 48 8b 02 48 89 df 4c 39 e8 0f 84 34 fe ff ff 4c 89 78 30 48 8b 00 <4c> 39 e8 75 f4 48 89 df e9 20 fe ff ff 48 89 fb 48 c7 c7 f0 02 09 [ 338.421126][ C1] RSP: 0018:ffffc90007907040 EFLAGS: 00000006 [ 338.421142][ C1] RAX: ffffffff963fae68 RBX: 00000000000003cd RCX: 000000000000009b [ 338.421155][ C1] RDX: ffffffff962b07a8 RSI: ffff88801ffd2c20 RDI: 00000000000003cd [ 338.421169][ C1] RBP: 12921112159cd10e R08: ffffc90007907008 R09: 0000000000000020 [ 338.421191][ C1] R10: 0000000000000000 R11: ffffffff81a1c580 R12: 000000000000009a [ 338.421203][ C1] R13: ffffffff93472588 R14: ffff88801ffd1f00 R15: ffffffff9631bcd8 [ 338.421217][ C1] FS: 00007fae12ba66c0(0000) GS:ffff888125d42000(0000) knlGS:0000000000000000 [ 338.421233][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 338.421246][ C1] CR2: 00002000001d6000 CR3: 0000000029680000 CR4: 00000000003526f0 [ 338.421262][ C1] Call Trace: [ 338.421268][ C1] [ 338.421289][ C1] ? ktime_get+0x45/0x220 [ 338.421305][ C1] lock_acquire+0x106/0x350 [ 338.421323][ C1] ? ktime_get+0x45/0x220 [ 338.421340][ C1] ? finish_task_switch+0x15d/0xc60 [ 338.421358][ C1] ? lock_acquire+0x106/0x350 [ 338.421375][ C1] ? finish_task_switch+0x15d/0xc60 [ 338.421394][ C1] ? ktime_get+0x45/0x220 [ 338.421410][ C1] seqcount_lockdep_reader_access+0x55/0x100 [ 338.421428][ C1] ? ktime_get+0x45/0x220 [ 338.421444][ C1] ktime_get+0x45/0x220 [ 338.421461][ C1] finish_task_switch+0x307/0xc60 [ 338.421482][ C1] __schedule+0x16e4/0x5500 [ 338.421504][ C1] ? lapic_next_event+0x11/0x20 [ 338.421525][ C1] ? __pfx_clockevents_program_event+0x10/0x10 [ 338.421556][ C1] ? __pfx___schedule+0x10/0x10 [ 338.421574][ C1] ? irqentry_exit+0x218/0x8f0 [ 338.421593][ C1] ? trace_irq_disable+0x3b/0x140 [ 338.421615][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 338.421638][ C1] preempt_schedule_common+0x82/0xd0 [ 338.421658][ C1] preempt_schedule_thunk+0x16/0x40 [ 338.421683][ C1] rt_spin_lock+0x316/0x400 [ 338.421711][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 338.421737][ C1] ? cmp_ex_search+0x1e/0x80 [ 338.421762][ C1] ? rcu_is_watching+0x15/0xb0 [ 338.421784][ C1] ? __pte_offset_map+0x178/0x200 [ 338.421815][ C1] pte_offset_map_lock+0x13d/0x210 [ 338.421848][ C1] do_pte_missing+0xaef/0x28f0 [ 338.421883][ C1] handle_mm_fault+0xd28/0x13f0 [ 338.421914][ C1] ? handle_mm_fault+0xe8/0x13f0 [ 338.421932][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 338.421959][ C1] ? lock_mm_and_find_vma+0xa7/0x340 [ 338.421983][ C1] do_user_addr_fault+0x744/0x1340 [ 338.422008][ C1] exc_page_fault+0x6a/0xc0 [ 338.422028][ C1] asm_exc_page_fault+0x26/0x30 [ 338.422046][ C1] RIP: 0010:fault_in_readable+0x8e/0x130 [ 338.422075][ C1] Code: a9 00 00 00 0f 01 cb 0f ae e8 4d 85 f6 40 0f 95 c5 4c 89 ff 4c 89 f6 e8 a0 8d b1 ff 4d 39 f7 0f 97 c0 40 84 c5 74 43 4d 89 f5 <41> 8a 45 00 88 44 24 07 49 81 e5 00 f0 ff ff 4d 8d a5 00 10 00 00 [ 338.422091][ C1] RSP: 0018:ffffc90007907aa8 EFLAGS: 00050202 [ 338.422106][ C1] RAX: ffffffff82143d01 RBX: 0000000000000100 RCX: ffff88801ffd1f00 [ 338.422119][ C1] RDX: 0000000000000002 RSI: 00002000001d6000 RDI: 00002000001d6100 [ 338.422131][ C1] RBP: ffffc90007907c01 R08: 0000000000000000 R09: 0000000000000000 [ 338.422143][ C1] R10: 0000000000000100 R11: 0000000000000001 R12: 00007ffffffff000 [ 338.422154][ C1] R13: 00002000001d6000 R14: 00002000001d6000 R15: 00002000001d6100 [ 338.422176][ C1] ? __pfx_fault_in_readable+0x1/0x10 [ 338.422208][ C1] ? fault_in_readable+0x80/0x130 [ 338.422237][ C1] fault_in_iov_iter_readable+0x1c8/0x310 [ 338.422258][ C1] generic_perform_write+0x75b/0x8b0 [ 338.422282][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 338.422301][ C1] ? rt_spin_unlock+0x163/0x200 [ 338.422327][ C1] ? mnt_put_write_access_file+0xc6/0x100 [ 338.422352][ C1] ? file_update_time_flags+0x406/0x4b0 [ 338.422377][ C1] shmem_file_write_iter+0xfb/0x120 [ 338.422401][ C1] vfs_write+0x61e/0xbb0 [ 338.422427][ C1] ? __pfx_vfs_write+0x10/0x10 [ 338.422450][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 338.422472][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 338.422492][ C1] ? mutex_lock_nested+0x152/0x1d0 [ 338.422517][ C1] ? fdget_pos+0x252/0x320 [ 338.422540][ C1] ksys_write+0x156/0x270 [ 338.422564][ C1] ? __pfx_ksys_write+0x10/0x10 [ 338.422590][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.422609][ C1] do_syscall_64+0x174/0x580 [ 338.422630][ C1] ? trace_irq_disable+0x3b/0x140 [ 338.422648][ C1] ? clear_bhb_loop+0x40/0x90 [ 338.422671][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.422689][ C1] RIP: 0033:0x7fae1494de99 [ 338.422704][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.422720][ C1] RSP: 002b:00007fae12ba6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 338.422737][ C1] RAX: ffffffffffffffda RBX: 00007fae14bd5fa0 RCX: 00007fae1494de99 [ 338.422750][ C1] RDX: 00000000fffffd9d RSI: 0000200000000100 RDI: 0000000000000003 [ 338.422763][ C1] RBP: 00007fae149e3eaf R08: 0000000000000000 R09: 0000000000000000 [ 338.422775][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.422785][ C1] R13: 00007fae14bd6038 R14: 00007fae14bd5fa0 R15: 00007fff6b412e48 [ 338.422808][ C1] [ 338.425532][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 338.425554][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 338.425595][ T38] Tainted: [L]=SOFTLOCKUP [ 338.425603][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 338.425617][ T38] Call Trace: [ 338.425625][ T38] [ 338.425635][ T38] vpanic+0x56c/0xa60 [ 338.425661][ T38] ? __pfx___schedule+0x10/0x10 [ 338.425713][ T38] ? __pfx_vpanic+0x10/0x10 [ 338.425746][ T38] panic+0xc5/0xd0 [ 338.425768][ T38] ? __pfx_panic+0x10/0x10 [ 338.425788][ T38] ? preempt_schedule_common+0x82/0xd0 [ 338.425813][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 338.425842][ T38] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 338.425883][ T38] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 338.425924][ T38] watchdog+0x1030/0x1030 [ 338.425955][ T38] ? watchdog+0x1c7/0x1030 [ 338.425985][ T38] kthread+0x388/0x470 [ 338.426020][ T38] ? __pfx_watchdog+0x10/0x10 [ 338.426039][ T38] ? __pfx_kthread+0x10/0x10 [ 338.426076][ T38] ret_from_fork+0x514/0xb70 [ 338.426115][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 338.426151][ T38] ? __switch_to+0xc89/0x1420 [ 338.426186][ T38] ? __pfx_kthread+0x10/0x10 [ 338.426222][ T38] ret_from_fork_asm+0x1a/0x30 [ 338.426263][ T38] [ 338.426984][ T38] Kernel Offset: disabled